Options

Dreaded downloader obfuskated

Unknown
edited April 2007 in Spyware & Virus Removal
Like many others I have the dreaded downloader obfuskated. Can you please help me get rid of it. I am using Windows XP SP1. I am sorry to put you to the trouble as it appears to be quite a procedure to remove. Any help would be greatly appreciated. hobbsy
«1

Comments

  • Rahina-RescueRahina-Rescue Finland
    edited March 2007
    Hello Hobbsy! and Welcome to Short-media Virus/Spyware Removal Forums :smiles:

    Please Download HJTsetup.exe

    Save HJTsetup.exe to your desktop.

    Double click on the HJTsetup.exe icon on your desktop.
    By default it will install to C:\Program Files\Hijack This.
    Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
    Put a check by Create a desktop icon then click Next again.
    Continue to follow the rest of the prompts from there.
    At the final dialogue box click Finish and it will launch Hijack This.

    Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
    Click Save to save the log file and then the log will open in notepad.
    Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
    Come back here to this thread and Paste the log in your next reply.
    DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
  • Hobbsy
    edited March 2007
    Thank you for the help so far. I am unwell and don't get to the computer every day, so I apologize for my delay in replying.
    Her is the log:
    Logfile of HijackThis v1.99.1
    Scan saved at 5:13:03 PM, on 29/03/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\CyberLink\Shared files\RichVideo.exe
    C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\PowerS.EXE
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
    C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    C:\WINDOWS\System32\wfxsnt40.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Microsoft IntelliType Pro\type32.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\tsnp2std.exe
    C:\WINDOWS\vsnp2std.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
    C:\Program Files\AnyDVD\AnyDVD.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\PROGRA~1\INTERN~2\mum.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\SecCopy\SecCopy.exe
    C:\Program Files\AdsGone\adsgone.exe
    C:\Program Files\BitComet\BitComet.exe
    C:\Program Files\Skype\Plugin Manager\SkypePM.exe
    C:\Program Files\WinNc.Net\Winnc.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.internode.on.net/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
    O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {98467DA1-30A8-4C38-A8EC-9A706233F0CE} - (no file)
    O2 - BHO: (no name) - {a43385f0-7113-496d-96d7-b9b550e3fcca} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
    O2 - BHO: IECatcher Class - {B930BA63-9E5A-11D3-A288-0000E80E2EDE} - C:\Program Files\Mass Downloader\MDHELPER.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Safety Bar - {052b12f7-86fa-4921-8482-26c42316b522} - (no file)
    O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [PowerS] C:\WINDOWS\PowerS.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
    O4 - HKLM\..\Run: [D066UUtility] C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
    O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
    O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\AnyDVD\AnyDVD.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [Explorer] C:\WINDOWS\System32\Explorer.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [InternodeUsage] C:\PROGRA~1\INTERN~2\mum.exe
    O4 - HKCU\..\Run: [Second Copy 2000] "C:\Program Files\SecCopy\SecCopy.exe"
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Second Copy] "C:\Program Files\SecCopy\SecCopy.exe"
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: AdsGone 2006.lnk = C:\Program Files\AdsGone\adsgone.exe
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\WebMenuImg.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
    O8 - Extra context menu item: + &Mass Downloader: download this file - C:\Program Files\Mass Downloader\Add_Url.htm
    O8 - Extra context menu item: + Mass Downloader: download &All files - C:\Program Files\Mass Downloader\Add_All.htm
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
    O9 - Extra 'Tools' menuitem: &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://tw.msi.com.tw/autobios/client/iftwclix.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1094979136343
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?312
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: awtqq - C:\WINDOWS\
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
    O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    LCDRSvr.exe
  • Rahina-RescueRahina-Rescue Finland
    edited March 2007
    Hello there, Please do the following.

    Download ComboFix from Here or Here to your Desktop.
    • Double click combofix.exe and follow the prompts.
    • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall
  • Hobbsy
    edited March 2007
    Here are the logs as you asked. The first is from combofix.

    - 07-03-30 17:06:32 Service Pack 1
    ComboFix 07-03-27.4.2 - Running from: "C:\Program Files\Mozilla Firefox"

    /wow section - STAGE #3

    (((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


    C:\Program Files\safety bar\Uninstall.bat
    C:\WINDOWS\system32\media\AvidRender.wav
    C:\DOCUME~1\Doug\APPLIC~1.\install.dat
    C:\WINDOWS\system32\bszip.dll
    C:\windows\system32\explorer.exe
    C:\Program Files\safety bar
    C:\Program Files\winupdate
    C:\Program Files\winupdates
    C:\WINDOWS\system32\components
    C:\WINDOWS\system32\media
    C:\Program Files\Download Plugin
    C:\Program Files\Common Files\{AC92A~1


    ((((((((((((((((((((((((((((((( Files Created from 2007-02-28 to 2007-03-30 ))))))))))))))))))))))))))))))))))


    2007-03-26 05:30 <DIR> d
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\1Click DVD Copy Pro
    2007-03-26 05:28 87,608 --a
    C:\DOCUME~1\Doug\APPLIC~1\ezpinst.exe
    2007-03-26 05:28 47,360 --a
    C:\WINDOWS\system32\drivers\pcouffin.sys
    2007-03-26 05:28 47,360 --a
    C:\DOCUME~1\Doug\APPLIC~1\pcouffin.sys
    2007-03-26 05:28 <DIR> d
    C:\Program Files\LG Software Innovations
    2007-03-26 05:28 <DIR> d
    C:\DOCUME~1\Doug\APPLIC~1\Vso
    2007-03-23 21:34 921 --a
    C:\WINDOWS\QSFVExit.bat
    2007-03-23 19:54 <DIR> d
    C:\Program Files\Fast Cleaner Gold
    2007-03-23 09:19 493,400 --a
    C:\WINDOWS\system32\XceedZip.dll
    2007-03-22 15:27 <DIR> d
    C:\Program Files\Common Files\Previews
    2007-03-21 02:03 <DIR> d
    C:\Program Files\CyberTweak
    2007-03-21 01:59 <DIR> d
    C:\Program Files\ScrubXP
    2007-03-17 04:51 <DIR> d
    C:\Program Files\LIUtilities
    2007-03-13 20:02 <DIR> d
    C:\Program Files\AVIJOINER
    2007-03-13 03:32 626,688 --a
    C:\WINDOWS\system32\xvid.dll
    2007-03-13 03:32 <DIR> d
    C:\Program Files\MPEG4 Direct Maker
    2007-03-08 14:02 8,192 --a
    C:\WINDOWS\system32\tsbyuv.dll
    2007-03-08 14:02 49,664 --a
    C:\WINDOWS\system32\vfwwdm32.dll
    2007-03-08 14:02 45,568 --a
    C:\WINDOWS\system32\iyuv_32.dll
    2007-03-03 03:46 <DIR> d
    C:\Program Files\Axialis


    (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


    2007-03-30 17:00
    d
    C:\DOCUME~1\Doug\APPLIC~1\skype
    2007-03-29 16:41
    d
    C:\DOCUME~1\Doug\APPLIC~1\mailwasherpro
    2007-03-29 14:32
    d
    C:\Program Files\australian phonedisc
    2007-03-29 04:54
    d
    C:\DOCUME~1\Doug\APPLIC~1\canon
    2007-03-26 05:28 7824 --a
    C:\DOCUME~1\Doug\APPLIC~1\pcouffin.cat
    2007-03-26 05:28 34 --a
    C:\DOCUME~1\Doug\APPLIC~1\pcouffin.log
    2007-03-26 05:28 1144 --a
    C:\DOCUME~1\Doug\APPLIC~1\pcouffin.inf
    2007-03-25 11:42
    d
    C:\Program Files\gamehouse
    2007-03-25 03:02
    d--h
    C:\Program Files\installshield installation information
    2007-03-23 10:36
    d
    C:\DOCUME~1\Doug\APPLIC~1\lumapix
    2007-03-23 10:33
    d
    C:\Program Files\registryfix
    2007-03-23 10:33
    d
    C:\Program Files\cyberlink
    2007-03-23 09:25
    d
    C:\Program Files\seccopy
    2007-03-21 08:47
    d
    C:\Program Files\the panorama factory
    2007-03-21 08:47
    d
    C:\Program Files\limewire
    2007-03-21 02:36 8 --a
    C:\CONFIG.SYS
    2007-03-21 02:06
    d
    C:\Program Files\mailwasher pro
    2007-03-19 20:35
    d
    C:\DOCUME~1\Doug\APPLIC~1\cyberlink
    2007-03-02 13:56
    d
    C:\DOCUME~1\Doug\APPLIC~1\bait math site
    2007-02-27 14:09
    d
    C:\Program Files\quicktime
    2007-02-22 19:03
    d
    C:\Program Files\apple software update
    2007-02-19 07:29
    d
    C:\Program Files\msn messenger
    2007-02-17 18:34
    d
    C:\Program Files\lumapix
    2007-02-17 16:50 185042 --a
    C:\WINDOWS\fotofusion uninstaller.exe
    2007-02-16 15:06
    d
    C:\DOCUME~1\Doug\APPLIC~1\pegasys inc
    2007-02-16 15:05
    d
    C:\Program Files\pegasys inc
    2007-02-16 00:24
    d
    C:\Program Files\java
    2007-02-15 18:22
    d
    C:\Program Files\pando networks
    2007-02-08 12:11
    d
    C:\Program Files\poweriso
    2007-02-07 11:49
    d
    C:\DOCUME~1\Doug\APPLIC~1\openoffice.org2
    2007-02-07 06:26
    d
    C:\Program Files\internode
    2007-02-07 06:26
    d
    C:\DOCUME~1\Doug\APPLIC~1\internode
    2007-02-06 06:31
    d
    C:\Program Files\avid
    2007-02-03 11:44
    d
    C:\Program Files\quicksfv
    2007-01-29 05:37
    d
    C:\Program Files\winnc.net
    2007-01-08 19:17 352137 --a
    C:\swlist.reg
    2006-12-30 15:42 254146 --a
    C:\WINDOWS\bitcomet_toolbar_uninstaller_2312.exe


    (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

    *Note* empty entries & legit default entries are not shown

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
    "ctfmon.exe"="C:\\WINDOWS\\System32\\ctfmon.exe"
    "InternodeUsage"="C:\\PROGRA~1\\INTERN~2\\mum.exe"
    "Second Copy 2000"="\"C:\\Program Files\\SecCopy\\SecCopy.exe\""
    @=&quot;"
    "Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
    "Second Copy"="\"C:\\Program Files\\SecCopy\\SecCopy.exe\""

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
    "HotKeysCmds"="C:\\WINDOWS\\System32\\hkcmd.exe"
    "PowerS"="C:\\WINDOWS\\PowerS.EXE"
    "SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
    "Opware12"="\"C:\\Program Files\\ScanSoft\\OmniPagePro12.0\\Opware12.exe\""
    "D066UUtility"="C:\\WINDOWS\\TWAIN_32\\D66U\\D066UUTY.EXE"
    "WinFaxAppPortStarter"="wfxsnt40.exe"
    "SoundMan"="SOUNDMAN.EXE"
    "type32"="\"C:\\Program Files\\Microsoft IntelliType Pro\\type32.exe\""
    "AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP"
    "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
    "tsnp2std"="C:\\WINDOWS\\tsnp2std.exe"
    "snp2std"="C:\\WINDOWS\\vsnp2std.exe"
    "Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Elements 4.0\\apdproxy.exe\""
    "AnyDVD"="C:\\Program Files\\AnyDVD\\AnyDVD.exe"
    "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
    "RegistryMechanic"=""

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
    "Installed"="1"
    "NoChange"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\RunSpellCheckAnywhere]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Forget Me Not.lnk]
    "backup"="C:\\WINDOWS\\pss\\Forget Me Not.lnkCommon Startup"
    "location"="Common Startup"
    "item"="Forget Me Not"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]
    "backup"="C:\\WINDOWS\\pss\\Kodak EasyShare software.lnkCommon Startup"
    "location"="Common Startup"
    "item"="Kodak EasyShare software"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Ulead Photo Express Calendar Checker.lnk]
    "backup"="C:\\WINDOWS\\pss\\Ulead Photo Express Calendar Checker.lnkCommon Startup"
    "location"="Common Startup"
    "item"="Ulead Photo Express Calendar Checker"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Doug^Start Menu^Programs^Startup^Ad-watch 3.0.lnk]
    "backup"="C:\\WINDOWS\\pss\\Ad-watch 3.0.lnkStartup"
    "location"="Startup"
    "item"="Ad-watch 3.0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Doug^Start Menu^Programs^Startup^OpenOffice.org 2.0.lnk]
    "backup"="C:\\WINDOWS\\pss\\OpenOffice.org 2.0.lnkStartup"
    "location"="Startup"
    "command"="C:\\PROGRA~1\\OPENOF~1.0\\program\\QUICKS~1.EXE "
    "item"="OpenOffice.org 2.0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="apdproxy"
    "hkey"="HKLM"
    "command"="\"C:\\Program Files\\Adobe\\Photoshop Elements 4.0\\apdproxy.exe\""
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdTools Service]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="AdTools"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="AnyDVD"
    "hkey"="HKCU"
    "command"="C:\\Program Files\\AnyDVD\\AnyDVD.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_EMC]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="avgemc"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_RegCleaner]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="avgregcl"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BraveSentry]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="BraveSentry"
    "hkey"="HKCU"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="ctfmon"
    "hkey"="HKCU"
    "command"="C:\\WINDOWS\\System32\\ctfmon.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D066UUtility]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="D066UUTY"
    "hkey"="HKLM"
    "command"="C:\\WINDOWS\\TWAIN_32\\D66U\\D066UUTY.EXE"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Device Detector]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="DevDetect"
    "hkey"="HKLM"
    "inimapping"="0"
    "command"="\"C:\\Program Files\\Common Files\\ACD Systems\\EN\\DevDetect.exe\" -autorun"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FixCamera]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="FixCamera"
    "hkey"="HKLM"
    "command"="C:\\WINDOWS\\FixCamera.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="hpztsb04"
    "hkey"="HKLM"
    "command"="C:\\WINDOWS\\System32\\spool\\drivers\\w32x86\\3\\hpztsb04.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="igfxtray"
    "hkey"="HKLM"
    "command"="C:\\WINDOWS\\System32\\igfxtray.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="IncrediMail"
    "hkey"="HKLM"
    "command"="C:\\PROGRA~1\\INCRED~1\\bin\\IncrediMail.exe /c"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IST Service]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="istsvc"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JqFAER]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="eesehgou"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveMonitor]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="LMonitor"
    "hkey"="HKLM"
    "command"="C:\\Program Files\\MSI\\Live Update 3\\LMonitor.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mkCdG]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="novpo"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="msmsgs"
    "hkey"="HKCU"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="msnmsgr"
    "hkey"="HKCU"
    "command"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Opware12]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="Opware12"
    "hkey"="HKLM"
    "command"="\"C:\\Program Files\\ScanSoft\\OmniPagePro12.0\\Opware12.exe\""
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sais]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="sais"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spellaroo]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="Spellaroo"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spyware Doctor]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="swdoctor"
    "hkey"="HKCU"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="evntsvc"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFaxAppPortStarter]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="wfxsnt40"
    "hkey"="HKLM"
    "command"="wfxsnt40.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\xReminder Pro]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="xRemind"
    "hkey"="HKCU"
    "command"="C:\\Program Files\\xReminder Pro\\xRemind.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzî[8C:]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzî[8C:\Program Files]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzî[8C:\Program Files\ISTsvc]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzî[8C:\Program Files\ISTsvc\istsvc.exe]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="eesehgou"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzîžigÝC:]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzîžigÝC:\Program Files]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzîžigÝC:\Program Files\ISTsvc]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzîžigÝC:\Program Files\ISTsvc\istsvc.exe]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="novpo"
    "hkey"="HKLM"
    "inimapping"="0"


    [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
    "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
    "NoCDBurning"=dword:00000000

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

    HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\awtqq

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
    LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
    NetworkService REG_MULTI_SZ DnsCache\0\0
    rpcss REG_MULTI_SZ RpcSs\0\0
    imgsvc REG_MULTI_SZ StiSvc\0\0
    termsvcs REG_MULTI_SZ TermService\0\0
    Usnsvc REG_MULTI_SZ usnsvc\0\0



    Contents of the 'Scheduled Tasks' folder
    C:\WINDOWS\tasks\AD3D0756916ABB12.job
    C:\WINDOWS\tasks\AntiSpy.job
    C:\WINDOWS\tasks\AppleSoftwareUpdate.job


    ********************************************************************

    catchme 0.2 W2K/XP/Vista - userland rootkit detector by Gmer, 17 October 2006
    http://www.gmer.net

    scanning hidden processes ...

    scanning hidden services ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 0

    ********************************************************************

    Completion time: 07-03-30 17:12:18


    Logfile of HijackThis v1.99.1
    Scan saved at 5:15:36 PM, on 30/03/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\CyberLink\Shared files\RichVideo.exe
    C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\PowerS.EXE
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
    C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    C:\WINDOWS\System32\wfxsnt40.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Microsoft IntelliType Pro\type32.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\tsnp2std.exe
    C:\WINDOWS\vsnp2std.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
    C:\Program Files\AnyDVD\AnyDVD.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\PROGRA~1\INTERN~2\mum.exe
    C:\Program Files\SecCopy\SecCopy.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\AdsGone\adsgone.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\Program Files\Skype\Plugin Manager\SkypePM.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\dllcache\notepad.exe
    C:\Program Files\Hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.internode.on.net/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
    O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {98467DA1-30A8-4C38-A8EC-9A706233F0CE} - (no file)
    O2 - BHO: (no name) - {a43385f0-7113-496d-96d7-b9b550e3fcca} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
    O2 - BHO: IECatcher Class - {B930BA63-9E5A-11D3-A288-0000E80E2EDE} - C:\Program Files\Mass Downloader\MDHELPER.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Safety Bar - {052b12f7-86fa-4921-8482-26c42316b522} - (no file)
    O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.1\BitComet_Toolbar.dll
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [PowerS] C:\WINDOWS\PowerS.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
    O4 - HKLM\..\Run: [D066UUtility] C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
    O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
    O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\AnyDVD\AnyDVD.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [InternodeUsage] C:\PROGRA~1\INTERN~2\mum.exe
    O4 - HKCU\..\Run: [Second Copy 2000] "C:\Program Files\SecCopy\SecCopy.exe"
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Second Copy] "C:\Program Files\SecCopy\SecCopy.exe"
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: AdsGone 2006.lnk = C:\Program Files\AdsGone\adsgone.exe
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\WebMenuImg.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
    O8 - Extra context menu item: + &Mass Downloader: download this file - C:\Program Files\Mass Downloader\Add_Url.htm
    O8 - Extra context menu item: + Mass Downloader: download &All files - C:\Program Files\Mass Downloader\Add_All.htm
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
    O9 - Extra 'Tools' menuitem: &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://tw.msi.com.tw/autobios/client/iftwclix.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1094979136343
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?312
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: awtqq - C:\WINDOWS\
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
    O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    Thank you. Hobbsy
  • Rahina-RescueRahina-Rescue Finland
    edited March 2007
    Please download Norton IstBar Removal Tool to your desktop and run it.

    ________________

    Highlight and copy the following:

    "%userprofile%\desktop\combofix.exe" /v awtqq

    Then go to Start => Run, paste it into the text field, and then click Ok.

    ________________

    Please download SmitfraudFix (by S!Ri) to your Desktop.

    Double-click SmitfraudFix.exe
    Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
    Please copy/paste the content of that report into your next reply.

    **If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C:), and launch from there.

    Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
    http://www.beyondlogic.org/consulting/proc...processutil.htm
  • Hobbsy
    edited April 2007
    Why are you marked as offline. Has it something to do with weekends? Thank You Hobbsy
  • Rahina-RescueRahina-Rescue Finland
    edited April 2007
    I am not exactly sure what you mean, If i'm offline i'm offline?, Meaning that i'm logged out from the forum.

    Could you please follow my Instructions :) ?

    Regards.
  • Hobbsy
    edited April 2007
    Rahina Rescue wrote:
    I am not exactly sure what you mean, If i'm offline i'm offline?, Meaning that i'm logged out from the forum.

    Could you please follow my Instructions :) ?

    Regards.
  • Hobbsy
    edited April 2007
    Thank you Rahina Rescue, you are doing quite a lot of work on this. I am curious as to what you are looking for and how you find it.
    The adware 1st reported that "1st bar has not been found on your computer"

    SmitFraudFix v2.162

    Scan done at 11:52:46.73, Sat 31/03/2007
    Run from C:\Program Files\Mozilla Firefox\SmitfraudFix
    OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
    The filesystem type is NTFS
    Fix run in normal mode

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\CyberLink\Shared files\RichVideo.exe
    C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\PowerS.EXE
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
    C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    C:\WINDOWS\System32\wfxsnt40.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Microsoft IntelliType Pro\type32.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\tsnp2std.exe
    C:\WINDOWS\vsnp2std.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
    C:\Program Files\AnyDVD\AnyDVD.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\PROGRA~1\INTERN~2\mum.exe
    C:\Program Files\SecCopy\SecCopy.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\AdsGone\adsgone.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\Program Files\Skype\Plugin Manager\SkypePM.exe
    C:\Program Files\WinNc.Net\Winnc.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\dllcache\notepad.exe
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Doug


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Doug\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu

    C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Doug\FAVORI~1

    C:\DOCUME~1\Doug\FAVORI~1\Online Security Test.url FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» Desktop


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="about:Home"
    "SubscribedURL"="about:Home"
    "FriendlyName"="My Current Home Page"


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32



    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: NVIDIA nForce Networking Controller - Packet Scheduler Miniport
    DNS Server Search Order: 192.168.2.1

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{5657C1DE-226B-4823-BB08-B4F8810EB721}: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{5657C1DE-226B-4823-BB08-B4F8810EB721}: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{5657C1DE-226B-4823-BB08-B4F8810EB721}: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1

    »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


    »»»»»»»»»»»»»»»»»»»»»»»» End
    For the last few days each time I attempted to post a reply a message would come up saying I could not do so and it would not allow me to do so until your last reply. Once again, I thank you. Doug
  • Rahina-RescueRahina-Rescue Finland
    edited April 2007
    Hello there.

    We'll continue.

    You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

    ________________________

    Next, please reboot your computer in Safe Mode by doing the following :
    • Restart your computer
    • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
    • Instead of Windows loading as normal, a menu with options should appear;
    • Select the first option, to run Windows in Safe Mode, then press "Enter".
    • Choose your usual account.
    Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
    Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

    ________________________

    You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

    The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

    The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
    A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
    The report can also be found at the root of the system drive, usually at C:\rapport.txt

    Warning : running option #2 on a non infected computer will remove your Desktop background.
  • Hobbsy
    edited April 2007
    May I please ask a question. Did we find the virus downloader and if so have we fixed it yet?

    SmitFraudFix v2.162

    Scan done at 9:38:43.62, Tue 03/04/2007
    Run from C:\Downloads\SmitfraudFix
    OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
    The filesystem type is NTFS
    Fix run in safe mode

