hijackthis log

Sorry. I missed that question when I was replying. Our ISP is frontiernet.net; it is DSL; IP is [removed] Are you saying that the IP address for ATRIV that you are looking at ( NetRange: [removed] - [removed] CIDR: 69.50.160.0/19 NetName: ATRIVOTECHNOLOGIES NetHandle: NET-69-50-160-0-1 Parent: NET-69-0-0-0-0) is what is probably responsible for the porn sites that we keep getting hijacked to at this IP (69.50.190.131)? Thank you!

To be more specific, we live in Upstate New York about xxx miles from Binghamton (small town named x).

Two other things I found:

1. Our AV picked these up last night.

C:\DOCUME~1\Ellen\LOCALS~1\Temp\AAWTMP\C7535937\1CFA13\Dummy.class
Virus Name: Java.ByteVerify!exploit
C:\DOCUME~1\Ellen\LOCALS~1\Temp\AAWTMP\C7535937\1CFA13\Installer.class
Virus Name: Java.Shinwow.Q
C:\DOCUME~1\Ellen\LOCALS~1\Temp\AAWTMP\C7535937\1CFA13\GetAccess.class
Virus Name: Java.ByteVerify!exploit
C:\DOCUME~1\Ellen\LOCALS~1\Temp\AAWTMP\C7535937\1CFA13\InsecureClassLoader.class
Virus Name: Java.ByteVerify!exploit

I have since again emptied these Local Temp folders.

(I had already installed Java sun which isn't supposed to be able to be infected as easily as the Java we had.)

2. When Coyote was helping me with the adding of the forums site to the HOSTS file, I noticed there are dozens of sites in there with iffy looking names — all with the IP address that is listed under Local Host (127.0.0.1). Many of these are labeled cool web search or cool www search or teen something or anarchy lolita or poker or some other variation, but it looks like they actually may be being protected in the HOSTS file.

I think I understand that 127.0.0.1 is supposed to be somehow looped back to our computer, but I don't know about all of these other listings (and they seem mighty similar to what we have been having problems with). Should these be changed?

Thanks again.

Edited per posters request - Micah_6:8

One more thing — all of those had supposedly been added by Spybot S&D. In Spybot, in the hosts list, I see I can remove them if I want. The one labeled localhost is there first. I added forums.tomcoyote.org and crooksandliars.com last night while in the chat. All of the others are the same IP address as the local host one, but with all the iffy names. Maybe I can just delete them in Spybot?

Are you saying that the IP address for ATRIV that you are looking at
( NetRange: [removed] - [removed]
CIDR: 69.50.160.0/19
NetName: ATRIVOTECHNOLOGIES
NetHandle: NET-69-50-160-0-1
Parent: NET-69-0-0-0-0)

is what is probably responsible for the porn sites that we keep getting hijacked to at this IP (69.50.190.131)?

Yes.

I've worked either one or two of these "O17" hijacks, but it's been a while.

They have routed you through their DNS it looks like.

I just have to figure out what to change your DNS IP addresses to (in those "O17" lines), then explain to you how to change them.

Please post the contents of the HOSTS file, and we'll see what needs changing - if anything.

I may not be able to post again until this evening (at work now).