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Killing process


    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 ads.datingyes.com
    127.0.0.1 adserver2.mediainsight.de
    127.0.0.1 adserver3.eudora.com
    127.0.0.1 adserver4.eudora.com
    127.0.0.1 adlink.deh.nl
    127.0.0.1 advert.stealth.nl
    127.0.0.1 www.banneroverdrive.com
    127.0.0.1 actionsplash.com
    127.0.0.1 ads.x10.com
    127.0.0.1 images.x10.com
    127.0.0.1 adserv.internetfuel.com
    127.0.0.1 popme.163.com
    127.0.0.1 servedby.advertising.com
    127.0.0.1 specialoffers.aol.com
    127.0.0.1 whenushop.whenu.com
    127.0.0.1 www.popupnation.com
    127.0.0.1 www.popuptraffic.com
    127.0.0.1 view.popupsponsor.com
    127.0.0.1 popups.infostart.com
    127.0.0.1 ads.ad-flow.com
    127.0.0.1 www.popupmoney.com
    127.0.0.1 ad0.popupad.net
    127.0.0.1 ad00.popupad.net
    127.0.0.1 ad01.popupad.net
    127.0.0.1 ad03.popupad.net
    127.0.0.1 ad04.popupad.net
    127.0.0.1 ad05.popupad.net
    127.0.0.1 ad06.popupad.net
    127.0.0.1 ad07.popupad.net
    127.0.0.1 ad08.popupad.net
    127.0.0.1 ad09.popupad.net
    127.0.0.1 contest.x10.com
    127.0.0.1 control.x10.com
    127.0.0.1 graphics.x10.com
    127.0.0.1 reports.x10.com
    127.0.0.1 software.x10.com
    127.0.0.1 store.x10.com
    127.0.0.1 www.x10.com
    127.0.0.1 ad.100.tbn.ru
    127.0.0.1 ad.120-gen.tbn.ru
    127.0.0.1 ad.37.com
    127.0.0.1 ad.3ad.doubleclick.net
    127.0.0.1 ad.3au.doubleclick.net
    127.0.0.1 ad.411web.com
    127.0.0.1 ad.a8.net
    127.0.0.1 ad.aboutwebservices.com
    127.0.0.1 ad.adbest.com
    127.0.0.1 ad.adconsole.com
    127.0.0.1 ad.ad-flow.com
    127.0.0.1 ad.adintensity.com #[ad.yieldmanager.com]
    127.0.0.1 ad.adlegend.com #[blocks Webroot Amber Alert]
    127.0.0.1 ad.admarketplace.net
    127.0.0.1 ad.adnet.biz
    127.0.0.1 ad.adnetwork.com.br
    127.0.0.1 ad.adriver.ru
    127.0.0.1 ad.ads.dk #[IE-SpyAd]
    127.0.0.1 ad.ads8.com
    127.0.0.1 ad.adslim.com #[Win32.Slimad.C]
    127.0.0.1 ad.adtegrity.net #[ad.yieldmanager.com]
    127.0.0.1 ad.adtoma.com
    127.0.0.1 ad.adver.com.tw
    127.0.0.1 ad.ae.doubleclick.net
    127.0.0.1 ad.aftenposten.no #[RealMedia]
    127.0.0.1 ad.aftonbladet.se #[RealMedia]
    127.0.0.1 ad.afy11.net
    127.0.0.1 ad.aimedia.com #[ad.yieldmanager.com]
    127.0.0.1 ad.altervista.org
    127.0.0.1 ad.ar.doubleclick.net
    127.0.0.1 ad.au.doubleclick.net
    127.0.0.1 ad.audible.fm #[ad.yieldmanager.com]
    127.0.0.1 ad.axill.com #[ad.yieldmanager.com]
    127.0.0.1 ad.baiso.com.cn #[Trojan.Baiso][ADSPY/BaiduBar.P]
    127.0.0.1 ad.bannerbank.ru
    127.0.0.1 ad.bannerconnect.net #[ad.yieldmanager.com]
    127.0.0.1 ad.bannerhost.ru
    127.0.0.1 ad.be.doubleclick.net
    127.0.0.1 ad.beleveyou.com
    127.0.0.1 ad.bol.bg
    127.0.0.1 ad.br.doubleclick.net #[SunBelt.DoubleClick]
    127.0.0.1 ad.ca.doubleclick.net
    127.0.0.1 ad.ch.doubleclick.net
    127.0.0.1 ad.chip.de
    127.0.0.1 ad.cibleclick.com #[eTrust.Cibleclick]
    127.0.0.1 ad.cl.doubleclick.net
    127.0.0.1 ad.cn.doubleclick.net
    127.0.0.1 ad.cpvfeed.com #[SiteAdvisor.cpvfeed.com]
    127.0.0.1 ad.cs102175.com #[ads.admarketplace.net]
    127.0.0.1 ad.db3nf.com
    127.0.0.1 ad.de.doubleclick.net #[Tenebril.Tracking Cookie]
    127.0.0.1 ad.detik.com
    127.0.0.1 ad.directanetworks.com #[ad.yieldmanager.com]
    127.0.0.1 ad.directconnect.se
    127.0.0.1 ad.displayadsmedia.com
    127.0.0.1 ad.dk.doubleclick.net
    127.0.0.1 ad.dmpi.net
    127.0.0.1 ad.doubleclick.net #[MVPS.Criteria]
    127.0.0.1 ad.eltext.com #[eTrust.Win32/Beenut]
    127.0.0.1 ad.erasercash.com #[SunBelt.Erasercash]
    127.0.0.1 ad.es.doubleclick.net
    127.0.0.1 ad.eurosport.com #[oas.eurosport.com]
    127.0.0.1 ad.fi.doubleclick.net
    127.0.0.1 ad.firstadsolution.com #[ad.yieldmanager.com]
    127.0.0.1 ad.fr.doubleclick.net
    127.0.0.1 ad.freefind.com
    127.0.0.1 ad.gen.tbn.ru
    127.0.0.1 ad.globalinteractive.com #[ad.yieldmanager.com]
    127.0.0.1 ad.go.com
    127.0.0.1 ad.greenmarquee.com #[ad.yieldmanager.com]
    127.0.0.1 ad.hk.doubleclick.net
    127.0.0.1 ad.hosting.pl
    127.0.0.1 ad.hotlog.ru
    127.0.0.1 ad.howstuffworks.com #[RealMedia][SpySweeper.Spy.Cookie]
    127.0.0.1 ad.hu.doubleclick.net
    127.0.0.1 ad.iconadserver.com #[ad.yieldmanager.com]
    127.0.0.1 ad.ie.doubleclick.net
    127.0.0.1 ad.in.doubleclick.net
    127.0.0.1 ad.infinite-ads.com #[ad.yieldmanager.com]
    127.0.0.1 ad.infoseek.com
    127.0.0.1 ad.insightexpress.com
    127.0.0.1 ad.insightexpressai.com
    127.0.0.1 ad.ir.ru
    127.0.0.1 ad.ireit.com #[ad.yieldmanager.com]
    127.0.0.1 ad.it.doubleclick.net
    127.0.0.1 ad.jamba.net #[IE-SpyAd]
    127.0.0.1 ad.jamster.com
    127.0.0.1 ad.joinaxxess.com #[ad.yieldmanager.com]
    127.0.0.1 ad.jp.ap.valuecommerce.com
    127.0.0.1 ad.jp.doubleclick.net
    127.0.0.1 ad.kr.doubleclick.net
    127.0.0.1 ad.linkexchange.com #[SunBelt.LinkExchange.com]
    127.0.0.1 ad.linksynergy.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ad.madserver.net
    127.0.0.1 ad.m-adx.com
    127.0.0.1 ad.marketingsector.com #[ad.yieldmanager.com]
    127.0.0.1 ad.mediaprecision.net #[ad.yieldmanager.com]
    127.0.0.1 ad.media-servers.net #[ad.yieldmanager.com]
    127.0.0.1 ad.mediaup.fr
    127.0.0.1 ad.mokead.com
    127.0.0.1 ad.moscowtimes.ru
    127.0.0.1 ad.n2434.doubleclick.net
    127.0.0.1 ad.nl.doubleclick.net
    127.0.0.1 ad.no.doubleclick.net
    127.0.0.1 ad.nozonedata.com #[Ad-Aware Tracking Cookie]
    127.0.0.1 ad.nz.doubleclick.net
    127.0.0.1 ad.oinadserver.com #[ad.yieldmanager.com][McAfee.Adware-ClickSpring]
    127.0.0.1 ad.orbitel.bg
    127.0.0.1 ad.pl.doubleclick.net
    127.0.0.1 ad.pro-advertising.com
    127.0.0.1 ad.profiwin.de
    127.0.0.1 ad.prv.pl
    127.0.0.1 ad.pt.doubleclick.net
    127.0.0.1 ad.rambler.ru #[SecuritySpace.WebBug]
    127.0.0.1 ad.rd06.com
    127.0.0.1 ad.realcastmedia.com #[ad.yieldmanager.com]
    127.0.0.1 ad.reduxmedia.com #[ad.yieldmanager.com]
    127.0.0.1 ad.ro.doubleclick.net
    127.0.0.1 ad.ro2cn.com #[Adware.Ro2cn]
    127.0.0.1 ad.ru.doubleclick.net
    127.0.0.1 ad.se.doubleclick.net
    127.0.0.1 ad.searchsquire.com
    127.0.0.1 ad.sensismediasmart.com.au
    127.0.0.1 ad.sexcount.de
    127.0.0.1 ad.sg.doubleclick.net
    127.0.0.1 ad.sma.punto.net
    127.0.0.1 ad.smsmovie.tv
    127.0.0.1 ad.smsmovies.net
    127.0.0.1 ad.stat.4u.pl
    127.0.0.1 ad.t2t2.com
    127.0.0.1 ad.tbn.ru
    127.0.0.1 ad.terra.doubleclick.net
    127.0.0.1 ad.text.tbn.ru
    127.0.0.1 ad.th.doubleclick.net
    127.0.0.1 ad.tiscali.com
    127.0.0.1 ad.tomshardware.com
    127.0.0.1 ad.topstat.com
    127.0.0.1 ad.tpadz.com
    127.0.0.1 ad.trafficmp.com #[eTrust.Tracking Cookie]
    127.0.0.1 ad.turn.com
    127.0.0.1 ad.tv2.no #[RealMedia]
    127.0.0.1 ad.tw.doubleclick.net
    127.0.0.1 ad.uk.doubleclick.net
  • Hobbsy
    edited April 2007
    127.0.0.1 ad.uk.tangozebra.com
    127.0.0.1 ad.us.doubleclick.net
    127.0.0.1 ad.usatoday.com
    127.0.0.1 ad.valencemedia.com #[ad.yieldmanager.com]
    127.0.0.1 ad.valuehost.ru #[IE-SpyAd]
    127.0.0.1 ad.wanderlist.com
    127.0.0.1 ad.webadvertising.ch
    127.0.0.1 ad.yadro.ru #[IE-SpyAd][SpySweeper.Spy.Cookie]
    127.0.0.1 ad.yieldmanager.com #[Kephyr.PUP][MVPS.Criteria]
    127.0.0.1 ad.yieldx.com #[ad.yieldmanager.com]
    127.0.0.1 ad.yourmedia.com
    127.0.0.1 ad.za.doubleclick.net
    127.0.0.1 ad.zanox.com
    127.0.0.1 ad0.adinterax.com
    127.0.0.1 ad0.bigmir.net
    127.0.0.1 ad0.haynet.com
    127.0.0.1 ad01.adonspot.com #[IE-SpyAd]
    127.0.0.1 ad02.adonspot.com
    127.0.0.1 ad1.adsolution.de
    127.0.0.1 ad1.bannerbank.ru
    127.0.0.1 ad1.banners.phoneaccess.com
    127.0.0.1 ad1.bigmir.net
    127.0.0.1 ad1.bustcash.com
    127.0.0.1 ad1.clickhype.com #[IE-SpyAd][Ewido.TrackingCookie.Clickhype]
    127.0.0.1 ad1.emediate.dk
    127.0.0.1 ad1.firehousezone.com
    127.0.0.1 ad1.gamezone.com #[RealMedia]
    127.0.0.1 ad1.hardware.no #[AdvertPro]
    127.0.0.1 ad1.iframeuploads.org #[W32.Timeserv@mm]
    127.0.0.1 ad1.lbe.ru
    127.0.0.1 ad1.nozonedata.com
    127.0.0.1 ad1.pamedia.com.au
    127.0.0.1 ad1.peel.com
    127.0.0.1 ad1.searchmiracle.com
    127.0.0.1 ad1.speedbit.com
    127.0.0.1 ad1.yourmedia.com
    127.0.0.1 ad10.bannerbank.ru
    127.0.0.1 ad10.speedbit.com
    127.0.0.1 ad101com.adbureau.net #[a900.g.akamai.net]
    127.0.0.1 ad101com-images.adbureau.net #[Ad-Aware.Tracking Cookie]
    127.0.0.1 ad11.bannerbank.ru
    127.0.0.1 ad12.bannerbank.ru
    127.0.0.1 ad2.163.com
    127.0.0.1 ad2.adecn.com
    127.0.0.1 ad2.adnetinteractive.com
    127.0.0.1 ad2.bannerbank.ru
    127.0.0.1 ad2.dmpi.net
    127.0.0.1 ad2.doubleclick.net #[Panda.Spyware:Cookie/Doubleclick]
    127.0.0.1 ad2.firehousezone.com #[RealMedia]
    127.0.0.1 ad2.hotels.com
    127.0.0.1 ad2.ip.ro
    127.0.0.1 ad2.mamma.com
    127.0.0.1 ad2.pamedia.com.au
    127.0.0.1 ad2.pl.mediainter.net
    127.0.0.1 ad2.pop.com.br
    127.0.0.1 ad2.postroller.com
    127.0.0.1 ad2.rambler.ru
    127.0.0.1 ad2.speedbit.com
    127.0.0.1 ad3.bannerbank.ru
    127.0.0.1 ad3.dmpi.net
    127.0.0.1 ad3.peel.com #[SunBelt.Peel]
    127.0.0.1 ad3.postroller.com
    127.0.0.1 ad3.rambler.ru
    127.0.0.1 ad3.speedbit.com
    127.0.0.1 ad4.bannerbank.ru
    127.0.0.1 ad4.bigmir.net
    127.0.0.1 ad4.dmpi.net
    127.0.0.1 ad4.peel.com #[Tenebril.Tracking Cookie]
    127.0.0.1 ad4.speedbit.com
    127.0.0.1 ad5.adecn.com #[SpySweeper.Spy.Cookie][IE-SpyAd]
    127.0.0.1 ad5.bannerbank.ru
    127.0.0.1 ad5.speedbit.com
    127.0.0.1 ad588.net #[Win32/PSW.Legendmir][server down?]
    127.0.0.1 ad6.bannerbank.ru #[Ad-Aware.Tracking Cookie]
    127.0.0.1 ad6.speedbit.com
    127.0.0.1 ad7.bannerbank.ru
    127.0.0.1 ad7.bigmir.net
    127.0.0.1 ad7.speedbit.com
    127.0.0.1 ad8.bannerbank.ru
    127.0.0.1 ad8.speedbit.com
    127.0.0.1 ad9.bannerbank.ru
    127.0.0.1 ad9.speedbit.com
    127.0.0.1 adaaware.com
    127.0.0.1 adasearch.com
    127.0.0.1 adawae.com
    127.0.0.1 adawair.com
    127.0.0.1 adbest.com #[IE-SpyAd]
    127.0.0.1 adblaster2.info
    127.0.0.1 adblock.linkz.com #[AdBlock APInstaller Class]
    127.0.0.1 adbot.theonion.com
    127.0.0.1 adbrite.122.2o7.net
    127.0.0.1 adbrite.com #[Ewido.TrackingCookie.Adbrite]
    127.0.0.1 adc.aavalue.com
    127.0.0.1 adc1.mingpao.com
    127.0.0.1 adcache.aftenposten.no
    127.0.0.1 adcenter.in2.com
    127.0.0.1 adchimp.com
    127.0.0.1 adclick.hit.gemius.pl
    127.0.0.1 adclient.163.com
    127.0.0.1 adclient1.tucows.com
    127.0.0.1 ad-clix.com
    127.0.0.1 adcode.adengage.com
    127.0.0.1 adcodes.aim4media.com
    127.0.0.1 adcomplete.com #[IE-SpyAd]
    127.0.0.1 adcontent.gamespy.com
    127.0.0.1 adcount.ohmynews.com
    127.0.0.1 adcounter.theglobeandmail.com
    127.0.0.1 adcycle.footymad.net
    127.0.0.1 ad-cz.tiscali.com
    127.0.0.1 ad-de.tiscali.com
    127.0.0.1 addev.internetfuel.com
    127.0.0.1 addfreestats.com #[SecuritySpace.WebBug]
    127.0.0.1 adextension.com #[HJTH.Topconverting Adware][MHTMLRedir.Exploit]
    127.0.0.1 adfabu.com
    127.0.0.1 adfarm.mediaplex.com #[Adware.Meplex][Adware-DesktopMedia.dr]
    127.0.0.1 adfarm.mserve.ca
    127.0.0.1 adfiles.pitchforkmedia.com
    127.0.0.1 ad-flow.com #[Tenebril.Tracking Cookie]
    127.0.0.1 adforce.adtech.de
    127.0.0.1 adgate.info #[MHTMLRedir.Exploit]
    127.0.0.1 adi.bigmir.net
    127.0.0.1 adidm.supermedia.pl
    127.0.0.1 adidm07.idmnet.pl
    127.0.0.1 adimage.guardian.co.uk
    127.0.0.1 adimages.go.com
    127.0.0.1 adimages.sina.com.hk
    127.0.0.1 adimages.vendaregroup.com
    127.0.0.1 adimg.alice.it
    127.0.0.1 adimg.cnet.com
    127.0.0.1 adimg.com.com
    127.0.0.1 adimg.download.com
    127.0.0.1 adimg.zdnet.com
    127.0.0.1 adimgs.com
    127.0.0.1 adincl.gopher.com #[InfoSpace]
    127.0.0.1 adinterax.cnet.com.edgesuite.net
    127.0.0.1 adinterax.com
    127.0.0.1 adireland.com
    127.0.0.1 ad-it.tiscali.com
    127.0.0.1 adj50.thruport.com
    127.0.0.1 adj54.thruport.com
    127.0.0.1 adland.medialand.ru
    127.0.0.1 adleads.com
    127.0.0.1 adlik2.akavita.com
    127.0.0.1 adlog.com.com
    127.0.0.1 adlt.hit.gemius.pl
    127.0.0.1 adm.gw.premiumbilling.com
    127.0.0.1 adman.freeze.com
    127.0.0.1 admanager2.broadbandpublisher.com
    127.0.0.1 admanager3.collegepublisher.com
    127.0.0.1 admedia.xmlsearch.findwhat.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 adnet.asahi.com
    127.0.0.1 adnet.hit.gemius.pl
    127.0.0.1 adnet.medialand.ru
    127.0.0.1 adnet-plus.com #[IE-SpyAd][TR/Dldr.YM]
    127.0.0.1 ad-nl.tiscali.com
    127.0.0.1 adonlist.com
    127.0.0.1 adonlistings.com
    127.0.0.1 adops.adbureau.net
    127.0.0.1 adopt.euroclick.com #[Ewido.TrackingCookie.Euroclick]
    127.0.0.1 adopt.hbmediapro.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 adopt.hotbar.com #[eTrust.Tracking Cookie]
    127.0.0.1 adopt.precisead.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 adopt.specificclick.net #[Ad-Aware.Tracking Cookie]
    127.0.0.1 adp4.us4.outblaze.com
    127.0.0.1 adpick.switchboard.com
    127.0.0.1 adplus.yonhapnews.co.kr
    127.0.0.1 adpopper.outblaze.com #[ADW_BBINSTALL.B][bargain-buddy.net]
    127.0.0.1 adpowerzone.advertserve.com #[Whios.Blacklisted]
    127.0.0.1 adpowerzone.com #[eTrust.SearchExplorerBar]
    127.0.0.1 adprotect.com #[eTrust.SpyShield.Ad-Protect]
    127.0.0.1 adq.nextag.com #[McAfee.Cookie-Nextag]
    127.0.0.1 adrates.theglobeandmail.com
    127.0.0.1 adreactor.com #[IE-SpyAd]
    127.0.0.1 adremote.pathfinder.com
    127.0.0.1 adremote.timeinc.net
    127.0.0.1 adrevenue.findwhat.com
    127.0.0.1 adrevservice.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 adrianalima.sexybabesx.com
    127.0.0.1 adroar.com #[IE-SpyAd]
    127.0.0.1 adrotator.com
    127.0.0.1 ads.180solutions.com
    127.0.0.1 ads.24.com
    127.0.0.1 ads.247wsr.com
    127.0.0.1 ads.6agenten.dk
    127.0.0.1 ads.7days.ae
    127.0.0.1 ads.accountingweb.com
    127.0.0.1 ads.active.com
    127.0.0.1 ads.adbrite.com
    127.0.0.1 ads.adcorps.com
    127.0.0.1 ads.addesktop.com #[McAfee.Cookie-Addesktop]
    127.0.0.1 ads.addynamix.com #[IE-SpyAd][SpySweeper.Spy.Cookie]
    127.0.0.1 ads.adhostingsolutions.com
    127.0.0.1 ads.admarketplace.net
    127.0.0.1 ads.adn.com #[RealMedia]
    127.0.0.1 ads.adnet-plus.com
    127.0.0.1 ads.adorigin.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.adpowerzone.com
    127.0.0.1 ads.adroar.com
    127.0.0.1 ads.ads360.com #[Tenebril.Tracking Cookie]
    127.0.0.1 ads.adsag.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.adsonar.com
    127.0.0.1 ads.adsponse.de
    127.0.0.1 ads.adtomi.com #[IE-SpyAd][ADW_ADTOMI.D]
    127.0.0.1 ads.adultadworld.com
    127.0.0.1 ads.adultcash.com
    127.0.0.1 ads.adultfriendfinder.com #[SpySweeper.Spy.Cookie][a841.x.akamai.net]
    127.0.0.1 ads.advance.net #[McAfee.Cookie-Advance]
    127.0.0.1 ads.advertise.net #[IE-SpyAd]
    127.0.0.1 ads.advertisingz.com
    127.0.0.1 ads.adviva.net #[IE-SpyAd]
    127.0.0.1 ads.affiliates.match.com
    127.0.0.1 ads.ah-ha.com
    127.0.0.1 ads.al.com #[ads.udc.advance.net]
    127.0.0.1 ads.amateurmatch.com
    127.0.0.1 ads.amazingmedia.com #[IE-SpyAd]
    127.0.0.1 ads.amdmb.com
    127.0.0.1 ads.anm.co.uk #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.antionline.com
    127.0.0.1 ads.aol.co.uk
    127.0.0.1 ads.apn.co.nz #[McAfee.Cookie-Apn]
    127.0.0.1 ads.as4x.tmcs.akadns.net #[Ticketmaster][IE-SpyAd]
    127.0.0.1 ads.as4x.tmcs.net
    127.0.0.1 ads.asexstories.com
    127.0.0.1 ads.asia1.com.sg
    127.0.0.1 ads.asiafriendfinder.com
    127.0.0.1 ads.ask.com #[sv-click.looksmart.com]
    127.0.0.1 ads.aspalliance.com
    127.0.0.1 ads.asredas.com
    127.0.0.1 ads.autotrader.co.za
    127.0.0.1 ads.bangkokpost.co.th
    127.0.0.1 ads.bcnewsgroup.com
    127.0.0.1 ads.belointeractive.com #[RealMedia][eTrust.Tracking Cookie]
    127.0.0.1 ads.betanews.com
    127.0.0.1 ads.bfast.com #[McAfee.Cookie-Bfast][SecuritySpace.WebBug]
    127.0.0.1 ads.bidclix.com #[IE-SpyAd]
    127.0.0.1 ads.bidvertiser.com #[IE-SpyAd]
    127.0.0.1 ads.bigad.com #[ad.yieldmanager.com]
    127.0.0.1 ads.blick.ch
    127.0.0.1 ads.blogdrive.com
    127.0.0.1 ads.bloomberg.com
    127.0.0.1 ads.blp.valueclick.net
    127.0.0.1 ads.bomis.com
    127.0.0.1 ads.boom.ro
    127.0.0.1 ads.burstnet.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.businessweek.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.cars.com
    127.0.0.1 ads.casino.com
    127.0.0.1 ads.cc214142.com #[adbureau.net][McAfee.Adware-CasClient]
    127.0.0.1 ads.cc-dt.com
    127.0.0.1 ads.cdfreaks.com #[eTrust.Ads.cdfreaks]
    127.0.0.1 ads.checkm8.co.za
    127.0.0.1 ads.chellomedia.com
    127.0.0.1 ads.chitika.net #[IE-SpyAd]
    127.0.0.1 ads.chumcity.com
    127.0.0.1 ads.cleveland.com #[ads.udc.advance.net]
    127.0.0.1 ads.clickad.com #[eTrust.Tracking Cookie]
    127.0.0.1 ads.clickagents.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.clicksor.com
    127.0.0.1 ads.clickthru.net
    127.0.0.1 ads.cnn.com
    127.0.0.1 ads.cobrad.com
    127.0.0.1 ads.com.com
    127.0.0.1 ads.comicbookresources.com
    127.0.0.1 ads.console.net
    127.0.0.1 ads.contactmusic.com #[advertpro]
    127.0.0.1 ads.contextclick.com
    127.0.0.1 ads.cosmosmagazine.com
    127.0.0.1 ads.cracked.com
    127.0.0.1 ads.crawler.com
    127.0.0.1 ads.crosswinds.net
    127.0.0.1 ads.crucialparadigm.com
    127.0.0.1 ads.datinggold.com
    127.0.0.1 ads.deblok.net.kadserver.com
    127.0.0.1 ads.delfinproject.com
    127.0.0.1 ads.dennisnet.co.uk
    127.0.0.1 ads.desktopscans.com
    127.0.0.1 ads.deskwizz.com
    127.0.0.1 ads.deviantart.com
    127.0.0.1 ads.digitalhealthcare.com
    127.0.0.1 ads.digitalmedianet.com
    127.0.0.1 ads.digitalpoint.com
    127.0.0.1 ads.dir.bg
    127.0.0.1 ads.directnetadvertising.net
    127.0.0.1 ads.dmnews.com
    127.0.0.1 ads.dns-look-up.com #[Win32/TrojanDownloader.Swizzor]
    127.0.0.1 ads.dotomi.com
    127.0.0.1 ads.downloadaccelerator.com
    127.0.0.1 ads.downloadmediacentral.com
    127.0.0.1 ads.drivelinemedia.com
    127.0.0.1 ads.dropspam.com #[HJTH.IEPlugin]
    127.0.0.1 ads.drugs.com
    127.0.0.1 ads.dxcdirect.com #[server down?]
    127.0.0.1 ads.ecrush.com #[AdvertPro]
    127.0.0.1 ads.edirectme.com
    127.0.0.1 ads.eog.com
    127.0.0.1 ads.ero-advertising.com
    127.0.0.1 ads.eu.msn.com
    127.0.0.1 ads.euniverseads.com #[McAfee.Cookie-Euniverseads]
    127.0.0.1 ads.expedia.com
    127.0.0.1 ads.expressindia.com
    127.0.0.1 ads.ezboard.com
    127.0.0.1 ads.ezcybersearch.com #[Adware.EZSearch.B]
    127.0.0.1 ads.facebook.com #[facebook-ads.vo.llnwd.net]
    127.0.0.1 ads.fairfax.com.au
    127.0.0.1 ads.fastpay.ro
    127.0.0.1 ads.fhm.valueclick.net
    127.0.0.1 ads.firingsquad.com
    127.0.0.1 ads.firstgrand.com
    127.0.0.1 ads.flashtrack.net #[Adware.Flashtrack.B]
    127.0.0.1 ads.football365.com #[eur56deliv.247realmedia.com]
    127.0.0.1 ads.forbes.com #[IE-SpyAd][RealMedia]
    127.0.0.1 ads.fortunecity.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.fredericksburg.com
    127.0.0.1 ads.free-banners.com
    127.0.0.1 ads.freeonlinegames.com
    127.0.0.1 ads.freevisits.com
    127.0.0.1 ads.freeze.com
    127.0.0.1 ads.fresnobee.com #[oasads0.nandomedia.com]
    127.0.0.1 ads.friendfinder.com #[a841.x.akamai.net]
    127.0.0.1 ads.ft.com
    127.0.0.1 ads.****youpayme.com
    127.0.0.1 ads.futurenetworkusa.com
    127.0.0.1 ads.gamespy.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.gamespyid.com
    127.0.0.1 ads.gather.com
    127.0.0.1 ads.geoads.net
    127.0.0.1 ads.globeandmail.com
    127.0.0.1 ads.go****yourself.com
    127.0.0.1 ads.golfdigest.com #[ads.udc.advance.net]
    127.0.0.1 ads.guardian.co.uk
    127.0.0.1 ads.guru3d.com
    127.0.0.1 ads.hellomagazine.com #[RealMedia]
    127.0.0.1 ads.heraldonline.com #[oasads0.nandomedia.com]
    127.0.0.1 ads.heraldsun.com #[RealMedia]
    127.0.0.1 ads.herbalsmokeshop.com
    127.0.0.1 ads.hitcents.com #[IE-SpyAd]
    127.0.0.1 ads.hnet.valueclick.net
    127.0.0.1 ads.host.camz.com
    127.0.0.1 ads.hotbar.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.hothardware.com
    127.0.0.1 ads.iafrica.com
    127.0.0.1 ads.iawsnetwork.com
    127.0.0.1 ads.iboost.com
    127.0.0.1 ads.ign.com #[McAfee.Cookie-IGN]
    127.0.0.1 ads.ims.nl
    127.0.0.1 ads.indiatimes.com #[McAfee.Cookie-Indiads]
    127.0.0.1 ads.indystar.com
    127.0.0.1 ads.inet1.com
    127.0.0.1 ads.inet-traffic.com
    127.0.0.1 ads.infospace.com #[ADW_DEALHELPER.C]
    127.0.0.1 ads.injersey.com #[RealMedia]
    127.0.0.1 ads.intellicast.com #[weather.com]
    127.0.0.1 ads.internetfuel.com #[SunBelt.InternetFuel.com]
    127.0.0.1 ads.internet-optimizer.com #[Parasite.Internet Optimizer]
    127.0.0.1 ads.ipowerweb.com
    127.0.0.1 ads.isoftmarketing.com
    127.0.0.1 ads.itv.com #[adbureau.net]
    127.0.0.1 ads.iwon.com
    127.0.0.1 ads.jacksonville.com
    127.0.0.1 ads.jewishfriendfinder.com
    127.0.0.1 ads.jokaroo.com
    127.0.0.1 ads.jpost.com #[RealMedia]
    127.0.0.1 ads.kleinman.com #[Adcycle]
    127.0.0.1 ads.kmpads.com #[IE-SpyAd][Ewido.TrackingCookie.Kmpads]
    127.0.0.1 ads.komli.com
    127.0.0.1 ads.kw.revenue.net
    127.0.0.1 ads.linuxjournal.com
    127.0.0.1 ads.livescore.com
    127.0.0.1 ads.ljworld.com
    127.0.0.1 ads.lycos.com
    127.0.0.1 ads.lycos-europe.com
    127.0.0.1 ads.madison.com
    127.0.0.1 ads.mamma.com #[SunBelt.Mamma]
    127.0.0.1 ads.masslive.com #[ads.udc.advance.net]
    127.0.0.1 ads.mbkwbar.com
    127.0.0.1 ads.mcafee.com
    127.0.0.1 ads.mdchoice.com
    127.0.0.1 ads.mediaodyssey.com
    127.0.0.1 ads.mediaturf.net #[McAfee.Cookie-Mediaturf]
    127.0.0.1 ads.metricsdirect.com
    127.0.0.1 ads.metropol.dk
    127.0.0.1 ads.mgnetwork.com #[RealMedia]
    127.0.0.1 ads.miarroba.com
    127.0.0.1 ads.mindviz.com #[IE-SpyAd][SiteAdvisor.mindviz.com]
    127.0.0.1 ads.miniclip.com #[eur56deliv.247realmedia.com]
    127.0.0.1 ads.mixtraffic.com #[IE-SpyAd]
    127.0.0.1 ads.mlive.com
  • Hobbsy
    edited April 2007
    127.0.0.1 ads.mm.ap.org
    127.0.0.1 ads.monster.com
    127.0.0.1 ads.monstermoving.com
    127.0.0.1 ads.morningstar.com #[RealMedia]
    127.0.0.1 ads.movieweb.com
    127.0.0.1 ads.mplx.valueclick.net
    127.0.0.1 ads.msn.com
    127.0.0.1 ads.mtv.valueclick.net
    127.0.0.1 ads.multimania.lycos.fr
    127.0.0.1 ads.mv.valueclick.net
    127.0.0.1 ads.mydailyhoroscope.net #[SunBelt.MyDailyHoroscope]
    127.0.0.1 ads.nandomedia.com #[McAfee.Cookie-Nandomedia]
    127.0.0.1 ads.nationalenquirer.com #[ads1.ami-admin.com]
    127.0.0.1 ads.neogen.bg
    127.0.0.1 ads.neogen.ro
    127.0.0.1 ads.neowin.net
    127.0.0.1 ads.netrition.com
    127.0.0.1 ads.netsol.com
    127.0.0.1 ads.networksolutions.com
    127.0.0.1 ads.newline.aol.com
    127.0.0.1 ads.newsint.co.uk
    127.0.0.1 ads.newsobserver.com #[oasads0.nandomedia.com]
    127.0.0.1 ads.newsquest.co.uk #[RealMedia]
    127.0.0.1 ads.ninemsn.com.au
    127.0.0.1 ads.nj.com #[RealMedia][ads.udc.advance.net]
    127.0.0.1 ads.nola.com #[RealMedia][ads.udc.advance.net]
    127.0.0.1 ads.nordichardware.com
    127.0.0.1 ads.nordichardware.se
    127.0.0.1 ads.northjersey.com #[RealMedia]
    127.0.0.1 ads.npr.valueclick.net
    127.0.0.1 ads.nwsource.com
    127.0.0.1 ads.nypost.com
    127.0.0.1 ads.nytimes.com
    127.0.0.1 ads.offeroptimizer.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.oneandonlynetwork.com
    127.0.0.1 ads.onemodelplace.com
    127.0.0.1 ads.oneplace.com
    127.0.0.1 ads.oregonlive.com #[ads.udc.advance.net]
    127.0.0.1 ads.orsm.net
    127.0.0.1 ads.osdn.com
    127.0.0.1 ads.outpersonals.com #[a841.x.akamai.net]
    127.0.0.1 ads.ozonemedia.co.in #[ozone.adbureau.net]
    127.0.0.1 ads.partner2profit.com
    127.0.0.1 ads.partnerlogic.net
    127.0.0.1 ads.passion.com #[a841.x.akamai.net]
    127.0.0.1 ads.pcper.com
    127.0.0.1 ads.peel.com
    127.0.0.1 ads.pennlive.com #[RealMedia][ads.udc.advance.net]
    127.0.0.1 ads.pennnet.com
    127.0.0.1 ads.pennyweb.com #[addynamix.com]
    127.0.0.1 ads.photosight.ru
    127.0.0.1 ads.pittsburghlive.com #[RealMedia]
    127.0.0.1 ads.planetactive.com
    127.0.0.1 ads.plantyours.com
    127.0.0.1 ads.pno.net
    127.0.0.1 ads.pointroll.com #[Ad-Aware.Tracking Cookie]
    127.0.0.1 ads.popupsponsor.com #[SunBelt.PopupSponsor]
    127.0.0.1 ads.porncash.tv
    127.0.0.1 ads.primeinteractive.net
    127.0.0.1 ads.prisacom.com #[RealMedia]
    127.0.0.1 ads.pro-market.net #[SpySweeper.Spy.Cookie][a1947.x.akamai.net]
    127.0.0.1 ads.psxextreme.com
    127.0.0.1 ads.pure****.com
    127.0.0.1 ads.queendom.com
    127.0.0.1 ads.radioactive.se
    127.0.0.1 ads.rampidads.com #[eTrust.Tracking Cookie]
    127.0.0.1 ads.realcastmedia.com #[directtrack.com]
    127.0.0.1 ads.realcities.com
    127.0.0.1 ads.realmedia.com.br
    127.0.0.1 ads.realtechnetwork.net
    127.0.0.1 ads.rediff.com
    127.0.0.1 ads.register.com
    127.0.0.1 ads.revenews.com
    127.0.0.1 ads.revenue.net #[SunBelt.Revenue.net]
    127.0.0.1 ads.revsci.net #[Ad-Aware Tracking Cookie]
    127.0.0.1 ads.roanoke.com
    127.0.0.1 ads.ruralpress.com
    127.0.0.1 ads.sabah.com.tr
    127.0.0.1 ads.sacbee.com #[oasads0.nandomedia.com]
    127.0.0.1 ads.schwabtrader.com
    127.0.0.1 ads.scot.valueclick.net
    127.0.0.1 ads.search.bg
    127.0.0.1 ads.searchextreme.com
    127.0.0.1 ads.searchingbooth.com #[ad.yieldmanager.com]
    127.0.0.1 ads.seattletimes.com
    127.0.0.1 ads.seekingalpha.com
    127.0.0.1 ads.seniorfriendfinder.com
    127.0.0.1 ads.sexspaces.com
    127.0.0.1 ads.shizmoo.com #[IE-SpyAd][Kephyr.PUP]
    127.0.0.1 ads.sify.com #[RealMedia]
    127.0.0.1 ads.silive.com
    127.0.0.1 ads.sina.com
    127.0.0.1 ads.sitemeter.com
    127.0.0.1 ads.smni.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.sn.se
    127.0.0.1 ads.softure.com
    127.0.0.1 ads.softwareoutfit.com
    127.0.0.1 ads.soush.com
    127.0.0.1 ads.space.com #[RealMedia]
    127.0.0.1 ads.sportinglife.com #[eur56deliv.247realmedia.com]
    127.0.0.1 ads.sportingnews.com #[RealMedia]
    127.0.0.1 ads.stardoll.com
    127.0.0.1 ads.starpulse.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.stephensmedia.com
    127.0.0.1 ads.surfsidekick.com #[McAfee.Adware-SurfSideKick.dr]
    127.0.0.1 ads.swiftnews.com
    127.0.0.1 ads.tagword.com
    127.0.0.1 ads.tarrobads.com
    127.0.0.1 ads.teamtalk.com
    127.0.0.1 ads.technologyguide.com
    127.0.0.1 ads.telegraph.co.uk #[McAfee.Cookie-Telegraph]
    127.0.0.1 ads.textplussolutions.com
    127.0.0.1 ads.the-bikini.com
    127.0.0.1 ads.thestar.com
    127.0.0.1 ads.tolshop.com
    127.0.0.1 ads.topix.net
    127.0.0.1 ads.toplayerserver.com
    127.0.0.1 ads.track-star.com #[SunBelt.Track-Star.com]
    127.0.0.1 ads.tradermedia.co.uk
    127.0.0.1 ads.traderonline.com #[RealMedia]
    127.0.0.1 ads.trafficaces.com
    127.0.0.1 ads.trafficleader.com
    127.0.0.1 ads.triada.bg
    127.0.0.1 ads.trinitymirror.co.uk #[eur56deliv.247realmedia.com]
    127.0.0.1 ads.tripod.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.tripod.lycos.co.uk
    127.0.0.1 ads.tripod.lycos.es
    127.0.0.1 ads.tripod.lycos.nl #[Ad-Aware.Tracking Cookie]
    127.0.0.1 ads.tweakxp.com
    127.0.0.1 ads.ucomics.com #[RealMedia]
    127.0.0.1 ads.udc.advance.net
    127.0.0.1 ads.unison.ie
    127.0.0.1 ads.unlimitedbanners.com #[IE-SpyAd]
    127.0.0.1 ads.uproar.com
    127.0.0.1 ads.usatoday.com
    127.0.0.1 ads.userfriendly.org #[AdvertPro]
    127.0.0.1 ads.ussearch.com
    127.0.0.1 ads.v3.com
    127.0.0.1 ads.valuead.com #[IE-SpyAd][SpySweeper.Spy.Cookie]
    127.0.0.1 ads.velcom.com
    127.0.0.1 ads.vendaregroup.com #[Parasite.Enconfidence]
    127.0.0.1 ads.vg.basefarm.net #[RealMedia]
    127.0.0.1 ads.vitalix.net #[images.accessmedia.tv][Trojan.Muvipaz]
    127.0.0.1 ads.weather.com
    127.0.0.1 ads.web.aol.com
    127.0.0.1 ads.webads360.com #[IE-SpyAd]
    127.0.0.1 ads.webfever.kadserver.com
    127.0.0.1 ads.webhosting.info
    127.0.0.1 ads.webmastersdirect.com
    127.0.0.1 ads.webshots.com
    127.0.0.1 ads.website-guru.com #[AdvertPro]
    127.0.0.1 ads.websponsors.com
    127.0.0.1 ads.winsite.com
    127.0.0.1 ads.wunderground.com #[SecuritySpace.WebBug]
    127.0.0.1 ads.x10.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.xbiz.com
    127.0.0.1 ads.xtra.co.nz
    127.0.0.1 ads.yadio.com
    127.0.0.1 ads.yazzle.net
    127.0.0.1 ads.ynot.com
    127.0.0.1 ads.zdnet.com
    127.0.0.1 ads.zebest-3000.net.kadserver.com
    127.0.0.1 ads.zedo.com #[McAfee.Cookie-Zedo]
    127.0.0.1 ads.zone-media.com #[Troj/Swizzor-CN][TROJ_SWIZZOR.EJ]
    127.0.0.1 ads.z-quest.com
    127.0.0.1 ads0.revenue.net
    127.0.0.1 ads05.bpath.com
    127.0.0.1 ads06.bpath.com
    127.0.0.1 ads07.bpath.com #[SunBelt.BPath.com]
    127.0.0.1 ads08.bpath.com
    127.0.0.1 ads09.bpath.com
    127.0.0.1 ads1.advance.net #[RealMedia][eTrust.Tracking Cookie]
    127.0.0.1 ads1.ami-admin.com
    127.0.0.1 ads1.chitika.net
    127.0.0.1 ads1.itadnetwork.co.uk
    127.0.0.1 ads1.mediaops.com.br
    127.0.0.1 ads1.moneycontrol.com
    127.0.0.1 ads1.msn.com
    127.0.0.1 ads1.revenue.net #[SpySweeper.Spy.Cookie][Adware-Adlogix]
    127.0.0.1 ads1.searchmiracle.com #[Wildcard DNS]
    127.0.0.1 ads1.speedbit.com
    127.0.0.1 ads1.sptimes.com
    127.0.0.1 ads1.theglobeandmail.com
    127.0.0.1 ads1.tripod.com #[SunBelt.Tripod]
    127.0.0.1 ads1.tyroo.com
    127.0.0.1 ads1.udc.advance.net
    127.0.0.1 ads1.updated.com
    127.0.0.1 ads1.winhelp2002.net
    127.0.0.1 ads10.bpath.com
    127.0.0.1 ads10.speedbit.com
    127.0.0.1 ads10.udc.advance.net
    127.0.0.1 ads11.udc.advance.net
    127.0.0.1 ads12.bpath.com
    127.0.0.1 ads12.udc.advance.net
    127.0.0.1 ads13.bpath.com
    127.0.0.1 ads13.udc.advance.net
    127.0.0.1 ads14.bpath.com
    127.0.0.1 ads14.udc.advance.net
    127.0.0.1 ads15.bpath.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads15.udc.advance.net
    127.0.0.1 ads16.bpath.com
    127.0.0.1 ads16.udc.advance.net
    127.0.0.1 ads17.bpath.com
    127.0.0.1 ads18.bpath.com
    127.0.0.1 ads19.bpath.com
    127.0.0.1 ads2.adcorps.com
    127.0.0.1 ads2.ah-ha.com
    127.0.0.1 ads2.amateurmatch.com
    127.0.0.1 ads2.blastro.com
    127.0.0.1 ads2.drivelinemedia.com
    127.0.0.1 ads2.firingsquad.com
    127.0.0.1 ads2.jubii.dk #[ads-dk.spray.net]
    127.0.0.1 ads2.ljworld.com
    127.0.0.1 ads2.playnet.com
    127.0.0.1 ads2.revenue.net
    127.0.0.1 ads2.slickdeals.net
    127.0.0.1 ads2.speedbit.com
    127.0.0.1 ads2.udc.advance.net
    127.0.0.1 ads2.vortexmediagroup.com #[AdvertPro]
    127.0.0.1 ads20.bpath.com #[Tenebril.Tracking Cookie]
    127.0.0.1 ads-205.quarterserver.de
    127.0.0.1 ads21.bpath.com
    127.0.0.1 ads22.bpath.com
    127.0.0.1 ads23.bpath.com
    127.0.0.1 ads24.bpath.com
    127.0.0.1 ads25.bpath.com
    127.0.0.1 ads26.bpath.com
    127.0.0.1 ads27.bpath.com
    127.0.0.1 ads28.bpath.com
    127.0.0.1 ads2desk.com
    127.0.0.1 ads3.adultadworld.com
    127.0.0.1 ads3.alternate-url-ads.com
    127.0.0.1 ads3.blastro.com
    127.0.0.1 ads3.speedbit.com
    127.0.0.1 ads3.udc.advance.net
    127.0.0.1 ads3.virtumundo.com
    127.0.0.1 ads3.wunderground.com
    127.0.0.1 ads345.com
    127.0.0.1 ads4.blastro.com
    127.0.0.1 ads4.clearchannel.com
    127.0.0.1 ads4.revenue.net
    127.0.0.1 ads4.speedbit.com
    127.0.0.1 ads4.udc.advance.net
    127.0.0.1 ads4.virtumundo.com
    127.0.0.1 ads49.bpath.com
    127.0.0.1 ads5.canoe.ca
    127.0.0.1 ads5.peel.com
    127.0.0.1 ads5.speedbit.com
    127.0.0.1 ads5.tyroo.com
    127.0.0.1 ads5.udc.advance.net
    127.0.0.1 ads6.adultadworld.com
    127.0.0.1 ads6.speedbit.com
    127.0.0.1 ads6.udc.advance.net
    127.0.0.1 ads7.inet1.com
    127.0.0.1 ads7.speedbit.com
    127.0.0.1 ads7.udc.advance.net
    127.0.0.1 ads8.speedbit.com
    127.0.0.1 ads8.udc.advance.net
    127.0.0.1 ads9.speedbit.com
    127.0.0.1 ads9.udc.advance.net
    127.0.0.1 ads-aa.wunderground.com
    127.0.0.1 adsadmin.newsquest.co.uk #[RealMedia]
    127.0.0.1 adsadult.com
    127.0.0.1 adsatt.abcnews.starwave.com
    127.0.0.1 adsatt.disney.starwave.com
    127.0.0.1 adsatt.espn.go.com
    127.0.0.1 adsatt.espn.starwave.com
    127.0.0.1 adsby.uzoogle.com
    127.0.0.1 ad-sc.tiscali.com
    127.0.0.1 adscom.us
    127.0.0.1 ads-delivery1.newsquest.co.uk #[RealMedia]
    127.0.0.1 adsearch.adkontekst.pl
    127.0.0.1 adsearch.wp.pl
    127.0.0.1 adserv.680130.net
    127.0.0.1 adserv.aavalue.com
    127.0.0.1 adserv.adbonus.com #[IE-SpyAd]
    127.0.0.1 adserv.bravenet.com #[McAfee.Cookie-Bravenet]
    127.0.0.1 adserv.com #[AdWare.Win32.CommAd.a]
    127.0.0.1 adserv.internetfuel.com
    127.0.0.1 adserv.mywebtimes.com
    127.0.0.1 adserv.net
    127.0.0.1 adserv.pitchforkmedia.com
    127.0.0.1 adserv.quality-channel.de
    127.0.0.1 adserv.searchenhancement.com #[Parasite.Network Essentials]
    127.0.0.1 adserv.windowenhancer.com #[Adware.WindowEnhancer]
    127.0.0.1 adserv1.ebates.com #[WebSavings]
    127.0.0.1 adserv1.internetfuel.com
    127.0.0.1 adserv2.internetfuel.com #[Tenebril.Tracking Cookie]
    127.0.0.1 adserv2.meritdesigns.com
    127.0.0.1 adserv3.internetfuel.com
    127.0.0.1 adserv4.internetfuel.com
    127.0.0.1 adserv5.internetfuel.com #[eTrust.Tracking Cookie]
    127.0.0.1 adserv6.internetfuel.com
    127.0.0.1 adserve.adster.com
    127.0.0.1 adserve.advertising.com
    127.0.0.1 adserve.doteasy.com
    127.0.0.1 adserve.kikizo.com
    127.0.0.1 adserve.precisionpop.com
    127.0.0.1 adserver.4clicks.org
    127.0.0.1 adserver.a.in.monster.com
    127.0.0.1 adserver.adbunker.com
    127.0.0.1 adserver.adreactor.com #[Ad-Aware.Tracking Cookie]
    127.0.0.1 adserver.adremedy.com #[Ad-Aware.Tracking Cookie]
    127.0.0.1 adserver.ads360.com
    127.0.0.1 adserver.adtech.de #[ADTECH Group JavaScript TAG]
    127.0.0.1 adserver.adultfriendfinder.com
    127.0.0.1 adserver.affiliatemg.com
    127.0.0.1 adserver.aim4media.com #[SunBelt.Adserver.aim4media]
    127.0.0.1 adserver.akqa.net #[Ad-Aware Tracking Cookie]
    127.0.0.1 adserver.ancestry.com #[RealMedia]
    127.0.0.1 adserver.asiafriendfinder.com #[banners.friendfinder.com]
    127.0.0.1 adserver.banneradministration.com
    127.0.0.1 adserver.bizhat.com
    127.0.0.1 adserver.cams.com
    127.0.0.1 adserver.com
    127.0.0.1 adserver.digitalmedianet.com
    127.0.0.1 adserver.expatica.nxs.nl
    127.0.0.1 adserver.filefront.com #[Ad-Aware.Tracking Cookie]
    127.0.0.1 adserver.fmpub.net
    127.0.0.1 adserver.freenet.de
    127.0.0.1 adserver.****aroo.org
    127.0.0.1 adserver.gadu-gadu.pl
    127.0.0.1 adserver.geenstijl.nl
    127.0.0.1 adserver.hardwareanalysis.com
    127.0.0.1 adserver.hispanoclick.com
    127.0.0.1 adserver.hk.outblaze.com
    127.0.0.1 adserver.hostfinderguy.com
    127.0.0.1 adserver.itsfogo.com
    127.0.0.1 adserver.juicybucks.com
    127.0.0.1 adserver.libero.it
    127.0.0.1 adserver.matchcraft.com
    127.0.0.1 adserver.monster.com #[SunBelt.AdServer.Monster.com]
    127.0.0.1 adserver.monstersandcritics.com
    127.0.0.1 adserver.newdigitalgroup.com #[RealMedia]
    127.0.0.1 adserver.news.com.au #[SunBelt.AdServer.News.com]
    127.0.0.1 adserver.nydailynews.com #[RealMedia]
    127.0.0.1 adserver.o2.pl
    127.0.0.1 adserver.online-tech.com
    127.0.0.1 adserver.outpersonals.com #[banners.friendfinder.com]
    127.0.0.1 adserver.passion.com
    127.0.0.1 adserver.pollstar.com #[eTrust.Tracking Cookie]
    127.0.0.1 adserver.securityfocus.com #[RealMedia]
    127.0.0.1 adserver.seniorfriendfinder.com
    127.0.0.1 adserver.sextracker.com #[SunBelt.SexTracker.com]
    127.0.0.1 adserver.sharewareonline.com #[nictechnetworks.com]
    127.0.0.1 adserver.shizzlehost.com
    127.0.0.1 adserver.sitesense.com #[ad.yieldmanager.com]
    127.0.0.1 adserver.snowball.com
    127.0.0.1 adserver.softure.com
    127.0.0.1 adserver.softwareonline.com
    127.0.0.1 adserver.startnow.com
    127.0.0.1 adserver.teracent.net #[Ad-Aware.Tracking Cookie]
    127.0.0.1 adserver.themoneytimes.com
    127.0.0.1 adserver.track-star.com
    127.0.0.1 adserver.trafficsyndicate.com #[SunBelt.trafficsyndicate.com]
    127.0.0.1 adserver.us.outblaze.com
    127.0.0.1 adserver.virgin.net #[Ad-Aware Tracking Cookie]
    127.0.0.1 adserver.weakgame.com
    127.0.0.1 adserver.webads.it
    127.0.0.1 adserver.webads.nl
    127.0.0.1 adserver.webstat.com
    127.0.0.1 adserver04.ancestry.com #[RealMedia]
    127.0.0.1 adserver1.harvestadsdepot.com
    127.0.0.1 adserver1.isohunt.com
    127.0.0.1 adserver1.realtracker.com #[SunBelt.RealTracker.com]
    127.0.0.1 adserver1.teracent.net
    127.0.0.1 adserver2.goals365.com
    127.0.0.1 adserver2.realtracker.com
    127.0.0.1 adservice.recon-networks.com
    127.0.0.1 adservices.google.com
    127.0.0.1 adserving.autotrader.com #[SunBelt.AdServing.AutoTrader.com]
    127.0.0.1 adserving.budsinc.com #[ad.yieldmanager.com]
    127.0.0.1 adserving.cpxinteractive.com #[ad.yieldmanager.com]
    127.0.0.1 adsextend.net #[Win32/TrojanDownloader.PurityScan.BV][server down?]
    127.0.0.1 adsfac.net #[Facilitate Tracking Code][IE-SpyAd]
    127.0.0.1 ads-fr.spray.net #[SpySweeper.Spy.Cookie]
    127.0.0.1 adshooter.com #[IE-SpyAd][Wildcard DNS]
    127.0.0.1 adshttp.com
    127.0.0.1 adsignal.valuead.com
    127.0.0.1 adsintl.starwave.com
    127.0.0.1 adsl.carpediem.fr #[DIAL_FEMME.A]
    127.0.0.1 adsname.com
    127.0.0.1 adsnew.userfriendly.org
    127.0.0.1 ad-soft.net #[regfreeze.net][IE-SpyAd]
    127.0.0.1 adson.awempire.com
    127.0.0.1 adsonwww.com
    127.0.0.1 adsremote.scripps.com #[McAfee.Cookie-Scripps]
    127.0.0.1 ads-rm.looksmart.com #[ad.yieldmanager.com]
    127.0.0.1 adsrv.bankrate.com
    127.0.0.1 adsrv.dispatch.com #[oasc05a.247realmedia.com]
    127.0.0.1 adsrv.iol.co.za
    127.0.0.1 adsrve.com #[App/IEDriver-A][Adware-Verticity]
    127.0.0.1 adstats.adviva.net
    127.0.0.1 adstil.indiatimes.com #[RealMedia]
    127.0.0.1 adsuccess.surehits.com
    127.0.0.1 adsv2.delfinproject.com #[Softure AdServer]
    127.0.0.1 adsvr.adknowledge.com #[IE-SpyAd]
    127.0.0.1 adsweb.tiscali.cz
    127.0.0.1 adsweb.tiscali.it #[Accipiter]
    127.0.0.1 adsys.townnews.com
    127.0.0.1 adt.m7z.net #[a1827.x.akamai.net]
    127.0.0.1 adtactics.com #[IE-SpyAd]
    127.0.0.1 adtag.sympatico.ca
    127.0.0.1 adtech.de #[Ad-Aware.Tracking Cookie]
    127.0.0.1 adtegrity.com
    127.0.0.1 adtegrity.spinbox.net #[Ad-Aware.Tracking Cookie]
    127.0.0.1 adteractive.com
    127.0.0.1 adtology.com
    127.0.0.1 adtology2.com
    127.0.0.1 adtomi.com
    127.0.0.1 adtrack.cimedia.net
    127.0.0.1 adtracker.411web.com
    127.0.0.1 adtrak.net #[SunBelt.Adtrak.net]
    127.0.0.1 ad-uk.tiscali.com
    127.0.0.1 adult.adrevservice.com
    127.0.0.1 adult.find.fm #[eTrust.Softomate.FindFM]
    127.0.0.1 adult.master-tv.net
    127.0.0.1 adult.phoneaccess.com
    127.0.0.1 adult.slotch.com
    127.0.0.1 adult.targetsearch.info
    127.0.0.1 adult.yellow-pages.ws
    127.0.0.1 adultadworld.directtrack.com
    127.0.0.1 adult-banners.co.uk
    127.0.0.1 adultcatalog4u.com #[VideoCash]
    127.0.0.1 adultfreeware.net #[Parasite.AdultBox]
    127.0.0.1 adultfriendfinder.com #[McAfee.Cookie-Adultfriend]
    127.0.0.1 adultgambling.org #[ADW_MSNLIST.B]
    127.0.0.1 adultid.us #[Win32/Cavitate]
    127.0.0.1 adult-incest.com
    127.0.0.1 adultlinksco.com
    127.0.0.1 adultmac.com
    127.0.0.1 adultplayersclub.com
    127.0.0.1 adultplex.com
    127.0.0.1 adultrevenueservice.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 adultsgames.net #[ADW_MSNLIST.B]
    127.0.0.1 adultwebmastersonline.com #[MHTMLRedir.Exploit][traffnew.biz]
    127.0.0.1 ad-up.com
    127.0.0.1 adv.247realmedia.com #[McAfee.Cookie-247realmedia]
    127.0.0.1 adv.abv.bg
    127.0.0.1 adv.alice.it
    127.0.0.1 adv.bol.bg
    127.0.0.1 adv.casinopays.com #[IE-SpyAd]
    127.0.0.1 adv.netinfo.bg
    127.0.0.1 adv.profantasysports.com
    127.0.0.1 adv.sexcounter.com #[Ewido.TrackingCookie.Sexcounter]
    127.0.0.1 adv.surinter.net
    127.0.0.1 adv.webadvertising.ch
    127.0.0.1 adv.webmd.com
    127.0.0.1 adv0005.247realmedia.com
    127.0.0.1 adv0035.247realmedia.com
    127.0.0.1 advancedfixer.com
    127.0.0.1 advancedmn.us.intellitxt.com
    127.0.0.1 adv-banner.libero.it
    127.0.0.1 adv-ckbanner.libero.it
    127.0.0.1 advert.ananzi.co.za
    127.0.0.1 advert.exaccess.ru
    127.0.0.1 advert2.ananzi.co.za
    127.0.0.1 advertise.netster.com #[SiteAdvisor.netster.com]
    127.0.0.1 advertising.com
    127.0.0.1 advertising.gammae.com
    127.0.0.1 advertisingagent.com
    127.0.0.1 advertisingcom.122.2o7.net
    127.0.0.1 advertisingpurchase.com
    127.0.0.1 advertpro.sitepoint.com
    127.0.0.1 advertpro.webspawner.com
    127.0.0.1 adverts.digitalspy.co.uk
    127.0.0.1 adverts.f-1.com
    127.0.0.1 adverts.loadedinc.com
    127.0.0.1 adview.ppro.de
    127.0.0.1 adviva.com #[IE-SpyAd]
    127.0.0.1 advnt.com
    127.0.0.1 advnt01.com #[HJTH.7AdPower Dialer][DIAL_ADPOWER.B]
    127.0.0.1 advnt02.com
    127.0.0.1 advnt03.com #[HJTH.7AdPower Dialer]
    127.0.0.1 advnt04.com
    127.0.0.1 advnt05.com
    127.0.0.1 a-d-w-a-r-e.com #[Troj/Dloader-IG]
    127.0.0.1 ad-w-a-r-e.com #[Win32.Canbede][Troj/Dloader-IG]
    127.0.0.1 adware.privacy-solution.com
    127.0.0.1 adware.storesbiz.com
    127.0.0.1 adware-bazooka.com #[Win32/Adware.ADWareBazooka]
    127.0.0.1 adwarecops.com #[Rogue/Suspect]
    127.0.0.1 adwaredeluxe.com #[Rogue/Suspect]
    127.0.0.1 adwarepatrol.com #[Rogue/Suspect]
    127.0.0.1 adwarepro.com #[Rogue/Suspect]
    127.0.0.1 adware-punisher.com #[AntiVir.ADSPY/Punisher.A.1]
    127.0.0.1 adwareremover.ws
    127.0.0.1 adwaresafety.com
    127.0.0.1 adwaresheriff.com #[Symantec.AdwareSheriff]
    127.0.0.1 adwaresoft.com
    127.0.0.1 adwarexterminator.com #[AdWare.ToolBar.AlexaBar.A]
    127.0.0.1 adwatcher.mostvaluablenetwork.com
    127.0.0.1 adworks.rediff.com
    127.0.0.1 adx.adrenaline.cz
    127.0.0.1 adz.afterdawn.net
    127.0.0.1 adzone.stltoday.com
    127.0.0.1 adzones.ircspy.com
    127.0.0.1 aehistory.112.2o7.net
    127.0.0.1 aeoworld.de
    127.0.0.1 aetv.112.2o7.net
    127.0.0.1 aff.primaryads.com #[MVPS.Criteria]
    127.0.0.1 aguarddog.com
    127.0.0.1 ai.hitbox.com
    127.0.0.1 ai.p.findology.com
    127.0.0.1 allspyremover.com
    127.0.0.1 allspyremover.net
    127.0.0.1 antispyware.bulletproofsoft.com #[SiteAdvisor.bulletproofsoft.com]
    127.0.0.1 antispywarebox.com
    127.0.0.1 antispywaresoldier.com #[Rogue/Suspect]
    127.0.0.1 antivermins.com #[Rogue/Suspect]
    127.0.0.1 antivirusgolden.com
    127.0.0.1 anycracks.com #[Trojan.Favadd]
    127.0.0.1 aolcsmen.122.2o7.net
    127.0.0.1 aoldlama.122.2o7.net
    127.0.0.1 aolgam.122.2o7.net
    127.0.0.1 aolmov.122.2o7.net
    127.0.0.1 aolnssearch.122.2o7.net
    127.0.0.1 aolpolls.122.2o7.net
    127.0.0.1 aolsearch.122.2o7.net
    127.0.0.1 aolsports.122.2o7.net
    127.0.0.1 aolsvc.122.2o7.net
    127.0.0.1 aoltmz.122.2o7.net
    127.0.0.1 aolturnercnnmoney.122.2o7.net
    127.0.0.1 aolturnersi.122.2o7.net
    127.0.0.1 aoluk.122.2o7.net
    127.0.0.1 aolvideo.122.2o7.net
    127.0.0.1 aolwbautoblog.122.2o7.net
    127.0.0.1 aolwbcinema.122.2o7.net
    127.0.0.1 aolwbtvsq.122.2o7.net
    127.0.0.1 aolwinamp.122.2o7.net
    127.0.0.1 aolwpmq.122.2o7.net
    127.0.0.1 aolwpnscom.122.2o7.net
    127.0.0.1 aolwpnswhatsnew.112.2o7.net
    127.0.0.1 ap.net-blue.net
    127.0.0.1 apdigitalorg.112.2o7.net
    127.0.0.1 aphrodite.porntrack.com
    127.0.0.1 as.adwave.com #[Parasite.HuntBar][Panda.Adware/WinTools]
    127.0.0.1 as.casalemedia.com #[Ewido.TrackingCookie.Casalemedia]
    127.0.0.1 askmen.us.intellitxt.com
    127.0.0.1 askmen2.us.intellitxt.com
    127.0.0.1 b3d.com
    127.0.0.1 badurl.grandstreetinteractive.com
    127.0.0.1 badurl.ieplugin.com
    127.0.0.1 banner.0catch.com
    127.0.0.1 banner.1and1.co.uk
    127.0.0.1 banner.1und1.com
    127.0.0.1 banner.50megs.com
    127.0.0.1 banner.ad.nu
    127.0.0.1 banner.ambercoastcasino.com #[IE-SpyAd]
    127.0.0.1 banner.arttoday.com
    127.0.0.1 banner.beerchurchpoker.com
    127.0.0.1 banner.casinodelrio.com
    127.0.0.1 banner.casinotropez.com #[Adware.Casino]
    127.0.0.1 banner.cdpoker.com
    127.0.0.1 banner.clickfinders.com #[SunBelt.ClickFinders]
    127.0.0.1 banner.clubdicecasino.com
    127.0.0.1 banner.coza.com
    127.0.0.1 banner.cybertechdev.com
    127.0.0.1 banner.date.com #[Tenebril.Tracking Cookie]
    127.0.0.1 banner.dwalliance.com
    127.0.0.1 banner.easyspace.com #[IE-SpyAd]
    127.0.0.1 banner.europacasino.com
    127.0.0.1 banner.freeservers.com
    127.0.0.1 banner.giantvegas.com
    127.0.0.1 banner.goldenpalace.com #[Tenebril.Tracking Cookie]
    127.0.0.1 banner.greatpokerclub.org #[Adware.Casino]
    127.0.0.1 banner.kiev.ua
    127.0.0.1 banner.lbs.km.ru
    127.0.0.1 banner.missingkids.com
    127.0.0.1 banner.monacogoldcasino.com
    127.0.0.1 banner.nastycash.com
    127.0.0.1 banner.oddcast.com
    127.0.0.1 banner.passion.com
    127.0.0.1 banner.paypopup.com
    127.0.0.1 banner.relcom.ru
    127.0.0.1 banner.royaldice.com
    127.0.0.1 banner.search.bg
    127.0.0.1 banner.simpletraffic.com
    127.0.0.1 banner.titanpoker.com #[Adware.Casino]
    127.0.0.1 banner.tropezitalia.com #[Adware.Casino]
    127.0.0.1 banner.usacasino.com
    127.0.0.1 banner.vegasred.com #[Ewido.TrackingCookie.Vegasred]
    127.0.0.1 banner.webmersion.com
    127.0.0.1 banner1.axelsfun.com
    127.0.0.1 banner1.inet-traffic.com
    127.0.0.1 banner2.axelsfun.com #[IE-SpyAd]
    127.0.0.1 banner2.inet-traffic.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 banner3.axelsfun.com
    127.0.0.1 banner3.inet-traffic.com
    127.0.0.1 bannerads.standard.net
    127.0.0.1 bannerads.zwire.com
    127.0.0.1 bannerbg.com
  • Hobbsy
    edited April 2007
    127.0.0.1 bannerboxes.com #[BannerBoxes Ad Code]
    127.0.0.1 bannerco-op.com
    127.0.0.1 bannercpm.com
    127.0.0.1 bannerexchange.cjb.net
    127.0.0.1 bannerfarm.ace.advertising.com #[Tenebril.Tracking Cookie]
    127.0.0.1 bannerimages.0catch.com #[dist.belnk.com]
    127.0.0.1 bannermaster.geektech.com
    127.0.0.1 bannermoney.com.br
    127.0.0.1 banners.4d5.net
    127.0.0.1 banners.ads360.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 banners.adultfriendfinder.com
    127.0.0.1 banners.adzones.com
    127.0.0.1 banners.affiliatefuel.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 banners.aftrk.com
    127.0.0.1 banners.alt.com
    127.0.0.1 banners.amoestecuzinho.com
    127.0.0.1 banners.animeerotico.com
    127.0.0.1 banners.asiafriendfinder.com
    127.0.0.1 banners.babylon-x.com
    127.0.0.1 banners.bebadasousadas.com
    127.0.0.1 banners.blogads.com
    127.0.0.1 banners.broadwayworld.com
    127.0.0.1 banners.cams.com #[banners.adultfriendfinder.com]
    127.0.0.1 banners.copyscape.com
    127.0.0.1 banners.davestraffic.com
    127.0.0.1 banners.debuteamador.com
    127.0.0.1 banners.dir.bg
    127.0.0.1 banners.direction-x.com
    127.0.0.1 banners.directnic.com #[SecuritySpace.WebBug][MVPS.Criteria]
    127.0.0.1 banners.dot.tk
    127.0.0.1 banners.easydns.com
    127.0.0.1 banners.expressindia.com
    127.0.0.1 banners.freett.com
    127.0.0.1 banners.friendfinder.com
    127.0.0.1 banners.****ingdrunks.com
    127.0.0.1 banners.gayfriendfinder.com
    127.0.0.1 banners.geotarget.info
    127.0.0.1 banners.imperioanal.com
    127.0.0.1 banners.inetfast.com
    127.0.0.1 banners.kanoodle.com
    127.0.0.1 banners.largecash.com
    127.0.0.1 banners.leadingedgecash.com
    127.0.0.1 banners.linkbuddies.com
    127.0.0.1 banners.mobilesidewalk.com
    127.0.0.1 banners.mulherescomcigarros.com
    127.0.0.1 banners.netcraft.com
    127.0.0.1 banners.nocreditcard.com
    127.0.0.1 banners.nocreditcardgay.com
    127.0.0.1 banners.orbitcycle.com
    127.0.0.1 banners.orgiasreales.com
    127.0.0.1 banners.outpersonals.com
    127.0.0.1 banners.outster.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 banners.paixaoasiatica.com
    127.0.0.1 banners.paixaogay.com
    127.0.0.1 banners.passeilimitado.com
    127.0.0.1 banners.passion.com
    127.0.0.1 banners.passwordbyphone.com
    127.0.0.1 banners.pcsecurityshield.com
    127.0.0.1 banners.pennyweb.com #[IE-SpyAd]
    127.0.0.1 banners.pollasde30cm.com
    127.0.0.1 banners.prazerlesbico.com
    127.0.0.1 banners.pythonvideo.com
    127.0.0.1 banners.resultonline.com
    127.0.0.1 banners.sandralatina.com
    127.0.0.1 banners.searchingbooth.com #[Ewido.TrackingCookie.Searchingbooth]
    127.0.0.1 banners.seniorfriendfinder.com
    127.0.0.1 banners.sexsearch.com
    127.0.0.1 banners.sextracker.com
    127.0.0.1 banners.showdeinfieis.com
    127.0.0.1 banners.simpletraffic.com
    127.0.0.1 banners.sotransexuais.com
    127.0.0.1 banners.spacash.com
    127.0.0.1 banners.sponsoradulto.com
    127.0.0.1 banners.spylog.com
    127.0.0.1 banners.sublimedirectory.com
    127.0.0.1 banners.sys-con.com
    127.0.0.1 banners.taxindecente.com
    127.0.0.1 banners.teenfunzone.com
    127.0.0.1 banners.toteme.com
    127.0.0.1 banners.truecash.com
    127.0.0.1 banners.tucson.com #[RealMedia]
    127.0.0.1 banners.valuead.com #[ADW_VALUEAD.M][eTrust.Tracking Cookie]
    127.0.0.1 banners.vipprofits.com
    127.0.0.1 banners.vivilatina.com
    127.0.0.1 banners.vizit.us
    127.0.0.1 banners.webmasterplan.com #[SecuritySpace.WebBug]
    127.0.0.1 banners.weboverdrive.com
    127.0.0.1 banners.weselltraffic.com
    127.0.0.1 banners.zbs.ru
    127.0.0.1 banners2.pythonvideo.com
    127.0.0.1 banners2.spacash.com
    127.0.0.1 banners2.sponsoradulto.com
    127.0.0.1 banners3.spacash.com
    127.0.0.1 banners3.webclients.net
    127.0.0.1 bannersandpopups.com #[TROJ_DLOADER.ACJ][Troj/Winsysba-C]
    127.0.0.1 bannerserver.balance.gator.com
    127.0.0.1 bannersgomlm.buildreferrals.com
    127.0.0.1 bannersgomlm.com
    127.0.0.1 bannerswap.com #[IE-SpyAd]
    127.0.0.1 bannersxchange.com
    127.0.0.1 bannerus1.axelsfun.com #[Wildcard DNS]
    127.0.0.1 bannerus2.axelsfun.com
    127.0.0.1 bannerus3.axelsfun.com
    127.0.0.1 bannervip.web1000.com #[IE-SpyAd]
    127.0.0.1 bannerx.adtactics.com
    127.0.0.1 bannerx.seeq.com
    127.0.0.1 bans.bride.ru #[IE-SpyAd]
    127.0.0.1 banserv.internetfuel.com
    127.0.0.1 banserver.internetfuel.com
    127.0.0.1 bantam.ai.net #[IE-SpyAd]
    127.0.0.1 bar.baidu.com #[SPYW_BDPLUGIN.A][Sophos.JS/BDHelper-A]
    127.0.0.1 bar.freelogs.com
    127.0.0.1 bar.iebar8.com #[Adware.Navihelper]
    127.0.0.1 bar.mytotalsearch.com
    127.0.0.1 bar.mywebsearch.com #[ADW_MYWEB.A][eTrust.MyWebSearch Toolbar]
    127.0.0.1 bar.sxload.com #[MHTMLRedir.Exploit]
    127.0.0.1 c.abnad.net #[IE-SpyAd]
    127.0.0.1 c.adverpages.com
    127.0.0.1 c.as-eu.falkag.net
    127.0.0.1 c.as-us.falkag.net #[Tenebril.Tracking Cookie]
    127.0.0.1 cache.blogads.com
    127.0.0.1 cache.directorym.com #[c2.mii.instacontent.net]
    127.0.0.1 cache.grouplotto.com
    127.0.0.1 cache.revenuedirect.com #[Parking Service]
    127.0.0.1 cache.screensavers.com
    127.0.0.1 cache.sidefind.com #[McAfee.Adware-ISTbar.dldr]
    127.0.0.1 cache.tbcode.com
    127.0.0.1 cache.trafficmp.com #[SpySweeper.Spy.Cookie][p.mii.instacontent.net]
    127.0.0.1 cache.winhundred.com
    127.0.0.1 cache.ysbweb.com #[TROJ_ISTBAR.FN]
    127.0.0.1 cachebanner.europacasino.com #[p.mii.instacontent.net]
    127.0.0.1 cachebanner.titanpoker.com #[p.mii.instacontent.net]
    127.0.0.1 cachebanner.vegasred.com #[p.mii.instacontent.net]
    127.0.0.1 cachebanners.toteme.com
    127.0.0.1 cached.licenseacquisition.org #[a1409.g.akamai.net]
    127.0.0.1 cachef.screensavers.com #[p.mii.instacontent.net]
    127.0.0.1 cachetry.starware.com #[p.mii.instacontent.net]
    127.0.0.1 cachewww.europacasino.com #[p.mii.instacontent.net]
    127.0.0.1 callmachine.com
    127.0.0.1 callmachine.net #[SiteAdvisor.callmachine.net]
    127.0.0.1 cameron.sexybabesx.com
    127.0.0.1 cdn1.pro-advertising.com
    127.0.0.1 cnet.us.intellitxt.com
    127.0.0.1 cnetaustralia.122.2o7.net
    127.0.0.1 cneteurope.122.2O7.net
    127.0.0.1 cnetnews.112.2o7.net
    127.0.0.1 cnettech.112.2O7.net
    127.0.0.1 cnetzdnet.112.2o7.net
    127.0.0.1 cnheagletribune.112.2o7.net
    127.0.0.1 cnn.122.2O7.net
    127.0.0.1 cnnglobal.122.2O7.net
    127.0.0.1 cnsmin.3721.com
    127.0.0.1 content.91s.com #[content.yieldmanager.com]
    127.0.0.1 content.adconsole.com #[eXact Advertising]
    127.0.0.1 content.ad-flow.com #[content.yieldmanager.com]
    127.0.0.1 content.adintensity.com #[content.yieldmanager.com]
    127.0.0.1 content.adprofile.net
    127.0.0.1 content.adtegrity.net #[content.yieldmanager.com]
    127.0.0.1 content.aimedia.com #[content.yieldmanager.com]
    127.0.0.1 content.attune.com #[content.yieldmanager.com]
    127.0.0.1 content.audible.fm #[content.yieldmanager.com]
    127.0.0.1 content.axill.com #[content.yieldmanager.com]
    127.0.0.1 content.balance.gator.com
    127.0.0.1 content.bannerconnect.net #[content.yieldmanager.com]
    127.0.0.1 content.bigad.com #[content.yieldmanager.com]
    127.0.0.1 content.budsinc.com
    127.0.0.1 content.cometsystems.com
    127.0.0.1 content.cpxinteractive.com #[content.yieldmanager.com]
    127.0.0.1 content.dashbar.com
    127.0.0.1 content.delfinproject.com #[Adware-IEDriver]
    127.0.0.1 content.directanetworks.com #[content.yieldmanager.com]
    127.0.0.1 content.dl-rms.com
    127.0.0.1 content.dollarrevenue.com #[TROJ_DLOADER.AEO]
    127.0.0.1 content.exetraffic.com
    127.0.0.1 content.firstadsolution.com #[content.yieldmanager.com]
    127.0.0.1 content.globalinteractive.com #[content.yieldmanager.com]
    127.0.0.1 content.iconadserver.com
    127.0.0.1 content.infinite-ads.com #[content.yieldmanager.com]
    127.0.0.1 content.ipro.com #[Web bug]
    127.0.0.1 content.ireit.com #[content.yieldmanager.com]
    127.0.0.1 content.isearch.com #[c2.mii.instacontent.net]
    127.0.0.1 content.jdial.biz #[Trojan.Nebuler][Win32/Dialer.PornDial.F]
    127.0.0.1 content.joinaxxess.com #[content.yieldmanager.com]
    127.0.0.1 content.licenseacquisition.org #[Troj/QLowZon-EV]
    127.0.0.1 content.marketingsector.com #[content.yieldmanager.com]
    127.0.0.1 content.medialand.ru
    127.0.0.1 content.mediaprecision.net #[ClickSpring]
    127.0.0.1 content.media-servers.net #[content.yieldmanager.com]
    127.0.0.1 content.netvenda.com
    127.0.0.1 content.realcastmedia.com #[content.yieldmanager.com]
    127.0.0.1 content.reduxmedia.com #[content.yieldmanager.com]
    127.0.0.1 content.rmxads.com #[content.yieldmanager.com]
    127.0.0.1 content.searchscout.com
    127.0.0.1 content.valencemedia.com #[content.yieldmanager.com]
    127.0.0.1 content.yieldmanager.com #[Panda.Spyware:Cookie/YieldManager]
    127.0.0.1 content.yieldx.com #[content.yieldmanager.com]
    127.0.0.1 content2.netvenda.com
    127.0.0.1 content-loader.com
    127.0.0.1 contents.sex-explorer.com
    127.0.0.1 contest.x10.com
    127.0.0.1 context.adontext.com
    127.0.0.1 context.precisionpop.com
    127.0.0.1 context1.kanoodle.com
    127.0.0.1 context2.adontext.com
    127.0.0.1 context2.kanoodle.com
    127.0.0.1 context3.kanoodle.com
    127.0.0.1 context4.kanoodle.com
    127.0.0.1 context5.kanoodle.com
    127.0.0.1 contextualtoolbar.com #[Win32/Adware.SideSearch]
    127.0.0.1 contexualsearch.com
    127.0.0.1 control.x10.com #[SunBelt.X10.com]
    127.0.0.1 count.2ch.net
    127.0.0.1 count.3721.yahoo.com
    127.0.0.1 count.blogscout.de
    127.0.0.1 count.cc #[TROJ_STRTPAG.AC][TROJ_STARTPAG.AG]
    127.0.0.1 count.exitexchange.com #[McAfee.Cookie-Exitexchange]
    127.0.0.1 count.freett.com
    127.0.0.1 count.hitscount.net
    127.0.0.1 count.passul.t-online.de
    127.0.0.1 count.paycounter.com #[IE-SpyAd]
    127.0.0.1 count.rbc.ru
    127.0.0.1 count.revenue.net #[popupsponsor.com]
    127.0.0.1 count.webtrackingservices.com
    127.0.0.1 count.xhit.com #[Ad-Aware.Tracking Cookie]
    127.0.0.1 count24.51yes.com
    127.0.0.1 count8.51yes.com
    127.0.0.1 counted.com #[IE-SpyAd]
    127.0.0.1 counter.24log.com
    127.0.0.1 counter.adultcheck.com
    127.0.0.1 counter.adultrevenueservice.com #[Wildcard DNS]
    127.0.0.1 counter.aport.ru
    127.0.0.1 counter.bizland.com
    127.0.0.1 counter.blogexplosion.com
    127.0.0.1 counter.cnw.cz
    127.0.0.1 counter.credo.ru
    127.0.0.1 counter.digits.com #[IE-SpyAd]
    127.0.0.1 counter.fateback.com
    127.0.0.1 counter.hitbox.com
    127.0.0.1 counter.hitslink.com #[Ad-Aware.Tracking Cookie]
    127.0.0.1 counter.jasmin.hu
    127.0.0.1 counter.kmindex.ru
    127.0.0.1 counter.lgg.ru
    127.0.0.1 counter.lyricsdownload.com
    127.0.0.1 counter.mtree.com
    127.0.0.1 counter.netmore.net
    127.0.0.1 counter.nope.dk
    127.0.0.1 counter.ok.ee
    127.0.0.1 counter.plugin.ws
    127.0.0.1 counter.rambler.ru #[SunBelt.Rambler.ru]
    127.0.0.1 counter.rapidcounter.com
    127.0.0.1 counter.relmaxtop.com
    127.0.0.1 counter.search.bg #[IE-SpyAd]
    127.0.0.1 counter.sparklit.com
    127.0.0.1 counter.surfcounters.com
    127.0.0.1 counter.w3open.com
    127.0.0.1 counter.xxxcool.com
    127.0.0.1 counter.yadro.ru #[McAfee.Cookie-Yadro][Panda.Spyware:Cookie/Yadro]
    127.0.0.1 counter.zone.ee
    127.0.0.1 counter1.bravenet.com
    127.0.0.1 counter1.sextracker.com
    127.0.0.1 counter10.bravenet.com
    127.0.0.1 counter10.sextracker.com
    127.0.0.1 counter11.bravenet.com
    127.0.0.1 counter11.sextracker.com
    127.0.0.1 counter12.bravenet.com
    127.0.0.1 counter12.sextracker.com
    127.0.0.1 counter13.bravenet.com
    127.0.0.1 counter13.sextracker.com
    127.0.0.1 counter14.bravenet.com
    127.0.0.1 counter14.sextracker.com
    127.0.0.1 counter15.bravenet.com
    127.0.0.1 counter15.sextracker.com
    127.0.0.1 counter16.bravenet.com
    127.0.0.1 counter16.sextracker.com
    127.0.0.1 counter17.bravenet.com
    127.0.0.1 counter18.bravenet.com
    127.0.0.1 counter19.bravenet.com
    127.0.0.1 counter2.bravenet.com
    127.0.0.1 counter2.hitslink.com #[Ewido.TrackingCookie.Hitslink]
    127.0.0.1 counter2.sextracker.com
    127.0.0.1 counter20.bravenet.com
    127.0.0.1 counter21.bravenet.com
    127.0.0.1 counter22.bravenet.com
    127.0.0.1 counter23.bravenet.com
    127.0.0.1 counter24.bravenet.com
    127.0.0.1 counter25.bravenet.com
    127.0.0.1 counter26.bravenet.com
    127.0.0.1 counter27.bravenet.com
    127.0.0.1 counter28.bravenet.com
    127.0.0.1 counter29.bravenet.com
    127.0.0.1 counter3.bravenet.com
    127.0.0.1 counter3.sextracker.com #[Ad-Aware.Tracking Cookie]
    127.0.0.1 counter30.bravenet.com
    127.0.0.1 counter31.bravenet.com
    127.0.0.1 counter32.bravenet.com
    127.0.0.1 counter33.bravenet.com
    127.0.0.1 counter34.bravenet.com
    127.0.0.1 counter35.bravenet.com
    127.0.0.1 counter36.bravenet.com
    127.0.0.1 counter37.bravenet.com
    127.0.0.1 counter38.bravenet.com
    127.0.0.1 counter39.bravenet.com
    127.0.0.1 counter4.bravenet.com
    127.0.0.1 counter4.sextracker.com
    127.0.0.1 counter40.bravenet.com
    127.0.0.1 counter41.bravenet.com
    127.0.0.1 counter42.bravenet.com
    127.0.0.1 counter43.bravenet.com
    127.0.0.1 counter44.bravenet.com
    127.0.0.1 counter45.bravenet.com
    127.0.0.1 counter46.bravenet.com
    127.0.0.1 counter47.bravenet.com
    127.0.0.1 counter48.bravenet.com
    127.0.0.1 counter49.bravenet.com
    127.0.0.1 counter4all.dk
    127.0.0.1 counter4u.de #[IE-SpyAd]
    127.0.0.1 counter5.bravenet.com
    127.0.0.1 counter5.sextracker.com
    127.0.0.1 counter50.bravenet.com
    127.0.0.1 counter6.bravenet.com
    127.0.0.1 counter6.sextracker.com
    127.0.0.1 counter7.bravenet.com
    127.0.0.1 counter7.sextracker.com
    127.0.0.1 counter8.bravenet.com
    127.0.0.1 counter8.sextracker.com
    127.0.0.1 counter9.bravenet.com
    127.0.0.1 counter9.sextracker.com
    127.0.0.1 counterimg1.adultrevenueservice.com
    127.0.0.1 counters.freewebs.com
    127.0.0.1 counters.honesty.com
    127.0.0.1 counters.vendio.com
    127.0.0.1 counting.kmindex.ru
    127.0.0.1 countryweekly.us.intellitxt.com
    127.0.0.1 counts.tucows.com
    127.0.0.1 countus.get.kadserver.com
    127.0.0.1 couplesexxx.com #[Win32/Delf.NBH]
    127.0.0.1 coupons.gator.com
    127.0.0.1 cover9.adultfriendfinder.com
    127.0.0.1 crack.polivar.net
    127.0.0.1 crack.x-park.net
    127.0.0.1 crackdb.com #[Trojan.Clicker.Small.IS]
    127.0.0.1 cracks.am #[eTrust.Cracks.am][ADW_CRAMTB.A]
    127.0.0.1 cracks.spb.ru #[Win32/TrojanDownloader.Adload.DS]
    127.0.0.1 cracks4u.com #[Win32/TrojanDownloader.Adload.DS]
    127.0.0.1 crackspider.net #[Trojan.Favadd]
    127.0.0.1 cracksplanet.com #[Trojan.Clicker.Small.IS]
    127.0.0.1 crackway.com
    127.0.0.1 crackz.ws #[W32/PFV-Exploit.A]
    127.0.0.1 crashtest.cjb.net #[IE-SpyAd]
    127.0.0.1 creative.adsrevenue.net
    127.0.0.1 creative.gator.com #[webstage-1.gator.com]
    127.0.0.1 creative.paypopup.com
    127.0.0.1 creativeby1.unicast.com #[viewpointn.vo.llnwd.net]
    127.0.0.1 creatives.ads360.com
    127.0.0.1 creatives.doubleclick.net
    127.0.0.1 creativos.ads.uigc.net
    127.0.0.1 creview.adbureau.net
    127.0.0.1 crmbuyer.us.intellitxt.com
    127.0.0.1 crsky2004.yeah.net #[Backdoor.Singu.B]
    127.0.0.1 dl1.debelizombi.com
    127.0.0.1 dl1.ezthemes.com #[Trojan-Downloader.Win32.Small.bke]
    127.0.0.1 dl1.virusbursters.com
    127.0.0.1 dl10.spyfalcon.com #[spyfalconsupport.com]
    127.0.0.1 dl2.malwarewipe.com #[Symantec.MalwareWipe]
    127.0.0.1 dl2.spyfalcon.com #[malwarewipesupport.com]
    127.0.0.1 dl2.themexp.org
    127.0.0.1 dl2.virusbursters.com
    127.0.0.1 dl3.malwarewipe.com
    127.0.0.1 dl3.spyfalcon.com
    127.0.0.1 dl3.virusburst.com
    127.0.0.1 dl3.virusbursters.com
    127.0.0.1 dl4.malwarewipe.com
    127.0.0.1 dl4.spyfalcon.com
    127.0.0.1 dl5.malwarewipe.com
    127.0.0.1 dl5.spyfalcon.com
    127.0.0.1 dl7.virusburst.com
    127.0.0.1 dl7.virusbursters.com
    127.0.0.1 dl8.virusburst.com
    127.0.0.1 dl8.virusbursters.com
    127.0.0.1 dl9.malwarewipe.com
    127.0.0.1 dl9.spyfalcon.com
    127.0.0.1 dl9.virusburst.com
    127.0.0.1 dl9.virusbursters.com
    127.0.0.1 doctoradware.com #[Rogue/Suspect]
    127.0.0.1 doctoradwarepro.com #[Rogue/Suspect][Symantec.DoctorAdwarePro]
    127.0.0.1 dollarrevenue.com #[SpySweeper.Adware.dollarrevenue]
    127.0.0.1 dollarrevenue.net #[Parked?]
    127.0.0.1 dollavs.powered-by.zango.com
    127.0.0.1 domain.siteparker.com
    127.0.0.1 domainimages.targetwords.com
    127.0.0.1 domainimages2.targetwords.com
    127.0.0.1 domainlanding.targetwords.com
    127.0.0.1 domains.shizzlehost.com
    127.0.0.1 domainsponsor.com #[Ad-Aware.Tracking Cookie][WIPO.D2006-0523]
    127.0.0.1 domainsponsor.oversee.net
    127.0.0.1 domainsspa.com #[WIPO.D2006-0523]
    127.0.0.1 donmer.112.2o7.net
    127.0.0.1 donne-ciccione.com
    127.0.0.1 dotnet.endai.com
    127.0.0.1 dotstermydomain.112.2O7.net
    127.0.0.1 doubleclick.com
    127.0.0.1 doubleclick.ne.jp
    127.0.0.1 doubleclick.net #[McAfee.Cookie-Doubleclick]
    127.0.0.1 doubleclick.shockwave.com
    127.0.0.1 doubleyourdating.directtrack.com
    127.0.0.1 dowjones.122.2o7.net
    127.0.0.1 down.136136.net #[Trojan.Dowiex][server down?]
    127.0.0.1 downldcl.adtoolsinc.com
    127.0.0.1 download.007guard.com #[007installer Control]
    127.0.0.1 download.35mb.com #[impregnable.net]
    127.0.0.1 download.3721.com #[McAfee.Adware-BDSearch]
    127.0.0.1 download.abetterinternet.com #[Adware.StopPopupAdsNow]
    127.0.0.1 download.accessmedia.tv
    127.0.0.1 download.alexa.com #[Trackware.Alexa][SPYW_ALEXA.A]
    127.0.0.1 download.alfacleaner.com #[Trojan.Alemod.B][Downloader.Harnig]
    127.0.0.1 download.baigoo.com #[AdWare.Win32.Baigoo.a][Trackware.Baigoo]
    127.0.0.1 download.bargain-buddy.net #[Adware.IEHost][TROJ_DLOADER.MG]
    127.0.0.1 download.bestoffersnetworks.com #[SiteAdvisor.bestoffersnetworks.com]
    127.0.0.1 download.bigwebportal.com #[IE-SpyAd]
    127.0.0.1 download.bonzi.com
    127.0.0.1 download.bravesentry.com #[McAfee.BraveSentry]
    127.0.0.1 download.browseraccelerator.com
    127.0.0.1 download.bulletproofsoft.com
    127.0.0.1 download.bullseye-network.com
    127.0.0.1 download.cdn.winsoftware.com #[setuphost.vo.llnwd.net][Win32/Adware.WinFixer]
    127.0.0.1 download.centralserver.net #[McAfee.Adware-BkdSpace]
    127.0.0.1 download.china.alibaba.com #[Adware.AlibabaTB][AdWare.ToolBar.Alibabar.b]
    127.0.0.1 download.crawler.com #[AdWare.Win32.Crawler.b]
    127.0.0.1 download.digitalnames.net
    127.0.0.1 download.drwebupd.com #[Win32/TrojanProxy.Daemonize]
    127.0.0.1 download.energy-factor.com #[HJTH.Trojan.Downloader.Small]
    127.0.0.1 download.errorsafe.com #[Prevx.Rogue.ErrorSafe]
    127.0.0.1 download.fordaleltd.com #[HJTH.DownloadWare]
    127.0.0.1 download.freeze.com
    127.0.0.1 download.funutilities.com #[IE-SpyAd]
    127.0.0.1 download.funwebproducts.com #[AdWare.Win32.FunWeb.e]
    127.0.0.1 download.gainpublishing.com #[SiteAdvisor.precision-time.com]
    127.0.0.1 download.getmirar.com #[Adware.Mirar]
    127.0.0.1 download.gigatechsoftware.com
    127.0.0.1 download.happytofind.com
    127.0.0.1 download.internetfuel.com
    127.0.0.1 download.internetwasher.com
    127.0.0.1 download.kazaa.com
    127.0.0.1 download.lavasoftupdate.com #[Win32/TrojanProxy.Daemonize]
    127.0.0.1 download.mediacharger.com
    127.0.0.1 download.moonri.com
    127.0.0.1 download.movieland.com
    127.0.0.1 download.mp3u.com
    127.0.0.1 download.mywebsearch.com #[ADW_WEBSEARCH.K]
    127.0.0.1 download.opistat.com
    127.0.0.1 download.outpostsupport.com #[Win32/TrojanProxy.Daemonize]
    127.0.0.1 download.popcorn.net
    127.0.0.1 download.psguard.com #[Trojan.Alemod]
    127.0.0.1 download.redswoosh.com #[rsinstaller.cab]
    127.0.0.1 download.redswoosh.net #[InstallCtl Class][Panda.Adware.Redswoosh]
    127.0.0.1 download.regfreeze.net
    127.0.0.1 download.scanandrepair.com #[Symantec.ScanandRepair]
    127.0.0.1 download.secondpower.com #[SunBelt.SecondPower.com]
    127.0.0.1 download.sidestep.com #[ADW_SIDESTEP.A]
    127.0.0.1 download.slemshield.com
    127.0.0.1 download.spyaxe.com
    127.0.0.1 download.spyonthis.net
    127.0.0.1 download.spyspotter.com #[a1487.g.akamai.net]
    127.0.0.1 download.spywarelabs.com #[ADW_ADDESTROY.A]
    127.0.0.1 download.spywarequake.com
    127.0.0.1 download.spyware-wiper.com
    127.0.0.1 download.sysprotect.com
    127.0.0.1 download.systemdoctor.com #[Win32/Adware.WinFixer]
    127.0.0.1 download.targetnetworks.net
    127.0.0.1 download.ucmore.com #[Adware.UCMore]
    127.0.0.1 download.vladzone.com #[TROJ_SMALL.LY][win32/TrojanClicker.Agent.BF]
    127.0.0.1 download.webhancer.com
    127.0.0.1 download.websearch.com #[SPYW_WEBSEARCH.A][Downloader-TH]
    127.0.0.1 download.whenu.com
    127.0.0.1 download.winantispyware.com
    127.0.0.1 download.wincontentfilter.com
    127.0.0.1 download.windrivecleaner.com
    127.0.0.1 download.winfixer.com #[Symantec.WinFixer]
    127.0.0.1 download.wrkd1s2tr.biz #[Win32/TrojanProxy.Daemonize]
    127.0.0.1 download.zapspot.com #[SiteAdvisor.zapspot]
    127.0.0.1 download.zhongsou.com #[Adware.SearchNet]
    127.0.0.1 download02.pcsafe.com
    127.0.0.1 download1.pacificpoker.com
    127.0.0.1 download10.virusburst.com
    127.0.0.1 download10.virusbursters.com
    127.0.0.1 download11.virusburst.com
    127.0.0.1 download11.virusbursters.com
    127.0.0.1 download12.virusburst.com
    127.0.0.1 download12.virusbursters.com
    127.0.0.1 download13.virusburst.com
    127.0.0.1 download13.virusbursters.com
    127.0.0.1 download15.virusburst.com
    127.0.0.1 download15.virusbursters.com
    127.0.0.1 download16.virusburst.com
    127.0.0.1 download16.virusbursters.com
    127.0.0.1 download2.freeze.com
    127.0.0.1 download2.marketengines.com
    127.0.0.1 download2.spyaxe.net #[malwarewipesupport.com]
    127.0.0.1 download2.us4.outblaze.com #[HJTH.Bargain Buddy]
    127.0.0.1 download2.virusburst.com
    127.0.0.1 download2.virusbursters.com
    127.0.0.1 download3.payoutpal.com #[TROJ_ZEROLIN.A]
    127.0.0.1 download3.spyaxe.net
    127.0.0.1 download3.virusburst.com
    127.0.0.1 download3.virusbursters.com
    127.0.0.1 download4.payoutpal.com #[Adware.Cax][CAX Object]
    127.0.0.1 download4.spyaxe.net
    127.0.0.1 download4.virusburst.com
    127.0.0.1 download4.virusbursters.com
    127.0.0.1 download5.spyaxe.net
    127.0.0.1 download5.virusburst.com
    127.0.0.1 download5.virusbursters.com
    127.0.0.1 download6.spyaxe.net #[malwarewipeupdate.com]
    127.0.0.1 download7.spyaxe.net
    127.0.0.1 download7.virusburst.com
    127.0.0.1 download7.virusbursters.com
    127.0.0.1 download8.spyaxe.net
    127.0.0.1 download8.virusburst.com
    127.0.0.1 download8.virusbursters.com
    127.0.0.1 download9.virusburst.com
    127.0.0.1 download9.virusbursters.com
    127.0.0.1 downloadalot.com #[Tenebril.Tracking Cookie]
    127.0.0.1 downloadrevenue.com
  • Hobbsy
    edited April 2007
    127.0.0.1 downloads.180solutions.com #[McAfee.Adware-ZangoSA.dldr]
    127.0.0.1 downloads.pcsecurityshield.com
    127.0.0.1 downloads.searchcentrix.com #[SomaticCAB.Setup]
    127.0.0.1 downloads.seekmo.com
    127.0.0.1 downloads.shopathomeselect.com #[SpySweeper.Adware.shopathomeselect]
    127.0.0.1 downloads.zango.com #[SunBelt.180Solutions.Zango.TVTimes]
    127.0.0.1 downloadware.net
    127.0.0.1 e.abnad.net
    127.0.0.1 e.as-eu.falkag.net #[Ewido.TrackingCookie.Falkag]
    127.0.0.1 e.as-us.falkag.net #[a1339.g.akamai.net]
    127.0.0.1 e.cpa4.org #[W32/PFV-Exploit.A]
    127.0.0.1 e.nvero.net
    127.0.0.1 e.spamextract.com #[img.rn11.com.edgesuite.net]
    127.0.0.1 e.spyspotter.com
    127.0.0.1 earth.goclick.com
    127.0.0.1 earthlinkcom.122.2o7.net
    127.0.0.1 earthlnkcom.122.2o7.net
    127.0.0.1 earthlnkpsplive.122.2o7.net
    127.0.0.1 farm.thinktarget.com
    127.0.0.1 fast.mediacharger.com #[MediaCharger\MoviePlace]
    127.0.0.1 fastclick.com
    127.0.0.1 fastclick.com.edgesuite.net #[a1795.g.akamai.net]
    127.0.0.1 fastcounter.bcentral.com #[SecuritySpace.WebBug]
    127.0.0.1 fastcounter.linkexchange.com #[SecuritySpace.WebBug]
    127.0.0.1 fastutilities.com
    127.0.0.1 fastwebcounter.com
    127.0.0.1 fast-web-search.com #[IE-SpyAd]
    127.0.0.1 flashaddictinggames.powered-by.zango.com
    127.0.0.1 flashmagazine.us.intellitxt.com
    127.0.0.1 flashtrack.net #[IE-SpyAd]
    127.0.0.1 flat.trafficadvance.net #[Dialer.Trafficadvance]
    127.0.0.1 flat.trafficredlight.net
    127.0.0.1 free.888.com #[Panda.Spyware:Cookie/888]
    127.0.0.1 free.aol.com
    127.0.0.1 free.great-porn.net
    127.0.0.1 free.hcworld.com
    127.0.0.1 free.karaoke.songs.powered-by.zango.com
    127.0.0.1 free.pacificpoker.com
    127.0.0.1 free.realtracker.com
    127.0.0.1 free.realtrackernl.com
    127.0.0.1 free.wegcash.com #[SunBelt.WegCash.com]
    127.0.0.1 free.xxxcounter.com
    127.0.0.1 free1.realtrackernl.com
    127.0.0.1 free1.usa.realtracker.com
    127.0.0.1 free2xsite.com
    127.0.0.1 freeaccessbar.com #[Adware.FreeAccessBar]
    127.0.0.1 freeassvids.com
    127.0.0.1 freeblonde.net
    127.0.0.1 freecodecs.us.intellitxt.com
    127.0.0.1 free-counter.5u.com
    127.0.0.1 freecounter.unms.com
    127.0.0.1 freecounters.xp.tl
    127.0.0.1 freedownloadcenter.uk.intellitxt.com
    127.0.0.1 freedownloadmanager.uk.intellitxt.com
    127.0.0.1 free-financial-information.com #[netwebsearch.com]
    127.0.0.1 freegames.yaboo.dk #[W32.Guapim]
    127.0.0.1 freegamesclub.com
    127.0.0.1 free-hit.com
    127.0.0.1 freehqmovies.com #[yeahsearch.net]
    127.0.0.1 freelivesex.cf.mtreexxx.net
    127.0.0.1 freelogs.com
    127.0.0.1 freematureporn.org
    127.0.0.1 free-movies-download.com #[AdWare.GoWebSite]
    127.0.0.1 freemusic.ez-tracks.com
    127.0.0.1 free-nylon-porn.com #[searchmeup.com]
    127.0.0.1 freepage.ws
    127.0.0.1 freeprod.com #[IE-SpyAd][SunBelt.Freeprod/Toolbar888]
    127.0.0.1 freeps3.peel.com
    127.0.0.1 freesites.spacash.com
    127.0.0.1 free-spy-cam.net #[McAfee.QlowZones-25]
    127.0.0.1 freespyscanner.com #[Webhelper.CWS List]
    127.0.0.1 freestats.com
    127.0.0.1 free-stats.com
    127.0.0.1 free-stats.i8.com
    127.0.0.1 freesudokus.powered-by.zango.com
    127.0.0.1 freeticketcash.cf.mtreexxx.net
    127.0.0.1 freeticketcash.com
    127.0.0.1 freetoplay.ath.cx.powered-by.zango.com
    127.0.0.1 free-virgin-pic.com
    127.0.0.1 freeware-ad.t35.com #[umaxsearch.com]
    127.0.0.1 freewarefiles.us.intellitxt.com
    127.0.0.1 freewarehome.us.intellitxt.com
    127.0.0.1 freewarepalm.uk.intellitxt.com
    127.0.0.1 freewhore.net
    127.0.0.1 free-xxxgals.com
    127.0.0.1 freexxxpages.net
    127.0.0.1 ftp.123banners.com
    127.0.0.1 ftp.adsrve.com
    127.0.0.1 ftp.sevenmetasearch.com
    127.0.0.1 ftp.x10.com
    127.0.0.1 get.adwarepunisher.com #[Rogue/Suspect][SiteAdvisor.adwarepunisher.com]
    127.0.0.1 get.breakspyware.com
    127.0.0.1 get.fixerantispy.com
    127.0.0.1 get.hitbox.com
    127.0.0.1 get.hitvirus.com #[Win32/Adware.HitVirus]
    127.0.0.1 get.inetbar.com #[SunBelt.INetBar]
    127.0.0.1 get.kadserver.com
    127.0.0.1 get.razespyware.net #[Win32/Adware.HitVirus][ADW_SPYRAZE.A]
    127.0.0.1 get.remedyantispy.com #[Rogue/Suspect]
    127.0.0.1 get.spyanalyst.com
    127.0.0.1 get.spycut.com
    127.0.0.1 get.spydefence.com
    127.0.0.1 get.spyiblock.com
    127.0.0.1 get.spyofficer.com
    127.0.0.1 get.spywaredisinfector.com
    127.0.0.1 get.thespyguard.com #[Rogue/Suspect]
    127.0.0.1 get-access.host.sk #[McAfee.StartPage-IR]
    127.0.0.1 getclicksnow.com
    127.0.0.1 getcracks.com #[Win32/TrojanDownloader.Adload.DS]
    127.0.0.1 getfound.com #[Parasite.GogoTools]
    127.0.0.1 getmaxspeed.com #[Maxspeed]
    127.0.0.1 hit.lookupanything.biz #[qsrch.net]
    127.0.0.1 hit.namimedia.com #[IE-SpyAd]
    127.0.0.1 hit.traxdb.net
    127.0.0.1 hit.virtualsearches.net
    127.0.0.1 hit1.hotlog.ru
    127.0.0.1 hit1.vioclicks.com #[SunBelt.VioClicks.com]
    127.0.0.1 hit1.xstats.com
    127.0.0.1 hit10.hotlog.ru
    127.0.0.1 hit11.hotlog.ru
    127.0.0.1 hit12.hotlog.ru
    127.0.0.1 hit13.hotlog.ru #[SunBelt.HotLog.ru]
    127.0.0.1 hit14.hotlog.ru
    127.0.0.1 hit15.hotlog.ru
    127.0.0.1 hit16.hotlog.ru
    127.0.0.1 hit17.hotlog.ru
    127.0.0.1 hit18.hotlog.ru
    127.0.0.1 hit19.hotlog.ru
    127.0.0.1 hit2.hotlog.ru
    127.0.0.1 hit20.hotlog.ru
    127.0.0.1 hit21.hotlog.ru
    127.0.0.1 hit3.hotlog.ru
    127.0.0.1 hit4.hotlog.ru #[IE-SpyAd]
    127.0.0.1 hit5.hotlog.ru
    127.0.0.1 hit6.hotlog.ru
    127.0.0.1 hit7.hotlog.ru
    127.0.0.1 hit8.hotlog.ru #[SpySweeper.Spy.Cookie]
    127.0.0.1 hit9.hotlog.ru
    127.0.0.1 hitbox.com
    127.0.0.1 hitboxcentral.com
    127.0.0.1 hit-counter.5u.com
    127.0.0.1 hitcounter01.xspp.com
    127.0.0.1 hitctr01.icdirect.com
    127.0.0.1 hitexchange.net
    127.0.0.1 hithopper.com #[Adware.Hithopper]
    127.0.0.1 hitkorea.co.kr #[Adware.Atlcontrol]
    127.0.0.1 hitmodel.net
    127.0.0.1 hit-now.com
    127.0.0.1 hit-parade.com
    127.0.0.1 hitparadegay.com
    127.0.0.1 hitq.com
    127.0.0.1 hits.411web.com
    127.0.0.1 hits.clickandtrack.net #[SpySweeper.Spy.Cookie]
    127.0.0.1 hits.e.cl
    127.0.0.1 hits.gureport.co.uk #[ehg-gureport1p.hitbox.com]
    127.0.0.1 hits.icdirect.com #[SunBelt.ICDirect.com]
    127.0.0.1 hits.nextstat.com
    127.0.0.1 hits.spylog.com #[SunBelt.SpyLog.com]
    127.0.0.1 hits.webstat.com #[McAfee.Cookie-Webstat]
    127.0.0.1 hitscount.net #[MHTMLRedir.Exploit]
    127.0.0.1 hits-counter.com
    127.0.0.1 hitslink.com #[IE-SpyAd]
    127.0.0.1 hitslog.com
    127.0.0.1 hitsquad.us.intellitxt.com
    127.0.0.1 hitstats.net
    127.0.0.1 http.content.ru4.com #[pd.mii.instacontent.net]
    127.0.0.1 http.edge.ru4.com #[Ad-Aware.Tracking Cookie]
    127.0.0.1 http.edge.vru4.com #[McAfee.Adware-Apropos]
    127.0.0.1 http1.edge.ru4.com
    127.0.0.1 http10.edge.ru4.com #[SunBelt.Ru4.com]
    127.0.0.1 http100.content.ru4.com
    127.0.0.1 http2.edge.ru4.com
    127.0.0.1 http201.edge.ru4.com
    127.0.0.1 http-2081.edge.ru4.com
    127.0.0.1 http3.edge.ru4.com #[Ewido.TrackingCookie.Ru4]
    127.0.0.1 http300.content.ru4.com
    127.0.0.1 http300.edge.ru4.com #[Accuserve Ad System]
    127.0.0.1 http303.edge.ru4.com #[Tenebril.Tracking Cookie]
    127.0.0.1 http4.edge.ru4.com
    127.0.0.1 http400.edge.ru4.com #[pd.mirror-image.net]
    127.0.0.1 http5.edge.ru4.com #[McAfee.Cookie-RU4]
    127.0.0.1 http6.edge.ru4.com
    127.0.0.1 http602.com
    127.0.0.1 http7.edge.ru4.com
    127.0.0.1 http8.edge.ru4.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 http9.edge.ru4.com
    127.0.0.1 https.edge.ru4.com #[pd.mirror-image.net]
    127.0.0.1 i.1100i.com
    127.0.0.1 i.11zz.com
    127.0.0.1 i.1cat.com
    127.0.0.1 i.azjmp.com
    127.0.0.1 i.bigmir.net
    127.0.0.1 i.cannot.undo.it
    127.0.0.1 i.casalemedia.com #[Tenebril.Tracking Cookie]
    127.0.0.1 i.m3.net
    127.0.0.1 i.mydirectweb.com #[adimgs.com]
    127.0.0.1 i.rn11.com #[HJTH.InternetWasherPro
    127.0.0.1 ia1.7search.com
    127.0.0.1 iads.adroar.com #[Adware.AdRoar][ADW_ADROAR.A]
    127.0.0.1 iamnotageek.us.intellitxt.com
    127.0.0.1 ias.hitbox.com
    127.0.0.1 ib.geoads.net
    127.0.0.1 ibg.hitbox.com
    127.0.0.1 iblockpopups.com #[SiteAdvisor.iblockpopups.com]
    127.0.0.1 ibuytraffic.net
    127.0.0.1 icache.getrelevant.com
    127.0.0.1 icansearch.net
    127.0.0.1 icc.intellisrv.net
    127.0.0.1 icentric.us.intellitxt.com
    127.0.0.1 ichef.us.intellitxt.com
    127.0.0.1 ico.freelogs.com
    127.0.0.1 icon.clickthru.net
    127.0.0.1 iconads.biz
    127.0.0.1 iconcave.powered-by.zango.com
    127.0.0.1 icons.joysticknetworks.com #[AdWare.MediaMotor.a]
    127.0.0.1 icornerstore.tumri.net #[TumriAds]
    127.0.0.1 icover.realmedia.com
    127.0.0.1 icracks.net #[Trojan.Win32.Favadd.d]
    127.0.0.1 image.adjuggler.com
    127.0.0.1 image.atdmt.com
    127.0.0.1 image.cecash.com
    127.0.0.1 image.dex.adjuggler.com
    127.0.0.1 image.i1img.com
    127.0.0.1 image.linkexchange.com
    127.0.0.1 image.masterstats.com #[IE-SpyAd]
    127.0.0.1 image.tafmaster.com #[tafmaster-i.focalex.com]
    127.0.0.1 image.ugo.com
    127.0.0.1 image2000.mtreexxx.net
    127.0.0.1 imageads.googleadservices.com #[Ewido.TrackingCookie.Googleadservices]
    127.0.0.1 imageads1.googleadservices.com
    127.0.0.1 imageads2.googleadservices.com
    127.0.0.1 imageads3.googleadservices.com
    127.0.0.1 imageads4.googleadservices.com
    127.0.0.1 imageads5.googleadservices.com
    127.0.0.1 imageads6.googleadservices.com
    127.0.0.1 imageads7.googleadservices.com
    127.0.0.1 imageads8.googleadservices.com
    127.0.0.1 imageads9.googleadservices.com
    127.0.0.1 imagec05.247realmedia.com #[c2.mii.instacontent.net]
    127.0.0.1 imagecache.directtrack.com
    127.0.0.1 image-catcher.com
    127.0.0.1 images.1100i.com
    127.0.0.1 images.15x.net #[IE-SpyAd]
    127.0.0.1 images.163.com
    127.0.0.1 images.888.com
    127.0.0.1 images.about.com
    127.0.0.1 images.accessmedia.tv
    127.0.0.1 images.adleads.com
    127.0.0.1 images.adrime.com
    127.0.0.1 images.ads.fairfax.com.au
    127.0.0.1 images.adster.com
    127.0.0.1 images.adultplex.com
    127.0.0.1 images.azoogleads.com
    127.0.0.1 images.azooimages.com
    127.0.0.1 images.blogads.com
    127.0.0.1 images.bluetime.com #[a1639.g.akamai.net]
    127.0.0.1 images.bmnq.com
    127.0.0.1 images.bnmq.com #[server down?]
    127.0.0.1 images.bonzi.com
    127.0.0.1 images.brainfox.com
    127.0.0.1 images.bravenet.com #[SecuritySpace.WebBug]
    127.0.0.1 images.cashfiesta.com #[AdWare.CashFiesta.a]
    127.0.0.1 images.casino-on-net.com
    127.0.0.1 images.castads.com
    127.0.0.1 images.ccbill.com
    127.0.0.1 images.cybereps.com
    127.0.0.1 images.directtrack.com
    127.0.0.1 images.domainsponsor.com
    127.0.0.1 images.dp.yfdirect.com
    127.0.0.1 images.drivelinemedia.com
    127.0.0.1 images.enhance.com #[McAfee.Cookie-Enhance]
    127.0.0.1 images.exitexchange.com
    127.0.0.1 images.fastclick.net
    127.0.0.1 images.gamefiesta.com #[p.mii.instacontent.net]
    127.0.0.1 images.gator.com
    127.0.0.1 images.geoads.net
    127.0.0.1 images.hitwise.co.uk
    127.0.0.1 images.hostimages.net
    127.0.0.1 images.imagesbyaz.com
    127.0.0.1 images.imgehost.com
    127.0.0.1 images.imgserver.net
    127.0.0.1 images.indiads.com
    127.0.0.1 images.infiads.com #[p.mii.instacontent.net]
    127.0.0.1 images.jps.ru
    127.0.0.1 images.kazaa.com
    127.0.0.1 images.moviepass.tv
    127.0.0.1 images.pacificpoker.com #[SunBelt.PacificPoker]
    127.0.0.1 images.parked.com
    127.0.0.1 images.popupguard.com
    127.0.0.1 images.rambler.ru
    127.0.0.1 images.revenue.net
    127.0.0.1 images.sexlist.com
    127.0.0.1 images.sidestep.com
    127.0.0.1 images.skenzo.com
    127.0.0.1 images.specificclick.net
    127.0.0.1 images.targetwords.com
    127.0.0.1 images.trafficmp.com #[SunBelt.Trafficmp.com]
    127.0.0.1 images.tumri.net
    127.0.0.1 images.ultsearch.com
    127.0.0.1 images.webads.it
    127.0.0.1 images.webads.nl
    127.0.0.1 images.x10.com
    127.0.0.1 images1.paycounter.com
    127.0.0.1 images2.blogads.com
    127.0.0.1 imagesak.secureserver.net
    127.0.0.1 images-aud.freshmeat.net
    127.0.0.1 images-aud.slashdot.org
    127.0.0.1 images-aud.sourceforge.net
    127.0.0.1 images-aud-pg.osdn.com
    127.0.0.1 imagesb.ultsearch.com
    127.0.0.1 imageserv.adtech.de
    127.0.0.1 imageserver1.thruport.com
    127.0.0.1 imagesn02.247realmedia.com #[s5.mii.instacontent.net]
    127.0.0.1 images-pw.secureserver.net #[Parking Service][GoDaddy]
    127.0.0.1 imc2.122.2o7.net
    127.0.0.1 img.adsag.com
    127.0.0.1 img.bannersxchange.com #[IE-SpyAd]
    127.0.0.1 img.casalemedia.com #[SunBelt.casalemedia.com]
    127.0.0.1 img.cqcounter.com
    127.0.0.1 img.directtrack.com
    127.0.0.1 img.downloadmediacentral.com
    127.0.0.1 img.focalex.com