Thank you for your reply. This is what is in the HOSTS file. (What this looks like to me is perhaps one of the kids wrong-clicked on Spybots S&D after it ran one time to close it down so they could get on the computer, and now S&D protects what it once was asking to get rid of.) # Copyright © 1993-1999 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host 127.0.0.1 localhost 70.84.70.85 forums.tomcoyote.org [removed] crooksandliars.com # Start of entries inserted by Spybot - Search & Destroy 127.0.0.1 babe.the-killer.bz 127.0.0.1 babe.k-lined.com 127.0.0.1 did.i-used.cc 127.0.0.1 coolwwwsearch.com 127.0.0.1 coolwebsearch.com 127.0.0.1 hi.studioaperto.net 127.0.0.1 www.webbrowser.tv 127.0.0.1 www.wazzupnet.com 127.0.0.1 gueb.com 127.0.0.1 kabex.com 127.0.0.1 www.hityou.com 127.0.0.1 miosearch.com 127.0.0.1 wazzupnet.com 127.0.0.1 213.131.225.2 127.0.0.1 www.blue-elefant.com 127.0.0.1 babeweb.de 127.0.0.1 start-seite.com 127.0.0.1 sexolymp.com 127.0.0.1 toriii.cc 127.0.0.1 www.xtipp.de 127.0.0.1 urawa.cool.ne.jp 127.0.0.1 777search.com 127.0.0.1 ace-webmaster.com 127.0.0.1 aifind.info 127.0.0.1 amateurliveshow.com 127.0.0.1 anarchylolita.com 127.0.0.1 anarchyporn.com 127.0.0.1 approvedlinks.com 127.0.0.1 cantfind.com 127.0.0.1 castingsamateur.com 127.0.0.1 cyberrape.com 127.0.0.1 dialerclub.com 127.0.0.1 exit.megago.com 127.0.0.1 fastmetasearch.com 127.0.0.1 findwhatevernow.com 127.0.0.1 globesearch.com 127.0.0.1 hotfreebies.com 127.0.0.1 krankin.com 127.0.0.1 begin2search.com 127.0.0.1 mainstreamdollars.com 127.0.0.1 live.sex-explorer.com 127.0.0.1 loveadot.com 127.0.0.1 megaseek.net 127.0.0.1 mixsearch.com 127.0.0.1 munky.com 127.0.0.1 newtopsites.com 127.0.0.1 noblindlinks.com 127.0.0.1 r.babenet.com 127.0.0.1 searchresult.net 127.0.0.1 sexarena.org 127.0.0.1 skeech.com 127.0.0.1 superwp.by.ru 127.0.0.1 sureseeker.com 127.0.0.1 wethere.com 127.0.0.1 wowsearch.org 127.0.0.1 www.xxx.com 127.0.0.1 www.websearch.com 127.0.0.1 partner23.firehunt.com 127.0.0.1 screensaver.it 127.0.0.1 xads.cliks.org 127.0.0.1 xwebsearch.biz 127.0.0.1 znext.com 127.0.0.1 rawtocash.net 127.0.0.1 7search.com 127.0.0.1 zestyfind.com 127.0.0.1 dev.ntcor.com 127.0.0.1 search.xrenoder.com 127.0.0.1 193.125.201.50 127.0.0.1 www.allcybersearch.com 127.0.0.1 www.tinybar.com 127.0.0.1 topsite.us 127.0.0.1 topsites.us 127.0.0.1 topsitez.us 127.0.0.1 out.true-counter.com 127.0.0.1 www.cnetadd.com 127.0.0.1 okmmm.com 127.0.0.1 www.139mm.com 127.0.0.1 008k.com 127.0.0.1 00hq.com 127.0.0.1 1-domains-registrations.com 127.0.0.1 100sexlinks.com 127.0.0.1 [removed] 127.0.0.1 1sexparty.com 127.0.0.1 1stpagehere.com 127.0.0.1 2020search.com 127.0.0.1 [removed] 127.0.0.1 24teen.com 127.0.0.1 36site.com 127.0.0.1 4corn.net 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 777top.com 127.0.0.1 8ad.com 127.0.0.1 aboutclicker.com 127.0.0.1 abrp.net 127.0.0.1 accessthefuture.net 127.0.0.1 acemedic.com 127.0.0.1 actionbreastcancer.org 127.0.0.1 activexupdate.com 127.0.0.1 adamsupportgroup.org 127.0.0.1 adasearch.com 127.0.0.1 adipics.com 127.0.0.1 adspics.com 127.0.0.1 adult-engine-search.com 127.0.0.1 adult-erotic-guide.net 127.0.0.1 adult-friends-finder.net 127.0.0.1 adulthyperlinks.com 127.0.0.1 adulttds.com 127.0.0.1 advert.exaccess.ru 127.0.0.1 agentstudio.com 127.0.0.1 africaspromise.org 127.0.0.1 akril.com 127.0.0.1 alcatel.ws 127.0.0.1 alfa-search.com 127.0.0.1 all-inet.com 127.0.0.1 allabtcars.com 127.0.0.1 allabtjeeps.com 127.0.0.1 allcybersearch.com 127.0.0.1 allhyperlinks.com 127.0.0.1 allinternetbusiness.com 127.0.0.1 almarvideos.com 127.0.0.1 amandamountains.com 127.0.0.1 amigeek.com 127.0.0.1 amisbusiness.com 127.0.0.1 analmovi.com 127.0.0.1 anin.org 127.0.0.1 annaromeo.com 127.0.0.1 antrocity.com 127.0.0.1 anything4health.com 127.0.0.1 apsua.com 127.0.0.1 aregay.com 127.0.0.1 arheo.com 127.0.0.1 arizonaweb.org 127.0.0.1 armitageinn.com 127.0.0.1 art-func.com 127.0.0.1 art-xxx.com 127.0.0.1 artachnid.com 127.0.0.1 asiankingkong.com 127.0.0.1 ass-gals.com 127.0.0.1 athenrye.com 127.0.0.1 avian-ads.com 127.0.0.1 ayakawamura.com 127.0.0.1 ayumitaniguchi.com 127.0.0.1 bannedhost.net 127.0.0.1 barbudafarms.com 127.0.0.1 barnandfence.com 127.0.0.1 batsearch.com 127.0.0.1 baygraphicsllc.com 127.0.0.1 bb-search.com 127.0.0.1 bbbsearch.com 127.0.0.1 bedhome.com 127.0.0.1 bediadance.com 127.0.0.1 bellabasketsfl.com 127.0.0.1 bernaolatwin.com 127.0.0.1 best-counter.com 127.0.0.1 best-hardpics.com 127.0.0.1 best-winning-casino.com 127.0.0.1 bestcrawler.com 127.0.0.1 bestfor.ru 127.0.0.1 bestporngate.com 127.0.0.1 bestxporno.com 127.0.0.1 blackjack-free.net 127.0.0.1 blender.xu.pl 127.0.0.1 bodaciousbabette.com 127.0.0.1 boobdoll.com 127.0.0.1 boobsandtits.com 127.0.0.1 boobsclub.com 127.0.0.1 boredlife.com 127.0.0.1 bowlofogumbo.com 127.0.0.1 bradcoem.org 127.0.0.1 brandiyoung.com 127.0.0.1 brookeburn.com 127.0.0.1 bucps.com 127.0.0.1 burgerkingbigscreen.com 127.0.0.1 buscards.net 127.0.0.1 