    127.0.0.1 img.freexxxpages.net
    127.0.0.1 img.freeze.com
    127.0.0.1 img.hitexchange.net
    127.0.0.1 img.hotlog.ru
    127.0.0.1 img.jcash.biz
    127.0.0.1 img.lop.com
    127.0.0.1 img.maxserving.com
    127.0.0.1 img.mediaplex.com #[Ewido.TrackingCookie.Mediaplex]
    127.0.0.1 img.mscracks.com
    127.0.0.1 img.msgtag.com #[IE-SpyAd]
    127.0.0.1 img.omnistats.net #[omnistats.net.122.2o7.net]
    127.0.0.1 img.rn11.com
    127.0.0.1 img.sedoparking.com
    127.0.0.1 img.skenzo.com
    127.0.0.1 img.spyaxe.net
    127.0.0.1 img.spyfalcon.com
    127.0.0.1 img.spywarestrike.com
    127.0.0.1 img.thebugs.ws
    127.0.0.1 img.tradedoubler.com
    127.0.0.1 img.webring.com #[SecuritySpace.WebBug]
    127.0.0.1 img.webse-arch.com
    127.0.0.1 img1.adshttp.com
    127.0.0.1 img1.ientry.net
    127.0.0.1 img1.webring.com
    127.0.0.1 imgall.adjuggler.com
    127.0.0.1 img-pcdn.adtech.de #[g1.panthercdn.com]
    127.0.0.1 imgs.becomers.com
    127.0.0.1 imgs.itsoktosearch.net
    127.0.0.1 imgs.klikfind.com #[McAfee.Adware-Click]
    127.0.0.1 imgserv.adbutler.com #[eTrust.Tracking Cookie]
    127.0.0.1 img-snv.mediaplex.com #[Tenebril.Tracking Cookie]
    127.0.0.1 imkill.98link.com #[TR/KillAV.AV.1]
    127.0.0.1 imlooking.net #[Trackware.SearchTerms]
    127.0.0.1 imp.clickability.com
    127.0.0.1 imp.games.zango.com
    127.0.0.1 imp.madserver.net
    127.0.0.1 imp.partner2profit.com
    127.0.0.1 imp3download.com
    127.0.0.1 impact.contextclick.com
    127.0.0.1 impactwrestling.us.intellitxt.com
    127.0.0.1 impbe.tradedoubler.com #[Panda.Spyware:Cookie/Tradedoubler]
    127.0.0.1 impch.tradedoubler.com
    127.0.0.1 impde.tradedoubler.com
    127.0.0.1 impdk.tradedoubler.com
    127.0.0.1 impes.tradedoubler.com
    127.0.0.1 impfi.tradedoubler.com
    127.0.0.1 impfr.tradedoubler.com
    127.0.0.1 impgb.tradedoubler.com #[SecuritySpace.WebBug]
    127.0.0.1 impit.tradedoubler.com
    127.0.0.1 implt.tradedoubler.com
    127.0.0.1 impnl.tradedoubler.com
    127.0.0.1 impno.tradedoubler.com
    127.0.0.1 imppl.tradedoubler.com
    127.0.0.1 impress.targetwords.com
    127.0.0.1 impression.7search.com
    127.0.0.1 impse.tradedoubler.com
    127.0.0.1 impulseleads.com
    127.0.0.1 imusicaccess.com #[SiteAdvisor.imusicaccess.com]
    127.0.0.1 instafinder.com #[Adware.InstaFinder]
    127.0.0.1 install.007guard.com
    127.0.0.1 install.bestoffersnetworks.com
    127.0.0.1 install.dmcast.com #[Adware-DesktopMedia.dr]
    127.0.0.1 install.funscreenz.com #[SiteAdvisor.funscreenz.com]
    127.0.0.1 install.global-netcom.de #[IELoaderCtl Class]
    127.0.0.1 install.redswoosh.com
    127.0.0.1 install.redswoosh.net
    127.0.0.1 install.searchmiracle.com #[TROJ_LOWZONES.H][ADW_ELITE.A]
    127.0.0.1 install.sidesearch.lycos.com #[ADW_SIDESEARCH.A][Adware.SideSearch]
    127.0.0.1 install.spywarelabs.com #[ADW_BUNDOUT.A]
    127.0.0.1 install.stardialer.de #[Installations Assistent]
    127.0.0.1 install.xxxtoolbar.com #[TROJ_ISTBAR.D,I]
    127.0.0.1 install23.searchmiracle.com
    127.0.0.1 install30.searchmiracle.com #[AdClicker-BA]
    127.0.0.1 install38.msupdater.org
    127.0.0.1 install38.yupsearch.com #[Trojan.StartPage.NK]
    127.0.0.1 installare.net #[Win32/Dialer.OY]
    127.0.0.1 installcash.com
    127.0.0.1 installs.180solutions.com
    127.0.0.1 installs.hotbar.com #[HJTH.Hotbar][McAfee.Adware-HotBar]
    127.0.0.1 installs.seekmo.com
    127.0.0.1 installs.smartshopper.com
    127.0.0.1 installs.spamblockerutility.com #[SbInstObj]
    127.0.0.1 installs4money.com
    127.0.0.1 instant-access.nocreditcard.com #[Parasite.MagicControl]
    127.0.0.1 instant-access.nocreditcard.net
    127.0.0.1 instant-access.nocreditcardgay.com
    127.0.0.1 instant-access.sex-explorer.com
    127.0.0.1 instantbuzz.com #[NOD32.Win32/Adware.InstantBuzz]
    127.0.0.1 instlog.errorsafe.com #[TR/Dldr.FakeAv.C]
    127.0.0.1 instlog.systemdoctor.com
    127.0.0.1 instlog.winantivirus.com
    127.0.0.1 insurancejournal.freestats.com
    127.0.0.1 int.sitestat.com #[SiteAdvisor.azter.com]
    127.0.0.1 landing.domainsponsor.com #[Microsoft.Typo-Patrol]
    127.0.0.1 landing.hitfarm.com
    127.0.0.1 landing.seek2.com #[SunBelt.Seek2.com]
    127.0.0.1 landing.trafficz.com #[Microsoft.Typo-Patrol]
    127.0.0.1 landings.trafficz.com
    127.0.0.1 mads.cnet.com
    127.0.0.1 mads.com.com
    127.0.0.1 mads.download.com
    127.0.0.1 mads.gamefaqs.com
    127.0.0.1 mads.tv.com
    127.0.0.1 mads.webshots.com #[madison_ad]
    127.0.0.1 mads.zdnet.com
    127.0.0.1 madserver.net
    127.0.0.1 mail.searchalot.com
    127.0.0.1 mailer.ebates.com
    127.0.0.1 mailer.funnytaf.com #[SiteAdvisor.trustyhound.net]
    127.0.0.1 mailer.trustyhound.com #[SiteAdvisor.trustyhound.net]
    127.0.0.1 medbanner.advertserve.com
    127.0.0.1 media.adcentriconline.com #[IE-SpyAd]
    127.0.0.1 media.adlegend.com
    127.0.0.1 media.admarketplace.net #[a1279.g.akamai.net]
    127.0.0.1 media.adrevolver.com #[Ad-Aware.Tracking Cookie]
    127.0.0.1 media.altnet.com
    127.0.0.1 media.baventures.com
    127.0.0.1 media.carpediem.fr
    127.0.0.1 media.deskwizz.com
    127.0.0.1 media.ditto.com #[a232.x.akamai.net]
    127.0.0.1 media.downloadmediacentral.com
    127.0.0.1 media.dxcdirect.com
    127.0.0.1 media.exchange-it.com
    127.0.0.1 media.fastclick.net
    127.0.0.1 media.freeprod.com #[Adware/Toolbar888]
    127.0.0.1 media.gigex.com #[HJTH.Gigex SpeedDelivery]
    127.0.0.1 media.intelia.it
    127.0.0.1 media.licenseacquisition.org #[IE-SpyAd]
    127.0.0.1 media.madserver.net
    127.0.0.1 media.m-adx.com
    127.0.0.1 media.matcash.com #[TROJ_DLOADER.ZS][Win32/Anyhomb.D]
    127.0.0.1 media.pointroll.com #[Panda.Spyware:Cookie/PointRoll]
    127.0.0.1 media.popunder.com
    127.0.0.1 media.popuptraffic.com #[Tenebril.Tracking Cookie]
    127.0.0.1 media.rapid-pass.net #[SunBelt.Rapid-pass.net]
    127.0.0.1 media.simpletraffic.com
    127.0.0.1 media.top-banners.com #[TROJ_ENVOLO.B][Whois.Blacklisted]
    127.0.0.1 media.travelzoo.com
    127.0.0.1 media-0.vpptechnologies.com
    127.0.0.1 media1.fastclick.net
    127.0.0.1 media-1.vpptechnologies.com
    127.0.0.1 media12.fastclick.net
    127.0.0.1 media13.fastclick.net
    127.0.0.1 media14.fastclick.net
    127.0.0.1 media15.fastclick.net
    127.0.0.1 media16.fastclick.net
    127.0.0.1 media17.fastclick.net
    127.0.0.1 media18.fastclick.net
    127.0.0.1 media19.fastclick.net
    127.0.0.1 media2.carpediem.fr
    127.0.0.1 media2.fastclick.net
    127.0.0.1 media2.popuptraffic.com
    127.0.0.1 media2.travelzoo.com
    127.0.0.1 media-2.vpptechnologies.com #[SiteAdvisor.fish-screensaver.com]
    127.0.0.1 media20.fastclick.net
    127.0.0.1 media21.fastclick.net
    127.0.0.1 media22.fastclick.net #[SunBelt.FastClick.com]
    127.0.0.1 media23.fastclick.net
    127.0.0.1 media24.fastclick.net
    127.0.0.1 media25.fastclick.net
    127.0.0.1 media26.fastclick.net
    127.0.0.1 media27.fastclick.net
    127.0.0.1 media28.fastclick.net #[Tenebril.Tracking Cookie]
    127.0.0.1 media29.fastclick.net
    127.0.0.1 media3.fastclick.net
    127.0.0.1 media30.fastclick.net
    127.0.0.1 media31.fastclick.net
    127.0.0.1 media32.fastclick.net
    127.0.0.1 media33.fastclick.net
    127.0.0.1 media34.fastclick.net
    127.0.0.1 media35.fastclick.net
    127.0.0.1 media36.fastclick.net
    127.0.0.1 media37.fastclick.net
    127.0.0.1 media38.fastclick.net
    127.0.0.1 media39.fastclick.net
    127.0.0.1 media4.fastclick.net #[Panda.Spyware:Cookie/FastClick]
    127.0.0.1 media-4.vpptechnologies.com
    127.0.0.1 media40.fastclick.net
    127.0.0.1 media41.fastclick.net
    127.0.0.1 media42.fastclick.net
    127.0.0.1 media43.fastclick.net
    127.0.0.1 media44.fastclick.net
    127.0.0.1 media45.fastclick.net
    127.0.0.1 media46.fastclick.net
    127.0.0.1 media47.fastclick.net
    127.0.0.1 media48.fastclick.net
    127.0.0.1 media49.fastclick.net
    127.0.0.1 media5.fastclick.net
    127.0.0.1 media-5.vpptechnologies.com
    127.0.0.1 media55.fastclick.net
    127.0.0.1 media6.fastclick.net
    127.0.0.1 media-6.vpptechnologies.com
    127.0.0.1 media7.fastclick.net
    127.0.0.1 media70.fastclick.net
    127.0.0.1 media72.fastclick.net
    127.0.0.1 media73.fastclick.net
    127.0.0.1 media74.fastclick.net
    127.0.0.1 media78.fastclick.net
    127.0.0.1 media8.fastclick.net
    127.0.0.1 media-8.vpptechnologies.com #[SiteAdvisor.fish-screensaver.com]
    127.0.0.1 media80.fastclick.net
    127.0.0.1 media81.fastclick.net
    127.0.0.1 media83.fastclick.net
    127.0.0.1 media84.fastclick.net
    127.0.0.1 media85.fastclick.net
    127.0.0.1 media9.fastclick.net #[SpySweeper.Spy.Cookie]
    127.0.0.1 media90.fastclick.net
    127.0.0.1 media91.fastclick.net
    127.0.0.1 media92.fastclick.net
    127.0.0.1 media93.fastclick.net
    127.0.0.1 media94.fastclick.net
    127.0.0.1 media96.fastclick.net
    127.0.0.1 media97.fastclick.net
    127.0.0.1 media98.fastclick.net
    127.0.0.1 media99.fastclick.net
    127.0.0.1 media-a.vpptechnologies.com #[a599.x.akamai.net]
    127.0.0.1 mediaactivex.com
    127.0.0.1 media-b.vpptechnologies.com
    127.0.0.1 mediabistro.112.2o7.net
    127.0.0.1 mediabuy-nic.cjt1.net
    127.0.0.1 media-c.vpptechnologies.com #[a1332.x.akamai.net]
    127.0.0.1 mediacharger.com
    127.0.0.1 media-d.vpptechnologies.com
    127.0.0.1 media-e.vpptechnologies.com
    127.0.0.1 media-f.vpptechnologies.com
    127.0.0.1 mediafr.247realmedia.com
    127.0.0.1 mediagecko.powered-by.zango.com
    127.0.0.1 mediamatters.112.2o7.net
    127.0.0.1 mediamgr.ugo.com #[McAfee.Cookie-UGOr]
    127.0.0.1 mediaobjectsite.com #[Video Access ActiveX Object]
    127.0.0.1 mediaplex.com #[eTrust.Tracking Cookie]
    127.0.0.1 mediapst.adbureau.net
    127.0.0.1 media-servers.net
    127.0.0.1 mediatrack.popupsponsor.com
    127.0.0.1 mediatrack.revenue.net #[Tenebril.Tracking Cookie]
    127.0.0.1 mediatrafficagency.com
    127.0.0.1 mediauk.247realmedia.com
    127.0.0.1 medicinenet.us.intellitxt.com
    127.0.0.1 medindia.us.intellitxt.com
    127.0.0.1 meduza.xhpro.com
    127.0.0.1 meetupdev.122.2O7.net
    127.0.0.1 meet-your-love.net
    127.0.0.1 mega.directwebsearch.net #[PcTools.WinSearchIE32]
    127.0.0.1 mega7porn.com
    127.0.0.1 megabyte.crosswinds.net
    127.0.0.1 megaiconsite.com
    127.0.0.1 megalocash.com
    127.0.0.1 megaporn.cf.mtreexxx.net
    127.0.0.1 megapornbucks.com #[i-lookup.com]
    127.0.0.1 megasearchbar.com
    127.0.0.1 megaswaiter.info
    127.0.0.1 my.admedian.com #[my.yieldmanager.com]
    127.0.0.1 my.adtegrity.net #[my.yieldmanager.com]
    127.0.0.1 my.aim4media.com #[my.yieldmanager.com]
    127.0.0.1 my.asn.com #[asn.adbureau.net]
    127.0.0.1 my.clearchannelradio.com #[ehg-clearchannelradio.1p.hitbox.com]
    127.0.0.1 my.dropspam.com
    127.0.0.1 my.freeze.com #[SpywareWarrior.adw2005][a798.g.akamai.net]
    127.0.0.1 my.iconadserver.com #[my.yieldmanager.com]
    127.0.0.1 my.iwon.com
    127.0.0.1 my.marketingsector.com #[my.yieldmanager.com]
    127.0.0.1 my.mediaprecision.net #[my.yieldmanager.com]
    127.0.0.1 my.media-servers.net #[my.yieldmanager.com]
    127.0.0.1 my.realcastmedia.com #[my.yieldmanager.com]
    127.0.0.1 my.spylog.com
    127.0.0.1 my.statcounter.com
    127.0.0.1 my.virtumundo.com
    127.0.0.1 my.yieldmanager.com #[Ewido.TrackingCookie.Yieldmanager]
    127.0.0.1 myadultexplorer.com
    127.0.0.1 mycashbank.co.kr
    127.0.0.1 mycounter.tinycounter.com
    127.0.0.1 mydisplayimage.powered-by.zango.com
    127.0.0.1 myfamilyancestry.112.2o7.net
    127.0.0.1 myfavoritegames.us.intellitxt.com
    127.0.0.1 myfriends.go2me.biz #[Trojan.ByteVerify]
    127.0.0.1 myfriendspy.powered-by.zango.com
    127.0.0.1 mygalleries.biz #[SiteAdvisor.mygalleries.biz]
    127.0.0.1 myglobalsearch.com #[IE-SpyAd]
    127.0.0.1 mymoneymakers.powered-by.zango.com
    127.0.0.1 mynetprotector.com #[Adware Bundler]
    127.0.0.1 mysa.belointeractive.com
    127.0.0.1 mysearch.dropspam.com #[McAfee.Adware-DropSpam]
    127.0.0.1 mysearchnow.com
    127.0.0.1 myspace.powered-by.zango.com
    127.0.0.1 myspace-backgrounds.powered-by.zango.com
    127.0.0.1 myspace-codes.powered-by.zango.com
    127.0.0.1 myspacegraphics.powered-by.zango.com
    127.0.0.1 myspacegraphicsx.powered-by.zango.com
    127.0.0.1 myspaceicons.powered-by.zango.com
    127.0.0.1 myspaceiconsorg.powered-by.zango.com
    127.0.0.1 myspacelayouts.powered-by.zango.com
    127.0.0.1 myspyfreepc.com #[Rogue/Suspect]
    127.0.0.1 mytop12.com.powered-by.zango.com
    127.0.0.1 newads.cmpnet.com
    127.0.0.1 newads1.com
    127.0.0.1 newads2.com
    127.0.0.1 newadserver.interfree.it #[Adcycle]
    127.0.0.1 oas.ameinfo.com
    127.0.0.1 oas.greensboro.com #[RealMedia]
    127.0.0.1 oas.heise.de #[RealMedia]
    127.0.0.1 oas.mainetoday.com #[RealMedia]
    127.0.0.1 oas.salon.com
    127.0.0.1 oas.signonsandiego.com #[RealMedia]
    127.0.0.1 oas.startribune.com #[oasads0.nandomedia.com]
    127.0.0.1 oas.tidningsnatet.se #[ads.realmedia.basefarm.net]
    127.0.0.1 oas.villagevoice.com
    127.0.0.1 oasads.whitepages.com #[RealMedia]
    127.0.0.1 oasc02.247realmedia.com #[Panda.Spyware:Cookie]
    127.0.0.1 oasc03.247realmedia.com
    127.0.0.1 oasc03012.247realmedia.com
    127.0.0.1 oasc04.247realmedia.com
    127.0.0.1 oasc04025.247realmedia.com
    127.0.0.1 oasc04052.247realmedia.com
    127.0.0.1 oasc05024.247realmedia.com #[MVPS.Criteria]
    127.0.0.1 oasc06006.247realmedia.com
    127.0.0.1 oascentral.abclocal.go.com
    127.0.0.1 oascentral.activeathlete.net
    127.0.0.1 oascentral.adage.com
    127.0.0.1 oascentral.artistdirect.com
    127.0.0.1 oascentral.autoweek.com
    127.0.0.1 oascentral.bigfishgames.com
    127.0.0.1 oascentral.blackenterprise.com
    127.0.0.1 oascentral.bostonherald.com
    127.0.0.1 oascentral.broadway.com
    127.0.0.1 oascentral.btobonline.com
    127.0.0.1 oascentral.businessweek.com
    127.0.0.1 oascentral.buy.com
    127.0.0.1 oascentral.buysell.com
    127.0.0.1 oascentral.careerbuilder.com
    127.0.0.1 oascentral.charleston.net
    127.0.0.1 oascentral.chron.com
    127.0.0.1 oascentral.cjt1.net #[RealMedia]
    127.0.0.1 oascentral.clearchannel.com
    127.0.0.1 oascentral.comcast.net
    127.0.0.1 oascentral.covers.com
    127.0.0.1 oascentral.cybereps.com #[RealMedia]
    127.0.0.1 oascentral.dailybreeze.com
    127.0.0.1 oascentral.fortunecity.com #[RealMedia]
    127.0.0.1 oascentral.g4techtv.com
    127.0.0.1 oascentral.gazette.com
    127.0.0.1 oascentral.ggl.com
    127.0.0.1 oascentral.gigex.com #[RealMedia]
    127.0.0.1 oascentral.hamptonroads.com
    127.0.0.1 oascentral.hollywood.com
    127.0.0.1 oascentral.hosted.ap.org
    127.0.0.1 oascentral.inq7.net
    127.0.0.1 oascentral.investmentnews.com
    127.0.0.1 oascentral.kontraband.com
    127.0.0.1 oascentral.laweekly.com
    127.0.0.1 oascentral.looksmart.com
    127.0.0.1 oascentral.lycos.com
    127.0.0.1 oascentral.mailtribune.com
    127.0.0.1 oascentral.nashvillescene.com
    127.0.0.1 oascentral.newsmax.com
    127.0.0.1 oascentral.newstimeslive.com
    127.0.0.1 oascentral.onwisconsin.com
    127.0.0.1 oascentral.oprah.com
    127.0.0.1 oascentral.pokerfan.com
    127.0.0.1 oascentral.post-gazette.com
    127.0.0.1 oascentral.publicradio.org
    127.0.0.1 oas-central.realmedia.com
    127.0.0.1 oascentral.redherring.com
    127.0.0.1 oascentral.reference.com
    127.0.0.1 oascentral.register.com
    127.0.0.1 oascentral.registerguard.com
    127.0.0.1 oascentral.sciam.com
    127.0.0.1 oascentral.seattleweekly.com
    127.0.0.1 oascentral.sfgate.com
    127.0.0.1 oascentral.sfweekly.com
    127.0.0.1 oascentral.sina.com
    127.0.0.1 oascentral.sptimes.com
    127.0.0.1 oascentral.s-t.com
    127.0.0.1 oascentral.starbulletin.com
    127.0.0.1 oascentral.stltoday.com
    127.0.0.1 oascentral.superpages.com
    127.0.0.1 oascentral.thechronicleherald.ca
    127.0.0.1 oascentral.theonionavclub.com
    127.0.0.1 oascentral.thesmokinggun.com
    127.0.0.1 oascentral.tmcnet.com
    127.0.0.1 oascentral.upi.com
    127.0.0.1 oascentral.virtualtourist.com
    127.0.0.1 oascentral.wagerline.com
    127.0.0.1 oascentral.walmartwom.com
    127.0.0.1 oascentral.washtimes.com
    127.0.0.1 oascentral.weirdontheweb.net #[RealMedia]
    127.0.0.1 oascentral.wwe.com
    127.0.0.1 oas-eu.247realmedia.com
    127.0.0.1 opera1-servedby.advertising.com
    127.0.0.1 oppknocks.advertserve.com
    127.0.0.1 opsex.com
    127.0.0.1 optimize.3optimization.doubleclick.net
    127.0.0.1 optimize.doubleclick.net
    127.0.0.1 optimizedby.rmxads.com
    127.0.0.1 optinbig.com
    127.0.0.1 option9.adultfriendfinder.com
    127.0.0.1 overture.geoads.net
    127.0.0.1 overturecom.112.2o7.net
    127.0.0.1 p.mii.instacontent.net
    127.0.0.1 p.reuters.co.uk #[gbl19.lb-revsci.net]
    127.0.0.1 p.reuters.com #[gbl03.lb-revsci.net]
    127.0.0.1 p.wsj.com #[cust-gbl01.pix.revenuescience.net]
    127.0.0.1 p138920c.axelsfun.com
    127.0.0.1 p144924c.axelsfun.com
    127.0.0.1 p165535.axelsfun.com
    127.0.0.1 p171605.axelsfun.com
    127.0.0.1 p2psupport.net
    127.0.0.1 packages.desktop.virtumundo.com #[TROJ_AGENT.BN]
    127.0.0.1 pagead.googlesyndication.com
    127.0.0.1 pagead2.googlesyndication.com #[Google AdWords]
    127.0.0.1 pageload2.babenet.com #[SunBelt.Babenet]
    127.0.0.1 page-not-found.net #[McAfee.Adware-HotBar]
    127.0.0.1 page-not-found.org
    127.0.0.1 partner1.goclick.com #[IE-SpyAd]
    127.0.0.1 partner1.whatsfind.com
    127.0.0.1 partnerfeed.itsfogo.com
    127.0.0.1 partners.adultadworld.com
    127.0.0.1 partners.hotbar.com
    127.0.0.1 partners.loudcash.com
    127.0.0.1 partners.malwarewipe.com
    127.0.0.1 partners.mygeek.com #[SearchCentrix]
    127.0.0.1 partners.pcsecurityshield.com #[directtrack.com]
    127.0.0.1 partners.search123.com
    127.0.0.1 partners.webmasterplan.com
    127.0.0.1 partners.yazzle.net
    127.0.0.1 partners.yfdirect.com
    127.0.0.1 partygaming.122.2o7.net
    127.0.0.1 partygamingglobal.122.2O7.net
    127.0.0.1 pop.popuptoast.com #[Spyware.2020search]
    127.0.0.1 pop1.2z0o.net #[admarketplace.net]
    127.0.0.1 pop10.2z0o.net
    127.0.0.1 pop2.2z0o.net #[TROJ_DLOADER.AGS]
    127.0.0.1 popadstop.com #[Adware.PopAdStop]
    127.0.0.1 popbehinds.com
    127.0.0.1 popcorn.net
    127.0.0.1 popfind.net #[Adware.Ddpop]
    127.0.0.1 popfree.adultcash.com
    127.0.0.1 popinads.com #[IE-SpyAd]
    127.0.0.1 popme.163.com
    127.0.0.1 popmechanics.us.intellitxt.com
    127.0.0.1 popoholic.us.intellitxt.com
    127.0.0.1 popprotection.com
    127.0.0.1 pops.404search.com #[McAfee.Adware-404Search]
    127.0.0.1 pops.aim4media.com
    127.0.0.1 pops.browseraid.com
    127.0.0.1 pops.freeze.com #[GamHelper]
    127.0.0.1 popsearch.nbcsearch.com
    127.0.0.1 popularmechanics.us.intellitxt.com
    127.0.0.1 popular-screen-savers.com
    127.0.0.1 popunder.adsrevenue.net
    127.0.0.1 popunder.com
    127.0.0.1 popunder.paypopup.com
    127.0.0.1 popup.msn.com
    127.0.0.1 popup.oxcash.com
    127.0.0.1 popupavenger.com
    127.0.0.1 popupblockade.com #[Parasite.Httper]
    127.0.0.1 popupmoney.com #[IE-SpyAd]
    127.0.0.1 popups.ad-logics.com #[McAfee.Cookie-Ad-logics]
    127.0.0.1 popups.infostart.com #[eTrust.Popups.infostart.com]
    127.0.0.1 popupsearch.com
    127.0.0.1 popupsearches.com
    127.0.0.1 popupsponsor.com #[Parasite.ClientMan]
    127.0.0.1 popuptraffic.com #[Parasite.ClientMan]
    127.0.0.1 popwin.9983.com #[Trojan.Popwin]
    127.0.0.1 primediabusiness.122.2o7.net
    127.0.0.1 primestarmagazine.112.2o7.net
    127.0.0.1 r.4at1.com
    127.0.0.1 r.casalemedia.com #[Symantec.SpywareStormer]
    127.0.0.1 r.clickdensity.com
    127.0.0.1 r.great-porn.net
    127.0.0.1 r.rd06.com
    127.0.0.1 r.x-stories.org
    127.0.0.1 r1.affiliatefuel.com
    127.0.0.1 r2.clrsch.com
    127.0.0.1 r25407.upd.lop.com
    127.0.0.1 r3.chkdat.com
    127.0.0.1 r3.clrsch.com
    127.0.0.1 r4.clrsch.com
    127.0.0.1 r6.chksvc.com
    127.0.0.1 r6.svcmgr.com
    127.0.0.1 r7.chksvc.com
    127.0.0.1 red.as-eu.falkag.net #[McAfee.Adware-Zeno]
    127.0.0.1 red.as-test.falkag.net
    127.0.0.1 red.as-us.falkag.net
    127.0.0.1 red01.as-eu.falkag.net
    127.0.0.1 red01.as-us.falkag.net
    127.0.0.1 redemption.bullseye-media.net
    127.0.0.1 redfunny.com #[SiteAdvisor.redfunny.com]
    127.0.0.1 redir.adsonar.com
    127.0.0.1 redir.overture.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 redirect.clickshield.net
    127.0.0.1 redirect.cydoor.com
    127.0.0.1 redirect.epass-key.com
    127.0.0.1 redirect.fairfax.com.au
    127.0.0.1 redirect.linksummary.com
    127.0.0.1 redirect.mirarsearch.com #[Trojan.TrustedZones]
    127.0.0.1 redirect.virtumundo.com
    127.0.0.1 redswoosh.net #[Red Swoosh EDN Client]
    127.0.0.1 register.free-lyrics-online.com
    127.0.0.1 register.freeze.com
    127.0.0.1 register.screensaver.com #[StopBadware.org Report]
    127.0.0.1 register7.grouplotto.com
    127.0.0.1 registration.vendaregroup.com
    127.0.0.1 registryrepair.ws
    127.0.0.1 regman.freeze.com
    127.0.0.1 regnow.pcsecurityshield.com
    127.0.0.1 rmads.msn.com
    127.0.0.1 s10.histats.com
    127.0.0.1 s10.sitemeter.com
    127.0.0.1 s11.histats.com
    127.0.0.1 s11.sitemeter.com
    127.0.0.1 s12.sitemeter.com
    127.0.0.1 s12ds1.ewizard.cc #[Win32.Startpage.NS]
    127.0.0.1 s13.remove.cc #[McAfee.QlowZones-25]
    127.0.0.1 s13.sitemeter.com
    127.0.0.1 s13ds.ewizard.cc
    127.0.0.1 s14.sitemeter.com
    127.0.0.1 s15.sitemeter.com
    127.0.0.1 s16.sitemeter.com
    127.0.0.1 s17.sitemeter.com
    127.0.0.1 s18.sitemeter.com
    127.0.0.1 s19.sitemeter.com
    127.0.0.1 safe.kanoodle.com
    127.0.0.1 safeiepage.com
    127.0.0.1 sales.liveperson.net #[Tenebril.Tracking Cookie]
    127.0.0.1 search.active-max.com
    127.0.0.1 search.activshopper.com
    127.0.0.1 search.adwave.com #[McAfee.Adware-IEHost]
    127.0.0.1 search.antarasystems.com #[Spyware.SearchPounder]
    127.0.0.1 search.balance.gator.com #[SiteAdvisor.fish-screensaver.com]
    127.0.0.1 search.bigclicks.com
    127.0.0.1 search.brainfox.com
    127.0.0.1 search.clickfinders.com
    127.0.0.1 search.clicksor.com
    127.0.0.1 s-e-arch.com
    127.0.0.1 search.cygo.net
    127.0.0.1 search.digitalnames.net
    127.0.0.1 search.dr.shopnav.com #[if.searchcentrix.com]
    127.0.0.1 search.drsnsrch.com
    127.0.0.1 search.dxcdirect.com
    127.0.0.1 search.effectivebrand.com
    127.0.0.1 search.exactmatches.com
    127.0.0.1 search.findsall.info
    127.0.0.1 search.findscout.com
    127.0.0.1 search.findwhatevernow.com
    127.0.0.1 search.freeze.com
    127.0.0.1 search.gamefiesta.com
    127.0.0.1 search.gator.com
    127.0.0.1 search.gohip.com
    127.0.0.1 search.happytofind.com
  • Hobbsy
    edited April 2007
    127.0.0.1 search.hotplugins.com
    127.0.0.1 search.hotpopup.com
    127.0.0.1 search.ieplugin.com #[IEPlugin.Search]
    127.0.0.1 search.in
    127.0.0.1 search.information.com
    127.0.0.1 search.intwined.com
    127.0.0.1 search.iwon.com
    127.0.0.1 search.letssearch.com
    127.0.0.1 search.lookforthe.net #[savehits.com]
    127.0.0.1 search.maxifiles.com
    127.0.0.1 search.media-search.net
    127.0.0.1 search.mrsupergames.com
    127.0.0.1 search.mysearchnow.com
    127.0.0.1 search.mywebsearch.com #[Panda.Adware/MyWebSearch]
    127.0.0.1 search.oemji.com #[a1139.g.akamai.net]
    127.0.0.1 search.offeroptimizer.com
    127.0.0.1 search.prositefinder.com #[SunBelt.bho.180Solutions.ProSiteFinder]
    127.0.0.1 search.qsrch.com
    127.0.0.1 search.qsrch.net
    127.0.0.1 search.revenuepilot.com
    127.0.0.1 search.rub.to #[Adware.Trinity]
    127.0.0.1 search.scourweb.net
    127.0.0.1 search.s-e-arch.com #[Spamdexing][Microsoft.Strider]
    127.0.0.1 search.searchalot.com
    127.0.0.1 search.searchandclick.com
    127.0.0.1 search.search-assist.net
    127.0.0.1 search.searchenhancement.com
    127.0.0.1 search.search-exe.com
    127.0.0.1 search.searchfuel.com
    127.0.0.1 search.searchsquire.com #[Trojan.TrustedZones]
    127.0.0.1 search.seek2.com
    127.0.0.1 search.sextracker.com
    127.0.0.1 search.shopnav.com #[Sypware.Shopnav]
    127.0.0.1 search.sidebarsearch.com
    127.0.0.1 search.siteparker.com
    127.0.0.1 search.smokaz.com
    127.0.0.1 search.startium.com
    127.0.0.1 search.startnow.com
    127.0.0.1 search.starware.com #[McAfee.Adware-Starware]
    127.0.0.1 search.surfsidekick.com #[Panda.Spyware/SurfSideKick]
    127.0.0.1 search.targetwords.com
    127.0.0.1 search.thinktarget.com
    127.0.0.1 search.trafficclub.com #[Microsoft.Typo-Patrol]
    127.0.0.1 search.trafficsyndicate.com
    127.0.0.1 search.windowenhancer.com #[Parasite.SCBar]
    127.0.0.1 search.winnings.com
    127.0.0.1 search.xpsn.com
    127.0.0.1 search.xrenoder.com #[Search.Xrenoder]
    127.0.0.1 search.yellow-pages.ws
    127.0.0.1 search_fd.php.coolwebsearch.com #[Wildcard DNS]
    127.0.0.1 search1.srch-results.com
    127.0.0.1 search123.com #[SunBelt.Search123.com]
    127.0.0.1 search2.cometsystems.com
    127.0.0.1 search2.drsnsrch.com
    127.0.0.1 search200.com #[eTrust.Search200 Toolbar]
    127.0.0.1 search3.com #[SunBelt.Search3 Hijacker][Parked?]
    127.0.0.1 search42.com
    127.0.0.1 search4www.net
    127.0.0.1 search-777.com
    127.0.0.1 searchaccess.info
    127.0.0.1 searchadv.com
    127.0.0.1 search-all-fast.com #[Win32.Winshow.N]
    127.0.0.1 searchalot.com #[IE-SpyAd]
    127.0.0.1 searchalot.net
    127.0.0.1 searchandclick.com
    127.0.0.1 search-and-more.net
    127.0.0.1 searchant.com #[SunBelt.saSyncMgr]
    127.0.0.1 searchanyway.com
    127.0.0.1 searchassistant.iwon.com
    127.0.0.1 searchbar.findthewebsiteyouneed.com #[BackDoor.Afcore.AL]
    127.0.0.1 searchbar.linksummary.com
    127.0.0.1 searchbar.us #[Spyware.IEToolbar]
    127.0.0.1 search-biz.biz #[Trojan-Proxy.Win32.Agent.jl]
    127.0.0.1 search-biz.info
    127.0.0.1 search-biz.org
    127.0.0.1 searchblaster.com #[WIPO.Staples]
    127.0.0.1 search-buy.biz
    127.0.0.1 search-buy.info
    127.0.0.1 search-buy.net
    127.0.0.1 search-buy.org
    127.0.0.1 searchby.net #[IE-SpyAd]
    127.0.0.1 searchcentrix.com #[Adware.SideBar][Adware.SearchCentrix]
    127.0.0.1 searchclickads.net #[McAfee.Adware-BkdSpace.dr]
    127.0.0.1 search-club.net
    127.0.0.1 search-com.biz
    127.0.0.1 search--control.com #[eTrust.SlimSearch]
    127.0.0.1 search-daily.com #[TROJ_CLICKER.E]
    127.0.0.1 searchdisp.hotbar.com
    127.0.0.1 searche.info
    127.0.0.1 search-end.com
    127.0.0.1 searchenginebar.com #[Parasite.RXToolbar]
    127.0.0.1 searches.worldtostart.com
    127.0.0.1 searchexe.com
    127.0.0.1 searchforit.com #[eTrust.AdShooter.SearchForIt]
    127.0.0.1 search-free.net
    127.0.0.1 search-free.org
    127.0.0.1 searchfst.com #[SFUtility Class]
    127.0.0.1 searchfu.net #[eTrust.SearchFu/123Search]
    127.0.0.1 searchfuel.com
    127.0.0.1 search-galaxy.biz
    127.0.0.1 searchgateway.net #[Parasite.SearchGateway]
    127.0.0.1 search--here.info
    127.0.0.1 searchhippo.mygeek.com
    127.0.0.1 searchinaflash.com
    127.0.0.1 search-ing.com
    127.0.0.1 searchingall.com #[AdWare.Kodpye.a]
    127.0.0.1 searchinwww.net
    127.0.0.1 searchit.com #[Parasite.Pugi][McAfee.Adware-SearchIt]
    127.0.0.1 search-itnow.com #[Parasite.AdultLinks]
    127.0.0.1 searchitquick.com #[IE-SpyAd]
    127.0.0.1 searchlocate.com #[IE-SpyAd][cgi.search123.com]
    127.0.0.1 searchmeup.com #[CWS.Svcinit.3]
    127.0.0.1 searchmiracle.com #[Adware.EliteBar.B][Trojan.StartPage.NK]
    127.0.0.1 search-motor.com
    127.0.0.1 search-paga.com
    127.0.0.1 searchportal.domainsponsor.com
    127.0.0.1 searchportal.information.com #[Panda.Spyware:Cookie/Searchportal]
    127.0.0.1 search-q.com
    127.0.0.1 searchresults.180searchassistant.com
    127.0.0.1 searchservices.info
    127.0.0.1 searchsprint.subportal.com
    127.0.0.1 searchsquire.com #[Parasite.SearchSquire]
    127.0.0.1 searchsuggestions.com
    127.0.0.1 search-to-find.com
    127.0.0.1 searchweb2.com
    127.0.0.1 search-world.net #[MHTMLRedir.Exploit]
    127.0.0.1 searchx.cc #[CWS.Searchx][Trojan.Win32.StartPage.fw]
    127.0.0.1 searchxl.com #[Adware.ZeroPopUpBar]
    127.0.0.1 searskmcom.112.2o7.net
    127.0.0.1 seblog.us
    127.0.0.1 sec1.liveperson.net #[SpySweeper.Spy.Cookie]
    127.0.0.1 secondary.webhancer.com
    127.0.0.1 secretmaker.thinktarget.com #[farm.thinktarget.com]
    127.0.0.1 server.as5000.com
    127.0.0.1 server.cpmstar.com #[ads.shizmoo.com]
    127.0.0.1 server.gamyun.net
    127.0.0.1 server.iad.liveperson.net #[Spyware:Cookie/Server.iad.Liveperson]
    127.0.0.1 server.opistat.com
    127.0.0.1 server.personalmoneytree.com #[AdWare.Win32.MDH.e]
    127.0.0.1 server.trafficaces.com
    127.0.0.1 server.webhancer.com
    127.0.0.1 server01.popupmoney.com
    127.0.0.1 server02.us2.egwn.net
    127.0.0.1 server1.103092804.com
    127.0.0.1 server1.adsrve.com
    127.0.0.1 server1.opentracker.net
    127.0.0.1 server10.opentracker.net
    127.0.0.1 server2.103092804.com
    127.0.0.1 server2.adsrve.com #[eTrust.Adsrve]
    127.0.0.1 server2.as5000.com
    127.0.0.1 server2.internetdump.com
    127.0.0.1 server3.103092804.com
    127.0.0.1 server3.adsrve.com
    127.0.0.1 server3.web-stat.com
    127.0.0.1 server4.103092804.com #[server2.adsrve.com]
    127.0.0.1 server4.adsrve.com
    127.0.0.1 server4.tps108.org
    127.0.0.1 server4.web-stat.com
    127.0.0.1 service.bargain-buddy.net #[W32/BargainBuddy.AO.dropper]
    127.0.0.1 service.bfast.com #[Ewido.TrackingCookie.Bfast]
    127.0.0.1 service.bullseye-network.com
    127.0.0.1 service.click2boost.com
    127.0.0.1 service.digitalnames.net
    127.0.0.1 service.multi-pops.com
    127.0.0.1 service.urchin.com #[Urchin Tracking Module]
    127.0.0.1 service1.bargain-buddy.net #[McAfee.Adware-BB]
    127.0.0.1 service1.digitalnames.net
    127.0.0.1 service2.bargain-buddy.net
    127.0.0.1 service2.bfast.com #[Tenebril.Tracking Cookie]
    127.0.0.1 service2.digitalnames.net
    127.0.0.1 service3.bargain-buddy.net
    127.0.0.1 service3.digitalnames.net
    127.0.0.1 service4.bargain-buddy.net
    127.0.0.1 service5.bargain-buddy.net
    127.0.0.1 service6.bargain-buddy.net
    127.0.0.1 service7.bargain-buddy.net
    127.0.0.1 serving.rpowermedia.com #[AdvertPro]
    127.0.0.1 sesso-orale-gratis.net
    127.0.0.1 sesso-racconti.com
    127.0.0.1 setupahost.net
    127.0.0.1 setupspcp1.888.com
    127.0.0.1 sevenc.vze.com #[VBS.Powcox@mm]
    127.0.0.1 smartpops.com
    127.0.0.1 spyaxe.net #[eTrust.Win32.Puper]
    127.0.0.1 spyaxesupport.com #[IE-SpyAd]
    127.0.0.1 spyblast.com #[SiteAdvisor.spyblast.com]
    127.0.0.1 spybotremover.net
    127.0.0.1 spybouncer.com #[Rogue/Suspect]
    127.0.0.1 spycut.com #[Rogue/Suspect][SiteAdvisor.spycut.com]
    127.0.0.1 spydestroy.com
    127.0.0.1 spyfalcon.com #[Ewido.Adware.SpyFalcon]
    127.0.0.1 spyferret.com #[OnlinePcFix.SpyFerret]
    127.0.0.1 spyheal.biz
    127.0.0.1 spyheal.com #[Win32/Adware.SpywareQuake][Rogue/Suspect]
    127.0.0.1 spy-iblock.com #[IE-SpyAd]
    127.0.0.1 spy-kill.com
    127.0.0.1 spylog.com #[SecuritySpace.WebBug]
    127.0.0.1 spylog.ru
    127.0.0.1 spymac.us.intellitxt.com
    127.0.0.1 spynomore.com
    127.0.0.1 spyofficer.com
    127.0.0.1 spyorgy.net
    127.0.0.1 spysheriff.com #[SunBelt.SpySheriff]
    127.0.0.1 spyshield.org
    127.0.0.1 spyspotter.com #[Symantec.spyspotter.com]
    127.0.0.1 spystream.babenet.com
    127.0.0.1 spytrack.tic.ru
    127.0.0.1 spy-ware.lavasoftspyware.info #[server down?]
    127.0.0.1 spy-ware.slemshield.com
    127.0.0.1 spywareavenger.com #[Rogue/Suspect]
    127.0.0.1 spyware-cash.com
    127.0.0.1 spywarecrusher.com
    127.0.0.1 spywarecure.net
    127.0.0.1 spywaredisinfector.com #[Rogue/Suspect]
    127.0.0.1 spywarehelp.net #[Internet Enhancement Pak]
    127.0.0.1 spywarelabs.com #[Adware.VirtualBouncer]
    127.0.0.1 spywarelabs.fileburst.com
    127.0.0.1 spyware-locator.cc
    127.0.0.1 spywaremustdie.com #[clearsurfing.net]
    127.0.0.1 spywareno.com #[searchterror.com]
    127.0.0.1 spywarenuker.biz
    127.0.0.1 spywarequake.com #[McAfee.SpywareQuake]
    127.0.0.1 spyware-re.t35.com #[umaxsearch.com]
    127.0.0.1 spywareremoval.bulletproofsoft.com
    127.0.0.1 spyware-removal.net
    127.0.0.1 spywareremoval.ws #[SpwareRemoval]
    127.0.0.1 spywareremover.spybouncer.com
    127.0.0.1 spywareremover.storebiz4u.com
    127.0.0.1 spywarestormer.com #[Rogue/Suspect]
    127.0.0.1 spywarestrike.com #[Rogue/Suspect]
    127.0.0.1 spywarevanisher.com
    127.0.0.1 spywarewasher.net
    127.0.0.1 spywarewizard.com #[Rogue/Suspect]
    127.0.0.1 spywarewizard.net #[Rogue/Suspect.Affiliate]
    127.0.0.1 spywarexp.com #[Rogue/Suspect]
    127.0.0.1 sqcontrol.biz
    127.0.0.1 sqlservercentral.us.intellitxt.com
    127.0.0.1 squarefootball.uk.intellitxt.com
    127.0.0.1 sqwire.com #[Adware.Sqwire][Xupiter.Sqwire]
    127.0.0.1 top100.rambler.ru
    127.0.0.1 top100-images.rambler.ru
    127.0.0.1 top-10-shop.com
    127.0.0.1 top40-charts.us.intellitxt.com
    127.0.0.1 topadult10.com
    127.0.0.1 top-banners.com #[SunBelt.KGhost]
    127.0.0.1 topdatasearch.com
    127.0.0.1 topdesktop.ezthemes.com
    127.0.0.1 topdownloads.nl.intellitxt.com
    127.0.0.1 topfivesearch.com #[TROJ_DLOADER.VR]
    127.0.0.1 topica.advertserve.com
    127.0.0.1 topinstalls.com #[AVG.Trojan.Dropper.Agent.PP]
    127.0.0.1 toplist.cz
    127.0.0.1 ad-logics.com
    127.0.0.1 ad-tech.com
    127.0.0.1 ad.aftenposten.no
    127.0.0.1 ad.anuntis.com
    127.0.0.1 ad.asap-asp.net
    127.0.0.1 ad.choiceradio.com
    127.0.0.1 ad.e-kolay.net
    127.0.0.1 ad.freecity.de
    127.0.0.1 ad.gate24.ch
    127.0.0.1 ad.hbv.de
    127.0.0.1 ad.isohunt.com
    127.0.0.1 ad.jamba.net
    127.0.0.1 ad.nachtagenten.de
    127.0.0.1 ad.nrk.no
    127.0.0.1 ad.specificmedia.com
    127.0.0.1 ad.tweakpc.de
    127.0.0.1 ad.virtual-nights.com
    127.0.0.1 ad.wavu.hu
    127.0.0.1 ad.weatherbug.com
    127.0.0.1 ad1.emule-project.org
    127.0.0.1 ad2.iinfo.cz
    127.0.0.1 ad2flash.com
    127.0.0.1 ad3.iinfo.cz
    127.0.0.1 ad3.pamedia.com.au
    127.0.0.1 adaos-ads.net
    127.0.0.1 adboost.de.vu
    127.0.0.1 adboost.net
    127.0.0.1 adbrite.com
    127.0.0.1 adbutler.de
    127.0.0.1 adbuyer3.lycos.com
    127.0.0.1 adcell.de
    127.0.0.1 adchannel.contextplus.net
    127.0.0.1 adclient.rottentomatoes.com
    127.0.0.1 adcorps.com
    127.0.0.1 add.newmedia.cz
    127.0.0.1 addcontrol.net
    127.0.0.1 addesktop.com
    127.0.0.1 ademails.com
    127.0.0.1 adengage.com
    127.0.0.1 adhostcenter.com
    127.0.0.1 adimages.carsoup.com
    127.0.0.1 adimages.homestore.com
    127.0.0.1 adition.com
    127.0.0.1 adition.de
    127.0.0.1 admanager.carsoup.com
    127.0.0.1 admarketplace.net
    127.0.0.1 admeta.com
    127.0.0.1 adminder.com
    127.0.0.1 adnet.biz
    127.0.0.1 adnet.ru
    127.0.0.1 adnews.maddog2000.de
    127.0.0.1 adonspot.com
    127.0.0.1 adremedy.com
    127.0.0.1 adrotate.de
    127.0.0.1 ads.100asians.com
    127.0.0.1 ads.administrator.de
    127.0.0.1 ads.amigos.com
    127.0.0.1 ads.anm.co.uk
    127.0.0.1 ads.berlinonline.de
    127.0.0.1 ads.billiton.de
    127.0.0.1 ads.brabys.com
    127.0.0.1 ads.canalblog.com
    127.0.0.1 ads.cavello.com
    127.0.0.1 ads.clanservers.com
    127.0.0.1 ads.cooperhosting.com
    127.0.0.1 ads.dada.it
    127.0.0.1 ads.dazoot.ro
    127.0.0.1 ads.digital-digest.com
    127.0.0.1 ads.domeus.com
    127.0.0.1 ads.edbindex.dk
    127.0.0.1 ads.elitetrader.com
    127.0.0.1 ads.ferianc.com
    127.0.0.1 ads.football.co.uk
    127.0.0.1 ads.forium.de
    127.0.0.1 ads.friendfinder.com
    127.0.0.1 ads.gamigo.de
    127.0.0.1 ads.gaming-universe.de
    127.0.0.1 ads.goyk.com
    127.0.0.1 ads.ibest.com.br
    127.0.0.1 ads.indiatimes.com
    127.0.0.1 ads.ingame.de
    127.0.0.1 ads.kinobox.cz
    127.0.0.1 ads.krawall.de
    127.0.0.1 ads.lamp-solutions.de
    127.0.0.1 ads.lvz-online.de
    127.0.0.1 ads.macupdate.com
    127.0.0.1 ads.mambocommunities.com
    127.0.0.1 ads.mgnetwork.com
    127.0.0.1 ads.myguysolutions.com
    127.0.0.1 ads.netclusive.de
    127.0.0.1 ads.newsobserver.com
    127.0.0.1 ads.next.com.au
    127.0.0.1 ads.overclockers.at
    127.0.0.1 ads.passion.com
    127.0.0.1 ads.planetamd64.com
    127.0.0.1 ads.quoka.de
    127.0.0.1 ads.rivals.net
    127.0.0.1 ads.rockstargames.com
    127.0.0.1 ads.rpgdot.com
    127.0.0.1 ads.rpgui.com
    127.0.0.1 ads.shareprovider.com
    127.0.0.1 ads.shizmoo.com
    127.0.0.1 ads.skins.be
    127.0.0.1 ads.spyderbyte.com
    127.0.0.1 ads.stratics.com
    127.0.0.1 ads.thestranger.com
    127.0.0.1 ads.thottbot.com
    127.0.0.1 ads.totallyfreestuff.com
    127.0.0.1 ads.tripod.lycos.it
    127.0.0.1 ads.tripod.spray.se
    127.0.0.1 ads.ucomics.com
    127.0.0.1 ads.uigc.net
    127.0.0.1 ads.us.e-planning.net
    127.0.0.1 ads.virtual-nights.com
    127.0.0.1 ads.vnumedia.com
    127.0.0.1 ads.y-0.net
    127.0.0.1 ads1.virtual-nights.com
    127.0.0.1 ads2.exhedra.com
    127.0.0.1 ads2.virtual-nights.com
    127.0.0.1 ads2004.treiberupdate.de
    127.0.0.1 ads3.flabber.nl
    127.0.0.1 ads3.virtual-nights.com
    127.0.0.1 ads4.virtual-nights.com
    127.0.0.1 ads5.virtual-nights.com
    127.0.0.1 adscpm.com
    127.0.0.1 adserv.gamezone.de
    127.0.0.1 adserv.muchosucko.com
    127.0.0.1 adserv1.winboard.org
    127.0.0.1 adserver.allerinternett.com
    127.0.0.1 adserver.ath.cx
    127.0.0.1 adserver.bandaancha.st
    127.0.0.1 adserver.barrapunto.com
    127.0.0.1 adserver.betandwin.de
    127.0.0.1 adserver.cheatplanet.com
    127.0.0.1 adserver.conjelco.com
    127.0.0.1 adserver.designertoday.com
    127.0.0.1 adserver.filefront.com
    127.0.0.1 adserver.gb2.motorpresse.de
    127.0.0.1 adserver.gb3.motorpresse.de
    127.0.0.1 adserver.geizkragen.de
    127.0.0.1 adserver.kyoceramita-europe.com
    127.0.0.1 adserver.motorpresse.de
    127.0.0.1 adserver.netmenu.nl
    127.0.0.1 adserver.news.de
    127.0.0.1 adserver.visions.de
    127.0.0.1 adserver.webhostlist.de
    127.0.0.1 adserver1-images.backbeatmedia.com
    127.0.0.1 adserver1.mindshare.de
    127.0.0.1 adserver1.shareconnector.com
    127.0.0.1 adserver2.mindshare.de
    127.0.0.1 adservervv.geizkragen.de
    127.0.0.1 adserving.eleven-agency.com
    127.0.0.1 adshadow.net
    127.0.0.1 adsklick.de
    127.0.0.1 adsonar.com
    127.0.0.1 adsponse.de
    127.0.0.1 adsrevenue.net
    127.0.0.1 adstat.4u.pl
    127.0.0.1 adtiger.de
    127.0.0.1 adtoma.com
    127.0.0.1 adtrak.net
    127.0.0.1 adv.for-ua.com
    127.0.0.1 advert.hu
    127.0.0.1 advertiseireland.com
    127.0.0.1 advertmarket.com
    127.0.0.1 advertpro.ya.com
    127.0.0.1 advertstream.com
    127.0.0.1 advlab.it
    127.0.0.1 adx.gainesvillesun.com
    127.0.0.1 afcyhf.com
    127.0.0.1 affiliate.kitapyurdu.com
    127.0.0.1 affiliate.mogs.com
    127.0.0.1 affiliatefuel.com
    127.0.0.1 affiliatetracking.com
    127.0.0.1 affiliplus.de
    127.0.0.1 afiliados.submarino.com.br
    127.0.0.1 aidu-ads.de
    127.0.0.1 aim4media.com
    127.0.0.1 alclick.com
    127.0.0.1 allosponsor.com
    127.0.0.1 allotraffic.com
    127.0.0.1 anahtars.com
    127.0.0.1 anm.intelli-direct.com
    127.0.0.1 as.nu.nl
    127.0.0.1 asv.gameplanet.co.nz
    127.0.0.1 avres.net
    127.0.0.1 avsads.com
    127.0.0.1 awarez.net
    127.0.0.1 axelsfun.com
    127.0.0.1 backbeatmedia.com
    127.0.0.1 banner-exchange-24.de
    127.0.0.1 banner.alphacool.de
    127.0.0.1 banner.getgo.de
    127.0.0.1 banner.musikmedia.de
    127.0.0.1 banner.noblepoker.com
    127.0.0.1 banner.supereva.it
    127.0.0.1 banner.titan-dsl.de
    127.0.0.1 banner.vadian.net
    127.0.0.1 banner.webdmz.tv2.dk
    127.0.0.1 bannerconnect.net
    127.0.0.1 banners.kfmb.com
    127.0.0.1 banners.one2one.com
    127.0.0.1 banners.sugeridos.com
    127.0.0.1 bannery.cz
    127.0.0.1 rotabanner.auto.ru
    127.0.0.1 rotabanner.com
    127.0.0.1 rotabanner.dni.ru
    127.0.0.1 rotabanner.izvestia.ru
    127.0.0.1 rotabanner.rian.ru
    127.0.0.1 rotator.juggler.inetinteractive.com
    127.0.0.1 track.freexxxhost.net
    127.0.0.1 trackingsoft.com
    127.0.0.1 trafficstrategies.com
    127.0.0.1 trafficvenue.net
    127.0.0.1 2mdn.net
    127.0.0.1 abacho.net
    127.0.0.1 accipiter.speedera.net
    127.0.0.1 ad.yieldmanager.com
    127.0.0.1 adrevolver.holzmannverlag.de
    127.0.0.1 ads.urbandictionary.com
    127.0.0.1 ads.websiteallies.com
    127.0.0.1 adserver.dirks-computerecke.de
    127.0.0.1 bluetime.com
    127.0.0.1 boersego-ads.de
    127.0.0.1 callssenger.co.kr
    127.0.0.1 clicks.jackpot.com
    127.0.0.1 clicks.mods.de
    127.0.0.1 code-server.biz
    127.0.0.1 connextra.com
    127.0.0.1 contextclick.com
    127.0.0.1 counter.mirohost.net
    127.0.0.1 coupling-media.de
    127.0.0.1 cxoreport.dnsalias.net
    127.0.0.1 danban.com
    127.0.0.1 de.rottentomatoes.com
    127.0.0.1 direct-revenue.com
    127.0.0.1 dist.belnk.com
    127.0.0.1 doubleclic.com
    127.0.0.1 drumcash.com
    127.0.0.1 e-planning.net
    127.0.0.1 easy-ad.info
    127.0.0.1 easyad.info
    127.0.0.1 engine.espace.netavenir.com
    127.0.0.1 etargetnet.com
    127.0.0.1 etracker.de
    127.0.0.1 eur.a1.yimg.com
    127.0.0.1 eusta.de
    127.0.0.1 ext4.price.ru
    127.0.0.1 extads.web.de
    127.0.0.1 ffxcam.fairfax.com.au
    127.0.0.1 firstadsolution.com
    127.0.0.1 ftjcfx.com
    127.0.0.1 googleadservices.com
    127.0.0.1 grantmedia.com
    127.0.0.1 head.imho.ru
    127.0.0.1 hexusads.fluent.ltd.uk
    127.0.0.1 iad.anm.co.uk
    127.0.0.1 igads.no.publicus.com
    127.0.0.1 imagecash.net
    127.0.0.1 impact.as
    127.0.0.1 impressionmedia.cz
    127.0.0.1 industrybrains.com
    127.0.0.1 intellitxt.com
    127.0.0.1 interclick.com
    127.0.0.1 itadnetwork.co.uk
    127.0.0.1 itbannerexchange.com
    127.0.0.1 ivwbox.de
    127.0.0.1 juggler.inetinteractive.com
    127.0.0.1 kontera.com
    127.0.0.1 layer-ad.de
    127.0.0.1 layer-ads.de
    127.0.0.1 lduhtrp.net
    127.0.0.1 m4n.nl
    127.0.0.1 marketing.indicavia.de
    127.0.0.1 mediaplazza.com
    127.0.0.1 megawerbung.de
    127.0.0.1 mindseti.com
    127.0.0.1 mixtraffic.com
    127.0.0.1 mojobucks.com
    127.0.0.1 muwmedia.com
    127.0.0.1 my1ads.com
    127.0.0.1 mystat-in.net
    127.0.0.1 mytop-in.net
    127.0.0.1 n69.com
    127.0.0.1 naj.sk
    127.0.0.1 nedstatpro.net
    127.0.0.1 newnet.qsrch.com
    127.0.0.1 oas.blick.ch
    127.0.0.1 oas.heise.de
    127.0.0.1 oas.repubblica.it
    127.0.0.1 oewa.at
    127.0.0.1 oewabox.at
    127.0.0.1 oinadserve.com
    127.0.0.1 onlinerewardcenter.com
    127.0.0.1 partner.gonamic.de
    127.0.0.1 planetactive.com
    127.0.0.1 potenza.cz
    127.0.0.1 pro.i-doctor.co.kr
    127.0.0.1 proaffili.net
    127.0.0.1 promozia.de
    127.0.0.1 pub.chez.com
    127.0.0.1 quarterserver.de
    127.0.0.1 quigo.com
    127.0.0.1 ranking-hits.de
    127.0.0.1 rate.ru
    127.0.0.1 reklama.mironet.cz
    127.0.0.1 reklamer.com.ua
    127.0.0.1 revsci.net
    127.0.0.1 ru-traffic.com
    127.0.0.1 secureads.ft.com
    127.0.0.1 sensismediasmart.com.au
    127.0.0.1 separtnership.com
    127.0.0.1 sponsorads.de
    127.0.0.1 statistik.motorpresse.de
    127.0.0.1 stats.directnic.com
    127.0.0.1 stats.surfaid.ihost.com
    127.0.0.1 stop-popup-ads-now.com
    127.0.0.1 surfmusik-adserver.de
    127.0.0.1 targad.de
    127.0.0.1 textads.opera.com
    127.0.0.1 thinkingmedia.net
    127.0.0.1 tkqlhce.com
    127.0.0.1 top.one.ru
    127.0.0.1 tps108.org
    127.0.0.1 tqlkg.com
    127.0.0.1 trafix.sk
    127.0.0.1 vendaregroup.com
    127.0.0.1 wads.webteh.com
    127.0.0.1 webtrack.it
    127.0.0.1 werbung.meteoxpress.com
    127.0.0.1 werbung.world4you.com
    127.0.0.1 xbanner.cz
    127.0.0.1 yceml.net
    127.0.0.1 clickcash.webpower.com
    127.0.0.1 falkag.de
    127.0.0.1 mediadvertising.ro
    127.0.0.1 overpro.com
    127.0.0.1 qckjmp.com
    127.0.0.1 xchange.ro
    127.0.0.1 180searchassistant.com
    127.0.0.1 247realmedia.com
    127.0.0.1 a-counter.kiev.ua
    127.0.0.1 a.gismeteo.ru
    127.0.0.1 ads.herald-sun.com
    127.0.0.1 blazefind.com
    127.0.0.1 bnr.volgocity.ru
    127.0.0.1 boom.ro
    127.0.0.1 c.bigmir.net
    127.0.0.1 cat.clx.ru
    127.0.0.1 cjbmanagement.com
    127.0.0.1 cnt.one.ru
    127.0.0.1 count.rin.ru
    127.0.0.1 counter.rambler.ru
    127.0.0.1 counter.search.bg
    127.0.0.1 deloo.de
    127.0.0.1 direct.lbe.ru
    127.0.0.1 directwebsearch.net
    127.0.0.1 domainsteam.de
    127.0.0.1 eadexchange.com
    127.0.0.1 engine.awaps.net
    127.0.0.1 enginenetwork.com
    127.0.0.1 exchange.bg
    127.0.0.1 flexbanner.com
    127.0.0.1 freestat.pl
    127.0.0.1 gcirm.californianonline.com
    127.0.0.1 giftsky.org
    127.0.0.1 hit.bg
    127.0.0.1 hit.gemius.pl
    127.0.0.1 hurricanedigitalmedia.com
    127.0.0.1 internet-optimizer.com
    127.0.0.1 laih.com
    127.0.0.1 lstat.susanin.com
    127.0.0.1 marketing.centrebet.com
    127.0.0.1 marketscore.com
    127.0.0.1 mediavantage.de
    127.0.0.1 microstatic.pl
    127.0.0.1 musiccounter.ru
    127.0.0.1 mystat.pl
    127.0.0.1 oas.roanoke.com
    127.0.0.1 overpeer.com
    127.0.0.1 partner-source.com
    127.0.0.1 pbnet.ru
    127.0.0.1 precisioncounter.com
    127.0.0.1 professorbanner.com
    127.0.0.1 ranking-charts.de
    127.0.0.1 rb1.design.ru
    127.0.0.1 realtechnetwork.com
    127.0.0.1 realtechnetwork.net
    127.0.0.1 rewardster.com
    127.0.0.1 rl.auto.ru
    127.0.0.1 rnd.yxo.ru
    127.0.0.1 rpts.net
    127.0.0.1 serv0.com
    127.0.0.1 sidebar.angelfire.com
    127.0.0.1 smfgroup.cjb.net
    127.0.0.1 sponsors.thoughtsmedia.com
    127.0.0.1 stat.dealtime.com
    127.0.0.1 stat.pl
    127.0.0.1 supertop100.com
    127.0.0.1 targetpoint.com
    127.0.0.1 targetsaver.com
    127.0.0.1 top.proext.com
    127.0.0.1 top100.mafia.ru
    127.0.0.1 toplista.mw.hu
    127.0.0.1 topping.com.ua
    127.0.0.1 topshop-counter.rambler.ru
    127.0.0.1 traficdublu.ro
    127.0.0.1 updated.com
    127.0.0.1 us.a1.yimg.com
    127.0.0.1 valueclick.net
    127.0.0.1 wannaclick.com
    127.0.0.1 webangel.ru
    127.0.0.1 websitefreepromotions.com
    127.0.0.1 windupdates.com
    127.0.0.1 www-banner.chat.ru
    127.0.0.1 zeads.com
    127.0.0.1 007arcadegames.com
    127.0.0.1 actualdeals.com
    127.0.0.1 adserv.aip.org
    127.0.0.1 advspot.com
    127.0.0.1 avatarresources.com
    127.0.0.1 b1.azjmp.com
    127.0.0.1 bridgetrack.com
    127.0.0.1 casinorewards.com
    127.0.0.1 centrport.net
    127.0.0.1 ch.questionmarket.com
    127.0.0.1 comprabanner.it
    127.0.0.1 datingadvertising.com
    127.0.0.1 default-homepage-network.com
    127.0.0.1 drinkmy.com
    127.0.0.1 e2give.com
    127.0.0.1 euros4click.de
    127.0.0.1 eyewonder.com
    127.0.0.1 ezula.com
    127.0.0.1 f1organizer.com
    127.0.0.1 gamehouse.com
    127.0.0.1 go-clicks.de
    127.0.0.1 hitfarm.com
    127.0.0.1 j.2004cms.com
    127.0.0.1 jbeet.cjt1.net
    127.0.0.1 jcontent.bns1.net
    127.0.0.1 jnova.cjt1.net
    127.0.0.1 lightningcast.net
    127.0.0.1 mastermind.com
    127.0.0.1 media-motor.net
    127.0.0.1 oas.lee.net
    127.0.0.1 overture.com
    127.0.0.1 partners.priceline.com
    127.0.0.1 rightmedia.net
    127.0.0.1 rle.ru
    127.0.0.1 roings.com
    127.0.0.1 searchlocate.com
    127.0.0.1 seo4india.com
    127.0.0.1 servads.aip.org
    127.0.0.1 servedby.netshelter.net
    127.0.0.1 sn.baventures.com
    127.0.0.1 sponsorpro.de
    127.0.0.1 spywarelabs.com
    127.0.0.1 toprebates.com
    127.0.0.1 ultimatecounter.com
    127.0.0.1 view4cash.de
    127.0.0.1 wenksdisdkjeilsow.com
    127.0.0.1 ad.reunion.com
    127.0.0.1 webcounter.cz
    127.0.0.1 101order.com
    127.0.0.1 123banners.com
    127.0.0.1 123found.com
    127.0.0.1 180solutions.com
    127.0.0.1 247media.com
    127.0.0.1 24pm-affiliation.com
    127.0.0.1 2o7.net
    127.0.0.1 4affiliate.net
    127.0.0.1 4d5.net
    127.0.0.1 7adpower.com
    127.0.0.1 911promotion.com
    127.0.0.1 a.boom.ro
    127.0.0.1 a.consumer.net
    127.0.0.1 a.mktw.net
    127.0.0.1 a.r.tv.com
    127.0.0.1 a.rn11.com
    127.0.0.1 a.xanga.com
    127.0.0.1 a32.g.a.yimg.com
    127.0.0.1 aaddzz.com
    127.0.0.1 abcnews.footprint.net
    127.0.0.1 abetterinternet.com
    127.0.0.1 abz.com
    127.0.0.1 ac.rnm.ca
    127.0.0.1 accelerator-media.com
    127.0.0.1 action.ientry.net
    127.0.0.1 actionsplash.com
    127.0.0.1 ad-annex.com
    127.0.0.1 ad-flow.com
    127.0.0.1 ad-images.suntimes.com
    127.0.0.1 ad-rotator.com
    127.0.0.1 ad-server.gulasidorna.se
    127.0.0.1 ad-souk.com
    127.0.0.1 ad-space.net
    127.0.0.1 ad-universe.com
    127.0.0.1 ad.4web.cz
    127.0.0.1 ad.71i.de
    127.0.0.1 ad.abcnews.com
    127.0.0.1 ad.abctv.com
    127.0.0.1 ad.about.com
    127.0.0.1 ad.aboutit.de
    127.0.0.1 ad.aftonbladet.se
    127.0.0.1 ad.allstar.cz
    127.0.0.1 ad.bondage.com
    127.0.0.1 ad.centrum.cz
    127.0.0.1 ad.cgi.cz
    127.0.0.1 ad.clix.pt
    127.0.0.1 ad.digitallook.com
    127.0.0.1 ad.disney.go.com
    127.0.0.1 ad.domainfactory.de
    127.0.0.1 ad.dvdforum.nu
    127.0.0.1 ad.e-not.net
    127.0.0.1 ad.eurosport.com
    127.0.0.1 ad.ezpeer.com
    127.0.0.1 ad.fido.net
    127.0.0.1 ad.fragzone.se
    127.0.0.1 ad.free6.com
    127.0.0.1 ad.grafika.cz
    127.0.0.1 ad.harmony-central.com
    127.0.0.1 ad.howstuffworks.com
    127.0.0.1 ad.hyena.cz
    127.0.0.1 ad.iinfo.cz
    127.0.0.1 ad.ilse.nl
    127.0.0.1 ad.img.yahoo.co.kr
    127.0.0.1 ad.investopedia.com
    127.0.0.1 ad.jetsoftware.com
    127.0.0.1 ad.keenspace.com
    127.0.0.1 ad.krutilka.ru
    127.0.0.1 ad.kvantum.cz
    127.0.0.1 ad.leadcrunch.com
    127.0.0.1 ad.linx.cz
    127.0.0.1 ad.liveinternet.ru
    127.0.0.1 ad.lupa.cz
    127.0.0.1 ad.mediastorm.hu
    127.0.0.1 ad.mgd.de
    127.0.0.1 ad.musicmatch.com
    127.0.0.1 ad.mwizard.net
    127.0.0.1 ad.nozonedata.com
    127.0.0.1 ad.pbs.bb.ru
    127.0.0.1 ad.playground.ru
    127.0.0.1 ad.rambler.ru
    127.0.0.1 ad.seznam.cz
    127.0.0.1 ad.simgames.net
    127.0.0.1 ad.smni.com
    127.0.0.1 ad.spieletips.de
    127.0.0.1 ad.suprnova.org
    127.0.0.1 ad.surfsecret.com
    127.0.0.1 ad.sweclockers.com
    127.0.0.1 ad.tisnet.net.tw
    127.0.0.1 ad.top50.to
    127.0.0.1 ad.tv2.no
    127.0.0.1 ad.uol.com.br
    127.0.0.1 ad.way.cz
    127.0.0.1 ad.wz.cz
    127.0.0.1 ad.yadro.ru
    127.0.0.1 ad01.mediacorpsingapore.com
    127.0.0.1 ad1.gamezone.com
    127.0.0.1 ad1.hardware.no
    127.0.0.1 ad1.kde.cz
    127.0.0.1 ad1.outpost.com
    127.0.0.1 ad1.zendmedia.com
    127.0.0.1 ad2.atlas.cz
    127.0.0.1 ad2.bb.ru
    127.0.0.1 ad2.insitemedia.hu
    127.0.0.1 ad2.lbe.ru
    127.0.0.1 ad2.linx.cz
    127.0.0.1 ad2.linxcz.cz
    127.0.0.1 ad2.lupa.cz
    127.0.0.1 ad2.seznam.cz
    127.0.0.1 ad2.tisnet.net.tw
    127.0.0.1 ad3.tisnet.net.tw
    127.0.0.1 ad4.atlas.cz
    127.0.0.1 ad4.tisnet.net.tw
    127.0.0.1 ad41.atlas.cz
    127.0.0.1 ad4ex.com
    127.0.0.1 adbanner.ro
    127.0.0.1 adbot.com
    127.0.0.1 adbureau.net
    127.0.0.1 adbutler.com
    127.0.0.1 adcenter.mdf.se
    127.0.0.1 adcenter.net
    127.0.0.1 adcentriconline.com
    127.0.0.1 adcept.net
    127.0.0.1 adclick.com
    127.0.0.1 adclick.gamespy.com
    127.0.0.1 adclick.mint.se
    127.0.0.1 adclick.ro
    127.0.0.1 adcodes.bla-bla.com
    127.0.0.1 adcomplete.com
    127.0.0.1 adcontroller.unicast.com
    127.0.0.1 adcreative.tribuneinteractive.com
    127.0.0.1 adcycle.com
    127.0.0.1 adcycle.icpeurope.net
    127.0.0.1 addfreestats.com
    127.0.0.1 addme.com
    127.0.0.1 addsdev.mediapost.com
    127.0.0.1 addynamix.com
    127.0.0.1 adevents.msn.com
    127.0.0.1 adext.inkclub.com
    127.0.0.1 adfarm.mediaplex.com
    127.0.0.1 adfiles.api.no
    127.0.0.1 adflight.com
    127.0.0.1 adfly.com
    127.0.0.1 adhearus.com
    127.0.0.1 adi.mainichi.co.jp
    127.0.0.1 adimage.asiaone.com.sg
    127.0.0.1 adimages.been.com
    127.0.0.1 adimages.sanomawsoy.fi
    127.0.0.1 adimg1.chosun.com
    127.0.0.1 adimgs.sapo.pt
    127.0.0.1 adincl.gopher.com
    127.0.0.1 adition.net
    127.0.0.1 adjuggler.yourdictionary.com
    127.0.0.1 adlegend.com
    127.0.0.1 adlink.de
    127.0.0.1 adlogix.net
    127.0.0.1 adm.ad.asap-asp.net
    127.0.0.1 admanagement.ch
    127.0.0.1 admanager.beweb.com
    127.0.0.1 admanager.btopenworld.com
    127.0.0.1 admanager.persianblog.com
    127.0.0.1 admaximize.com
    127.0.0.1 admedia.ro
    127.0.0.1 admex.com
    127.0.0.1 adminshop.com
    127.0.0.1 admonitor.net
    127.0.0.1 admotion.com.ar
    127.0.0.1 ado.internet.cz
    127.0.0.1 adorigin.com
    127.0.0.1 adpepper.dk
    127.0.0.1 adprofile.net
    127.0.0.1 adprojekt.pl
    127.0.0.1 adpush.dreamscape.com
    127.0.0.1 adq.nextag.com
    127.0.0.1 adrenaline.cz
    127.0.0.1 adrenalinesk.sk
    127.0.0.1 adreporting.com
    127.0.0.1 adres.internet.com
    127.0.0.1 adrevolver.com
    127.0.0.1 adriver.ru
    127.0.0.1 adroar.com
    127.0.0.1 adrotator.net
    127.0.0.1 adrun.net
    127.0.0.1 ads-de.spray.net
    127.0.0.1 ads.5ci.lt
    127.0.0.1 ads.aceweb.net
    127.0.0.1 ads.activeagent.at
    127.0.0.1 ads.addesktop.com
    127.0.0.1 ads.adultfriendfinder.com
    127.0.0.1 ads.advance.net
    127.0.0.1 ads.adverline.com
    127.0.0.1 ads.allsites.com
    127.0.0.1 ads.alwayson-network.com
    127.0.0.1 ads.amazingmedia.com
    127.0.0.1 ads.aol.com
    127.0.0.1 ads.astalavista.us
    127.0.0.1 ads.battle.net
    127.0.0.1 ads.belointeractive.com
    127.0.0.1 ads.bfast.com
    127.0.0.1 ads.bianca.com
    127.0.0.1 ads.bigcitytools.com
    127.0.0.1 ads.bigfoot.com
    127.0.0.1 ads.bitsonthewire.com
    127.0.0.1 ads.bluemountain.com
    127.0.0.1 ads.box.sk
    127.0.0.1 ads.businessweek.com
    127.0.0.1 ads.canoe.ca
    127.0.0.1 ads.cbc.ca
    127.0.0.1 ads.cdfreaks.com
    127.0.0.1 ads.centraliprom.com
    127.0.0.1 ads.cgnetworks.com
    127.0.0.1 ads.channel4.com
    127.0.0.1 ads.chipcenter.com
    127.0.0.1 ads.cimedia.com
    127.0.0.1 ads.clearchannel.com
    127.0.0.1 ads.collegclub.com
    127.0.0.1 ads.currantbun.com
    127.0.0.1 ads.cyberfight.ru
    127.0.0.1 ads.cybersales.cz
    127.0.0.1 ads.danworld.net
    127.0.0.1 ads.dbforums.com
    127.0.0.1 ads.ddj.com
    127.0.0.1 ads.deltha.hu
    127.0.0.1 ads.desmoinesregister.com
    127.0.0.1 ads.detelefoongids.nl
    127.0.0.1 ads.developershed.com
    127.0.0.1 ads.directionsmag.com
    127.0.0.1 ads.discovery.com
    127.0.0.1 ads.dk
    127.0.0.1 ads.dmk-internet.com
    127.0.0.1 ads.e-planning.net
    127.0.0.1 ads.einmedia.com
    127.0.0.1 ads.enliven.com
    127.0.0.1 ads.erotism.com
    127.0.0.1 ads.esmas.com
    127.0.0.1 ads.eudora.com
    127.0.0.1 ads.everythingirc.com
    127.0.0.1 ads.exhedra.com
    127.0.0.1 ads.filmup.com
    127.0.0.1 ads.flooble.com
    127.0.0.1 ads.floridatoday.com
    127.0.0.1 ads.fool.com
    127.0.0.1 ads.forbes.com
    127.0.0.1 ads.forbes.net
    127.0.0.1 ads.fortunecity.com
    127.0.0.1 ads.foxkidseurope.net
    127.0.0.1 ads.freecity.de
    127.0.0.1 ads.friendtest.com
    127.0.0.1 ads.g4techtv.com
    127.0.0.1 ads.game.net
    127.0.0.1 ads.gamecity.net
    127.0.0.1 ads.gamecopyworld.no
    127.0.0.1 ads.gameforgeads.de
    127.0.0.1 ads.gamemarshal.com
    127.0.0.1 ads.gamershell.com
    127.0.0.1 ads.gamespy.com
    127.0.0.1 ads.gawker.com
    127.0.0.1 ads.gettools.com
    127.0.0.1 ads.gotfrag.com
    127.0.0.1 ads.grindinggears.com
    127.0.0.1 ads.guardianunlimited.co.uk
    127.0.0.1 ads.hbv.de
    127.0.0.1 ads.heartlight.org
    127.0.0.1 ads.hollywood.com
    127.0.0.1 ads.humorbua.no
    127.0.0.1 ads.icq.com
    127.0.0.1 ads.ign.com
    127.0.0.1 ads.imdb.com
    127.0.0.1 ads.img.co.za
    127.0.0.1 ads.indya.com
    127.0.0.1 ads.inetfast.com
    127.0.0.1 ads.inetinteractive.com
    127.0.0.1 ads.infi.net
    127.0.0.1 ads.infospace.com
    127.0.0.1 ads.internic.co.il
    127.0.0.1 ads.inthemix.com.au
    127.0.0.1 ads.itv.com
    127.0.0.1 ads.jimworld.com
    127.0.0.1 ads.jpost.com
    127.0.0.1 ads.jubii.dk
    127.0.0.1 ads.katz.ws
    127.0.0.1 ads.leo.org
    127.0.0.1 ads.linuxquestions.org
    127.0.0.1 ads.linuxsecurity.com
    127.0.0.1 ads.lnkworld.com
    127.0.0.1 ads.localnow.com
    127.0.0.1 ads.mariuana.it
    127.0.0.1 ads.mediaturf.net
    127.0.0.1 ads.musiccity.com
    127.0.0.1 ads.mysimon.com
    127.0.0.1 ads.nandomedia.com
    127.0.0.1 ads.nationalreview.com
    127.0.0.1 ads.neoseeker.com
    127.0.0.1 ads.netmechanic.com
    127.0.0.1 ads.newcity.com
    127.0.0.1 ads.newcitynet.com
    127.0.0.1 ads.newdream.net
    127.0.0.1 ads.newmedia.cz
    127.0.0.1 ads.newsquest.co.uk
    127.0.0.1 ads.newtimes.com
    127.0.0.1 ads.ngenuity.com
    127.0.0.1 ads.nola.com
    127.0.0.1 ads.ntadvice.com
    127.0.0.1 ads.nyi.net
    127.0.0.1 ads.nyjournalnews.com
    127.0.0.1 ads.nzcity.co.nz
    127.0.0.1 ads.ole.com
    127.0.0.1 ads.onlineguiden.com
    127.0.0.1 ads.optusnet.com.au
    127.0.0.1 ads.osnews.com
    127.0.0.1 ads.ourbrisbane.com
    127.0.0.1 ads.phparena.net
    127.0.0.1 ads.phpclasses.org
    127.0.0.1 ads.pittsburghlive.com
    127.0.0.1 ads.planet.nl
    127.0.0.1 ads.pni.com
    127.0.0.1 ads.powweb.com
    127.0.0.1 ads.premium.cz
    127.0.0.1 ads.premiumnetwork.com
    127.0.0.1 ads.prisacom.com
    127.0.0.1 ads.pro-market.net
    127.0.0.1 ads.rackshack.net
    127.0.0.1 ads.realmedia.de
    127.0.0.1 ads.recoletos.es
    127.0.0.1 ads.rottentomatoes.com
    127.0.0.1 ads.rp-online.de
    127.0.0.1 ads.satyamonline.com
    127.0.0.1 ads.savannahnow.com
    127.0.0.1 ads.scifi.com
    127.0.0.1 ads.sexplanets.com
    127.0.0.1 ads.sify.com
    127.0.0.1 ads.simtel.net
    127.0.0.1 ads.smartclick.com
    127.0.0.1 ads.space.com
    127.0.0.1 ads.sptimes.com
    127.0.0.1 ads.stationplay.com
    127.0.0.1 ads.stileproject.com
    127.0.0.1 ads.storagereview.net
    127.0.0.1 ads.switchboard.com
    127.0.0.1 ads.telegraaf.nl
    127.0.0.1 ads.telegraph.co.uk
    127.0.0.1 ads.theglobeandmail.com
    127.0.0.1 ads.thewebfreaks.com
    127.0.0.1 ads.tiscali.fr
    127.0.0.1 ads.tmcs.net
    127.0.0.1 ads.top500.org
    127.0.0.1 ads.townhall.com
    127.0.0.1 ads.tripod.com
    127.0.0.1 ads.tripod.lycos.de
    127.0.0.1 ads.tripod.lycos.nl
    127.0.0.1 ads.tucows.com
    127.0.0.1 ads.unixathome.org
    127.0.0.1 ads.urli.net
    127.0.0.1 ads.v3exchange.com
    127.0.0.1 ads.vesperexchange.com
    127.0.0.1 ads.videoaxs.com
    127.0.0.1 ads.virtualcountries.com
    127.0.0.1 ads.vnuemedia.com
    127.0.0.1 ads.wanadooregie.com
    127.0.0.1 ads.weather.ca
    127.0.0.1 ads.web.cs.com
    127.0.0.1 ads.web.de
    127.0.0.1 ads.web21.com
    127.0.0.1 ads.webattack.com
    127.0.0.1 ads.webheat.com
    127.0.0.1 ads.webnet.advance.net
    127.0.0.1 ads.whi.co.nz
    127.0.0.1 ads.wunderground.com
    127.0.0.1 ads.x10.com
    127.0.0.1 ads.x10.net
    127.0.0.1 ads.yourfreedvds.com
    127.0.0.1 ads001.webwombat.com.au
    127.0.0.1 ads1.activeagent.at
    127.0.0.1 ads1.advance.net
    127.0.0.1 ads1.akkuna.com
    127.0.0.1 ads1.canoe.ca
    127.0.0.1 ads1.erotism.com
    127.0.0.1 ads1.mediacapital.pt
    127.0.0.1 ads2.advance.net
    127.0.0.1 ads2.akkuna.com
    127.0.0.1 ads2.clearchannel.com
    127.0.0.1 ads2.collegclub.com
    127.0.0.1 ads2.collegeclub.com
    127.0.0.1 ads2.gamecity.net
    127.0.0.1 ads2.jubii.dk
    127.0.0.1 ads2.oneplace.com
    127.0.0.1 ads2.osdn.com
    127.0.0.1 ads2.pittsburghlive.com
    127.0.0.1 ads2.top500.org
    127.0.0.1 ads3.advance.net
    127.0.0.1 ads3.gamecity.net
    127.0.0.1 ads360.com
    127.0.0.1 ads4.advance.net
    127.0.0.1 ads4.gamecity.net
    127.0.0.1 ads4.realcities.com
    127.0.0.1 ads4homes.com
    127.0.0.1 ads5.advance.net
    127.0.0.1 ads6.advance.net
    127.0.0.1 ads6.gamecity.net
    127.0.0.1 ads7.gamecity.net
    127.0.0.1 ads8.com
    127.0.0.1 adsag.com
    127.0.0.1 Adsatt.ABCNews.starwave.com
    127.0.0.1 Adsatt.go.starwave.com
    127.0.0.1 adsdaq.com
    127.0.0.1 adserv.geocomm.com
    127.0.0.1 adserv.happypuppy.com
    127.0.0.1 adserv.iafrica.com
    127.0.0.1 adserv.lwmn.net
    127.0.0.1 adserve.viaarena.com
    127.0.0.1 adserver.71i.de
    127.0.0.1 adserver.anm.co.uk
    127.0.0.1 adserver.billiger-surfen.de
    127.0.0.1 adserver.billiger-telefonieren.de
    127.0.0.1 adserver.bluewin.ch
    127.0.0.1 adserver.colleges.com
    127.0.0.1 adserver.developersnetwork.com
    127.0.0.1 adserver.digitoday.com
    127.0.0.1 adserver.dotcommedia.de
    127.0.0.1 adserver.eudora.com
    127.0.0.1 adserver.freecity.de
    127.0.0.1 adserver.friendfinder.com
    127.0.0.1 adserver.gamesquad.net
    127.0.0.1 adserver.garden.com
    127.0.0.1 adserver.gr
    127.0.0.1 adserver.hispavista.com
    127.0.0.1 adserver.humanux.com
    127.0.0.1 adserver.ign.com
    127.0.0.1 adserver.janes.com
    127.0.0.1 adserver.jolt.co.uk
    127.0.0.1 adserver.journalinteractive.com
    127.0.0.1 adserver.legacy-network.com
    127.0.0.1 adserver.m2kcore.com
    127.0.0.1 adserver.monster.com
    127.0.0.1 adserver.news.com.au
    127.0.0.1 adserver.newtimes.com
    127.0.0.1 adserver.ngz-network.de
    127.0.0.1 adserver.nydailynews.com
    127.0.0.1 adserver.nzoom.com
    127.0.0.1 adserver.plhb.com
    127.0.0.1 adserver.portalofevil.com
    127.0.0.1 adserver.portugalmail.net
    127.0.0.1 adserver.portugalmail.pt
    127.0.0.1 adserver.ro
    127.0.0.1 adserver.sanomawsoy.fi
    127.0.0.1 adserver.securityfocus.com
    127.0.0.1 adserver.sharewareonline.com
    127.0.0.1 adserver.terra.es
    127.0.0.1 adserver.theonering.net
    127.0.0.1 adserver.trb.com
    127.0.0.1 adserver.tribuneinteractive.com
    127.0.0.1 adserver.ugo.com
    127.0.0.1 adserver.usermagnet.com
    127.0.0.1 adserver.virtuous.co.uk
    127.0.0.1 adserver.yahoo.com
    127.0.0.1 adserver1.backbeatmedia.com
    127.0.0.1 adserver1.cdcovers.cc
    127.0.0.1 adserver1.mediainsight.de
    127.0.0.1 adserver1.ogilvy-interactive.de
    127.0.0.1 adserver2.popdata.de
    127.0.0.1 adserversolutions.com
    127.0.0.1 adservingcentral.com
    127.0.0.1 adsfac.net
    127.0.0.1 adsmart.co.uk
    127.0.0.1 adsmart.net
    127.0.0.1 adsmusic.com
    127.0.0.1 adsoftware.com
    127.0.0.1 adsoldier.com
    127.0.0.1 adsp.ilse.nl
    127.0.0.1 adspace.ro
    127.0.0.1 adsremote.scripps.com
    127.0.0.1 adsynergy.com
    127.0.0.1 adsystem.tt-forums.net
    127.0.0.1 adtech.de
    127.0.0.1 adtrade.net
    127.0.0.1 adtrading.de
    127.0.0.1 adtrix.com
    127.0.0.1 adv.freeonline.it
    127.0.0.1 adv.hwupgrade.it
    127.0.0.1 adv.isdn.cz
    127.0.0.1 adv.wp.pl
    127.0.0.1 adv.yo.cz
    127.0.0.1 adv1.videoprofessor.com
    127.0.0.1 advariant.com
    127.0.0.1 adventory.com
    127.0.0.1 adverity.com
    127.0.0.1 adverserve.net
    127.0.0.1 advert.bayarea.com
    127.0.0.1 advert.hi-media.com
    127.0.0.1 adverticum.com
    127.0.0.1 adverticum.net
    127.0.0.1 advertising.se
    127.0.0.1 advertisingbanners.com
    127.0.0.1 advertmedia.de
    127.0.0.1 adverts.carltononline.com
    127.0.0.1 advertserve.com
    127.0.0.1 advertwizard.com
    127.0.0.1 adviva.net
    127.0.0.1 advnt01.com
    127.0.0.1 advnt03.com
    127.0.0.1 adware.hu
    127.0.0.1 adwealth.com
    127.0.0.1 adweb.integctr.com
    127.0.0.1 adworldnetwork.com
    127.0.0.1 adworx.at
    127.0.0.1 adx.allstar.cz
    127.0.0.1 adx.arip.co.th
    127.0.0.1 adx.atnext.com
    127.0.0.1 adx.nu
  • Hobbsy
    edited April 2007
    127.0.0.1 ady.arip.co.th
    127.0.0.1 affiliate.1800flowers.com
    127.0.0.1 affiliate.7host.com
    127.0.0.1 affiliate.cfdebt.com
    127.0.0.1 affiliate.doubleyourdating.com
    127.0.0.1 affiliate.dtiserv.com
    127.0.0.1 affiliate.gamestop.com
    127.0.0.1 affiliate.grasscity.com
    127.0.0.1 affiliate.travelnow.com
    127.0.0.1 affiliate.viator.com
    127.0.0.1 affiliates.allposters.com
    127.0.0.1 affiliates.internationaljock.com
    127.0.0.1 affiliatetracking.net
    127.0.0.1 ah-ha.com
    127.0.0.1 alladvantage.com
    127.0.0.1 amedia.techies.com
    127.0.0.1 app.lstdesign.com
    127.0.0.1 arc1.msn.com
    127.0.0.1 as.cmpnet.com
    127.0.0.1 as.fotexnet.hu
    127.0.0.1 as1.falkag.de
    127.0.0.1 as2.falkag.de
    127.0.0.1 as3.falkag.de
    127.0.0.1 as4.falkag.de
    127.0.0.1 as5000.com
    127.0.0.1 asn.premium.cz
    127.0.0.1 atdmt.com
    127.0.0.1 atwola.com
    127.0.0.1 audit.median.hu
    127.0.0.1 audit.webinform.hu
    127.0.0.1 autohits.dk
    127.0.0.1 avenuea.com
    127.0.0.1 awrz.net
    127.0.0.1 azjmp.com
    127.0.0.1 azoogleads.com
    127.0.0.1 babs.tv2.dk
    127.0.0.1 banerovec.cz
    127.0.0.1 banex.cz
    127.0.0.1 banik.redigy.cz
    127.0.0.1 banman.cz
    127.0.0.1 banner.buempliz-online.ch
    127.0.0.1 banner.casino.net
    127.0.0.1 banner.cz
    127.0.0.1 banner.easyspace.com
    127.0.0.1 banner.elisa.net
    127.0.0.1 banner.img.co.za
    127.0.0.1 banner.inyourpocket.com
    127.0.0.1 banner.jobsahead.com
    127.0.0.1 banner.linux.se
    127.0.0.1 banner.media-system.de
    127.0.0.1 banner.mindshare.de
    127.0.0.1 banner.nixnet.cz
    127.0.0.1 banner.northsky.com
    127.0.0.1 banner.orb.net
    127.0.0.1 banner.penguin.cz
    127.0.0.1 banner.rojakpot.com
    127.0.0.1 banner.t-online.de
    127.0.0.1 banner.tanto.de
    127.0.0.1 banner.tpage.com
    127.0.0.1 banner4all.dk
    127.0.0.1 bannerads.de
    127.0.0.1 bannerbank.ru
    127.0.0.1 bannerbox.hu
    127.0.0.1 bannerboxes.com
    127.0.0.1 bannercommunity.de
    127.0.0.1 bannerhost.com
    127.0.0.1 bannerhosts.com
    127.0.0.1 bannerimage.com
    127.0.0.1 bannerlandia.com.ar
    127.0.0.1 bannermarkt.nl
    127.0.0.1 bannerpower.com
    127.0.0.1 banners.amigos.com
    127.0.0.1 banners.arachne.cz
    127.0.0.1 banners.babylonbucks.com
    127.0.0.1 banners.bol.com.br
    127.0.0.1 banners.clubseventeen.com
    127.0.0.1 banners.czi.cz
    127.0.0.1 banners.de.clara.net
    127.0.0.1 banners.directnic.com
    127.0.0.1 banners.ebay.com
    127.0.0.1 banners.friendsfinder.com
    127.0.0.1 banners.hetnet.nl
    127.0.0.1 banners.internetsexprovider.com
    127.0.0.1 banners.iq.pl
    127.0.0.1 banners.isoftmarketing.com
    127.0.0.1 banners.lifeserv.com
    127.0.0.1 banners.tucson.com
    127.0.0.1 banners.uk.clara.net
    127.0.0.1 banners.wunderground.com
    127.0.0.1 bannerserver.com
    127.0.0.1 bannerserver.gator.com
    127.0.0.1 bannersng.yell.com
    127.0.0.1 bannerspace.com
    127.0.0.1 bannerswap.com
    127.0.0.1 bannertesting.com
    127.0.0.1 bannieres.acces-contenu.com
    127.0.0.1 bans.bride.ru
    127.0.0.1 bansrv1.n1media.com
    127.0.0.1 barnesandnoble.bfast.com
    127.0.0.1 bbmedia.cz
    127.0.0.1 bbn.img.com.ua
    127.0.0.1 bestsearch.net
    127.0.0.1 bidclix.net
    127.0.0.1 bigads.guj.de
    127.0.0.1 bigbangmedia.com
    127.0.0.1 billboard.cz
    127.0.0.1 bizban.net
    127.0.0.1 blast4traffic.com
    127.0.0.1 blogads.com
    127.0.0.1 bluehavenmedia.com
    127.0.0.1 bluestreak.com
    127.0.0.1 bm.annonce.cz
    127.0.0.1 bn.bfast.com
    127.0.0.1 bpath.com
    127.0.0.1 bravenet.com
    127.0.0.1 british-banners.com
    127.0.0.1 bs.yandex.ru
    127.0.0.1 budsinc.com
    127.0.0.1 burstnet.akadns.net
    127.0.0.1 burstnet.com
    127.0.0.1 businessfactory.prospero.com
    127.0.0.1 c1.nowlinux.com
    127.0.0.1 candidclicks.com
    127.0.0.1 casalemedia.com
    127.0.0.1 casalmedia.com
    127.0.0.1 cash4banner.com
    127.0.0.1 cash4banner.de
    127.0.0.1 cash4popup.de
    127.0.0.1 cashfiesta.com
    127.0.0.1 cashpartner.com
    127.0.0.1 cashpartner.net
    127.0.0.1 casinogames.com
    127.0.0.1 casinotraffic.com
    127.0.0.1 casinotreasure.com
    127.0.0.1 cben1.net
    127.0.0.1 cbx.net
    127.0.0.1 cdn2.adsdk.com
    127.0.0.1 cgicounter.puretec.de
    127.0.0.1 chart.dk
    127.0.0.1 checkm8.com
    127.0.0.1 chestionar.ro
    127.0.0.1 ciaoclick.com
    127.0.0.1 cibleclick.com
    127.0.0.1 cityads.telus.net
    127.0.0.1 cj.com
    127.0.0.1 claria.com
    127.0.0.1 click-fr.com
    127.0.0.1 click.absoluteagency.com
    127.0.0.1 click.fool.co.uk
    127.0.0.1 click.fool.com
    127.0.0.1 click.go2net.com
    127.0.0.1 click2freemoney.com
    127.0.0.1 clickability.com
    127.0.0.1 clickagents.com
    127.0.0.1 clickbank.com
    127.0.0.1 clickbank.net
    127.0.0.1 clickbroker.com
    127.0.0.1 clickbrokers.com
    127.0.0.1 clickedyclick.com
    127.0.0.1 clickfinders.com
    127.0.0.1 clickforwebmasters.com
    127.0.0.1 clickhere.foronlinegames.com
    127.0.0.1 clickhereforcellphones.com
    127.0.0.1 clickhouse.com
    127.0.0.1 clickhype.com
    127.0.0.1 clickmedia.ro
    127.0.0.1 clicks.equantum.com
    127.0.0.1 clicks.stripsaver.com
    127.0.0.1 clickserve.cc-dt.com
    127.0.0.1 clicksor.com
    127.0.0.1 clickthrutraffic.com
    127.0.0.1 clicktracks.com
    127.0.0.1 clicktrade.com
    127.0.0.1 clickxchange.com
    127.0.0.1 clickz.com
    127.0.0.1 clictrafic.com
    127.0.0.1 clients.tbo.com
    127.0.0.1 clixgalore.com
    127.0.0.1 cnt1.pocitadlo.cz
    127.0.0.1 colonize.com
    127.0.0.1 comclick.com
    127.0.0.1 commission-junction.com
    127.0.0.1 commissionmonster.com
    127.0.0.1 commonname.com
    127.0.0.1 compactbanner.com
    127.0.0.1 cookies.cmpnet.com
    127.0.0.1 cornflakes.pathfinder.com
    127.0.0.1 counted.com
    127.0.0.1 counter.bloke.com
    127.0.0.1 counter.cz
    127.0.0.1 counter.nowlinux.com
    127.0.0.1 counter.times.lv
    127.0.0.1 counter.webtrends.net
    127.0.0.1 counter.yadro.ru
    127.0.0.1 countercrazy.com
    127.0.0.1 crazypopups.com
    127.0.0.1 creative.whi.co.nz
    127.0.0.1 creatives.as4x.tmcs.net
    127.0.0.1 cserver.mii.instacontent.net
    127.0.0.1 ctnetwork.hu
    127.0.0.1 ctxtads.overture.com
    127.0.0.1 custom-click.com
    127.0.0.1 customad.cnn.com
    127.0.0.1 cyberbounty.com
    127.0.0.1 cybercount.com
    127.0.0.1 cybereps.com
    127.0.0.1 cybermonitor.com
    127.0.0.1 cydoor.com
    127.0.0.1 dbbsrv.com
    127.0.0.1 dcad.tnn.net
    127.0.0.1 dclk.net
    127.0.0.1 dealhelper.com
    127.0.0.1 desktop.kazaa.com
    127.0.0.1 dgm2.com
    127.0.0.1 dgmaustralia.com
    127.0.0.1 dialerporn.com
    127.0.0.1 didtheyreadit.com
    127.0.0.1 digits.com
    127.0.0.1 directleads.com
    127.0.0.1 directtrack.com
    127.0.0.1 discountclick.com
    127.0.0.1 divicash.com
    127.0.0.1 dnads.directnic.com
    127.0.0.1 domainsponsor.com
    127.0.0.1 doubleclick.de
    127.0.0.1 doubleclick.net
    127.0.0.1 e-bannerx.com
    127.0.0.1 eads.com
    127.0.0.1 ecoupons.com
    127.0.0.1 elitetoplist.com
    127.0.0.1 emarketer.com
    127.0.0.1 emarketmakers.com
    127.0.0.1 engage.everyone.net
    127.0.0.1 engage.omaha.com
    127.0.0.1 entercasino.com
    127.0.0.1 erotic-ad.com
    127.0.0.1 escati.linkopp.net
    127.0.0.1 eshopads2.com
    127.0.0.1 espotting.com
    127.0.0.1 estats.com
    127.0.0.1 eu-adcenter.net
    127.0.0.1 euniverseads.com
    127.0.0.1 euro4banner.com
    127.0.0.1 europeanbanners.com
    127.0.0.1 exchange-it.com
    127.0.0.1 exchangead.com
    127.0.0.1 exchangeclicksonline.com
    127.0.0.1 exit76.com
    127.0.0.1 exitexchange.com
    127.0.0.1 exitfuel.com
    127.0.0.1 extreme-dm.com
    127.0.0.1 eyeblaster-bs.com
    127.0.0.1 eyeblaster.com
    127.0.0.1 falkag.net
    127.0.0.1 fast-adv.it
    127.0.0.1 fastclick.com.edgesuite.net
    127.0.0.1 fastclick.net
    127.0.0.1 fastcounter.bcentral.com
    127.0.0.1 feedbackresearch.com
    127.0.0.1 findcommerce.com
    127.0.0.1 findyourcasino.com
    127.0.0.1 fineclicks.com
    127.0.0.1 first.nova.cz
    127.0.0.1 flowgo.com
    127.0.0.1 fmads.osdn.com
    127.0.0.1 focalex.com
    127.0.0.1 foxcounter.com
    127.0.0.1 fragmentserv.iac-online.de
    127.0.0.1 free-banners.com
    127.0.0.1 freebanner.com
    127.0.0.1 freewebcounter.com
    127.0.0.1 ****-access.com
    127.0.0.1 g-wizzads.net
    127.0.0.1 galaxien.com
    127.0.0.1 gamblingbanner.com
    127.0.0.1 gator.com
    127.0.0.1 gcads.osdn.com
    127.0.0.1 gemius.pl
    127.0.0.1 geoads.osdn.com
    127.0.0.1 geocounter.net
    127.0.0.1 globaltrack.com
    127.0.0.1 goingplatinum.com
    127.0.0.1 gold.weborama.fr
    127.0.0.1 goldstats.com
    127.0.0.1 googlesyndication.com
    127.0.0.1 gorillanation.com
    127.0.0.1 gostats.com
    127.0.0.1 gp.dejanews.com
    127.0.0.1 grafstat.ro
    127.0.0.1 herbalaffiliateprogram.com
    127.0.0.1 hightrafficads.com
    127.0.0.1 hit.webcentre.lycos.co.uk
    127.0.0.1 hitcents.com
    127.0.0.1 hitlist.ru
    127.0.0.1 hitlounge.com
    127.0.0.1 hitometer.com
    127.0.0.1 hits4me.com
    127.0.0.1 hitslink.com
    127.0.0.1 hotlog.ru
    127.0.0.1 hotrank.com.tw
    127.0.0.1 hotstatistics.com
    127.0.0.1 httpads.com
    127.0.0.1 httpool.com
    127.0.0.1 humanclick.com
    127.0.0.1 hyperbanner.net
    127.0.0.1 hypercount.com
    127.0.0.1 i-clicks.net
    127.0.0.1 i1img.com
    127.0.0.1 iad.liveperson.net
    127.0.0.1 iadnet.com
    127.0.0.1 idot.cz
    127.0.0.1 ilbanner.com
    127.0.0.1 ilead.itrack.it
    127.0.0.1 iliillliO00OO0.321.cn
    127.0.0.1 imageads.canoe.ca
    127.0.0.1 images.v3.com
    127.0.0.1 imaginemedia.com
    127.0.0.1 img.bannersxchange.com
    127.0.0.1 imonitor.nethost.cz
    127.0.0.1 imprese.cz
    127.0.0.1 impressionz.co.uk
    127.0.0.1 imrworldwide.com
    127.0.0.1 inboxdollars.com
    127.0.0.1 inc.com
    127.0.0.1 inet-traffic.com
    127.0.0.1 infinite-ads.com
    127.0.0.1 information.com
    127.0.0.1 insightexpress.com
    127.0.0.1 instacontent.net
    127.0.0.1 instantmadness.com
    127.0.0.1 intelliads.com
    127.0.0.1 internetfuel.com
    127.0.0.1 interreklame.de
    127.0.0.1 ip.ro
    127.0.0.1 ireklama.cz
    127.0.0.1 is.casalemedia.com
    127.0.0.1 itfarm.com
    127.0.0.1 itop.cz
    127.0.0.1 iwin.com
    127.0.0.1 jcount.com
    127.0.0.1 jedonkey.cjt1.net
    127.0.0.1 jinisearch.co.uk
    127.0.0.1 jkazaa.cjt1.net
    127.0.0.1 joetec.net
    127.0.0.1 jokedollars.com
    127.0.0.1 justwebads.com
    127.0.0.1 kliks.nl
    127.0.0.1 klipads.dvlabs.com
    127.0.0.1 kliptracker.com
    127.0.0.1 klix.cz
    127.0.0.1 knownorigin.com
    127.0.0.1 labeldaily.com
    127.0.0.1 lbn.ru
    127.0.0.1 leadingedgecash.com
    127.0.0.1 lightspeedcash.com
    127.0.0.1 link4ads.com
    127.0.0.1 linkbuddies.com
    127.0.0.1 linkexchange.com
    127.0.0.1 linkexchange.ru
    127.0.0.1 linkprice.com
    127.0.0.1 linkreferral.com
    127.0.0.1 linksponsor.com
    127.0.0.1 linkswaper.com
    127.0.0.1 linksynergy.com
    127.0.0.1 liquidad.narrowcastmedia.com
    127.0.0.1 lnads.osdn.com
    127.0.0.1 log.btopenworld.com
    127.0.0.1 log.go.com
    127.0.0.1 logs.erasmas.com
    127.0.0.1 look2me.com
    127.0.0.1 lop.com
    127.0.0.1 m.doubleclick.net
    127.0.0.1 mads.gamespot.com
    127.0.0.1 mainos2.mtv3.fi
    127.0.0.1 marketbanker.com
    127.0.0.1 marketing.nyi.com
    127.0.0.1 marketing.nyi.net
    127.0.0.1 masterbanners.com
    127.0.0.1 masterstats.com
    127.0.0.1 matchcraft.com
    127.0.0.1 maximumcash.com
    127.0.0.1 maxserving.com
    127.0.0.1 mbuyu.nl
    127.0.0.1 mdffa.com
    127.0.0.1 media-adrunner.mycomputer.com
    127.0.0.1 media.bigstep.com
    127.0.0.1 media.ftv-publicite.fr
    127.0.0.1 mediageneral.com
    127.0.0.1 mediamgr.ugo.com
    127.0.0.1 mediaplex.com
    127.0.0.1 mediascale.de
    127.0.0.1 megacash.de
    127.0.0.1 megago.com
    127.0.0.1 memorix.sdv.fr
    127.0.0.1 metaad.econet.hu
    127.0.0.1 metrics.webcriteria.net
    127.0.0.1 microticker.com
    127.0.0.1 mirror.qkimg.net
    127.0.0.1 mjxads.internet.com
    127.0.0.1 mkt.cz
    127.0.0.1 monsterpops.com
    127.0.0.1 mostcash.com
    127.0.0.1 ms-links.com
    127.0.0.1 msads.net
    127.0.0.1 mtree.com
    127.0.0.1 multi1.rmuk.co.uk
    127.0.0.1 myaffiliateprogram.com
    127.0.0.1 mytrix.com
    127.0.0.1 navrcholu.cz
    127.0.0.1 nedstat.com
    127.0.0.1 nedstat.nl
    127.0.0.1 nedstatbasic.net
    127.0.0.1 netads.hotwired.com
    127.0.0.1 netads.sohu.com
    127.0.0.1 netdirect.nl
    127.0.0.1 netdot.cz
    127.0.0.1 netpool.netbookia.net
    127.0.0.1 netvertising.be
    127.0.0.1 network.realmedia.com
    127.0.0.1 new-ads.eurogamer.net
    127.0.0.1 newtopsites.com
    127.0.0.1 ng3.ads.warnerbros.com
    127.0.0.1 ngadcenter.net
    127.0.0.1 nitroclicks.com
    127.0.0.1 nsads.hotwired.com
    127.0.0.1 ntbanner.digitalriver.com
    127.0.0.1 oas.benchmark.fr
    127.0.0.1 oas.foxnews.com
    127.0.0.1 oas.signonsandiego.com
    127.0.0.1 oas.toronto.com
    127.0.0.1 oas.uniontrib.com
    127.0.0.1 oascentral.chicagobusiness.com
    127.0.0.1 oascentral.theonion.com
    127.0.0.1 oasis.promon.cz
    127.0.0.1 observer.cz
    127.0.0.1 offeroptimizer.com
    127.0.0.1 oneandonlynetwork.com
    127.0.0.1 onestat.com
    127.0.0.1 onresponse.com
    127.0.0.1 openad.infobel.com
    127.0.0.1 openad.travelnow.com
    127.0.0.1 oxcash.com
    127.0.0.1 p5.omaha.com
    127.0.0.1 partner-ads.com
    127.0.0.1 partner1.kanoodle.com
    127.0.0.1 partner2profit.com
    127.0.0.1 partnerkonto.de
    127.0.0.1 partners.starnetsystems.net
    127.0.0.1 paycounter.com
    127.0.0.1 paypopup.com
    127.0.0.1 payserve.com
    127.0.0.1 pcwizz.com
    127.0.0.1 pennyweb.com
    127.0.0.1 phoenix-adrunner.mycomputer.com
    127.0.0.1 phpads.astalavista.us
    127.0.0.1 phpads.i-merge.net
    127.0.0.1 pillscash.com
    127.0.0.1 pimproll.com
    127.0.0.1 play4traffic.com
    127.0.0.1 pointroll.com
    127.0.0.1 pops.freeze.com
    127.0.0.1 popupad.net
    127.0.0.1 popupmoney.com
    127.0.0.1 popupnation.com
    127.0.0.1 popups.infostart.com
    127.0.0.1 popupsponsor.com
    127.0.0.1 popuptraffic.com
    127.0.0.1 porngraph.com
    127.0.0.1 porntrack.com
    127.0.0.1 postmasterbannernet.com
    127.0.0.1 premium-offers.com
    127.0.0.1 premiumcash.de
    127.0.0.1 primaryads.com
    127.0.0.1 primetime.net
    127.0.0.1 pro-advertising.com
    127.0.0.1 profero.com
    127.0.0.1 promote.pair.com
    127.0.0.1 provexia.com
    127.0.0.1 psstt.com
    127.0.0.1 pub-g.ifrance.com
    127.0.0.1 pub.club-internet.fr
    127.0.0.1 pub.hardware.fr
    127.0.0.1 pub.realmedia.fr
    127.0.0.1 publi.grupocorreo.es
    127.0.0.1 publi1.grupocorreo.es
    127.0.0.1 publi2.grupocorreo.es
    127.0.0.1 publiads.com
    127.0.0.1 publicidad.elmundo.es
    127.0.0.1 publicidad.ya.com
    127.0.0.1 publimedia.es.realmedia.com
    127.0.0.1 pubs.branchez-vous.com
    127.0.0.1 pubs.lemonde.fr
    127.0.0.1 q.azcentral.com
    127.0.0.1 qksrv.net
    127.0.0.1 questaffiliates.net
    127.0.0.1 quinst.com
    127.0.0.1 r.hotwired.com
    127.0.0.1 r.kde.cz
    127.0.0.1 rad.msn.com
    127.0.0.1 radiate.com
    127.0.0.1 rampidads.com
    127.0.0.1 rankyou.com
    127.0.0.1 re.e-slovenija.com
    127.0.0.1 realads.realmedia.com
    127.0.0.1 realclix.com
    127.0.0.1 realmedia-a800.d4p.net
    127.0.0.1 realtracker.com
    127.0.0.1 redsherriff.com
    127.0.0.1 referralware.com
    127.0.0.1 regnow.com
    127.0.0.1 reklam.rfsl.se
    127.0.0.1 reklama.internet.cz
    127.0.0.1 reklama.pmatousek.com
    127.0.0.1 reklama.reflektor.cz
    127.0.0.1 relmaxtop.com
    127.0.0.1 remotead.cnet.com
    127.0.0.1 reply.mediatris.net
    127.0.0.1 retaildirect.realmedia.com
    127.0.0.1 revenue.net
    127.0.0.1 richmails.com
    127.0.0.1 richwebmaster.com
    127.0.0.1 rightstats.com
    127.0.0.1 rmedia.boston.com
    127.0.0.1 roar.com
    127.0.0.1 roosevelt.gjbig.com
    127.0.0.1 rose.ixbt.com
    127.0.0.1 ru4.com
    127.0.0.1 safe-audit.com
    127.0.0.1 safelists.com
    127.0.0.1 sageanalyst.net
    127.0.0.1 sat-city-ads.com
    127.0.0.1 searchramp.com
    127.0.0.1 secure.webconnect.net
    127.0.0.1 seeq.com
    127.0.0.1 servethis.com
    127.0.0.1 serving-sys.com
    127.0.0.1 sexcounter.com
    127.0.0.1 sexlist.com
    127.0.0.1 sextracker.com
    127.0.0.1 sfads.osdn.com
    127.0.0.1 shareasale.com
    127.0.0.1 sher.index.hu
    127.0.0.1 shinystat.it
    127.0.0.1 siccash.com
    127.0.0.1 sitemeter.com
    127.0.0.1 sma.punto.net
    127.0.0.1 smartadserver.com
    127.0.0.1 smartclicks.net
    127.0.0.1 smartdirect.com
    127.0.0.1 smartstats.com
    127.0.0.1 smile.modchipstore.com
    127.0.0.1 softadvertising.com
    127.0.0.1 softclick.com.br
    127.0.0.1 software.global-netcom.de
    127.0.0.1 softwaresponsor.com
    127.0.0.1 specificclick.com
    127.0.0.1 specificpop.com
    127.0.0.1 spezialreporte.de
    127.0.0.1 spinbox.maccentral.com
    127.0.0.1 spinbox.net
    127.0.0.1 spinbox.techtracker.com
    127.0.0.1 spinbox.versiontracker.com
    127.0.0.1 sponsor4you.net
    127.0.0.1 sponsoradulto.com
    127.0.0.1 sprinks-clicks.about.com
    127.0.0.1 spylog.com
    127.0.0.1 spywarenuker.com
    127.0.0.1 ssads.osdn.com
    127.0.0.1 starffa.com
    127.0.0.1 start.freeze.com
    127.0.0.1 stat.doxod.net
    127.0.0.1 stat.webmedia.pl
    127.0.0.1 stat.zenon.net
    127.0.0.1 statcounter.com
    127.0.0.1 static.itrack.it
    127.0.0.1 static.smni.com
    127.0.0.1 staticads.btopenworld.com
    127.0.0.1 stats.blogger.com
    127.0.0.1 stats.cts-bv.nl
    127.0.0.1 stats.darkbluesea.com
    127.0.0.1 stats.klsoft.com
    127.0.0.1 stats4all.com
    127.0.0.1 sugoicounter.com
    127.0.0.1 superclix.de
    127.0.0.1 superstats.com
    127.0.0.1 supertop.ru
    127.0.0.1 synergiinteractive.com
    127.0.0.1 targetnet.com
    127.0.0.1 targetshop.com
    127.0.0.1 teknosurf2.com
    127.0.0.1 teknosurf3.com
    127.0.0.1 test.com
    127.0.0.1 textads.biz
    127.0.0.1 textlinks.com
    127.0.0.1 tfag.de
    127.0.0.1 the-counter.net
    127.0.0.1 theanswerto.com
    127.0.0.1 thebannerguru.com
    127.0.0.1 thecounter.com
    127.0.0.1 thevictorynetwork.com
    127.0.0.1 thisbanner.com
    127.0.0.1 thruport.com
    127.0.0.1 tinybar.com
    127.0.0.1 tmsads.tribune.com
    127.0.0.1 toads.osdn.com
    127.0.0.1 toolbar.netscape.com
    127.0.0.1 top.list.ru
    127.0.0.1 top20.com
    127.0.0.1 topbarh.box.sk
    127.0.0.1 topofferz.net
    127.0.0.1 topprofits.info
    127.0.0.1 topsearcher.com
    127.0.0.1 topstats.com
    127.0.0.1 topstats.net
    127.0.0.1 tracking.frantic.com
    127.0.0.1 tracking101.com
    127.0.0.1 trackmysales.com
    127.0.0.1 tradedoubler.com