bustyrussell.com 127.0.0.1 buttejazz.org 127.0.0.1 buyselldomain.net 127.0.0.1 calcioturris.com 127.0.0.1 canberracricketcoaching.com 127.0.0.1 candycantaloupes.com 127.0.0.1 careers.dulcineasystems.net 127.0.0.1 carsands.com 127.0.0.1 carsrentals.net 127.0.0.1 casino-gambling-1.net 127.0.0.1 casino-gambling-2.net 127.0.0.1 casino-onlines.net 127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl 127.0.0.1 casino2win.net 127.0.0.1 casinomidas.net 127.0.0.1 casinonline.net 127.0.0.1 catallogue.com 127.0.0.1 catsss.da.ru 127.0.0.1 caxa.ru 127.0.0.1 cclebali.org 127.0.0.1 ceewawires.org 127.0.0.1 certumgroup.com 127.0.0.1 chelancatering.com 127.0.0.1 childrenvilla.com 127.0.0.1 chips-4-free.com 127.0.0.1 chrisswasey.com 127.0.0.1 chriswallace.net 127.0.0.1 ckick4thumbs.com 127.0.0.1 clackamasliteraryreview.com 127.0.0.1 clearsearch.cc 127.0.0.1 clearsearch.net 127.0.0.1 clickaire.com 127.0.0.1 clickyestoenter.net 127.0.0.1 clrsch.com 127.0.0.1 cmtapestry.com 127.0.0.1 cool-homepage.co 127.0.0.1 cool-homepage.com 127.0.0.1 cool-search.net 127.0.0.1 cool-search.netfartpost.com 127.0.0.1 cool-web-search.com 127.0.0.1 coolfetishsite.com 127.0.0.1 coolfreehost.com 127.0.0.1 coolfreepage.com 127.0.0.1 coolfreepages.com 127.0.0.1 coolmoneysearch.com 127.0.0.1 coolpornsearch.com 127.0.0.1 coolsearcher.info 127.0.0.1 coolwebsearch. 127.0.0.1 coolwebsearsh.com 127.0.0.1 coolwwwsearch. 127.0.0.1 copmtraine.com 127.0.0.1 couldnotfind.com 127.0.0.1 count-all.com 127.0.0.1 cracks.me.uk 127.0.0.1 creamedcutties.com 127.0.0.1 creditsearchonline.com 127.0.0.1 crestring.com 127.0.0.1 crooder.com 127.0.0.1 curvedspaces.com 127.0.0.1 cvs.jps.ru 127.0.0.1 cvsymphony.com 127.0.0.1 cydom.com 127.0.0.1 daily-gals.com 127.0.0.1 dancingbabycd.com 127.0.0.1 datanotary.com 127.0.0.1 datareco.com 127.0.0.1 davemarshall.org 127.0.0.1 dcfitusa.com 127.0.0.1 defaultsearch.net 127.0.0.1 desarrollocreativo.com 127.0.0.1 develip.com 127.0.0.1 dewis.spb.ru 127.0.0.1 dewis.us 127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz 127.0.0.1 dietpills4free.com 127.0.0.1 dietpussy.com 127.0.0.1 digistreamsa.com 127.0.0.1 dionforvalleycouncil.org 127.0.0.1 doctorwaldron.com 127.0.0.1 document-not-found.pornpic.org 127.0.0.1 doggyaction.com 127.0.0.1 domain-your-registration.com 127.0.0.1 domains-for-you-online.com 127.0.0.1 domains2003.net 127.0.0.1 domkrat.com 127.0.0.1 dp-host.com 127.0.0.1 dragqueen.gay-clan.com 127.0.0.1 drug-sources-exposed.com 127.0.0.1 drvvv.com 127.0.0.1 dutch-sex.com 127.0.0.1 dvdbank.org 127.0.0.1 e-localad.com 127.0.0.1 e-plus.cc 127.0.0.1 e-websitesolutions.com 127.0.0.1 eases.net 127.0.0.1 easy-search.net 127.0.0.1 easycategories.com 127.0.0.1 ecosrioplatenses.org 127.0.0.1 ecstasyporn.net 127.0.0.1 eikokoike.com 127.0.0.1 epornsex.com 127.0.0.1 euuu.com 127.0.0.1 evidence-detector.biz 127.0.0.1 evilspidercomics.com 127.0.0.1 ewebsearch.net 127.0.0.1 findloss.com 127.0.0.1 excellentsckin.com 127.0.0.1 extremeseek.net 127.0.0.1 f*ckdenniss.com 127.0.0.1 f*cknicepics.com 127.0.0.1 faithstevens.com 127.0.0.1 fantasiewelten.com 127.0.0.1 farmsteadbandb.com 127.0.0.1 fartpost.com 127.0.0.1 fastwebfinder.com 127.0.0.1 faxporn.com 127.0.0.1 fickenisgeil.de 127.0.0.1 finance-loans.com 127.0.0.1 find-itnow.com 127.0.0.1 find-uk-health.co.uk 127.0.0.1 find4u.net 127.0.0.1 findit-now.com 127.0.0.1 findthesite.com 127.0.0.1 findthewebsiteyouneed.com 127.0.0.1 fionasteel.com 127.0.0.1 firstbookmark.net 127.0.0.1 fitness-free.com 127.0.0.1 foodvacations.net 127.0.0.1 forex.jps.ru 127.0.0.1 forexcredit.com 127.0.0.1 forexcredit.ru 127.0.0.1 formingfusions.com 127.0.0.1 forsythfire.net 127.0.0.1 forthline.com 127.0.0.1 free-chipes.com 127.0.0.1 free-f*cking-video.com 127.0.0.1 free-hit.com 127.0.0.1 free-pics-and-movies.com 127.0.0.1 free-sex-movie-clips.net 127.0.0.1 free4porno.net 127.0.0.1 free64all.com 127.0.0.1 freebookmark.net 127.0.0.1 freebookmarks.net 127.0.0.1 freecategories.com 127.0.0.1 freecoolhost.com 127.0.0.1 freerbhost.com 127.0.0.1 freeshemalepics.net 127.0.0.1 freeyaho.com 127.0.0.1 freshseek.com 127.0.0.1 freshteensite.com 127.0.0.1 gabrielscott.com 127.0.0.1 galpostgirls.com 127.0.0.1 gals-for-free.com 127.0.0.1 gambling-online4you.com 127.0.0.1 gameterror.net 127.0.0.1 gay50.com 127.0.0.1 generalsmeltingofcanada.com 127.0.0.1 geteens.com 127.0.0.1 getpicshere.com 127.0.0.1 gimmezamore.com 127.0.0.1 gimnasiaer.com 127.0.0.1 girls-porn-life.com 127.0.0.1 glbdf.org 127.0.0.1 global-finder.com 127.0.0.1 globe-finder.cc 127.0.0.1 globe-finder.com 127.0.0.1 gocybersearch.com 127.0.0.1 golftennis.net 127.0.0.1 good-mortgages-calculator.com 127.0.0.1 good-mortgages.net 127.0.0.1 goodsexs.com 127.0.0.1 googlebar.jps.ru 127.0.0.1 googlf.com 127.0.0.1 gradforum.org 127.0.0.1 gratis-porn-movie.com 127.0.0.1 gratis-pornopics.com 127.0.0.1 guzzycats.com 127.0.0.1 gzphoenix.com 127.0.0.1 hallnetaccolade.com 127.0.0.1 hand-book.com 127.0.0.1 happyanal.com 127.0.0.1 