    127.0.0.1 traffic-exchange.com
    127.0.0.1 trafficdiscount.com
    127.0.0.1 trafficmp.com
    127.0.0.1 trafficswarm.com
    127.0.0.1 trafficsyndicate.com
    127.0.0.1 traffictrader.net
    127.0.0.1 trafic.ro
    127.0.0.1 trakkerd.net
    127.0.0.1 trekblue.com
    127.0.0.1 trekdata.com
    127.0.0.1 tribalfusion.com
    127.0.0.1 trix.net
    127.0.0.1 truehits.net
    127.0.0.1 truehits1.gits.net.th
    127.0.0.1 truehits2.gits.net.th
    127.0.0.1 tsms-ad.tsms.com
    127.0.0.1 ukaffiliates2.com
    127.0.0.1 ukbanners.com
    127.0.0.1 usapromotravel.com
    127.0.0.1 usmsad.tom.com
    127.0.0.1 utarget.co.uk
    127.0.0.1 utils.mediageneral.net
    127.0.0.1 valuead.com
    127.0.0.1 valueclick.com
    127.0.0.1 valuecommerce.com
    127.0.0.1 valuesponsor.com
    127.0.0.1 vericlick.com
    127.0.0.1 vg.ad.asap-asp.net
    127.0.0.1 vibrantmedia.com
    127.0.0.1 viewpoint.com
    127.0.0.1 vortextraffic.com
    127.0.0.1 vx2.cc
    127.0.0.1 w3exit.com
    127.0.0.1 web-stat.com
    127.0.0.1 web2.deja.com
    127.0.0.1 webads.bizservers.com
    127.0.0.1 webads.co.nz
    127.0.0.1 webads.nl
    127.0.0.1 webcash.nl
    127.0.0.1 webcounter.goweb.de
    127.0.0.1 webmasterplan.com
    127.0.0.1 webpdp.gator.com
    127.0.0.1 webpower.com
    127.0.0.1 websponsors.com
    127.0.0.1 webstars2000.com
    127.0.0.1 webstat.com
    127.0.0.1 webstat.net
    127.0.0.1 webtraxx.de
    127.0.0.1 webtrendslive.com
    127.0.0.1 wegcash.com
    127.0.0.1 whenu.com
    127.0.0.1 whispa.com
    127.0.0.1 wipub.com
    127.0.0.1 worldbe.com
    127.0.0.1 wtlive.com
    127.0.0.1 wustat.windows.com
    127.0.0.1 www.adsxchange.lv
    127.0.0.1 www.banner-link.com.br
    127.0.0.1 www.dnps.com
    127.0.0.1 www.kaplanindex.com
    127.0.0.1 www.money4exit.de
    127.0.0.1 www.photo-ads.co.uk
    127.0.0.1 www.sponsor2002.de
    127.0.0.1 x.mycity.com
    127.0.0.1 xiti.com
    127.0.0.1 xq1.net
    127.0.0.1 xtrocash.org
    127.0.0.1 xxxcounter.com
    127.0.0.1 xxxtoolbar.com
    127.0.0.1 xzoomy.com
    127.0.0.1 y.ibsys.com
    127.0.0.1 yesadvertising.com
    127.0.0.1 youclick2earn.com
    127.0.0.1 z.times.lv
    127.0.0.1 zanox-affiliate.de
    127.0.0.1 zanox.com
    127.0.0.1 zedo.com
    127.0.0.1 zencudo.co.uk
    127.0.0.1 zi.r.tv.com
    127.0.0.1 zmedia.com
    127.0.0.1 sbx.pagesjaunes.fr
    127.0.0.1 ad.itmedia.co.jp
    127.0.0.1 ads.collegemix.com
    127.0.0.1 ads.specificpop.com
    127.0.0.1 partner.topcities.com
    127.0.0.1 ad.ad.ad.bulla.com
    127.0.0.1 ad.clok.creative.com
    127.0.0.1 ad.de.doubleclick.net
    127.0.0.1 ad.distrigame.com
    127.0.0.1 ad.doubleclick.net
    127.0.0.1 ad.erasercash.com
    127.0.0.1 Ad.go.com
    127.0.0.1 ad.linkexchange.com
    127.0.0.1 ad.linksynergy.com
    127.0.0.1 ad.naked-celebs.com
    127.0.0.1 ad.nobreak.com
    127.0.0.1 ad.point.sk
    127.0.0.1 ad.realmedia.co.kr
    127.0.0.1 ad.shinbiro.com
    127.0.0.1 ad.trafficmp.com
    127.0.0.1 ad.valuehost.ru
    127.0.0.1 ad2.doubleclick.net
    127.0.0.1 ad3.peel.com
    127.0.0.1 ad4.lbn.ru
    127.0.0.1 ad5.adrevolver.com
    127.0.0.1 adadmin.internetfuel.com
    127.0.0.1 adatom.com
    127.0.0.1 adbest.com
    127.0.0.1 ad-blaster.com
    127.0.0.1 adclst03.valueclick.com
    127.0.0.1 adcluster.humaniq.com
    127.0.0.1 adcycle.isoftmarketing.com
    127.0.0.1 addeliver.net
    127.0.0.1 address.3721.com
    127.0.0.1 adfarm.snv.mediaplex.com
    127.0.0.1 AD-MAN.NODES.net.ad-flow.com
    127.0.0.1 admaster.candela.com.au
    127.0.0.1 admin.abcsearch.com
    127.0.0.1 admin.exitfuel.com
    127.0.0.1 admin.internetfuel.com
    127.0.0.1 admin.popupsponsor.com
    127.0.0.1 admin.startsurfing.com
    127.0.0.1 adnetintads.valuead.com
    127.0.0.1 adopt.hotbar.com
    127.0.0.1 adp.ikena.com
    127.0.0.1 adrunner.mycomputer.com
    127.0.0.1 ads.1stblaze.com
    127.0.0.1 ads.addynamix.com
    127.0.0.1 ads.ad-flow.com
    127.0.0.1 ads.adfuzz.com
    127.0.0.1 ads.admaximize.com
    127.0.0.1 ads.adorigin.com
    127.0.0.1 ads.ads360.com
    127.0.0.1 ads.adsag.com
    127.0.0.1 ads.advertise.net
    127.0.0.1 ads.bluemongoose.com
    127.0.0.1 ads.bmais.net
    127.0.0.1 ads.ads.businessweek.com
    127.0.0.1 ads.chickclick.com
    127.0.0.1 ads.clickagents.com
    127.0.0.1 ads.danni.com
    127.0.0.1 ads.ezcybersearch.com
    127.0.0.1 ads.flightsim.com
    127.0.0.1 ads.fp.sandpiper.net
    127.0.0.1 ads.greensboro.com
    127.0.0.1 ads.hitcents.com
    127.0.0.1 ads.home.net
    127.0.0.1 ads.hyperbanner.net
    127.0.0.1 ads.intelihealth.com
    127.0.0.1 ads.intermezzia.com
    127.0.0.1 ads.internet-optimizer.com
    127.0.0.1 ads.mamma.com
  • Hobbsy
    edited April 2007
    127.0.0.1 ads.mircx.com
    127.0.0.1 ads.odigo.com
    127.0.0.1 ads.ads.onwebmedia.com
    127.0.0.1 ads.pennyweb.com
    127.0.0.1 ads.pilotonline.com
    127.0.0.1 ads.popupsponsor.com
    127.0.0.1 ads.searchseekfind.com
    127.0.0.1 ads.spaceports.com
    127.0.0.1 ads.specificclick.com
    127.0.0.1 ads.stockbanners.com
    127.0.0.1 ads.techtv.com
    127.0.0.1 ads.track-star.com
    127.0.0.1 ads.unlimitedbanners.com
    127.0.0.1 ads.valuead.com
    127.0.0.1 ads.webads360.com
    127.0.0.1 ads.zedo.com
    127.0.0.1 ads07.bpath.com
    127.0.0.1 ads1.tripod.com
    127.0.0.1 ads1.zdnet.com
    127.0.0.1 ads10.hyperbanner.net
    127.0.0.1 ads11.hyperbanner.net
    127.0.0.1 ads12.hyperbanner.net
    127.0.0.1 ads13.hyperbanner.net
    127.0.0.1 ads14.hyperbanner.net
    127.0.0.1 ads15.bpath.com
    127.0.0.1 ads15.hyperbanner.net
    127.0.0.1 ads16.hyperbanner.net
    127.0.0.1 ads17.hyperbanner.net
    127.0.0.1 ads18.hyperbanner.net
    127.0.0.1 ads19.hyperbanner.net
    127.0.0.1 ads2.callwave.com
    127.0.0.1 ads2.gotpb.com
    127.0.0.1 ads20.bpath.com
    127.0.0.1 ads20.hyperbanner.net
    127.0.0.1 ads29.bpath.com
    127.0.0.1 adscholar.com
    127.0.0.1 adserv.adbonus.com
    127.0.0.1 adserv.bigwebtools.com
    127.0.0.1 adserv.exxxit.com
    127.0.0.1 adserv.search-exe.com
    127.0.0.1 adserv2.bigwebtools.com
    127.0.0.1 adserv2.internetfuel.com
    127.0.0.1 adserv5.internetfuel.com
    127.0.0.1 adserve.bess.net
    127.0.0.1 adserver.100free.com
    127.0.0.1 adserver.adtech.de
    127.0.0.1 adserver.chickclick.com
    127.0.0.1 adserver.creative-asia.com
    127.0.0.1 adserver.gorillanation.com
    127.0.0.1 adserver.adserver.monster.com
    127.0.0.1 adserver.sextracker.com
    127.0.0.1 adserver1.realtracker.com
    127.0.0.1 adserving.autotrader.com
    127.0.0.1 adsrvr.com
    127.0.0.1 adtactics.com
    127.0.0.1 adtegrity.adtracker.411web.com
    127.0.0.1 banner.avp2000.com
    127.0.0.1 banner.date.com
    127.0.0.1 banner.rootsweb.com
    127.0.0.1 banner-exchange.directbanners.com
    127.0.0.1 bannerfarm.ace.advertising.com
    127.0.0.1 banner-farm.de
    127.0.0.1 banner-net.com
    127.0.0.1 banners.ads360.com
    127.0.0.1 banners.affiliatefuel.com
    127.0.0.1 banners.dealcatcher.com
    127.0.0.1 banners.hotlinks.net
    127.0.0.1 banners.hotqueens.com
    127.0.0.1 banners.ols2000.com
    127.0.0.1 banners.outster.com
    127.0.0.1 banners.pennyweb.com
    127.0.0.1 banners.playboystore.com
    127.0.0.1 banners.specificpop.com
    127.0.0.1 banners.valuead.com
    127.0.0.1 banners.webmasterplan.com
    127.0.0.1 bannervip.web1000.com
    127.0.0.1 gd10.doubleclick.net
    127.0.0.1 gd11.doubleclick.net
    127.0.0.1 gd12.doubleclick.net
    127.0.0.1 gd13.doubleclick.net
    127.0.0.1 gd14.doubleclick.net
    127.0.0.1 gd15.doubleclick.net
    127.0.0.1 gd16.doubleclick.net
    127.0.0.1 gd20.doubleclick.net
    127.0.0.1 gd25.doubleclick.net
    127.0.0.1 gd28.doubleclick.net
    127.0.0.1 gd29.doubleclick.net
    127.0.0.1 gd30.doubleclick.net
    127.0.0.1 gd31.doubleclick.net
    127.0.0.1 gd5.doubleclick.net
    127.0.0.1 gd6.doubleclick.net
    127.0.0.1 gd7.doubleclick.net
    127.0.0.1 gd8.doubleclick.net
    127.0.0.1 gd9.doubleclick.net
    127.0.0.1 media.media.popunder.com
    127.0.0.1 media.popuptraffic.com
    127.0.0.1 media.superstats.com
    127.0.0.1 48.fes.linknclick.com
    127.0.0.1 ad.ad.bannernetwork.it
    127.0.0.1 ad.betanews.com
    127.0.0.1 ad.comedie.lbn.fr
    127.0.0.1 ad.es.chilinext.com
    127.0.0.1 ad.family.go.com
    127.0.0.1 ad.it.chilinext.com
    127.0.0.1 ad.novasol.com
    127.0.0.1 ad.recursosgratis.com
    127.0.0.1 ad.treiber.de
    127.0.0.1 ad0.gamesweb.com
    127.0.0.1 ad1.radioreti.it
    127.0.0.1 ad1.targetgraph.com
    127.0.0.1 ad2.billboard.sk
    127.0.0.1 ad2.targetgraph.com
    127.0.0.1 ad3.sina.com.cn
    127.0.0.1 ad4.sina.com.cn
    127.0.0.1 ad7.ad7.netian.com
    127.0.0.1 adbot.de
    127.0.0.1 adclub.de
    127.0.0.1 adcycle.standard.net
    127.0.0.1 adflow.orbitcycle.com
    127.0.0.1 adman.medius.net
    127.0.0.1 admanager.sportal.net
    127.0.0.1 adnet.imgserv.com
    127.0.0.1 adrunner.superstats.com
    127.0.0.1 ads.118.lv
    127.0.0.1 ads.2xmoinscher.com
    127.0.0.1 ads.apollo.lv
    127.0.0.1 ads.assobanner.it
    127.0.0.1 ads.audiencebank.com
    127.0.0.1 ads.autotrader.co.uk
    127.0.0.1 ads.britishexpats.com
    127.0.0.1 ads.buysell.com
    127.0.0.1 ads.calexo.com
    127.0.0.1 ads.camrecord.com
    127.0.0.1 ads.cdmediaworld.com
    127.0.0.1 ads.cgi.enthusiastonline.com
    127.0.0.1 ads.clicks.net
    127.0.0.1 ads.clubphoto.com
    127.0.0.1 ads.cndb.com
    127.0.0.1 ads.communitech.net
    127.0.0.1 ads.computer.org
    127.0.0.1 ads.consolemul.com
    127.0.0.1 ads.corky.net
    127.0.0.1 ads.date.com
    127.0.0.1 ads.denverbroncos.com
    127.0.0.1 ads.dk.danban.com
    127.0.0.1 ads.educationworld.com
    127.0.0.1 ads.fish4.co.uk
    127.0.0.1 ads.ftd.de
    127.0.0.1 ads.gateway.com
    127.0.0.1 ads.goantiques.com
    127.0.0.1 ads.granadamedia.com
    127.0.0.1 ads.greenvilleonline.com
    127.0.0.1 ads.hecklers.org
    127.0.0.1 ads.herplanet.com
    127.0.0.1 ads.interactivetools.com
    127.0.0.1 ads.killerapp.com
    127.0.0.1 ads.lycos.fr
    127.0.0.1 ads.mayoclinic.com
    127.0.0.1 ads.metromanager.com
    127.0.0.1 ads.mp3mediaworld.com
    127.0.0.1 ads.mustangworks.com
    127.0.0.1 ads.newsland.it
    127.0.0.1 ads.nit.firstream.net
    127.0.0.1 ads.norindex.no
    127.0.0.1 ads.northjersey.com
    127.0.0.1 ads.ocean12tech.com
    127.0.0.1 ads.ontheweb.com
    127.0.0.1 ads.pojonews.com
    127.0.0.1 ads.rmbclick.com
    127.0.0.1 ads.salary.com
    127.0.0.1 ads.showbizz.net
    127.0.0.1 ads.sina.com.tw
    127.0.0.1 ads.spystocks.com
    127.0.0.1 ads.stupid.com
    127.0.0.1 ads.thebubbler.com
    127.0.0.1 ads.thebugs.ws
    127.0.0.1 ads.theithacajournal.com
    127.0.0.1 ads.upa.com.br
    127.0.0.1 ads.vcix.com
    127.0.0.1 ads.vegas.com
    127.0.0.1 ads.wiredkingdom.com
    127.0.0.1 ads.wnd.com
    127.0.0.1 ads.worldemail.com
    127.0.0.1 ads1.spiderware.com
    127.0.0.1 ads1.ucomics.com
    127.0.0.1 ads3.ucomics.com
    127.0.0.1 ads5.gamecity.org
    127.0.0.1 adserv.arrow.com
    127.0.0.1 adserv.usps.com
    127.0.0.1 adserver-espnet.sportszone.net
    127.0.0.1 adserver.2618.com
    127.0.0.1 adserver.advertist.com
    127.0.0.1 adserver.artempireindustries.com
    127.0.0.1 adserver.atari.net
    127.0.0.1 adserver.click4cash.de
    127.0.0.1 adserver.directforce.com
    127.0.0.1 adserver.emulation64.com
    127.0.0.1 adserver.gameparty.net
    127.0.0.1 adserver.hg-computer.de
    127.0.0.1 adserver.ixm.co.uk
    127.0.0.1 adserver.lanacion.com.ar
    127.0.0.1 adserver.lostreality.com
    127.0.0.1 adserver.smashtv.com
    127.0.0.1 adserver.telalink.net
    127.0.0.1 adserver.thirty4.com
    127.0.0.1 adserver.virgin.net
    127.0.0.1 adsrv.heraldtribune.com
    127.0.0.1 adsrv2.wilmingtonstar.com
    127.0.0.1 adtraq.com
    127.0.0.1 adv.247realmedia.com
    127.0.0.1 adv.easyurl.org
    127.0.0.1 advert.cdmediaworld.com
    127.0.0.1 advert.trainingtools.com
    127.0.0.1 advert.webdifusao-server.com
    127.0.0.1 advertiser.co.il
    127.0.0.1 advertising.christiansunite.com
    127.0.0.1 advertising.hiasys.com
    127.0.0.1 ad.fulano.com.br
    127.0.0.1 ad1.ixo.com
    127.0.0.1 adclient.detelefoongids.nl
    127.0.0.1 ads.somethingawful.com
    127.0.0.1 ads.webnetad.com
    127.0.0.1 adsnew.userfriendly.com
    127.0.0.1 adv2.absoluteagency.com
    127.0.0.1 ehg-bestbuy.hitbox.com
    127.0.0.1 sfnstatic.smni.com
    127.0.0.1 usatravelpro.com
    127.0.0.1 adv.realmedia.com
    127.0.0.1 dcstest.wtlive.com
    127.0.0.1 banners.ksl.com
    127.0.0.1 image.imgfarm.com
    127.0.0.1 cache.megabyte.crosswinds.net
    127.0.0.1 ad0.doubleclick.be
    127.0.0.1 mobileproxy-vip.us.doubleclick.net
    127.0.0.1 www.ad0.doubleclick.be
    127.0.0.1 banner.bpaserver.net
    127.0.0.1 banner.i-3.de
    127.0.0.1 banner2tausch.de
    127.0.0.1 bannerads.anytimenews.com
    127.0.0.1 bannerexchange4free.de
    127.0.0.1 banners.buscarsexo.com
    127.0.0.1 banners.cj.com
    127.0.0.1 banners.moviegoods.com
    127.0.0.1 banners.winfire.com
    127.0.0.1 ad.deremate.com
    127.0.0.1 ad.shop.tbn.ru
    127.0.0.1 ad.webm.tbn.ru
    127.0.0.1 ad.webm120.tbn.ru
    127.0.0.1 ad1.primorye.ru
    127.0.0.1 ad3.allbanners.ru
    127.0.0.1 ad5.peel.com
    127.0.0.1 adclick.ru
    127.0.0.1 addserver.payback.pl
    127.0.0.1 ads-dk.spray.net
    127.0.0.1 ads-it.spray.net
    127.0.0.1 ads-nl.spray.net
    127.0.0.1 ads-se.spray.net
    127.0.0.1 ads-uk.spray.net
    127.0.0.1 ads.berrynet.com
    127.0.0.1 ads.flashtrack.net
    127.0.0.1 ads.lycos.spray.net
    127.0.0.1 ads.mouseplanet.com
    127.0.0.1 ads.netfire.com
    127.0.0.1 ads.orbitz.com
    127.0.0.1 adserver.softonic.com
    127.0.0.1 adv.aport.ru
    127.0.0.1 adv.hardwarez.ru
    127.0.0.1 banner.svitonline.com
    127.0.0.1 ad.163.com
    127.0.0.1 ad.bb.ru
    127.0.0.1 ad.east.net.cn
    127.0.0.1 ad.ero.ru
    127.0.0.1 ad.horvitznewspapers.net
    127.0.0.1 ad2.asit.de
    127.0.0.1 ad4.enet.com.cn
    127.0.0.1 ad4.peel.com
    127.0.0.1 ads-direct.prodigy.net
    127.0.0.1 ads.adprofs.com
    127.0.0.1 ads.asap-asp.net
    127.0.0.1 ads.filads.intermezzia.com
    127.0.0.1 ads.mediacapital.pt
    127.0.0.1 ads.mweb.co.th
    127.0.0.1 adserver.phillyburbs.com
    127.0.0.1 adserver.prodigy.net
    127.0.0.1 adserver.synergetic.de
    127.0.0.1 ad.120.tbn.ru
    127.0.0.1 ad.clickhere.ru
    127.0.0.1 ad.fr.ulimit.com
    127.0.0.1 ad.lbb.org
    127.0.0.1 ad.lbn.ru
    127.0.0.1 ad.network60.com
    127.0.0.1 ad.nifty.com
    127.0.0.1 ad.pointer.ru
    127.0.0.1 ad.pupsik.ru
    127.0.0.1 ad.showbizz.net
    127.0.0.1 ad.strict.tbn.ru
    127.0.0.1 ad.trafficgate.net
    127.0.0.1 ad2.allbanners.ru
    127.0.0.1 ad4.ad4.bb.ru
    127.0.0.1 adm1.admarketplace.co.jp
    127.0.0.1 ads-fr.spray.net
    127.0.0.1 ads-no.spray.net
    127.0.0.1 ads.100megswebhosting.com
    127.0.0.1 ads.analitica.com
    127.0.0.1 ads.applelinks.com
    127.0.0.1 ads.aspectgroup.co.uk
    127.0.0.1 ads.baazee.com
    127.0.0.1 ads.doktoronline.no
    127.0.0.1 ads.epatra.com
    127.0.0.1 ads.fortunecity.co.uk
    127.0.0.1 ads.globo.com
    127.0.0.1 ads.hardwarezone.com
    127.0.0.1 ads.hi-ho.ne.jp
    127.0.0.1 ads.indiainfo.com
    127.0.0.1 ads.infonet-thueringen.de
    127.0.0.1 ads.justscored.co.uk
    127.0.0.1 ads.mandrakesoft.com
    127.0.0.1 ads.marketing-internet.com
    127.0.0.1 ads.mh5.com
    127.0.0.1 ads.msn.co.il
    127.0.0.1 ads.music-sites.net
    127.0.0.1 ads.southbendtribune.com
    127.0.0.1 ads.x.techno.net
    127.0.0.1 adserver.co.il
    127.0.0.1 adserver.virtualminds.nl
    127.0.0.1 adserver.ya.com
    127.0.0.1 adsweb.tiscali.de
    127.0.0.1 adsweb.tiscali.it
    127.0.0.1 adv.bannercity.ru
    127.0.0.1 adv01.interfree.it
    127.0.0.1 oz.valueclick.ne.jp
    127.0.0.1 banner.maxximum.org
    127.0.0.1 bannerbooster.free.fr
    127.0.0.1 bannerexchange.klikklik.nl
    127.0.0.1 banners.dollarmachine.com
    127.0.0.1 banners.gribel.com
    127.0.0.1 banners.interq.or.jp
    127.0.0.1 banners.webcounter.com
    127.0.0.1 www.bannner.com
    127.0.0.1 www3.bannner.com
    127.0.0.1 ad.zdnet.co.jp
    127.0.0.1 www.mediaclick.jp
    127.0.0.1 4at3.net
    127.0.0.1 abacus.geocities.com
    127.0.0.1 ad.adrenaline.cz
    127.0.0.1 ad.ads.dk
    127.0.0.1 ad.advert.hu
    127.0.0.1 ad.asv.de
    127.0.0.1 ad.at.doubleclick.net
    127.0.0.1 ad.au.doubleclick.be
    127.0.0.1 ad.be.doubleclick.be
    127.0.0.1 ad.blm.org
    127.0.0.1 ad.bs.doubleclick.net
    127.0.0.1 ad.ca.doubleclick.be
    127.0.0.1 ad.caramail.com
    127.0.0.1 ad.ch.doubleclick.be
    127.0.0.1 ad.co.doubleclick.net
    127.0.0.1 ad.cz.doubleclick.net
    127.0.0.1 ad.de.doubleclick.be
    127.0.0.1 ad.doubleclick.be
    127.0.0.1 ad.ad.eg.doubleclick.net
    127.0.0.1 ad.ero.be
    127.0.0.1 ad.ero.nl
    127.0.0.1 ad.excite.co.jp
    127.0.0.1 ad.fr.advertissimo.net
    127.0.0.1 ad.fr.doubleclick.be
    127.0.0.1 ad.goo.ne.jp
    127.0.0.1 ad.gr.doubleclick.net
    127.0.0.1 ad.gt.doubleclick.net
    127.0.0.1 ad.ibest.com.br
    127.0.0.1 ad.id.doubleclick.net
    127.0.0.1 ad.iemg.com
    127.0.0.1 ad.iii.co.uk
    127.0.0.1 ad.il.doubleclick.net
    127.0.0.1 ad.is.doubleclick.net
    127.0.0.1 ad.jp.doubleclick.be
    127.0.0.1 ad.jpln.doubleclick.net
    127.0.0.1 ad.kw.doubleclick.net
    127.0.0.1 ad.linkexchange.nl
    127.0.0.1 ad.linx.sk
    127.0.0.1 ad.ma.doubleclick.net
    127.0.0.1 ad.mx.doubleclick.net
    127.0.0.1 ad.my.doubleclick.be
    127.0.0.1 ad.myrice.com
    127.0.0.1 ad.napigator.com
    127.0.0.1 ad.nl.doubleclick.be
    127.0.0.1 ad.no.doubleclick.be
    127.0.0.1 ad.nttnavi.co.jp
    127.0.0.1 ad.pchome.com.tw
    127.0.0.1 ad.pe.doubleclick.net
    127.0.0.1 ad.ph.doubleclick.net
    127.0.0.1 ad.preferences.net
    127.0.0.1 ad.sa.doubleclick.net
    127.0.0.1 ad.sales.olympics.nl
    127.0.0.1 ad.se.doubleclick.be
    127.0.0.1 ad.search.ch
    127.0.0.1 ad.sg.doubleclick.be
    127.0.0.1 ad.sizzle.com
    127.0.0.1 ad.sma.punto.org
    127.0.0.1 ad.telnet.hu
    127.0.0.1 ad.tr.doubleclick.net
    127.0.0.1 ad.uk.doubleclick.be
    127.0.0.1 ad.ve.doubleclick.net
    127.0.0.1 ad.walla.co.il
    127.0.0.1 ad.wedoo.com
    127.0.0.1 ad.wt50.com
    127.0.0.1 ad1.adverticum.net
    127.0.0.1 ad1.doubleclick.be
    127.0.0.1 ad1.doubleclick.com
    127.0.0.1 ad1.gamezone.de
    127.0.0.1 ad1.lbn.ru
    127.0.0.1 ad10.doubleclick.be
    127.0.0.1 ad10.lbn.ru
    127.0.0.1 ad11.doubleclick.be
    127.0.0.1 ad11.lbn.ru
    127.0.0.1 ad12.doubleclick.be
    127.0.0.1 ad12.lbn.ru
    127.0.0.1 ad13.doubleclick.be
    127.0.0.1 ad13.lbn.ru
    127.0.0.1 ad14.doubleclick.be
    127.0.0.1 ad15.doubleclick.be
    127.0.0.1 ad16.doubleclick.be
    127.0.0.1 ad17.doubleclick.be
    127.0.0.1 ad18.doubleclick.be
    127.0.0.1 ad19.doubleclick.be
    127.0.0.1 ad2.ad2.doubleclick.be
    127.0.0.1 ad2.doubleclick.com
    127.0.0.1 ad2.lbn.ru
    127.0.0.1 ad2.peel.com
    127.0.0.1 ad2.yam.com.tw
    127.0.0.1 ad20.doubleclick.be
    127.0.0.1 ad3.doubleclick.be
    127.0.0.1 ad3.doubleclick.com
    127.0.0.1 ad3.doubleclick.net
    127.0.0.1 ad3.lbn.ru
    127.0.0.1 ad4.doubleclick.be
    127.0.0.1 ad4.doubleclick.com
    127.0.0.1 ad4.doubleclick.net
    127.0.0.1 ad5.doubleclick.be
    127.0.0.1 ad5.doubleclick.com
    127.0.0.1 ad5.doubleclick.net
    127.0.0.1 ad5.lbn.ru
    127.0.0.1 ad6.doubleclick.be
    127.0.0.1 ad6.doubleclick.com
    127.0.0.1 ad6.doubleclick.net
    127.0.0.1 ad6.lbn.ru
    127.0.0.1 ad7.doubleclick.be
    127.0.0.1 ad7.doubleclick.com
    127.0.0.1 ad7.doubleclick.net
    127.0.0.1 ad7.lbn.ru
    127.0.0.1 ad8.doubleclick.be
    127.0.0.1 ad8.doubleclick.com
    127.0.0.1 ad8.doubleclick.net
    127.0.0.1 ad8.lbn.ru
    127.0.0.1 ad9.doubleclick.be
    127.0.0.1 ad9.doubleclick.com
    127.0.0.1 ad9.doubleclick.net
    127.0.0.1 ad9.lbn.ru
    127.0.0.1 adbanner.sweepsclub.com
    127.0.0.1 adbest.net
    127.0.0.1 adbonus.com
    127.0.0.1 adcentral.gtmi.net
    127.0.0.1 adclick.de
    127.0.0.1 adclick.dig-online.de
    127.0.0.1 adcount.hollywood.nl
    127.0.0.1 adcreatives.imaginemedia.net
    127.0.0.1 adengine.po.com
    127.0.0.1 adengine.theglobe.net
    127.0.0.1 adimage.blm.net
    127.0.0.1 adimage.blm.org
    127.0.0.1 adimages.tmpw.net
    127.0.0.1 adimg.activeadv.net
    127.0.0.1 adlink.preferences.net
    127.0.0.1 adlog.profero.com
    127.0.0.1 admonitor.com
    127.0.0.1 adn4.activeadv.net
    127.0.0.1 adp.cplaza.ne.jp
    127.0.0.1 adpick.switchboard.org
    127.0.0.1 adpop.theglobe.net
    127.0.0.1 adpulse.ads.targetnet.com
    127.0.0.1 adrunner.mycomputer.nl
    127.0.0.1 ads.51.net
    127.0.0.1 ads.adhostcenter.com
    127.0.0.1 ads.ads.ads.ahds.ac.uk
    127.0.0.1 ads.allotraffic.com
    127.0.0.1 ads.amusive.com
    127.0.0.1 ads.as4x.tmcs.ticketmaster.com
    127.0.0.1 ads.avn.valueclick.net
    127.0.0.1 ads.banner.t-online.de
    127.0.0.1 ads.banner-link.com.br
    127.0.0.1 ads.bigasia.com
    127.0.0.1 ads.bluemountain.nl
    127.0.0.1 ads.bolt.com
    127.0.0.1 ads.cashsurfers.com
    127.0.0.1 ads.click2paid.com
    127.0.0.1 ads.clickad.com.pl
    127.0.0.1 ads.cmpnet.com
    127.0.0.1 ads.coolads.de
    127.0.0.1 ads.dai.nl
    127.0.0.1 ads.dealnews.com
    127.0.0.1 ads.delfi.ee
    127.0.0.1 ads.democratandchronicle.com
    127.0.0.1 ads.desertsunonline.com
    127.0.0.1 ads.doubleclick.be
    127.0.0.1 ads.dwclick.com
    127.0.0.1 ads.economist.com
    127.0.0.1 ads.enliven.net
    127.0.0.1 ads.enliven.org
    127.0.0.1 ads.erotism.net
    127.0.0.1 ads.erotism.nl
    127.0.0.1 ads.erotism.org
    127.0.0.1 ads.fool.org
    127.0.0.1 ads.fortunecity.de
    127.0.0.1 ads.fortunecity.fr
    127.0.0.1 ads.fortunecity.org
    127.0.0.1 ads.foxhome.com
    127.0.0.1 ads.hollywood.nl
    127.0.0.1 ads.iac-online.de
    127.0.0.1 ads.imdb.nl
    127.0.0.1 ads.imdb.org
    127.0.0.1 ads.interfun.net
    127.0.0.1 ads.internova.de
    127.0.0.1 ads.ixo.com
    127.0.0.1 ads.jobclicks.net
    127.0.0.1 ads.kleinman.com
    127.0.0.1 ads.live365.com
    127.0.0.1 ads.lx.hu
    127.0.0.1 ads.lycos.de
    127.0.0.1 ads.necker-online.de
    127.0.0.1 ads.nerve.com
    127.0.0.1 ads.netdok.net
    127.0.0.1 ads.ninemsn.net
    127.0.0.1 ads.ole.org
    127.0.0.1 ads.onecenter.com
    127.0.0.1 ads.pentoninteractive.com
    127.0.0.1 ads.playnet.com
    127.0.0.1 ads.playnet.nl
    127.0.0.1 ads.pointroll.com
    127.0.0.1 ads.quicken.com
    127.0.0.1 ads.sexspaces.net
    127.0.0.1 ads.sexspaces.nl
    127.0.0.1 ads.sol.no
    127.0.0.1 ads.spaceports.net
    127.0.0.1 ads.sublimedirectory.com
    127.0.0.1 ads.sublimedirectory.org
    127.0.0.1 ads.surfsolutions.com
    127.0.0.1 ads.swirve.com
    127.0.0.1 ads.switchboard.org
    127.0.0.1 ads.terra.com.br
    127.0.0.1 ads.toronto.com
    127.0.0.1 ads.ugo.nl
    127.0.0.1 ads.viaarena.com
    127.0.0.1 ads.web.compuserve.com
    127.0.0.1 ads.web21.de
    127.0.0.1 ads.webcoretech.com
    127.0.0.1 ads.xpics.com
    127.0.0.1 ads.xserv.net
    127.0.0.1 ads.yifan.com
    127.0.0.1 ads.yupimsn.com
    127.0.0.1 ads.zdnet.org
    127.0.0.1 ads-03.tor.focusin.ads.targetnet.com
    127.0.0.1 ads1.clickad.com.pl
    127.0.0.1 ads1.crgaming.com
    127.0.0.1 ads1.vip.sc5.yahoo.com
    127.0.0.1 ads1.zdnet.org
    127.0.0.1 ads2.cgi.eohub.com
    127.0.0.1 ads2.clickad.com.pl
    127.0.0.1 ads2.delfi.ee
    127.0.0.1 ads2.pentoninteractive.com
    127.0.0.1 ads2.zdnet.org
    127.0.0.1 ads3.bigasia.com
    127.0.0.1 ads3.zdnet.org
    127.0.0.1 ads4.bigasia.com
    127.0.0.1 ads4.zdnet.org
    127.0.0.1 ads5.bigasia.com
    127.0.0.1 ads7.c.no1.asap-asp.net
    127.0.0.1 ads8.c.no1.asap-asp.net
    127.0.0.1 adsadmin.nandomedia.com
    127.0.0.1 adserv.bravenet.com
    127.0.0.1 adserv.de
    127.0.0.1 adserv.floppybank.com
    127.0.0.1 adserv.quality-channel.com
    127.0.0.1 adserv001.adtech.de
    127.0.0.1 adserv002.adtech.de
    127.0.0.1 adserv003.adtech.de
    127.0.0.1 adserv004.adtech.de
    127.0.0.1 adserv005.adtech.de
    127.0.0.1 adserv006.adtech.de
    127.0.0.1 adserv007.adtech.de
    127.0.0.1 adserv008.adtech.de
    127.0.0.1 adservant.guj.net
    127.0.0.1 adserver.ad-it.dk
    127.0.0.1 adserver.airmiles.ca
    127.0.0.1 adserver.akqa.net
    127.0.0.1 adserver.arttoday.com
    127.0.0.1 adserver.clubic.com
    127.0.0.1 adserver.comparatel.fr
    127.0.0.1 adserver.com-solutions.com
    127.0.0.1 adserver.digitalpartners.com
    127.0.0.1 adserver.harvestadsdepot.com
    127.0.0.1 adserver.interfree.it
    127.0.0.1 adserver.janes.net
    127.0.0.1 adserver.janes.org
    127.0.0.1 adserver.lunarpages.com
    127.0.0.1 adserver.myownemail.com
    127.0.0.1 adserver.netshelter.net
    127.0.0.1 adserver.onwisconsin.com
    127.0.0.1 adserver.phatmax.net
    127.0.0.1 adserver.portal.pl
    127.0.0.1 adserver.ratestar.net
    127.0.0.1 adserver.te.pt
    127.0.0.1 adserver.trader.ca
    127.0.0.1 adserver.tweakers.net
    127.0.0.1 adserver.ugo.nl
    127.0.0.1 adserver.voir.ca
    127.0.0.1 adserver.wemnet.nl
    127.0.0.1 adsmart.de
    127.0.0.1 adsmart.nl
    127.0.0.1 adsrv.hpg.com.br
    127.0.0.1 adsrv.ilife.com
    127.0.0.1 adsrv.news.com.au
    127.0.0.1 adssl01.adtech.de
    127.0.0.1 adssl02.adtech.de
    127.0.0.1 adsv.interia.pl
    127.0.0.1 adtegrity.spinbox.org
    127.0.0.1 adv4.activeadv.net
  • Hobbsy
    edited April 2007
    127.0.0.1 advert.heise.org
    127.0.0.1 advertising.paltalk.com
    127.0.0.1 adwaver.de
    127.0.0.1 adx.adrenalinesk.sk
    127.0.0.1 adx1.adrenaline.cz
    127.0.0.1 affiliates.turbo-surfer.com
    127.0.0.1 affiliatetargetad.com
    127.0.0.1 ai.net
    127.0.0.1 all69.awesomeporn.com
    127.0.0.1 altfarm.mediaplex.com
    127.0.0.1 ap.delfi.ee
    127.0.0.1 arbo.aru.index.hu
    127.0.0.1 asacp.org
    127.0.0.1 asp.myfree.com
    127.0.0.1 atlas.services.ou.edu
    127.0.0.1 au1.doubleclick.net
    127.0.0.1 b.porncity.org
    127.0.0.1 bangbus.com
    127.0.0.1 banner.adrenaline.cz
    127.0.0.1 banner.freeservers.net
    127.0.0.1 banner.infomaniak.ch
    127.0.0.1 banner.linkexchange.nl
    127.0.0.1 banner.listinus.de
    127.0.0.1 banner.pornoguru.de
    127.0.0.1 banner.rootsweb.net
    127.0.0.1 banner.sda.t-online.de
    127.0.0.1 banner.technorail.com
    127.0.0.1 banner.tripple.at
    127.0.0.1 banner2.babenet.be
    127.0.0.1 banner2.babenet.com
    127.0.0.1 banner2.babenet.nl
    127.0.0.1 banner3.a411.com
    127.0.0.1 bannerbank.com
    127.0.0.1 bannerbank.de
    127.0.0.1 bannercampaign.com
    127.0.0.1 bannercash.com.cz
    127.0.0.1 bannercash.de
    127.0.0.1 banner-mania.com
    127.0.0.1 bannernetwork.cearchives.com
    127.0.0.1 banners.babylon-boy.com
    127.0.0.1 banners.easydns.nl
    127.0.0.1 banners.fantasycorp.com
    127.0.0.1 banners.freerun.com
    127.0.0.1 banners.gayweb.com
    127.0.0.1 banners.img.uol.com.br
    127.0.0.1 banners.intergal.com
    127.0.0.1 banners.sextracker.be
    127.0.0.1 banners.unfaithful.com
    127.0.0.1 banners.xxxwebhosting.com
    127.0.0.1 bannerswap.de
    127.0.0.1 bannerswap.nl
    127.0.0.1 bidclix.com
    127.0.0.1 bighits.net
    127.0.0.1 biz.zairmail.com
    127.0.0.1 bizad.nikkeibp.co.jp
    127.0.0.1 bizrate.com
    127.0.0.1 br1.doubleclick.net
    127.0.0.1 brainteasers.freestats.com
    127.0.0.1 c1.zedo.com
    127.0.0.1 c3.xxxcounter.com
    127.0.0.1 califia.imaginemedia.net
    127.0.0.1 cgicounter.onlinehome.de
    127.0.0.1 cidyweb.free.fr
    127.0.0.1 clexchange.usww.com
    127.0.0.1 click.linksynergy.com
    127.0.0.1 clickagents.de
    127.0.0.1 ClickCash.WebPower.com
    127.0.0.1 clicks.about.nl
    127.0.0.1 clicksxchange.com
    127.0.0.1 clicktrade.linkexchange.nl
    127.0.0.1 clickXchange.net
    127.0.0.1 cn.adserver.yahoo.com
    127.0.0.1 cn1.doubleclick.net
    127.0.0.1 code.newsclicker.com
    127.0.0.1 code-adrunner.mycomputer.com
    127.0.0.1 console.popupsponsor.com
    127.0.0.1 count.freeyellow.com
    127.0.0.1 count.yourmusic.cc
    127.0.0.1 counter.hitslink.com
    127.0.0.1 countus.editeurjavascript.com
    127.0.0.1 ct.sexadnet.com
    127.0.0.1 ctc.japaneseanime.com
    127.0.0.1 cz3.clickzs.com
    127.0.0.1 cz6.clickzs.com
    127.0.0.1 dailyradar.ads.imaginemedia.net
    127.0.0.1 db0.sitestats.com
    127.0.0.1 direct.travelocity.com
    127.0.0.1 download.cashsurfers.com
    127.0.0.1 ds1.onet.pl
    127.0.0.1 dsa.er.cyberwing.co.jp
    127.0.0.1 ebates.com
    127.0.0.1 ehg.hitbox.com
    127.0.0.1 ehg-dig.hitbox.com
    127.0.0.1 ehg-espn.hitbox.com
    127.0.0.1 ehg-learningco.hitbox.com
    127.0.0.1 elf.box.sk
    127.0.0.1 exitstitial.gopher.com
    127.0.0.1 fast.mediacharger.com
    127.0.0.1 fastcounter.linkexchange.nl
    127.0.0.1 fr.nedstatbasic.net
    127.0.0.1 g.fool.co.uk
    127.0.0.1 gd1.doubleclick.net
    127.0.0.1 gd2.doubleclick.net
    127.0.0.1 gd27.doubleclick.net
    127.0.0.1 geogi.gator.com
    127.0.0.1 global.go4media.com
    127.0.0.1 gs.gator.com
    127.0.0.1 help.adtech.de
    127.0.0.1 hg1.hitbox.com
    127.0.0.1 hit.reference-sexe.com
    127.0.0.1 hk1.doubleclick.net
    127.0.0.1 holland.hyperbanner.com
    127.0.0.1 houseads.bizspace.com
    127.0.0.1 hv.nwd42.com
    127.0.0.1 ifcol1.internetfuel.com
    127.0.0.1 ifcol2.internetfuel.com
    127.0.0.1 image.linkexchange.nl
    127.0.0.1 image73.eguard.com
    127.0.0.1 images.francite.com
    127.0.0.1 images.popupsponsor.com
    127.0.0.1 img.mediaplex.com
    127.0.0.1 img-iad.wip.mediaplex.com
    127.0.0.1 imgserv.adbutler.com
    127.0.0.1 imserv001.adtech.de
    127.0.0.1 imserv002.adtech.de
    127.0.0.1 imserv003.adtech.de
    127.0.0.1 imserv004.adtech.de
    127.0.0.1 imserv005.adtech.de
    127.0.0.1 imserv006.adtech.de
    127.0.0.1 info.learningco.com
    127.0.0.1 iv.doubleclick.net
    127.0.0.1 join.netbroadcaster.com
    127.0.0.1 jp1.doubleclick.net
    127.0.0.1 js.zmedia.com
    127.0.0.1 kansas.valueclick.com
    127.0.0.1 kansas.valueclick.ne.jp
    127.0.0.1 kr1.doubleclick.net
    127.0.0.1 leader.linkexchange.com
    127.0.0.1 leader.linkexchange.nl
    127.0.0.1 link.exitdirect.com
    127.0.0.1 linkexchange.be
    127.0.0.1 linktracker.angelfire.com
    127.0.0.1 ln.doubleclick.be
    127.0.0.1 ln.doubleclick.com
    127.0.0.1 load.focalex.com
    127.0.0.1 logs.sexy-parade.com
    127.0.0.1 lt.angelfire.com
    127.0.0.1 m.doubleclick.be
    127.0.0.1 m.tribalfusion.com
    127.0.0.1 m.us.doubleclick.net
    127.0.0.1 m1.nedstatbasic.net
    127.0.0.1 m2.doubleclick.be
    127.0.0.1 map.eguard.com
    127.0.0.1 maximumpcads.imaginemedia.net
    127.0.0.1 media.snowball.com
    127.0.0.1 media-mc-adrunner.mycomputer.com
    127.0.0.1 memoweb3.goto.fr
    127.0.0.1 mobileproxy-vip1.us.doubleclick.net
    127.0.0.1 mojofarm.mediaplex.com
    127.0.0.1 mrad.webjump.com
    127.0.0.1 mr-cash.com
    127.0.0.1 mx.adserver.yahoo.com
    127.0.0.1 newadserver.interfree.it
    127.0.0.1 nitrous.exitfuel.com
    127.0.0.1 nitrous1.internetfuel.com
    127.0.0.1 nitrous10.internetfuel.com
    127.0.0.1 nitrous11.internetfuel.com
    127.0.0.1 nitrous2.internetfuel.com
    127.0.0.1 nitrous3.internetfuel.com
    127.0.0.1 nitrous4.internetfuel.com
    127.0.0.1 nitrous5.internetfuel.com
    127.0.0.1 nitrous6.internetfuel.com
    127.0.0.1 nitrous7.internetfuel.com
    127.0.0.1 nitrous8.internetfuel.com
    127.0.0.1 nitrous9.internetfuel.com
    127.0.0.1 nl.adserver.yahoo.com
    127.0.0.1 no1.ad.asap-asp.net
    127.0.0.1 no2.ad.asap-asp.net
    127.0.0.1 nxads.internet.com
    127.0.0.1 oad.realmedia.com
    127.0.0.1 one-time-offer.com
    127.0.0.1 oz.valueclick.com
    127.0.0.1 p01.com
    127.0.0.1 pbid.pro-market.net
    127.0.0.1 pixel3.about.com
    127.0.0.1 popup.found404.com
    127.0.0.1 probe.prohosting.com
    127.0.0.1 project2.realtracker.com
    127.0.0.1 promo.yahoo.com
    127.0.0.1 pub21.bravenet.com
    127.0.0.1 pubsec.goto.fr
    127.0.0.1 ranking.buscarsexo.com
    127.0.0.1 rd.au.doubleclick.net
    127.0.0.1 rd.br.doubleclick.net
    127.0.0.1 rd.cn.doubleclick.net
    127.0.0.1 rd.de.doubleclick.net
    127.0.0.1 rd.eshop.msn.com
    127.0.0.1 rd.fr.doubleclick.net
    127.0.0.1 rd.hk.doubleclick.net
    127.0.0.1 rd.intl.doubleclick.net
    127.0.0.1 rd.jp.doubleclick.net
    127.0.0.1 rd.kr.doubleclick.net
    127.0.0.1 rd.se.doubleclick.net
    127.0.0.1 rd.sg.doubleclick.net
    127.0.0.1 rd.terra.doubleclick.net
    127.0.0.1 rd.uk.doubleclick.net
    127.0.0.1 realmedia.m6.fr
    127.0.0.1 realmedia-a592.d4p.net
    127.0.0.1 redirect.winnersplaycasinos.com
    127.0.0.1 remotead-internal.cnet.com
    127.0.0.1 report02.adtech.de
    127.0.0.1 reporter.adtech.de
    127.0.0.1 reporter001.adtech.de
    127.0.0.1 reportimage.adtech.de
    127.0.0.1 revenueservice.com
    127.0.0.1 rm.myoc.com
    127.0.0.1 rs.gator.com
    127.0.0.1 s0b.bluestreak.com
    127.0.0.1 sb1.realtrackerbe.com
    127.0.0.1 sb1.realtrackernl.com
    127.0.0.1 schumacher.adtech.de
    127.0.0.1 se.adserver.yahoo.com
    127.0.0.1 secserv.adtech.de
    127.0.0.1 server224.smartbotpro.net
    127.0.0.1 server5.affiliatetarget.com
    127.0.0.1 service001.adtech.de
    127.0.0.1 service002.adtech.de
    127.0.0.1 service003.adtech.de
    127.0.0.1 sg1.doubleclick.net
    127.0.0.1 si.homestore.com
    127.0.0.1 siteminer.mycomputer.com
    127.0.0.1 sitestat.nedstat.nl
    127.0.0.1 sm.banner-link.com.br
    127.0.0.1 stats.2u.ru
    127.0.0.1 stats.gograph.com
    127.0.0.1 stats.go-west.nl
    127.0.0.1 stats1.porntrack.com
    127.0.0.1 talkcity.realtracker.com
    127.0.0.1 telecharger.01net.com
    127.0.0.1 telstra.thinknyc.eu-tpl1.realtracker.com
    127.0.0.1 trakka.zdnet.com.au
    127.0.0.1 trickle.gator.com
    127.0.0.1 ts.gator.com
    127.0.0.1 UGO.eu-uk.adserver.yahoo.com
    127.0.0.1 uk.nedstat.net
    127.0.0.1 us.usa.nedstat.com
    127.0.0.1 v0.extreme-dm.com
    127.0.0.1 v1.extreme-dm.com
    127.0.0.1 v1.nedstatbasic.net
    127.0.0.1 van.VNU.eu-w113.hitbox.com
    127.0.0.1 w25.hitbox.com
    127.0.0.1 ww2.absadirect.co.za
    127.0.0.1 www.2001-007.com
    127.0.0.1 www.actionsplash.com
    127.0.0.1 www.ad.au.doubleclick.be
    127.0.0.1 www.ad.be.doubleclick.be
    127.0.0.1 www.ad.blm.org
    127.0.0.1 www.ad.ca.doubleclick.be
    127.0.0.1 www.ad.ch.doubleclick.be
    127.0.0.1 www.ad.de.doubleclick.be
    127.0.0.1 www.ad.doubleclick.be
    127.0.0.1 www.ad.ero.be
    127.0.0.1 www.ad.ero.nl
    127.0.0.1 www.ad.fr.doubleclick.be
    127.0.0.1 www.ad.infoseek.com
    127.0.0.1 www.ad.jp.doubleclick.be
    127.0.0.1 www.ad.linkexchange.nl
    127.0.0.1 www.ad.my.doubleclick.be
    127.0.0.1 www.ad.nl.doubleclick.be
    127.0.0.1 www.ad.no.doubleclick.be
    127.0.0.1 www.www.ad.preferences.net
    127.0.0.1 www.ad.sales.olympics.nl
    127.0.0.1 www.ad.se.doubleclick.be
    127.0.0.1 www.ad.sg.doubleclick.be
    127.0.0.1 www.ad.sma.punto.org
    127.0.0.1 www.www.ad.uk.doubleclick.be
    127.0.0.1 www.ad1.doubleclick.be
    127.0.0.1 www.ad1.gamezone.de
    127.0.0.1 www.ad10.doubleclick.be
    127.0.0.1 www.ad11.doubleclick.be
    127.0.0.1 www.ad12.doubleclick.be
    127.0.0.1 www.ad13.doubleclick.be
    127.0.0.1 www.ad14.doubleclick.be
    127.0.0.1 www.ad15.doubleclick.be
    127.0.0.1 www.ad16.doubleclick.be
    127.0.0.1 www.ad17.doubleclick.be
    127.0.0.1 www.ad18.doubleclick.be
    127.0.0.1 www.ad19.doubleclick.be
    127.0.0.1 www.ad2.doubleclick.be
    127.0.0.1 www.ad20.doubleclick.be
    127.0.0.1 www.ad2000.org
    127.0.0.1 www.ad3.doubleclick.be
    127.0.0.1 www.ad4.doubleclick.be
    127.0.0.1 www.ad5.doubleclick.be
    127.0.0.1 www.ad6.doubleclick.be
    127.0.0.1 www.ad7.doubleclick.be
    127.0.0.1 www.ad8.doubleclick.be
    127.0.0.1 www.ad9.doubleclick.be
    127.0.0.1 www.adbot.de
    127.0.0.1 www.adcentriconline.com
    127.0.0.1 www.adcreatives.imaginemedia.net
    127.0.0.1 www.adengine.theglobe.net
    127.0.0.1 www.adexit.de
    127.0.0.1 www.adimage.blm.org
    127.0.0.1 www.www.adlink.deh.nl
    127.0.0.1 www.adlink.preferences.net
    127.0.0.1 www.admex.com
    127.0.0.1 www.www.adready.net
    127.0.0.1 www.www.www.www.ads.bluemountain.nl
    127.0.0.1 www.www.ads.dai.nl
    127.0.0.1 www.www.www.ads.doubleclick.be
    127.0.0.1 www.ads.enliven.net
    127.0.0.1 www.ads.enliven.org
    127.0.0.1 www.ads.erotism.net
    127.0.0.1 www.ads.erotism.nl
    127.0.0.1 www.ads.erotism.org
    127.0.0.1 www.www.ads.fool.org
    127.0.0.1 www.ads.fortunecity.org
    127.0.0.1 www.ads.hollywood.nl
    127.0.0.1 www.www.ads.imdb.nl
    127.0.0.1 www.www.ads.ole.org
    127.0.0.1 www.ads.playnet.nl
    127.0.0.1 www.ads.sexspaces.nl
    127.0.0.1 www.ads.spaceports.com
    127.0.0.1 www.ads.spaceports.net
    127.0.0.1 www.ads.sublimedirectory.org
    127.0.0.1 www.ads.switchboard.org
    127.0.0.1 www.www.ads.ugo.nl
    127.0.0.1 www.ads.web.com
    127.0.0.1 www.www.ads.web21.de
    127.0.0.1 www.www.ads.x10.net
    127.0.0.1 www.ads.zdnet.org
    127.0.0.1 www.ads-03.tor.focusin.ads.targetnet.com
    127.0.0.1 www.www.ads1.zdnet.org
    127.0.0.1 www.www.ads2.hyperbanner.net
    127.0.0.1 www.ads2.zdnet.org
    127.0.0.1 www.www.ads3.zdnet.org
    127.0.0.1 www.www.ads4.zdnet.org
    127.0.0.1 www.ads4texas.com
    127.0.0.1 www.www.www.adservant.guj.net
    127.0.0.1 www.www.adserver.janes.net
    127.0.0.1 www.adserver.janes.org
    127.0.0.1 www.www.adserver.ugo.nl
    127.0.0.1 www.adserver-espnet.sportszone.net
    127.0.0.1 www.www.adtegrity.spinbox.org
    127.0.0.1 www.ad-up.com
    127.0.0.1 www.www.advert.heise.org
    127.0.0.1 www.advert.stealth.nl
    127.0.0.1 www.advertising.com
    127.0.0.1 www.alibuba.web1000.com
    127.0.0.1 www.www.avenuea.com
    127.0.0.1 www.www.b.porncity.org
    127.0.0.1 www.bannedindia.com
    127.0.0.1 www.banner.linkexchange.nl
    127.0.0.1 www.banner2.babenet.be
    127.0.0.1 www.banner2.babenet.nl
    127.0.0.1 www.bannercampaign.com
    127.0.0.1 www.www.www.banners.easydns.nl
    127.0.0.1 www.banners.sextracker.be
    127.0.0.1 www.www.bannervip.webjump.com
    127.0.0.1 www.bns2.net
    127.0.0.1 www.www.califia.imaginemedia.net
    127.0.0.1 www.centrport.net
    127.0.0.1 www.www.clicktrade.linkexchange.nl
    127.0.0.1 www.clickxchange.com
    127.0.0.1 www.commission-junction.com
    127.0.0.1 www.dailyradar.ads.imaginemedia.net
    127.0.0.1 www.ddi2.com
    127.0.0.1 www.doubleclick.be
    127.0.0.1 www.www.doubleclick.net
    127.0.0.1 www.doubleclick.nl
    127.0.0.1 www.www.engage.com
    127.0.0.1 www.fastcounter.linkexchange.nl
    127.0.0.1 www.freestats.com
    127.0.0.1 www.i-clicks.net
    127.0.0.1 www.image.linkexchange.nl
    127.0.0.1 www.imaginemedia.com
    127.0.0.1 www.imaginemedia.net
    127.0.0.1 www.imaginemedia.org
    127.0.0.1 www.leader.linkexchange.nl
    127.0.0.1 www.linkexchange.nl
    127.0.0.1 www.ln.doubleclick.be
    127.0.0.1 www.m.doubleclick.be
    127.0.0.1 www.m2.doubleclick.be
    127.0.0.1 www.maximumpcads.imaginemedia.net
    127.0.0.1 www.netdirect.nl
    127.0.0.1 www.oneandonlynetwork.com
    127.0.0.1 www.publicadvertising.com
    127.0.0.1 www.qksrv.net
    127.0.0.1 www.rankyou.com
    127.0.0.1 www.rgs2.net
    127.0.0.1 www.theadstop.com
    127.0.0.1 www.valueclick.com
    127.0.0.1 www2.www3.ad.tomshardware.com
    127.0.0.1 www3.bannerspace.com
    127.0.0.1 www4.trix.net
    127.0.0.1 www80.valueclick.com
    127.0.0.1 xjohnnyx.virtualave.net
    127.0.0.1 xml.adtech.de
    127.0.0.1 z.extreme-dm.com
    127.0.0.1 z0.extreme-dm.com
    127.0.0.1 z1.extreme-dm.com
    127.0.0.1 ad.interreklame.de
    127.0.0.1 ads.comediagroup.hu
    127.0.0.1 ads.isum.de
    127.0.0.1 adserv2.bravenet.com
    127.0.0.1 adserver.pl
    127.0.0.1 advertising.publishededitions.co.uk
    127.0.0.1 advertisingbargains.com
    127.0.0.1 ak.alladvantage.com
    127.0.0.1 ar.atwola.com
    127.0.0.1 ar1.atwola.com
    127.0.0.1 au.autohits.dk
    127.0.0.1 bbanerovec.cz
    127.0.0.1 bsbusinessfactory.prospero.com
    127.0.0.1 cbx.heartlight.org
    127.0.0.1 click.greenlightmail.com
    127.0.0.1 click2paid.com
    127.0.0.1 directldiscountclick.com
    127.0.0.1 eu-euniverseur.exchange-it.com
    127.0.0.1 fastcounter.linkexchange.com
    127.0.0.1 freeinvisiblecounters.com
    127.0.0.1 gcgetmytraffic.com
    127.0.0.1 globalwebads.com
    127.0.0.1 hitlogger.com
    127.0.0.1 k5kliks.nl
    127.0.0.1 kr-adimage.lycos.co.kr
    127.0.0.1 leadcart.com
    127.0.0.1 linktrack.bravenet.com
    127.0.0.1 lnlog.btopenworld.com
    127.0.0.1 ngnitroclicks.com
    127.0.0.1 nitrous.internetfuel.com
    127.0.0.1 offshoreclicks.com
    127.0.0.1 oglasi.domenca.com
    127.0.0.1 ptrpub-g.ifrance.com
    127.0.0.1 publishers.adscholar.com
    127.0.0.1 reklamr.hitlist.ru
    127.0.0.1 servedby.advertising.com
    127.0.0.1 server.iad.liveperson.net
    127.0.0.1 sfshareasale.com
    127.0.0.1 ssstart.freeze.com
    127.0.0.1 stat.livejournal.com
    127.0.0.1 web3000.co.uk
    127.0.0.1 window.nixnet.cz
    127.0.0.1 www.alladvantage.com
    127.0.0.1 www.bannerads.de
    127.0.0.1 www.cash4banner.com
    127.0.0.1 www.megacash.de
    127.0.0.1 www.nedstat.nl
    127.0.0.1 www.postmasterbannernet.com
    127.0.0.1 www.www.x.mycity.com
    127.0.0.1 xupiter.com
    127.0.0.1 localhost