hard-gals.com 127.0.0.1 hardbodytgp.com 127.0.0.1 hardcoreover.com 127.0.0.1 hardloved.com 127.0.0.1 hardwareseek.net 127.0.0.1 harukaigawa.com 127.0.0.1 hccsolanonapa.org 127.0.0.1 health-protein.com 127.0.0.1 hentai4u.net 127.0.0.1 here4search.com 127.0.0.1 heyrichy.com 127.0.0.1 hi-search.com 127.0.0.1 hiddenguides.com 127.0.0.1 hitlistlyrics.com 127.0.0.1 holidayautostr.com 127.0.0.1 homemortage.ws 127.0.0.1 hostssp.com 127.0.0.1 hot-cartoon-sex.anime.american-teens.net 127.0.0.1 hotbookmark.com 127.0.0.1 hotels-list.net 127.0.0.1 hotelxxxcams.com 127.0.0.1 hotpopup.com 127.0.0.1 hotsearchbox.com 127.0.0.1 hotsex-series.com 127.0.0.1 hotstartpage.com 127.0.0.1 hqsex.biz 127.0.0.1 hugeporn4u.net 127.0.0.1 hunacsa.com 127.0.0.1 hupacasath.com 127.0.0.1 hzsx.com 127.0.0.1 icansearch.net 127.0.0.1 idgsearch.com 127.0.0.1 ie-search.com 127.0.0.1 incestporngate.com 127.0.0.1 infodigger.net 127.0.0.1 infoglobus.com 127.0.0.1 inherhole.com 127.0.0.1 insertthiscock.com 127.0.0.1 insurance-flood.net 127.0.0.1 insuranceall.net 127.0.0.1 internetsearch.ru 127.0.0.1 ionichost.com 127.0.0.1 ionomist.com 127.0.0.1 ipsex.net 127.0.0.1 itsanal.com 127.0.0.1 itseasy.us 127.0.0.1 iweb-commerce.com 127.0.0.1 iwebland.com 127.0.0.1 jeannineoldfield.com 127.0.0.1 jethomepage.com 127.0.0.1 jetseeker.com 127.0.0.1 jmhgallery.org 127.0.0.1 joannelatham.com 127.0.0.1 judin.ru 127.0.0.1 junkysex.com 127.0.0.1 karleyt.narod.ru 127.0.0.1 kathisomers.com 127.0.0.1 kazaa-lite.ws 127.0.0.1 keithgreenpro.com 127.0.0.1 kenmccaul.com 127.0.0.1 kilosex.com 127.0.0.1 kimhines.com 127.0.0.1 kinoru.com 127.0.0.1 ksdspups.org 127.0.0.1 landrape.com 127.0.0.1 lauraroebuck.com 127.0.0.1 leannalovelace.com 127.0.0.1 lesobank.ru 127.0.0.1 libertyonlinehosting.com 127.0.0.1 lingerie-mania.com 127.0.0.1 lisamatthew.com 127.0.0.1 liveholio.com 127.0.0.1 livenewspaper.com 127.0.0.1 louiseleeds.com 127.0.0.1 love-pix.com 127.0.0.1 lovelas.com 127.0.0.1 lovelysearch.com 127.0.0.1 low-taxes.com 127.0.0.1 luckysearch.net 127.0.0.1 lunitaweb.net 127.0.0.1 lustful-porno.com 127.0.0.1 mackinnonsbrook.org 127.0.0.1 madfinder.com 127.0.0.1 madisonmoons.com 127.0.0.1 madisonoilco.com 127.0.0.1 madonalive.com 127.0.0.1 majuozawa.com 127.0.0.1 makin-do.com 127.0.0.1 male4free.com 127.0.0.1 map-quest.org 127.0.0.1 marilynchamber.com 127.0.0.1 martfinder.com 127.0.0.1 massearch.com 127.0.0.1 matetrava.com 127.0.0.1 mature50.com 127.0.0.1 matureporngate.com 127.0.0.1 maxdzines.com 127.0.0.1 mcgeeforlabor.com 127.0.0.1 mdstunisie.org 127.0.0.1 medicare-insurance.net 127.0.0.1 medicare-supplemental.com 127.0.0.1 mega-dating-tips.com 127.0.0.1 megumikanzaki.com 127.0.0.1 meshalynn.com 127.0.0.1 meta-adult.com 127.0.0.1 meta-casino.com 127.0.0.1 meta-mobile.com 127.0.0.1 meta-porn.com 127.0.0.1 metafora.ru 127.0.0.1 metapoisk.ru 127.0.0.1 michiyonakajima.com 127.0.0.1 miconsultamedica.com 127.0.0.1 mikasakamoto.com 127.0.0.1 mikoni.com 127.0.0.1 militarygods.porn4porn.net 127.0.0.1 millennialpeople.org 127.0.0.1 mipham.org 127.0.0.1 missingcommand.com 127.0.0.1 mommykiss.com 127.0.0.1 moneyhunters.com 127.0.0.1 montgomeryhospitalanesthesia.com 127.0.0.1 morflot.com 127.0.0.1 mortgage-debt.net 127.0.0.1 mortismaximus.com 127.0.0.1 moscowwhores.com 127.0.0.1 moviecategories.com 127.0.0.1 mp3-pix.com 127.0.0.1 mrtg.jps.ru 127.0.0.1 msn-info.net 127.0.0.1 multipussy.com 127.0.0.1 mundopolar.com 127.0.0.1 mustv.com 127.0.0.1 mywebsearch.net 127.0.0.1 nativehardcore.com 127.0.0.1 naturalspy.com 127.0.0.1 nbasportsbook.net 127.0.0.1 needf*cknow.com 127.0.0.1 nellyslyrics.com 127.0.0.1 nepgyan.com 127.0.0.1 nesrecords.com 127.0.0.1 netshastra.net 127.0.0.1 nettime.ru 127.0.0.1 nettracker.jps.ru 127.0.0.1 netyellowpages.info 127.0.0.1 new-incest.com 127.0.0.1 newcategories.com 127.0.0.1 newcracks.com 127.0.0.1 newcracks.net 127.0.0.1 newlife-lajolla.com 127.0.0.1 newsexgate.com 127.0.0.1 newtonsracks.com 127.0.0.1 newxpics.com 127.0.0.1 nhlsportsbook.net 127.0.0.1 niagaracapital.com 127.0.0.1 niche-tv.com 127.0.0.1 nmrba.com 127.0.0.1 nocalories.net 127.0.0.1 nocensor.com 127.0.0.1 ormandcompany.com 127.0.0.1 nsbabes.com 127.0.0.1 nuclearwitness.org 127.0.0.1 nursemania.com 127.0.0.1 nvntour.com 127.0.0.1 nvphall.org 127.0.0.1 oborot.com 127.0.0.1 ocalalivestockmarket.com 127.0.0.1 ocsff.com 127.0.0.1 oeatlanta.com 127.0.0.1 oharrowsearch.com 127.0.0.1 ok-search.com 127.0.0.1 okulta.com 127.0.0.1 omegabrains.net 127.0.0.1 online-casino-1.net 127.0.0.1 online-casino-bonus.info 127.0.0.1 online-casinos-x.com 127.0.0.1 online-winning.net 127.0.0.1 onlineserverz.com 127.0.0.1 onlinetradings.net 127.0.0.1 onlycunt.com 127.0.0.1 onlyinsured.com 127.0.0.1 operanabuco.com 127.0.0.1 opsex.com 127.0.0.1 oregoncharters.org 127.0.0.1 otrlives.com 127.0.0.1 ozawamadoka.com 127.0.0.1 paigesummer.com 127.0.0.1 pamelacollections.com 127.0.0.1 panamcup.com 127.0.0.1 pantygirls4u.com 127.0.0.1 pantyhoserealm.com 127.0.0.1 pantyplace.com 