    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

    C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url Deleted
    C:\DOCUME~1\Doug\FAVORI~1\Online Security Test.url Deleted

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{5657C1DE-226B-4823-BB08-B4F8810EB721}: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{5657C1DE-226B-4823-BB08-B4F8810EB721}: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{5657C1DE-226B-4823-BB08-B4F8810EB721}: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1


    »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

    Registry Cleaning done.

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» End

    Afer all that thank you so far. Hobbsy
  • Rahina-RescueRahina-Rescue Finland
    edited April 2007
    Nice work :)

    Please run Deckard's System Scanner (DSS) You will need to use Internet Explorer to run it.

    Download to your Desktop. Note: You must be logged onto an account with administrator privileges.

    1. Close all applications and windows.
    2. Double-click on dss.exe to run it, and follow the prompts.
    3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <- this one will be minimized
    4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your thread.
    5. Please attach extra.txt to your post.

    Also add a Fresh Hijackthislogfile in yuor next reply.

    Thanks.
  • Hobbsy
    edited April 2007
    Deckard's System Scanner v20070328.36
    Run by Doug on 2007-04-06 at 15:59:24
    Computer is in Normal Mode.

    -- System Restore

    Successfully created a Deckard's System Scanner Restore Point.


    -- Last 5 Restore Point(s) --
    68: 2007-04-06 06:29:27 UTC - RP909 - Deckard's System Scanner Restore Point
    67: 2007-04-04 02:03:08 UTC - RP908 - System Checkpoint
    66: 2007-04-03 01:19:57 UTC - RP907 - System Checkpoint
    65: 2007-04-01 23:49:23 UTC - RP906 - System Checkpoint
    64: 2007-03-31 23:17:03 UTC - RP905 - System Checkpoint


    -- First Restore Point --
    1: 2007-02-05 21:01:12 UTC - RP842 - Installed Avid Free DV


    Backed up registry hives.

    Performed disk cleanup.


    -- HijackThis (run as Doug.exe)

    Logfile of HijackThis v1.99.1
    Scan saved at 4:00:45 PM, on 6/04/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\CyberLink\Shared files\RichVideo.exe
    C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\PowerS.EXE
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
    C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    C:\WINDOWS\System32\wfxsnt40.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Microsoft IntelliType Pro\type32.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\tsnp2std.exe
    C:\WINDOWS\vsnp2std.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
    C:\Program Files\AnyDVD\AnyDVD.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\PROGRA~1\INTERN~2\mum.exe
    C:\Program Files\SecCopy\SecCopy.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\AdsGone\adsgone.exe
    C:\Program Files\Skype\Plugin Manager\SkypePM.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Downloads\dss.exe
    C:\PROGRA~1\HIJACK~1\Doug.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {98467DA1-30A8-4C38-A8EC-9A706233F0CE} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
    O2 - BHO: IECatcher Class - {B930BA63-9E5A-11D3-A288-0000E80E2EDE} - C:\Program Files\Mass Downloader\MDHELPER.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [PowerS] C:\WINDOWS\PowerS.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
    O4 - HKLM\..\Run: [D066UUtility] C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
    O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
    O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\AnyDVD\AnyDVD.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [InternodeUsage] C:\PROGRA~1\INTERN~2\mum.exe
    O4 - HKCU\..\Run: [Second Copy 2000] "C:\Program Files\SecCopy\SecCopy.exe"
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Second Copy] "C:\Program Files\SecCopy\SecCopy.exe"
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: AdsGone 2006.lnk = C:\Program Files\AdsGone\adsgone.exe
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\WebMenuImg.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
    O8 - Extra context menu item: + &Mass Downloader: download this file - C:\Program Files\Mass Downloader\Add_Url.htm
    O8 - Extra context menu item: + Mass Downloader: download &All files - C:\Program Files\Mass Downloader\Add_All.htm
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
    O9 - Extra 'Tools' menuitem: &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://tw.msi.com.tw/autobios/client/iftwclix.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1094979136343
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?312
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
    O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe


    -- File Associations

    .bat - batfile - shell\edit\command - C:\WINDOWS\system32\dllcache\notepad.exe %1
    .cmd - cmdfile - shell\edit\command - C:\WINDOWS\system32\dllcache\notepad.exe %1
    .inf - inffile - shell\open\command - C:\WINDOWS\system32\dllcache\notepad.exe %1
    .ini - inifile - shell\open\command - C:\WINDOWS\system32\dllcache\notepad.exe %1
    .reg - regfile - shell\edit\command - C:\WINDOWS\system32\dllcache\notepad.exe %1
    .txt - txtfile - shell\open\command - C:\WINDOWS\system32\dllcache\notepad.exe %1
    .vbs - VBSFile - shell\edit\command - C:\WINDOWS\system32\dllcache\notepad.exe %1


    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled

    R1 AFS2K - c:\windows\system32\drivers\afs2k.sys
    R1 fwdrv (Firewall Driver) - c:\windows\system32\drivers\fwdrv.sys
    R1 khips (Kerio HIPS Driver) - c:\windows\system32\drivers\khips.sys
    R2 BT878 (BtCap, WDM Video Capture) - c:\windows\system32\drivers\bt878.sys
    R2 BTTUNER (BtTuner, WDM TV Tuner) - c:\windows\system32\drivers\bttuner.sys
    R2 ElbyCDIO (ElbyCDIO Driver) - c:\windows\system32\drivers\elbycdio.sys
    R2 EPoXUSDM - c:\windows\system32\drivers\epoxusdm.sys
    R2 mdmxsdk - c:\windows\system32\drivers\mdmxsdk.sys
    R3 AnyDVD - c:\windows\system32\drivers\anydvd.sys
    R3 ElbyDelay - c:\windows\system32\drivers\elbydelay.sys
    R3 HSF_DP - c:\windows\system32\drivers\hsf_dp.sys
    R3 HSFHWBS2 - c:\windows\system32\drivers\hsfhwbs2.sys
    R3 MODEMCSA (Unimodem Streaming Filter Device) - c:\windows\system32\drivers\modemcsa.sys
    R3 NTIDrvr (Upper Class Filter Driver) - c:\windows\system32\drivers\ntidrvr.sys
    R3 Pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys
    R3 pfc (Padus ASPI Shell) - c:\windows\system32\drivers\pfc.sys
    R3 SNP2STD (USB2.0 PC Camera (SNP2STD)) - c:\windows\system32\drivers\snp2sxp.sys
    R3 uscbs108 - c:\windows\system32\drivers\uscbs108.sys
    R3 uscsc108 - c:\windows\system32\drivers\uscsc108.sys
    R3 winachsf - c:\windows\system32\drivers\hsf_cnxt.sys

    S2 BTXBAR (BtXBar, WDM Crossbar) - c:\windows\system32\drivers\btxbar.sys
    S2 Ca533av (Icatch(IV) Video Camera Device) - c:\windows\system32\drivers\ca533av.sys
    S2 gafwload (D-Link DSL-200 USB ADSL Loader) - c:\windows\system32\drivers\gafwload.sys
    S3 Bridge (MAC Bridge) - c:\windows\system32\drivers\bridge.sys
    S3 BridgeMP (MAC Bridge Miniport) - c:\windows\system32\drivers\bridge.sys
    S3 ialm - c:\windows\system32\drivers\ialmnt5.sys
    S3 ltmodem5 (LT Modem Driver) - c:\windows\system32\drivers\ltmdmnt.sys
    S3 OVT511 (SmartCam Deluxe USB Camera) - c:\windows\system32\drivers\omcamvid.sys
    S3 ROOTMODEM (Microsoft Legacy Modem Driver) - c:\windows\system32\drivers\rootmdm.sys
    S3 USBCamera (Icatch(IV) Still Camera Device) - c:\windows\system32\drivers\bulk533.sys
    S3 wanusb (D-Link DSL-200 USB ADSL Modem (WAN)) - c:\windows\system32\drivers\gwausb.sys


    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled

    R2 AdobeActiveFileMonitor4.0 (Adobe Active File Monitor V4) - c:\program files\adobe\photoshop elements 4.0\photoshopelementsfileagent.exe
    R2 RichVideo (Cyberlink RichVideo Service(CRVS)) - "c:\program files\cyberlink\shared files\richvideo.exe"
    R2 ScsiAccess - c:\program files\photodex\proshowgold\scsiaccess.exe
    R2 uploadmgr (Upload Manager) - c:\windows\system32\svchost.exe -k netsvcs

    S3 Tdpcltpuprpp -
    S3 usnsvc (Messenger Sharing USN Journal Reader service) - c:\windows\system32\svchost.exe -k usnsvc


    -- Scheduled Tasks

    2007-04-06 16:00:27 260 --ah
    C:\WINDOWS\Tasks\AD3D0756916ABB12.job<AD3D07~1.JOB>
    2007-04-02 17:55:00 516 --a
    C:\WINDOWS\Tasks\AntiSpy.job
    2007-04-02 13:45:00 284 --a
    C:\WINDOWS\Tasks\AppleSoftwareUpdate.job<APPLES~1.JOB>


    -- Files created between 2007-03-06 and 2007-04-06

    2007-04-04 18:17:06 0 d
    C:\Documents and Settings\All Users\Application Data\Locktime
    2007-03-31 11:52:59 3052 --a
    C:\WINDOWS\System32\tmp.reg
    2007-03-31 11:52:30 79360 --a
    C:\WINDOWS\System32\swxcacls.exe
    2007-03-31 11:52:30 40960 --a
    C:\WINDOWS\System32\swsc.exe
    2007-03-31 11:52:30 135168 --a
    C:\WINDOWS\System32\swreg.exe
    2007-03-31 11:52:30 288417 --a
    C:\WINDOWS\System32\SrchSTS.exe
    2007-03-31 11:52:30 53248 --a
    C:\WINDOWS\System32\Process.exe
    2007-03-31 11:52:30 51200 --a
    C:\WINDOWS\System32\dumphive.exe
    2007-03-26 05:30:23 0 d
    C:\Documents and Settings\All Users\Application Data\1Click DVD Copy Pro<1CLICK~1>
    2007-03-26 05:28:07 47360 --a
    C:\WINDOWS\System32\drivers\pcouffin.sys
    2007-03-26 05:28:07 47360 --a
    C:\Documents and Settings\Doug\Application Data\pcouffin.sys
    2007-03-26 05:28:07 87608 --a
    C:\Documents and Settings\Doug\Application Data\ezpinst.exe
    2007-03-26 05:28:06 0 d
    C:\Documents and Settings\Doug\Application Data\Vso
    2007-03-26 05:28:00 0 d
    C:\Program Files\LG Software Innovations<LGSOFT~1>
    2007-03-23 21:34:01 921 --a
    C:\WINDOWS\QSFVExit.bat
    2007-03-23 19:54:43 0 d
    C:\Program Files\Fast Cleaner Gold<FASTCL~1>
    2007-03-23 09:19:42 493400 --a
    C:\WINDOWS\System32\XceedZip.dll
    2007-03-22 15:27:41 0 d
    C:\Program Files\Common Files\Previews
    2007-03-21 02:03:00 0 d
    C:\Program Files\CyberTweak<CYBERT~1>
    2007-03-21 01:59:55 0 d
    C:\Program Files\ScrubXP
    2007-03-17 04:51:48 0 d
    C:\Program Files\LIUtilities<LIUTIL~1>
    2007-03-13 20:02:15 0 d
    C:\Program Files\AVIJOINER<AVIJOI~1>
    2007-03-13 03:32:54 626688 --a
    C:\WINDOWS\System32\xvid.dll
    2007-03-13 03:32:53 0 d
    C:\Program Files\MPEG4 Direct Maker<MPEG4D~1>
    2007-03-08 14:02:26 8192 --a
    C:\WINDOWS\System32\tsbyuv.dll
    2007-03-08 14:02:25 45568 --a
    C:\WINDOWS\System32\iyuv_32.dll
    2007-03-08 14:02:19 49664 --a
    C:\WINDOWS\System32\vfwwdm32.dll