127.0.0.1 pastubes.com 127.0.0.1 paulapage.com 127.0.0.1 paulhoover.com 127.0.0.1 payfortraffic.net 127.0.0.1 pedo.ws 127.0.0.1 people.1gb.ru 127.0.0.1 pervertbot.com 127.0.0.1 pharma-diet-pills.com 127.0.0.1 pharmacy2003.com 127.0.0.1 pharmalocator.com 127.0.0.1 phendimetrazine-tenuate-adipex.com 127.0.0.1 pics-videos.com 127.0.0.1 picsdir.com 127.0.0.1 picsforbucks.com 127.0.0.1 picsofseductiveladies.com 127.0.0.1 pills-birth-control.com 127.0.0.1 pillsmall.com 127.0.0.1 pilotronix.com 127.0.0.1 pixpox.com 127.0.0.1 planemusic.com 127.0.0.1 poiska.net 127.0.0.1 poker-casino-free.com 127.0.0.1 poker-games-free.net 127.0.0.1 polradiologia.com 127.0.0.1 pooi.net 127.0.0.1 porn-teacher.com 127.0.0.1 porncamz.com 127.0.0.1 pornfree.info 127.0.0.1 pornnightdreams.com 127.0.0.1 pornokopec.com 127.0.0.1 porntetris.com 127.0.0.1 porntwist.com 127.0.0.1 powerwebsearch.com 127.0.0.1 prblitz.com 127.0.0.1 pretypics.com 127.0.0.1 pribalt.com 127.0.0.1 privacy-support.biz 127.0.0.1 privateporn.net 127.0.0.1 prostactive.com 127.0.0.1 prostol.com 127.0.0.1 protect-yourself.biz 127.0.0.1 prsainlandempire.org 127.0.0.1 put-your-link-here.com 127.0.0.1 pyrocorp.com 127.0.0.1 quick-search.ws 127.0.0.1 quiksearchgenealogy.com 127.0.0.1 radfrall.org 127.0.0.1 ramgo.com 127.0.0.1 ranafrog.ne 127.0.0.1 rapegate.com 127.0.0.1 redbudbmx.com 127.0.0.1 refinance-help.com 127.0.0.1 removeearthkeepers.org 127.0.0.1 rightfinder.net 127.0.0.1 robbsproshop.com 127.0.0.1 robertferencz.com 127.0.0.1 rotocasters.com 127.0.0.1 royalsearch.net 127.0.0.1 runsearch.com 127.0.0.1 russiansponsor.com 127.0.0.1 russogay.com 127.0.0.1 s2.exocrew.com 127.0.0.1 sacitylife.com 127.0.0.1 samplegals.com 127.0.0.1 satisf*cktion.net 127.0.0.1 sbssurvivor.com 127.0.0.1 scarypix.com 127.0.0.1 sccdnet.com 127.0.0.1 schoolforest.com 127.0.0.1 search-1.net 127.0.0.1 search-2003.com 127.0.0.1 search-about.net 127.0.0.1 search-hawk.com 127.0.0.1 search-log.com 127.0.0.1 search-meta.com 127.0.0.1 search-safe.com 127.0.0.1 search.psn.cn 127.0.0.1 searchadultweb.com 127.0.0.1 searchbutler.com 127.0.0.1 searchbuttler.com 127.0.0.1 searchbutler.org 127.0.0.1 searchcomplete.com 127.0.0.1 searchdesire.com 127.0.0.1 searchdot.net 127.0.0.1 searchexpander.com 127.0.0.1 searchfastnet.com 127.0.0.1 searchforge.com 127.0.0.1 searching-the-net.com 127.0.0.1 searchmeta.md 127.0.0.1 searchmeta.net 127.0.0.1 searchmeta.ru 127.0.0.1 searchmeta.webhost.ru 127.0.0.1 searchnow.ws 127.0.0.1 searchonfly.com 127.0.0.1 searchv.com 127.0.0.1 searchxl.com 127.0.0.1 searchxp.com 127.0.0.1 sebot.com 127.0.0.1 securenp.org 127.0.0.1 security-warning.biz 127.0.0.1 seehardcore.com 127.0.0.1 seekwell.net 127.0.0.1 selfbookmark.com 127.0.0.1 selfbookmark.info 127.0.0.1 selfbookmark.net 127.0.0.1 sex.free4porno.net 127.0.0.1 sex-coach.com 127.0.0.1 sex-festival.com 127.0.0.1 sex-video-galleries.com 127.0.0.1 sexgalleries4all.com 127.0.0.1 sexmoviesnet.com 127.0.0.1 sexpatriot.net 127.0.0.1 sexy18.cc 127.0.0.1 sexycat.adult-host.org 127.0.0.1 sfbayfolkboats.com 127.0.0.1 sgirls.net 127.0.0.1 sharempeg.com 127.0.0.1 shopcards.net 127.0.0.1 shopknights.com 127.0.0.1 sic02.com 127.0.0.1 sintrader.com 127.0.0.1 site1.ru 127.0.0.1 sites-in-web.com 127.0.0.1 sitevictoria.com 127.0.0.1 sixroads.com 127.0.0.1 skakalka.ru 127.0.0.1 slawsearch.com 127.0.0.1 slotch.com 127.0.0.1 smartsumo.com 127.0.0.1 smutarchive.net 127.0.0.1 solongas.com 127.0.0.1 sonomaevents.com 127.0.0.1 spermatrix.com 127.0.0.1 sportbooks-free4you.com 127.0.0.1 spros.com 127.0.0.1 spyass.com 127.0.0.1 spyorgy.net 127.0.0.1 staceyowens.com 127.0.0.1 stacistaxx.com 127.0.0.1 stacystaxx.com 127.0.0.1 start-space.com 127.0.0.1 steamycock.com 127.0.0.1 sterva.com 127.0.0.1 stevecashdollar.com 127.0.0.1 stop-tracking.biz 127.0.0.1 stopvotefraud.com 127.0.0.1 stopxxxpics.com 127.0.0.1 strekoza.com 127.0.0.1 stuffstore.com 127.0.0.1 styleclickink.com 127.0.0.1 summercollins.com 127.0.0.1 summitcross.com 127.0.0.1 super-spider.com 127.0.0.1 super-websearch.com 127.0.0.1 supersexmachine.com 127.0.0.1 superwebsearch.com 127.0.0.1 supret.com 127.0.0.1 suzannebrecht.com 127.0.0.1 sweeteenz.com 127.0.0.1 tacil.org 127.0.0.1 tangounion.com 127.0.0.1 tastethemusic.com 127.0.0.1 tax-refund4you.com 127.0.0.1 tech-jobs.ws 127.0.0.1 technology-related.com 127.0.0.1 teen-biz.com 127.0.0.1 teen-pic-post.com 127.0.0.1 teenpornosex.com 127.0.0.1 teens4free.net 127.0.0.1 teensact.com 127.0.0.1 teensgate.com 127.0.0.1 teensguru.com 127.0.0.1 teenswamp.com 127.0.0.1 testosterone-birth-control.com 127.0.0.1 the-exit.com 127.0.0.1 the-huns-yellow-pages.com 127.0.0.1 thefakejournal.com 127.0.0.1 thehuy.net 127.0.0.1 theproxy.org 127.0.0.1 therealsearch.com 127.0.0.1 thesten.com 127.0.0.1 thornleygroup.com 127.0.0.1 tings.org 127.0.0.1 tinybar.com 127.0.0.1 tit-x.com 127.0.0.1 titanvision.com 127.0.0.1 titsianna.com 127.0.0.1 toddhayes.com 127.0.0.1 toon-comics.com 127.0.0.1 tooncomics.com 127.0.0.1 topsearcher.com 127.0.0.1 trafficback.com 127.0.0.1 trafficswitcher.com 127.0.0.1 travel.picture-posters.com 127.0.0.1 true-counter.com 127.0.0.1 true-portal.com 127.0.0.1 trytechnical.com 127.0.0.1 ufindall.click-now.net 127.0.0.1 umaxsearch.com 127.0.0.1 une-autre-france.com 127.0.0.1 unigays.com 127.0.0.1 unipages.cc 127.0.0.1 up2you.ru 127.0.0.1 urlstat.com 127.0.0.1 urlstat.ru 127.0.0.1 uralitel.ru 127.0.0.1 ursie.net 127.0.0.1 utahsweet.com 127.0.0.1 utopicportal.com 127.0.0.1 uusocialjustice.org 127.0.0.1 v61.com 127.0.0.1 vaginpics.com 127.0.0.1 valmyers.com 127.0.0.1 vegas-free.com 127.0.0.1 vegbuy.com 127.0.0.1 veloventures.com 127.0.0.1 verzila.com 127.0.0.1 victoriaadam.com 127.0.0.1 videocategories.com 127.0.0.1 vitamins-for-each.com 127.0.0.1 votehowe.org 127.0.0.1 vxebony.com 127.0.0.1 wakeupdick.com 127.0.0.1 warnomore.org 127.0.0.1 watersport-specialties.com 127.0.0.1 web-homepage.net 127.0.0.1 web-search.tk 127.0.0.1 webcoolsearch.com 127.0.0.1 websearchdot.com 127.0.0.1 weekend-movies.com 127.0.0.1 wetpornostars.com 127.0.0.1 whatsyoursearch.com 127.0.0.1 white-pages.ws 127.0.0.1 whittierblvd.com 127.0.0.1 win-in-casino.com 127.0.0.1 wiresearch.com 127.0.0.1 wolfpacracing.com 127.0.0.1 wordlist.jps.ru 127.0.0.1 wpc2001.org 127.0.0.1 wspzone.sexpornonline.com 127.0.0.1 wwwbet.net 127.0.0.1 wwwbetting.net 127.0.0.1 wwwpokergames.com 127.0.0.1 wwwpokerplayers.com 127.0.0.1 wwwroulette.net 127.0.0.1 x-library.com 127.0.0.1 x-webdesign.com 127.0.0.1 xcomics4u.com 127.0.0.1 xic-bs.com 127.0.0.1 xldr.com 127.0.0.1 xp18.com 127.0.0.1 xrenosearch.com 127.0.0.1 xtragay.com 127.0.0.1 xu.xu.pl 127.0.0.1 xxxcategories.com 127.0.0.1 xxxemailxxx.com 127.0.0.1 y-e-l-l-o-w.com 127.0.0.1 yellow500.com 127.0.0.1 yezol.com 127.0.0.1 you-search.com 127.0.0.1 you-search.com.ru 127.0.0.1 youfindall.com 127.0.0.1 youfindall.net 127.0.0.1 your-prescriptions.net 127.0.0.1 yourbookmarks.info 127.0.0.1 yourbookmarks.ws 127.0.0.1 ypir.com 127.0.0.1 ysa-info.net 127.0.0.1 yukohamano.com 127.0.0.1 ywebsearch.info 127.0.0.1 zapros.com 127.0.0.1 zesearch.com 127.0.0.1 ziportal.com 127.0.0.1 zipportal.com 127.0.0.1 zoneoffreeporn.com 127.0.0.1 zoomegasite.com 127.0.0.1 zvimigdal.com 127.0.0.1 zyban-zocor-levitra.com 127.0.0.1 t.rack.cc 127.0.0.1 omega-search.com 127.0.0.1 cool-xxx.net 127.0.0.1 revolto3.da.ru 127.0.0.1 dating-search.net 127.0.0.1 linksummary.com 127.0.0.1 duolaimi.net 127.0.0.1 ez-searching.com 127.0.0.1 freehqmovies.com 127.0.0.1 xzoomy.com 127.0.0.1 freescratchandwin.com 127.0.0.1 fickenisgeil.de 127.0.0.1 globalwebsearch.com 127.0.0.1 www.gocybersearch.com 127.0.0.1 mayancasino.com 127.0.0.1 www.hastalavista.com 127.0.0.1 www.free-popup-killer.com 127.0.0.1 www.digitalfan.com 127.0.0.1 google123.web1000.com 127.0.0.1 search.ieplugin.com 127.0.0.1 i-lookup.com 127.0.0.1 spidersearch.com 127.0.0.1 istarthere.com 127.0.0.1 xxxtoolbar.com 127.0.0.1 www.seekporn.org 127.0.0.1 17-plus.com 127.0.0.1 lolita4all1.xrensmagpost.com 127.0.0.1 mafiapics.com 127.0.0.1 www.teenmonster.com 127.0.0.1 ie.marketdart.com 127.0.0.1 masterbar.com 127.0.0.1 search.netzany.co 127.0.0.1 only-virgins.com 127.0.0.1 passthison.com 127.0.0.1 blondetgp.com 127.0.0.1 prolivation.com 127.0.0.1 server-au.imrworldwide.com 127.0.0.1 .roar.com 127.0.0.1 rocketsearch.com 127.0.0.1 searchaccurate.com 127.0.0.1 searchalot.com 127.0.0.1 searchandbrowse.com 127.0.0.1 gtawarehouse.com 127.0.0.1 startium.com 127.0.0.1 searchandclick.com 127.0.0.1 searchby.net 127.0.0.1 searchdot.com 127.0.0.1 search-exe.com 127.0.0.1 secret-crush.com 127.0.0.1 seekseek.com 127.0.0.1 sexarena.com 127.0.0.1 sexocean.play-lolita.com 127.0.0.1 startsurfing.com 127.0.0.1 [removed] 127.0.0.1 srng.net 127.0.0.1 apps.webservicehost.com 127.0.0.1 search.shopnav.com 127.0.0.1 wish7.com 127.0.0.1 216.65.3.68 127.0.0.1 www.supersexpass.com 127.0.0.1 surferbar.com 127.0.0.1 xlola.underagehost.com 127.0.0.1 hotlolitas.underagehost.com 127.0.0.1 loading-lolita.com 127.0.0.1 www.xupiter.com 127.0.0.1 xjupiter.com 127.0.0.1 www.xjupiter.com 127.0.0.1 www.browserwise.com 127.0.0.1 sqwire.com 127.0.0.1 orbitexplorer.com 127.0.0.1 searchcentrix.com 127.0.0.1 categories.mygeek.com 127.0.0.1 web-entrance.co 127.0.0.1 whazit.com 127.0.0.1 windowenhancer.com 127.0.0.1 buz.ru 127.0.0.1 iwon.com 127.0.0.1 www.bonzi.com 127.0.0.1 featured-results.com 127.0.0.1 searchmadesafe.net 127.0.0.1 quicklaunch.com 127.0.0.1 www.cashsurfers.com 127.0.0.1 .lop.com 127.0.0.1 .tjdo.com 127.0.0.1 /tjdo.com 127.0.0.1 .ebav.com 127.0.0.1 /ebav.com 127.0.0.1 .ebgo.com 127.0.0.1 /ebgo.com 127.0.0.1 .ebaw.com 127.0.0.1 /ebaw.com 127.0.0.1 .ebkb.com 127.0.0.1 /ebkb.com 127.0.0.1 .ebmu.com 127.0.0.1 /ebmu.com 127.0.0.1 .ecmp.com 127.0.0.1 /ecmp.com 127.0.0.1 .edhq.com 127.0.0.1 /edhq.com 127.0.0.1 .edty.com 127.0.0.1 /edty.com 127.0.0.1 .sbee.com 127.0.0.1 /sbee.com 127.0.0.1 .aavc.com 127.0.0.1 /aavc.com 127.0.0.1 .acjp.com 127.0.0.1 /acjp.com 127.0.0.1 .ecmh.com 127.0.0.1 /ecmh.com 127.0.0.1 .emch.com 127.0.0.1 /emch.com 127.0.0.1 .ecpm.com 127.0.0.1 /ecpm.com 127.0.0.1 .wabu.com 127.0.0.1 /wabu.com 127.0.0.1 .wabq.com 127.0.0.1 .wabq.com 127.0.0.1 /wabq.com 127.0.0.1 .ebch.com 127.0.0.1 /ebch.com 127.0.0.1 .ebdv.com 127.0.0.1 /ebdv.com 127.0.0.1 .ebdw.com 127.0.0.1 /ebdw.com 127.0.0.1 .ebjp.com 127.0.0.1 /ebjp.com 127.0.0.1 .ebkn.com 127.0.0.1 /ebkn.com 127.0.0.1 .ebky.com 127.0.0.1 /ebky.com 127.0.0.1 .eblv.com 127.0.0.1 /eblv.com 127.0.0.1 .wbkb.com 127.0.0.1 /wbkb.com 127.0.0.1 .ebvr.com 127.0.0.1 /ebvr.com 127.0.0.1 .ecwz.com 127.0.0.1 /ecwz.com 127.0.0.1 .ecyb.com 127.0.0.1 /ecyb.com 127.0.0.1 .eduy.com 127.0.0.1 /eduy.com 127.0.0.1 .eeev.com 127.0.0.1 /eeev.com 127.0.0.1 .farse.com 127.0.0.1 /farse.com 127.0.0.1 .ibmx.com 127.0.0.1 /ibmx.com 127.0.0.1 .icwb.com 127.0.0.1 /icwb.com 127.0.0.1 .icwo.com 127.0.0.1 /icwo.com 127.0.0.1 .icwp.com 127.0.0.1 /icwp.com 127.0.0.1 .iddh.com 127.0.0.1 /iddh.com 127.0.0.1 .idhh.com 127.0.0.1 /idhh.com 127.0.0.1 .ifiz.com 127.0.0.1 /ifiz.com 127.0.0.1 .iguu.com 127.0.0.1 /iguu.com 127.0.0.1 .samz.com 127.0.0.1 /samz.com 127.0.0.1 .saoe.com 127.0.0.1 /saoe.com 127.0.0.1 .sbjr.com 127.0.0.1 /sbjr.com 127.0.0.1 .sbnl.com 127.0.0.1 /sbnl.com 127.0.0.1 .sbnt.com 127.0.0.1 /sbnt.com 127.0.0.1 .sbvr.com 127.0.0.1 /sbvr.com 127.0.0.1 .scbm.com 127.0.0.1 /scbm.com 127.0.0.1 .sckr.com 127.0.0.1 /sckr.com 127.0.0.1 .scrk.com 127.0.0.1 /scrk.com 127.0.0.1 .sdry.com 127.0.0.1 /sdry.com 127.0.0.1 .seld.com 127.0.0.1 /seld.com 127.0.0.1 .sfux.com 127.0.0.1 /sfux.com 127.0.0.1 .sheat.com 127.0.0.1 /sheat.com 127.0.0.1 .sipo.com 127.0.0.1 /sipo.com 127.0.0.1 .smds.com 127.0.0.1 /smds.com 127.0.0.1 .srib.com 127.0.0.1 /srib.com 127.0.0.1 .srox.com 127.0.0.1 /srox.com 127.0.0.1 .srsf.com 127.0.0.1 /srsf.com 127.0.0.1 .ssaw.com 127.0.0.1 /ssaw.com 127.0.0.1 .ssby.com 127.0.0.1 /ssby.com 127.0.0.1 .surj.com 127.0.0.1 /surj.com 127.0.0.1 .tbvg.com 127.0.0.1 /tbvg.com 127.0.0.1 .tdak.com 127.0.0.1 /tdak.com 127.0.0.1 .tdmy.com 127.0.0.1 /tdmy.com 127.0.0.1 .tefs.com 127.0.0.1 /tefs.com 127.0.0.1 .tfil.com 127.0.0.1 /tfil.com 127.0.0.1 .tjar.com 127.0.0.1 /tjar.com 127.0.0.1 .tjaw.com 127.0.0.1 /tjaw.com 127.0.0.1 .tjgo.com 127.0.0.1 /tjgo.com 127.0.0.1 .tjem.com 127.0.0.1 /tjem.com 127.0.0.1 .torc.com 127.0.0.1 /torc.com 127.0.0.1 .wfix.com 127.0.0.1 /wfix.com 127.0.0.1 .wflu.com 127.0.0.1 /wflu.com 127.0.0.1 .tdko.com 127.0.0.1 /tdko.com 127.0.0.1 .thko.com 127.0.0.1 /thko.com 127.0.0.1 H24413.tfil.com 127.0.0.1 germany.rub.to 127.0.0.1 search.rub.to 127.0.0.1 unitedstates.rub.to 127.0.0.1 www.commonname.com 127.0.0.1 www.ezcybersearch.com 127.0.0.1 www.jethomepage.com 127.0.0.1 www.gohip.com 127.0.0.1 hotbar.com 127.0.0.1 www.huntbar.com 127.0.0.1 search.imiserver.com 127.0.0.1 infospace.com/blsrch.dp.toolbar 127.0.0.1 searchenhancement.com 127.0.0.1 newtonknows.com 127.0.0.1 search-explorer.net 127.0.0.1 searchsquire.com 127.0.0.1 secondpower.com 127.0.0.1 2ndpower.com 127.0.0.1 searchgateway.net 127.0.0.1 worldusa.com 127.0.0.1 www.topsearcher.com 127.0.0.1 smutserver.com 127.0.0.1 searchmeup.com 127.0.0.1 cameup.com 127.0.0.1 kliksearch.com 127.0.0.1 realphx.com 127.0.0.1 blazefind.com 127.0.0.1 [removed] 127.0.0.1 zoofil.com 127.0.0.1 terafinder.com 127.0.0.1 008i.com 127.0.0.1 171203.com 127.0.0.1 39-93.com 127.0.0.1 adult-personal.us 127.0.0.1 cashsearch.biz 127.0.0.1 cl55.biz 127.0.0.1 dailyteenspic.com 127.0.0.1 dialer2004.com 127.0.0.1 digital-pornography.com 127.0.0.1 eager-sex.com 127.0.0.1 ergosites.com 127.0.0.1 freecj.com 127.0.0.1 greg-search.com 127.0.0.1 incest-host.com 127.0.0.1 ironcarteam.com 127.0.0.1 is-best.com 127.0.0.1 killerpornstars.com 127.0.0.1 lollitop.com 127.0.0.1 love-host.com 127.0.0.1 myexexex.com 127.0.0.1 my-finder.com 127.0.0.1 onlineclick.net 127.0.0.1 onlysex.ws 127.0.0.1 regfreeze.com 127.0.0.1 ruworld.com 127.0.0.1 selltraffic.biz 127.0.0.1 sexunique.net 127.0.0.1 sinpussy.com 127.0.0.1 teenhost.net 127.0.0.1 ultraload.net 127.0.0.1 vse-moe.biz 127.0.0.1 xsex.ws 127.0.0.1 .75tz.com 127.0.0.1 /75tz.com 127.0.0.1 .iefeadsl.com 127.0.0.1 /iefeadsl.com 127.0.0.1 /rf104.com 127.0.0.1 .rf104.com 127.0.0.1 www.v61.com 127.0.0.1 .00hq.com 127.0.0.1 /00hq.com 127.0.0.1 ads.centralmedia.ws 127.0.0.1 c.centralmedia.ws 127.0.0.1 .count.cc 127.0.0.1 /count.cc 127.0.0.1 .topx.cc 127.0.0.1 /topx.cc 127.0.0.1 www.sidefind.com 127.0.0.1 thenewsearch.com 127.0.0.1 new-search.net 127.0.0.1 x-google.net 127.0.0.1 adultgambling.org 127.0.0.1 bitchesonline.net 127.0.0.1 girls4rent.net 127.0.0.1 usefullsoft.net 127.0.0.1 livegambling.com 127.0.0.1 adultsgames.net 127.0.0.1 easyantispy.com 127.0.0.1 spybotremover.net 127.0.0.1 winprotect.net 127.0.0.1 funny-girls.com 127.0.0.1 winmsn.com # This list is Copyright 2000-2004 Patrick M. Kolla / Safer Networking Limited # End of entries inserted by Spybot - Search & Destroy Tonight would be fine. Thank you again.