    -- Find3M Report

    2007-04-06 15:34:16 0 d
    C:\Documents and Settings\Doug\Application Data\Skype
    2007-04-05 18:11:03 0 d
    C:\Documents and Settings\Doug\Application Data\Canon
    2007-04-02 04:29:15 0 d
    C:\Documents and Settings\Doug\Application Data\MailWasherPro<MAILWA~1>
    2007-03-31 12:16:58 0 d
    C:\Program Files\BitComet
    2007-03-29 14:32:43 0 d
    C:\Program Files\Australian Phonedisc<AUSTRA~1>
    2007-03-26 05:28:13 34 --a
    C:\Documents and Settings\Doug\Application Data\pcouffin.log
    2007-03-26 05:28:09 1144 --a
    C:\Documents and Settings\Doug\Application Data\pcouffin.inf
    2007-03-26 05:28:09 7824 --a
    C:\Documents and Settings\Doug\Application Data\pcouffin.cat
    2007-03-25 11:42:29 0 d
    C:\Program Files\GameHouse<GAMEHO~1>
    2007-03-25 10:19:32 0 d
    C:\Documents and Settings\Doug\Application Data\Adobe
    2007-03-25 04:35:47 0 d
    C:\Program Files\Common Files\Adobe
    2007-03-25 03:02:22 0 d--h
    C:\Program Files\InstallShield Installation Information<INSTAL~1>
    2007-03-23 10:36:10 0 d
    C:\Documents and Settings\Doug\Application Data\LumaPix
    2007-03-23 10:33:35 0 d
    C:\Program Files\RegistryFix<REGIST~1>
    2007-03-23 10:33:09 0 d
    C:\Program Files\CyberLink<CYBERL~1>
    2007-03-23 09:25:49 0 d
    C:\Program Files\SecCopy
    2007-03-21 08:47:36 0 d
    C:\Program Files\The Panorama Factory<THEPAN~1>
    2007-03-21 08:47:36 0 d
    C:\Program Files\LimeWire
    2007-03-21 02:41:29 0 d
    C:\Documents and Settings\Doug\Application Data\Azureus
    2007-03-21 02:36:51 8 --a
    C:\CONFIG.SYS
    2007-03-21 02:06:19 0 d
    C:\Program Files\MailWasher Pro<MAILWA~1>
    2007-03-19 20:35:02 0 d
    C:\Documents and Settings\Doug\Application Data\CyberLink<CYBERL~1>
    2007-03-03 03:46:19 0 d
    C:\Program Files\Axialis
    2007-03-02 13:56:51 0 d
    C:\Documents and Settings\Doug\Application Data\Bait math site<BAITMA~1>
    2007-02-27 14:09:26 0 d
    C:\Program Files\QuickTime<QUICKT~1>
    2007-02-22 19:03:57 0 d
    C:\Program Files\Apple Software Update<APPLES~1>
    2007-02-19 07:29:38 0 d
    C:\Program Files\MSN Messenger<MSNMES~1>
    2007-02-17 18:34:37 0 d
    C:\Program Files\LumaPix
    2007-02-17 16:50:37 185042 --a
    C:\WINDOWS\FotoFusion Uninstaller.exe<FOTOFU~1.EXE>
    2007-02-16 15:06:25 0 d
    C:\Documents and Settings\Doug\Application Data\Pegasys Inc<PEGASY~1>
    2007-02-16 15:05:51 0 d
    C:\Program Files\Pegasys Inc<PEGASY~1>
    2007-02-16 00:24:04 0 d
    C:\Program Files\Java
    2007-02-15 18:22:36 0 d
    C:\Program Files\Pando Networks<PANDON~1>
    2007-02-08 12:11:44 0 d
    C:\Program Files\PowerISO
    2007-02-07 11:49:00 0 d
    C:\Documents and Settings\Doug\Application Data\OpenOffice.org2<OPENOF~1.ORG>
    2007-02-07 06:26:44 0 d
    C:\Program Files\Internode<INTERN~2>
    2007-02-07 06:26:44 0 d
    C:\Documents and Settings\Doug\Application Data\Internode<INTERN~1>
    2007-02-06 06:31:12 0 d
    C:\Program Files\Avid
    2007-01-08 19:17:30 352137 --a
    C:\swlist.reg


    -- Registry Dump


    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
    "ctfmon.exe"="C:\\WINDOWS\\System32\\ctfmon.exe"
    "InternodeUsage"="C:\\PROGRA~1\\INTERN~2\\mum.exe"
    "Second Copy 2000"="\"C:\\Program Files\\SecCopy\\SecCopy.exe\""
    @=&quot;"
    "Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
    "Second Copy"="\"C:\\Program Files\\SecCopy\\SecCopy.exe\""

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
    "HotKeysCmds"="C:\\WINDOWS\\System32\\hkcmd.exe"
    "PowerS"="C:\\WINDOWS\\PowerS.EXE"
    "SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
    "Opware12"="\"C:\\Program Files\\ScanSoft\\OmniPagePro12.0\\Opware12.exe\""
    "D066UUtility"="C:\\WINDOWS\\TWAIN_32\\D66U\\D066UUTY.EXE"
    "WinFaxAppPortStarter"="wfxsnt40.exe"
    "SoundMan"="SOUNDMAN.EXE"
    "type32"="\"C:\\Program Files\\Microsoft IntelliType Pro\\type32.exe\""
    "AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP"
    "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
    "tsnp2std"="C:\\WINDOWS\\tsnp2std.exe"
    "snp2std"="C:\\WINDOWS\\vsnp2std.exe"
    "Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Elements 4.0\\apdproxy.exe\""
    "AnyDVD"="C:\\Program Files\\AnyDVD\\AnyDVD.exe"
    "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
    "RegistryMechanic"=""

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
    "Installed"="1"
    "NoChange"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\RunSpellCheckAnywhere]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Forget Me Not.lnk]
    "backup"="C:\\WINDOWS\\pss\\Forget Me Not.lnkCommon Startup"
    "location"="Common Startup"
    "item"="Forget Me Not"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]
    "backup"="C:\\WINDOWS\\pss\\Kodak EasyShare software.lnkCommon Startup"
    "location"="Common Startup"
    "item"="Kodak EasyShare software"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Ulead Photo Express Calendar Checker.lnk]
    "backup"="C:\\WINDOWS\\pss\\Ulead Photo Express Calendar Checker.lnkCommon Startup"
    "location"="Common Startup"
    "item"="Ulead Photo Express Calendar Checker"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Doug^Start Menu^Programs^Startup^Ad-watch 3.0.lnk]
    "backup"="C:\\WINDOWS\\pss\\Ad-watch 3.0.lnkStartup"
    "location"="Startup"
    "item"="Ad-watch 3.0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Doug^Start Menu^Programs^Startup^OpenOffice.org 2.0.lnk]
    "backup"="C:\\WINDOWS\\pss\\OpenOffice.org 2.0.lnkStartup"
    "location"="Startup"
    "command"="C:\\PROGRA~1\\OPENOF~1.0\\program\\QUICKS~1.EXE "
    "item"="OpenOffice.org 2.0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="apdproxy"
    "hkey"="HKLM"
    "command"="\"C:\\Program Files\\Adobe\\Photoshop Elements 4.0\\apdproxy.exe\""
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdTools Service]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="AdTools"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="AnyDVD"
    "hkey"="HKCU"
    "command"="C:\\Program Files\\AnyDVD\\AnyDVD.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_EMC]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="avgemc"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_RegCleaner]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="avgregcl"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BraveSentry]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="BraveSentry"
    "hkey"="HKCU"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="ctfmon"
    "hkey"="HKCU"
    "command"="C:\\WINDOWS\\System32\\ctfmon.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D066UUtility]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="D066UUTY"
    "hkey"="HKLM"
    "command"="C:\\WINDOWS\\TWAIN_32\\D66U\\D066UUTY.EXE"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Device Detector]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="DevDetect"
    "hkey"="HKLM"
    "inimapping"="0"
    "command"="\"C:\\Program Files\\Common Files\\ACD Systems\\EN\\DevDetect.exe\" -autorun"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FixCamera]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="FixCamera"
    "hkey"="HKLM"
    "command"="C:\\WINDOWS\\FixCamera.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="hpztsb04"
    "hkey"="HKLM"
    "command"="C:\\WINDOWS\\System32\\spool\\drivers\\w32x86\\3\\hpztsb04.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="igfxtray"
    "hkey"="HKLM"
    "command"="C:\\WINDOWS\\System32\\igfxtray.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="IncrediMail"
    "hkey"="HKLM"
    "command"="C:\\PROGRA~1\\INCRED~1\\bin\\IncrediMail.exe /c"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IST Service]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="istsvc"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JqFAER]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="eesehgou"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveMonitor]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="LMonitor"
    "hkey"="HKLM"
    "command"="C:\\Program Files\\MSI\\Live Update 3\\LMonitor.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mkCdG]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="novpo"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="msmsgs"
    "hkey"="HKCU"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="msnmsgr"
    "hkey"="HKCU"
    "command"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Opware12]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="Opware12"
    "hkey"="HKLM"
    "command"="\"C:\\Program Files\\ScanSoft\\OmniPagePro12.0\\Opware12.exe\""
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sais]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="sais"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spellaroo]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="Spellaroo"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spyware Doctor]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="swdoctor"
    "hkey"="HKCU"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="evntsvc"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFaxAppPortStarter]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="wfxsnt40"
    "hkey"="HKLM"
    "command"="wfxsnt40.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\xReminder Pro]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="xRemind"
    "hkey"="HKCU"
    "command"="C:\\Program Files\\xReminder Pro\\xRemind.exe"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzî[8C:]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzî[8C:\Program Files]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzî[8C:\Program Files\ISTsvc]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzî[8C:\Program Files\ISTsvc\istsvc.exe]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="eesehgou"
    "hkey"="HKLM"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzîžigÝC:]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzîžigÝC:\Program Files]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzîžigÝC:\Program Files\ISTsvc]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\¢‰¸u0–4C
    }ïÁzîžigÝC:\Program Files\ISTsvc\istsvc.exe]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="novpo"
    "hkey"="HKLM"
    "inimapping"="0"


    [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
    "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
    "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
    "NoCDBurning"=dword:00000000

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
    LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
    NetworkService REG_MULTI_SZ DnsCache\0\0
    rpcss REG_MULTI_SZ RpcSs\0\0
    imgsvc REG_MULTI_SZ StiSvc\0\0
    termsvcs REG_MULTI_SZ TermService\0\0
    Usnsvc REG_MULTI_SZ usnsvc\0\0



    -- Hosts

    127.0.0.1 ads.datingyes.com
    127.0.0.1 adserver2.mediainsight.de
    127.0.0.1 adserver3.eudora.com
    127.0.0.1 adserver4.eudora.com
    127.0.0.1 adlink.deh.nl
    127.0.0.1 advert.stealth.nl
    127.0.0.1 www.banneroverdrive.com
    127.0.0.1 actionsplash.com
    127.0.0.1 ads.x10.com
    127.0.0.1 images.x10.com

    5617 more entries in hosts file.


    -- End of Deckard's System Scanner: finished at 2007-04-06 at 16:01:25
  • Hobbsy
    edited April 2007
    Deckard's System Scanner v20070328.36
    Extra logfile - please post this as an attachment with your post.

    -- System Information

    Microsoft Windows XP Professional (build 2600) SP 1.0
    Architecture: X86; Language: English

    CPU 0: AMD Athlon(tm) 64 Processor 3000+
    Percentage of Memory in Use: 52%
    Physical Memory (total/avail): 1023.48 MiB / 485.67 MiB
    Pagefile Memory (total/avail): 1299.89 MiB / 942.31 MiB
    Virtual Memory (total/avail): 2047.88 MiB / 2004.12 MiB

    A: is Removable (No Media)
    C: is Fixed (NTFS) - 186.31 GiB total, 151.63 GiB free.
    D: is Fixed (NTFS) - 186.31 GiB total, 62.62 GiB free.
    E: is CDROM (UDF)
    F: is CDROM (No Media)


    -- Security Center

    AUOptions is disabled.
    Windows Internal Firewall is enabled.


    -- Environment Variables

    ALLUSERSPROFILE=C:\Documents and Settings\All Users
    APPDATA=C:\Documents and Settings\Doug\Application Data
    CLASSPATH=C:\Program Files\Java\jre1.5.0_11\lib\ext\QTJava.zip
    CLIENTNAME=Console
    CommonProgramFiles=C:\Program Files\Common Files
    COMPUTERNAME=HOBBS
    ComSpec=C:\WINDOWS\system32\cmd.exe
    HOMEDRIVE=C:
    HOMEPATH=\Documents and Settings\Doug
    LOGONSERVER=\\HOBBS
    NUMBER_OF_PROCESSORS=1
    OS=Windows_NT
    Path=C:\Program Files\Mozilla Firefox;C:\Program Files\Windows Resource Kits\Tools\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Common Files\Ulead Systems\MPEG;C:\Program Files\Ulead Systems\Ulead DVD MovieFactory 3 SE;C:\Program Files\Common Files\Adobe\AGL;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Mozilla Firefox
    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    PROCESSOR_ARCHITECTURE=x86
    PROCESSOR_IDENTIFIER=x86 Family 15 Model 47 Stepping 2, AuthenticAMD
    PROCESSOR_LEVEL=15
    PROCESSOR_REVISION=2f02
    ProgramFiles=C:\Program Files
    PROMPT=$P$G
    QTJAVA=C:\Program Files\Java\jre1.5.0_11\lib\ext\QTJava.zip
    SESSIONNAME=Console
    SystemDrive=C:
    SystemRoot=C:\WINDOWS
    TEMP=C:\DOCUME~1\Doug\LOCALS~1\Temp
    TMP=C:\DOCUME~1\Doug\LOCALS~1\Temp
    USERDOMAIN=HOBBS
    USERNAME=Doug
    USERPROFILE=C:\Documents and Settings\Doug
    windir=C:\WINDOWS


    -- User Profiles

    Doug (admin)


    -- Add/Remove Programs

    --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    --> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
    --> MsiExec.exe /I{C98E5F1B-5C2B-4FD1-BDF9-F3779DCAAA16}
    --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    1Click DVD Copy Pro 2.4.1.6 --> "C:\Program Files\LG Software Innovations\1Click DVD Copy Pro\unins000.exe"
    ACDSee 7.0 PowerPack --> MsiExec.exe /I{B0625F16-B742-4F75-9FD8-20B47ACC7DE2}
    Ad-aware 6 Professional --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
    Adobe Acrobat 5.0 --> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.dll"
    Adobe Bridge 1.0 --> MsiExec.exe /I{B74D4E10-1033-0000-0000-000000000001}
    Adobe Common File Installer --> MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5102}
    Adobe Flash Player 9 ActiveX --> C:\WINDOWS\System32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
    Adobe Help Center 2.1 --> MsiExec.exe /I{25569723-DC5A-4467-A639-79535BF01B71}
    Adobe Photoshop CS2 --> msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
    Adobe Photoshop Elements 4.0 --> msiexec /I {EBB7C1C1-D439-4D9B-9FDC-954C10F266B0}
    Adobe Stock Photos 1.0 --> MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001}
    AdsGone Popup Killer Spyware Blocker by A1Tech.com --> "C:\Program Files\AdsGone\unins000.exe"
    Aloha Solitaire --> C:\Program Files\GameHouse\BounceOut\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\ALOHAS~1\INSTALL.LOG
    AnyDVD --> "C:\Program Files\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program Files\AnyDVD"
    Aplus DVD to DivX XviD Ripper 4.38 --> "C:\Program Files\Aplus DVD to DivX XviD Ripper\unins000.exe"
    Apple Software Update --> MsiExec.exe /I{A50C25D7-62E9-4511-AD70-8E2DA5E79B7D}
    ATI - Software Uninstall Utility --> C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
    ATI Display Driver --> rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
    Australian Phonedisc --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A8C2ECC8-BB15-11D6-B91C-00C04F689AB6}\Setup.exe" -l0x9
    AVG Free Edition --> C:\Program Files\Grisoft\AVG Free\setup.exe /UNINSTALL
    AVI Joiner version 1.0 --> "C:\Program Files\AVIJOINER\unins000.exe"
    AVIcodec (remove only) --> "C:\Program Files\AVIcodec\uninst.exe"
    Avid Free DV --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BAD26CB5-035A-495E-83B8-92215B6DA3DE}\Setup.exe" -l0x9
    Bejeweled 2 Deluxe --> C:\PROGRA~1\GAMEHO~1\BEJEWE~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\BEJEWE~1\INSTALL.LOG
    BitComet 0.70 --> C:\Program Files\BitComet\uninst.exe
    Bounce Out Blitz --> C:\PROGRA~1\GAMEHO~1\BOUNCE~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\BOUNCE~1\INSTALL.LOG
    Canon PIXMA iP3000 --> C:\WINDOWS\System32\CNMCP61.exe "-PRINTERNAMECanon PIXMA iP3000" "-HELPERDLLC:\BJPrinter\CNMWINDOWS\Canon PIXMA iP3000 Installer\Inst2\cnmis.dll" "-RCDLLC:\BJPrinter\CNMWINDOWS\Canon PIXMA iP3000 Installer\Inst2\cnmi0409.dll"
    Canon ScanGear Toolbox CS 2.5 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Canon\ScanGear Toolbox CS\Uninst.isu" -c"C:\Program Files\Canon\ScanGear Toolbox CS\uninst.dll"
    Canon ScanGear Toolbox FAU 2.5 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Canon\ScanGear Toolbox FAU\Uninst.isu" -c"C:\Program Files\Canon\ScanGear Toolbox FAU\uninst.dll"
    CD-LabelPrint --> "C:\Program Files\Canon\CD-LabelPrint\Uninstal.exe" Canon.CDLabelPrint.Application
    Chuzzle Deluxe --> C:\PROGRA~1\GAMEHO~1\CHUZZL~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\CHUZZL~1\INSTALL.LOG
    CloneDVD --> "C:\Program Files\CloneDVD\CloneDVD-uninst.exe" /D="C:\Program Files\CloneDVD"
    Collapse --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{75F66C39-B41E-11D5-B743-00D0B74C4519}\Setup.exe"
    Cucusoft MPEG/MOV/RM/DivX/AVI to DVD/VCD/SVCD Creator Pro 7.07 --> "C:\Program Files\Cucusoft\avi-dvd-pro\unins000.exe"
    CyberTweak Version 1.3 Final --> "C:\Program Files\CyberTweak\unins000.exe"
    D-Link DSL-200 ADSL Modem --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C7B39B40-52C3-11D4-AFCE-00E0B8138A4A}\setup.exe" -l0x9 REMOVE
    DeepBurner v1.7.1.213 --> "C:\Program Files\Astonsoft\DeepBurner\Uninstall.exe" "C:\Program Files\Astonsoft\DeepBurner\install.log"
    Desktop --> MsiExec.exe /I{CDEBF9E7-BCEB-43A7-986C-E66377C28ABC}
    Digital Camera --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C1205500-2179-11D7-B0B9-0000E24D4B29}\setup.exe"
    DivX Codec --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
    DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
    DivX Converter --> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
    DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
    DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
    DivxToDVD 1.99.23 --> "C:\Program Files\vso\DivxToDVD\unins000.exe"
    DVD Shrink 3.1.4 --> "C:\Program Files\DVD Shrink\unins000.exe"
    Easy-WebPrint --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
    Easy Video Joiner 5.21 --> "C:\Program Files\Easy Video Joiner\unins000.exe"
    EPoX Unified System Diagnostic Manager (USDM) --> "C:\Program Files\EPoX\USDM\SETUP.EXE" "-UNINSTALL"
    Express Rip Uninstall --> C:\Program Files\NCH Swift Sound\ExpressRip\uninst.exe
    Fast Cleaner Gold 1.6 --> "C:\Program Files\Fast Cleaner Gold\unins000.exe"
    Font Print Magic --> C:\WINDOWS\ITUNINST.EXE -f"C:\Program Files\Font Print Magic\INSTALL.LOG" -n"Font Print Magic"
    FotoFusion --> C:\WINDOWS\FotoFusion Uninstaller.exe
    GameHouse Sudoku --> C:\PROGRA~1\GAMEHO~1\Sudoku\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\Sudoku\INSTALL.LOG
    Gearz --> C:\PROGRA~1\GAMEHO~1\Gearz\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\Gearz\INSTALL.LOG
    Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
    Google Video Player --> "C:\Program Files\Google\Google Video Player\Uninstall.exe"
    Hijackthis 1.99.1 --> "C:\Program Files\Hijackthis\unins000.exe"
    HijackThis 1.99.1 --> C:\Program Files\Hijackthis\HijackThis.exe /uninstall
    HyperSnap-DX 4 --> C:\PROGRA~1\HYPERS~1\UNWISE.EXE C:\PROGRA~1\HYPERS~1\INSTALL.LOG
    Icatch(IV) Camera Driver --> Rundll32 advpack.dll,LaunchINFSectionEx C:\WINDOWS\CA533A.ini, Ca533AUnInstall
    IncrediMail Xe --> C:\PROGRA~1\INCRED~1\bin\imsetup.exe /remove
    Inspector Parker --> C:\Program Files\GameHouse\BounceOut\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\INSPEC~1\INSTALL.LOG
    Intel(R) Extreme Graphics Driver Software --> RUNDLL32.EXE C:\WINDOWS\System32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2562
    Internode Monthly Usage Meter 5.3i --> "C:\Program Files\Internode\unins000.exe"
    J2SE Runtime Environment 5.0 Update 10 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
    J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
    J2SE Runtime Environment 5.0 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
    J2SE Runtime Environment 5.0 Update 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
    J2SE Runtime Environment 5.0 Update 9 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090}
    Java 2 Runtime Environment, SE v1.4.2_06 --> MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142060}
    Jewel Quest --> C:\PROGRA~1\GAMEHO~1\JEWELQ~2\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\JEWELQ~2\INSTALL.LOG
    K-Lite Codec Pack 2.27 Full --> "C:\Program Files\K-Lite Codec Pack\unins000.exe"
    Kazaa Lite K++ v2.4.1 --> "C:\Program Files\Kazaa Lite K++\unins000.exe"
    Kyodai --> "C:\Program Files\Kyodai\unins000.exe"
    Kyodai --> "C:\Program Files\Kyodai\unins001.exe"
    LG MF-FD140 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{16D3F293-72AA-47D2-83D7-9DFD2FE6491F}\setup.exe" -l0x9
    LimeWire PRO 4.9.30 --> "C:\Program Files\LimeWire\uninstall.exe"
    LiveUpdate 2.5 (Symantec Corporation) --> C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
    Magic Inlay --> C:\Program Files\GameHouse\BounceOut\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\MAGICI~1\INSTALL.LOG
    Magic Match --> C:\PROGRA~1\GAMEHO~1\MAGICM~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\MAGICM~1\INSTALL.LOG
    Mah Jong Quest --> C:\PROGRA~1\GAMEHO~1\MAHJON~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\MAHJON~1\INSTALL.LOG
    MailWasher Pro --> "C:\Program Files\MailWasher Pro\unins000.exe"
    MetaProducts Mass Downloader --> C:\Program Files\Mass Downloader\massdown.exe /UnInstall
    Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
    Microsoft Web Publishing Wizard 1.52 --> RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie4x86.inf,WebPostUninstall
    Microsoft Works --> MsiExec.exe /I{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}
    Mozilla Firefox (2.0.0.3) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MP3 Player Utilities 3.68 --> MsiExec.exe /I{7784A172-61F1-445E-8368-601607E0DD22}
    MS Works Spreadsheet to XLS Converter --> "C:\Program Files\RL-Software\WksExcelConverter\uninstall.exe" "C:\Program Files\RL-Software\WksExcelConverter\setup.uni"
    MSI Live Update 3 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\MSI\Live Update 3\Uninst.isu"
    MSN Messenger 7.0 --> MsiExec.exe /I{ABEB838C-A1A7-4C5D-B7E1-8B4314600777}
    Nero 6 Enterprise Edition --> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
    Norton Commander --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Norton Commander\uninst.isu" -cNC_INST.DLL
    NTI CD-Maker 6 Platinum --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{C438B7C4-B4F8-49C5-A4DF-FF6F1F242778}
    NVIDIA Drivers --> C:\WINDOWS\System32\NVUNINST.EXE UninstallGUI
    OmniPage Pro 12.0 --> MsiExec.exe /I{51F560E5-FA9D-4370-955C-4307F8160683}
    OpenOffice.org 2.0 --> MsiExec.exe /I{69579772-D2F7-4018-9882-B5ECA01CB6B4}
    Paint Shop Pro 7 ESD --> MsiExec.exe /I{D6DE02C7-1F47-11D4-9515-00105AE4B89A}
    Pando --> MsiExec.exe /I{C0B0FA55-D4E9-4374-9871-BBFBF2AEF0D1}
    Panorama Factory --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\The Panorama Factory\Uninst.isu"
    Photodex Presenter --> C:\Program Files\Photodex Presenter\uninst.exe
    PowerDVD --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
    ProShow Gold --> C:\Program Files\Photodex\ProShowGold\proshow.exe . -u
    QuickTime --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{3868A8EE-5051-4DB0-8DF6-4F4B8A98D083} /l1033
    RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    Realtek AC'97 Audio --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
    Recover My Files --> "C:\Program Files\GetData\Recover My Files\unins000.exe"
    Registry Mechanic 6.0 --> "C:\Program Files\Registry Mechanic\unins000.exe"
    RM Converter 3.24 --> "C:\Program Files\RM Converter\unins000.exe"
    Safety Bar --> "C:\Program Files\Safety Bar\Uninstall.bat" "C:\Program Files\Safety Bar"
    ScanSoft RealSpeak --> msiexec /I{031C88EF-4EA5-4A9D-A77D-857A914CAFA5}
    Second Copy (7.0) --> C:\PROGRA~1\SecCopy\UNWISE.EXE C:\PROGRA~1\SecCopy\INSTALL.LOG
    Second Copy 2000 --> C:\PROGRA~1\SecCopy\UNWISE.EXE C:\PROGRA~1\SecCopy\INSTALL.LOG
    Shangri La Deluxe --> C:\PROGRA~1\GAMEHO~1\SHANGR~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\SHANGR~1\INSTALL.LOG
    Shockwave --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
    ShrinkTo5 GUI --> C:\Program Files\ShrinkTo5\Software\uninstall.exe
    Skype 3.0 --> "C:\Program Files\Skype\Phone\unins000.exe"
    Skype Plugin Manager --> MsiExec.exe /I{3D5E5C0A-5B36-4F98-99A7-287F7DBDCE03}
    SoftV92 Spkerphone SoftRing Modem with SmartSP --> C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F00&SUBSYS_200614F1\HXFSETUP.EXE -U -IVEN_14F1&DEV_2F30&SUBSYS_205D14F1
    Solitaire Plus! --> "C:\Program Files\Solitaire Plus\unins000.exe"
    SolSuite --> C:\PROGRA~1\SolSuite\UNWISE.EXE C:\PROGRA~1\SolSuite\INSTALL.LOG
    SonixStorage1.82 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{41169060-81E5-11D6-85BE-00E04CE0BDED}\Setup.exe"
    Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
    Sudoku --> "C:\Program Files\Common Files\MimarSinan\Installation Information\{FB5055E4-9BE1-425F-B40A-33E43E9460DA}\{C8A522A9-9CBA-4AD3-80E9-EE3DD9BCA3A2}\SudokuSetup.exe" REMOVE=TRUE MODIFY=FALSE
    Sunbelt Kerio Personal Firewall --> MsiExec.exe /X{A990EAA7-8941-4621-BC27-4F16261D3180}
    Super Collapse! II --> C:\Program Files\GameHouse\BounceOut\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\COLLAP~2\INSTALL.LOG
    Super Collapse! II Platinum --> C:\PROGRA~1\GAMEHO~1\SUPERC~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\SUPERC~1\INSTALL.LOG
    Super Gem Drop --> C:\Program Files\GameHouse\BounceOut\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\GemDrop\INSTALL.LOG
    Super Glinx! from GameHouse --> C:\PROGRA~1\GAMEHO~1\Glinx\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\Glinx\INSTALL.LOG
    Super Jigsaw Medley --> C:\PROGRA~1\GAMEHO~1\Jigsaw\UN-MED~1.EXE /U C:\PROGRA~1\GAMEHO~1\Jigsaw\Medley-INSTALL.LOG
    Super Jigsaw Pets --> C:\PROGRA~1\GAMEHO~1\Jigsaw\un-Pets.exe /U C:\PROGRA~1\GAMEHO~1\Jigsaw\Pets-INSTALL.LOG
    Super Mahjong --> "C:\Program Files\Super Mahjong\unins000.exe"
    Super Pop && Drop! --> C:\PROGRA~1\GAMEHO~1\PopDrop\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\PopDrop\INSTALL.LOG
    Super Rumble Cube --> C:\PROGRA~1\GAMEHO~1\RUMBLE~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\RUMBLE~1\INSTALL.LOG
    Super SpongeBob Collapse! --> C:\Program Files\GameHouse\BounceOut\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\SPONGE~1\INSTALL.LOG
    Super TextTwist --> C:\PROGRA~1\GAMEHO~1\TEXTTW~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\TEXTTW~1\INSTALL.LOG
    Super WHATword? --> C:\PROGRA~1\GAMEHO~1\WHATword\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\WHATword\INSTALL.LOG
    Symantec WinFax PRO 10.0 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Symantec\WinFax\WFXUNIST.ISU" -c"C:\Program Files\Symantec\WinFax\UNINSTUB.DLL"
    The Print Shop 20 --> MsiExec.exe /I{863DCE5B-D6CA-4DC5-9F95-7DCFED15DE8F}
    TMPGEnc 4.0 XPress Trial Version --> MsiExec.exe /I{5EE7320A-EC09-4545-ACC3-823A246DD85A}
    TMPGEnc DVD Author --> MsiExec.exe /I{C634B1AF-62D4-41E1-B5CD-B14AE244B8B2}
    Tumblebugs --> C:\PROGRA~1\GAMEHO~1\TUMBLE~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\TUMBLE~1\INSTALL.LOG
    TV Tuner --> C:\Program Files\AVIcodec\uninst.exe -f"C:\Program Files\Prolink\TV Tuner\DeIsL1.isu" -c"C:\Program Files\Prolink\TV Tuner\_ISREG32.DLL"
    Ulead DVD MovieFactory 3 SE --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{068502DA-6979-4D9A-BBE1-C3AD0FF11F19}\Setup.exe" -l0x9
    Ulead VideoStudio 7 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{757AD3D4-036B-42FA-B0A4-96BD6F4605A0}\setup.exe" -l0x9
    Ultra Flash Video FLV Converter 1.6.2 --> "C:\Program Files\Ultra Flash Video FLV Converter\unins000.exe"
    Universal SCSI Controller --> MsiExec.exe /I{35A501AD-C538-4286-9A45-AAF5514A482D}
    USB2.0 PC Camera (SN9C201&202) --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{75438C0E-9925-412E-AD85-D0E71C6CE2ED}\Setup.exe" -l0x9
    VCDCutter --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\VCDCutter\Uninst.isu"
    VideoLAN VLC media player 0.8.5 --> C:\Program Files\VideoLAN\VLC\uninstall.exe
    VirtualDub v1.4.10 --> C:\PROGRA~1\VIRTUA~1.10\UNWISE.EXE C:\PROGRA~1\VIRTUA~1.10\INSTALL.LOG
    WavePad Uninstall --> C:\Program Files\NCH Swift Sound\WavePad\uninst.exe
    Weather Services --> C:\WINDOWS\System32\control.exe C:\PROGRA~1\THEWEA~1\Framework\wxfw.cpl,4
    WinAVIVideoConverter --> "C:\Program Files\WinAVIVideoConverter\unins000.exe"
    Windows Installer 3.0 (KB884016) --> C:\WINDOWS\$MSI30UninstallMSI30-KB884016$\spuninst\spuninst.exe
    Windows Live Messenger --> MsiExec.exe /I{FCE50DB8-C610-4C42-BE5C-193F46C6F812}
    Windows Live Sign-in Assistant --> MsiExec.exe /I{F652D238-5F29-42D5-BAF3-0115EF977EC2}
    Windows Media Encoder 9 Series --> msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
    Windows Media Encoder 9 Series --> MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
    Windows Media Format 9 Series SDK --> MsiExec.exe /X{EEE0F0A7-6B7D-4D1E-9498-43D9D012DDF7}
    Windows XP Service Pack 1a --> C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
    WinNc.Net --> C:\Program Files\WinNc.Net\Setup\WinNcSet.exe
    WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
    WinZip --> "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
    xReminder Pro --> "C:\Program Files\xReminder Pro\unins000.exe"
    XviD MPEG-4 Codec --> "C:\Program Files\XviD\UninstXviD.exe"


    -- End of Deckard's System Scanner: finished at 2007-04-06 at 16:01:25
  • Hobbsy
    edited April 2007
    Logfile of HijackThis v1.99.1
    Scan saved at 4:00:45 PM, on 6/04/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\CyberLink\Shared files\RichVideo.exe
    C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\PowerS.EXE
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
    C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    C:\WINDOWS\System32\wfxsnt40.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Microsoft IntelliType Pro\type32.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\tsnp2std.exe
    C:\WINDOWS\vsnp2std.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
    C:\Program Files\AnyDVD\AnyDVD.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\PROGRA~1\INTERN~2\mum.exe
    C:\Program Files\SecCopy\SecCopy.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\AdsGone\adsgone.exe
    C:\Program Files\Skype\Plugin Manager\SkypePM.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Downloads\dss.exe
    C:\PROGRA~1\HIJACK~1\Doug.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {98467DA1-30A8-4C38-A8EC-9A706233F0CE} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
    O2 - BHO: IECatcher Class - {B930BA63-9E5A-11D3-A288-0000E80E2EDE} - C:\Program Files\Mass Downloader\MDHELPER.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [PowerS] C:\WINDOWS\PowerS.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
    O4 - HKLM\..\Run: [D066UUtility] C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
    O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
    O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\AnyDVD\AnyDVD.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [InternodeUsage] C:\PROGRA~1\INTERN~2\mum.exe
    O4 - HKCU\..\Run: [Second Copy 2000] "C:\Program Files\SecCopy\SecCopy.exe"
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Second Copy] "C:\Program Files\SecCopy\SecCopy.exe"
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: AdsGone 2006.lnk = C:\Program Files\AdsGone\adsgone.exe
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\WebMenuImg.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
    O8 - Extra context menu item: + &Mass Downloader: download this file - C:\Program Files\Mass Downloader\Add_Url.htm
    O8 - Extra context menu item: + Mass Downloader: download &All files - C:\Program Files\Mass Downloader\Add_All.htm
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra button: Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
    O9 - Extra 'Tools' menuitem: &Mass Downloader - {0FD01980-CCCB-11D3-80D4-0000E80E2EDE} - C:\Program Files\Mass Downloader\massdown.exe
    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://tw.msi.com.tw/autobios/client/iftwclix.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1094979136343
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?312
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
    O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

    Thank you
  • Rahina-RescueRahina-Rescue Finland
    edited April 2007
    Thanks for the logs.

    There's several things to do but we'll start with this:

    Please read this post completely, it may make it easier for you if you copy and paste this post to a new text document or print it for reference later.

    Download AVG Anti-Spyware from HERE and save that file to your desktop.
    This is a 30 day trial of the program
    • Once you have downloaded AVG Anti-Spyware, locate the icon on the desktop and double-click it to launch the set up program.
    • Once the setup is complete you will need run AVG Anti-Spyware and update the definition files.
    • On the main screen select the icon "Update" then select the "Update now" link.
      • Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
    • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
    • Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
    • Under "Reports"
      • Select "Automatically generate report after every scan"
      • Un-Select "Only if threats were found"
    Close AVG Anti-Spyware, Do Not run a scan just yet, we will shortly.
    1. Reboot your computer into SafeMode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight SafeMode then hit enter.

      IMPORTANT: Do not open any other windows or programs while AVG Anti-Spyware is scanning, it may interfere with the scanning proccess:
    2. Lauch AVG Anti-Spyware by double-clicking the icon on your desktop.
    3. Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
    4. AVG Anti-Spyware will now begin the scanning process, be patient this may take a little time.
      Once the scan is complete do the following:
    5. If you have any infections you will prompted, then select "Apply all actions"
    6. Next select the "Reports" icon at the top.
    7. Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
    8. Close AVG Anti-Spyware and reboot your system back into Normal Mode and post the results of the AVG Anti-Spyware report scan.
  • Rahina-RescueRahina-Rescue Finland
    edited April 2007
    Are you still with us hobbys?
  • Rahina-RescueRahina-Rescue Finland
    edited April 2007
    Are you still there Hobbsy :confused: ?
  • Hobbsy
    edited April 2007
    Sorry, I have been ill. Heart problems
    Here is the report:
    AVG Anti-Spyware - Scan Report

    + Created at: 9:50:44 PM 16/04/2007

    + Scan result:



    HKLM\SOFTWARE\IST -> Adware.ISTBar : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\gyolfnnx.exe -> Adware.Searchcolor : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146040.exe -> Adware.Spysheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146041.dll -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146042.dll -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146043.dll -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146044.dll -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146045.exe -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146137.exe -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146138.dll -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146139.dll -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146140.dll -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146141.dll -> Adware.SpySheriff : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146260.exe -> Adware.Spysheriff : Cleaned with backup (quarantined).
    D:\CDBurning\GameHouseGames\GameHouse_Cracks\gamehouse games cracks.exe/IUCMORE.DLL -> Adware.Ucmore : Cleaned with backup (quarantined).
    D:\GameHouse Games New Ones\GameHouse_Cracks\gamehouse games cracks.exe/IUCMORE.DLL -> Adware.Ucmore : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\hggdaaw.dll -> Adware.Virtumionde : Cleaned with backup (quarantined).
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\install.ini -> Backdoor.HackDef.Gen : Cleaned with backup (quarantined).
    C:\WINDOWS\system\DRIVER\ntauth.dll -> Backdoor.Zapchast : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146051.exe -> Downloader.Small.cwj : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146052.exe -> Downloader.Small.cwj : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146154.exe -> Downloader.Small.cwj : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146198.exe -> Downloader.Small.cwj : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP862\A0148438.exe -> Logger.Banker.ba : Cleaned with backup (quarantined).
    D:\Programs to work on\Cyberlink Power DVD\Cyberlink.PowerDVD.Deluxe.v7.0.Multilingual.Incl.Keymaker-CORE.rar/Cyberlink.PowerDVD.Deluxe.v7.0.Multilingual.Incl.Keymaker-CORE\KeyGen\keygen.exe -> Logger.Banker.ba : Cleaned with backup (quarantined).
    C:\WINDOWS\system\DRIVER\h.exe -> Logger.Small.dx : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP903\A0156311.exe -> Not-A-Virus.Monitor.Win32.Ardamax.24 : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\Explorer.006 -> Not-A-Virus.Monitor.Win32.Ardamax.24 : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\Explorer.007 -> Not-A-Virus.Monitor.Win32.Ardamax.24 : Cleaned with backup (quarantined).
    C:\Program Files\GetData\Recover My Files\RecoverMyFiles.exe -> Not-A-Virus.Monitor.Win32.Ardamax.k : Cleaned with backup (quarantined).
    D:\Programs to keep on disc\Internet Related Programs\File recovery programs\Recover.My.Files.v3.94.4350.WinAll.Cracked-CRD\crack\RecoverMyFiles.exe -> Not-A-Virus.Monitor.Win32.Ardamax.k : Cleaned with backup (quarantined).
    D:\Programs to keep on disc\Maintenance programs\Recover.My.Files.v3.94.4350.WinAll.Cracked-CRD\crack\RecoverMyFiles.exe -> Not-A-Virus.Monitor.Win32.Ardamax.k : Cleaned with backup (quarantined).
    C:\Documents and Settings\Doug\Cookies\doug@real[2].txt -> TrackingCookie.Real : Cleaned.
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP869\A0149513.exe -> Trojan.Agent.sk : Cleaned with backup (quarantined).
    C:\My Documents\SAVINGS\System Volume Information\_restore{906F9D5A-8DA6-4D6B-B276-533855B72AA5}\RP29\A0006783.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    C:\My Documents\SAVINGS\System Volume Information\_restore{906F9D5A-8DA6-4D6B-B276-533855B72AA5}\RP48\A0008579.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    C:\My Documents\SAVINGS\System Volume Information\_restore{906F9D5A-8DA6-4D6B-B276-533855B72AA5}\RP52\A0009019.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    C:\My Documents\SAVINGS\System Volume Information\_restore{906F9D5A-8DA6-4D6B-B276-533855B72AA5}\RP58\A0011243.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    C:\My Documents\SAVINGS\System Volume Information\_restore{906F9D5A-8DA6-4D6B-B276-533855B72AA5}\RP58\A0011245.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    C:\Program Files\GameHouse\SpongeBob Collapse\CrAcK.ExE -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    D:\CDBurning\GameHouseGames\Finished Games\SB_Collapse\CrAcK.ExE -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    D:\CDBurning\GameHouseGames\Hello V1.1.5.1\LOMALKA[1].RU-Hello_v1.1.5.0.zip/CrAcK.ExE -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    D:\GameHouse Games New Ones\Hello V1.1.5.1\LOMALKA[1].RU-Hello_v1.1.5.0.zip/CrAcK.ExE -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    D:\SecondCopyBackup\E-mailAddresses\{183FDB5E-5EC1-42E6-8193-02DFB27733D7}\Message Store\Attachments\GenoProPatch.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    D:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP880\A0151533.ExE -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    D:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP899\A0156010.ExE -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    D:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP899\A0156095.ExE -> Trojan.Feutel.av : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP849\A0145587.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP854\A0145789.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP854\A0145790.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP855\A0145839.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP855\A0145840.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146117.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146118.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP870\A0149616.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP870\A0149617.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP870\A0149619.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP870\A0149620.exe -> Trojan.Obfuscated.bk : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP893\A0154938.exe -> Trojan.Obfuscated.en : Cleaned with backup (quarantined).
    C:\WINDOWS\system\DRIVER\setup.bat -> Trojan.Zapchast : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146047.exe -> Worm.Nuwar : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146048.exe -> Worm.Nuwar : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146262.exe -> Worm.Nuwar : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{0344DB18-C9EB-4D66-8356-AD9588C7F1B6}\RP856\A0146277.exe -> Worm.Nuwar : Cleaned with backup (quarantined).


    ::Report end
  • Rahina-RescueRahina-Rescue Finland
    edited April 2007
    Hey.

    :eek: I Hope you are feeling better than your computer ;)

    Now you can clean AVG's Quarantine:
    • Open AVG Anti-Spyware
    • Click Infections
    • Click Quarantine tab
    • Click Select all
    • Click Remove finally
    • Close the program
    _______________________________________________________

    Please download VundoFix.exe to your desktop
    • Double-click VundoFix.exe to run it.
    • Click the Scan for Vundo button.
    • Once it's done scanning, click the Remove Vundo button.
    • You will receive a prompt asking if you want to remove the files, click YES
    • Once you click yes, your desktop will go blank as it starts removing Vundo.
    • When completed, it will prompt that it will reboot your computer, click OK.
    • Please post the contents of C:\vundofix.txt and a new HiJackThis log in a reply to this thread.
    Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.

    _______________________________________________________

    Please download SmitfraudFix

    Double-click SmitfraudFix.exe
    Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
    Please copy/paste the content of that report into your next reply.

    Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
    http://www.beyondlogic.org/consulting/proc...processutil.htm

    Post the Reports in your next reply.

    Thanks
  • Hobbsy
    edited April 2007
    VundiFix: No infected files were found
    SmitFraudFix v2.162

    Scan done at 16:01:46.14, Sat 21/04/2007
    Run from C:\Downloads\SmitfraudFix
    OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
    The filesystem type is NTFS
    Fix run in normal mode

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\CyberLink\Shared files\RichVideo.exe
    C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\PowerS.EXE
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
    C:\WINDOWS\TWAIN_32\D66U\D066UUTY.EXE
    C:\WINDOWS\System32\wfxsnt40.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Microsoft IntelliType Pro\type32.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\tsnp2std.exe
    C:\WINDOWS\vsnp2std.exe
    C:\Program Files\AnyDVD\AnyDVD.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\PROGRA~1\INTERN~2\mum.exe
    C:\Program Files\SecCopy\SecCopy.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\AdsGone\adsgone.exe
    C:\Program Files\MailWasher Pro\MailWasher.exe
    C:\Program Files\Skype\Plugin Manager\SkypePM.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
    C:\PROGRA~1\INCRED~1\bin\IncrediMail.exe
    C:\Program Files\WinNc.Net\Winnc.exe
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Doug


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Doug\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Doug\FAVORI~1


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32



    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: NVIDIA nForce Networking Controller - Packet Scheduler Miniport
    DNS Server Search Order: 192.168.2.1

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{5657C1DE-226B-4823-BB08-B4F8810EB721}: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{5657C1DE-226B-4823-BB08-B4F8810EB721}: DhcpNameServer= 192.168.2.1
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{5657C1DE-226B-4823-BB08-B4F8810EB721}: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer= 192.168.2.1
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer= 192.168.2.1


    »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


    »»»»»»»»»»»»»»»»»»»»»»»» End
  • Rahina-RescueRahina-Rescue Finland
    edited April 2007
    You should print out these instructions, or copy them to a Notepad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

    Please reboot your computer in Safe Mode by doing the following :
    • Restart your computer
    • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
    • Instead of Windows loading as normal, a menu with options should appear;
    • Select the first option, to run Windows in Safe Mode, then press "Enter".
    • Choose your usual account.
    Once in Safe Mode, double-click SmitfraudFix.exe
    Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

    You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

    The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

    The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart anyway into normal Windows. A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply along with a new HijackThis log.
    The report can also be found at the root of the system drive, usually at C:\rapport.txt

    Warning : running option #2 on a non infected computer will remove your Desktop background :smiles:
Sign In or Register to comment.