I'm going to reverse myself.

It may be possible to just fix the "O17" entries, and still be OK.

But, should you fix them, and find you're no longer able to access the Internet, you need to know how to use Hijack This! to restore those entries.

Please go to this link:

Hijack This! Tutorial

Read and understand the tutorial on "How to restore items mistakenly deleted".

It may be a good thing to print that tutorial, just in case.

If you want a little practice before "the real thing", you can remove this from the log:

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

Then try to restore it.

That is something we tell people is an "optional" fix. Your PC will function perfectly fine with or without that running.

So, if you want to test "restoring" items (that one above), do this:

1. Run Hijack This! and "fix" that "O4"item above.
2. Make a log file to be sure it's gone.
3. Restore it.
4. Make another log file to be sure the restore was successful.

When you feel you are ready, close all Internet Explorer windows, close whatever program it is you use to access the Internet, and run Hijack This! and "check" then "Fix checked" these two items:

O17 - HKLM\System\CCS\Services\Tcpip\..\{AFB87EEF-ACC8-4ACE-91E0-929C5F4DE68A}: NameServer = 69.50.166.94,69.31.80.244

O17 - HKLM\System\CCS\Services\Tcpip\..\{E9145760-613D-4BAA-A140-4B26797E46C0}: NameServer = 69.50.166.94,69.31.80.244

Then reboot.

Try to get back online, if you can, GREAT!!! Post a new log file.

If not, restore those items, and let me know that you couldn't get online without them. I'll have to find another way around the problem.

Good luck, and I'll check back here in a bit.


P.S. - The HOSTS file is OK.

Someone clicked the item in Spybot to put those things in there. On some XP machines (yours is XP), it can slow things down.

That DID it! Thank you, thank you, thank you. I can actually go to sites now that were always getting hijacked — one on "Natural Learning in school-age children" and a couple of others. I did practice doing the delete and restore, as you suggested, just so that I could build up my confidence about it. The computer does seem to be running slower these past few days. Would using the "toggle" suggestion on the HOSTS file as outlined in the Hijack This! Tutorial be recommended for all the sites listed there in HOSTS? Oh, and just in case something else showed up, I'll post a new Hijack This! log.

I'm glad we could help. You might try telling Spybot to remove the HOSTS file entries it put in there to see if that speeds things up. And you can "fix" that "O4" item you practiced on and leave it "fixed". I'll leave this post open for about a week. Please post back if any problems develop. GOD bless you, Ma'am! M68 P.S. - The new log is A-OK!

This topic is now closed.

If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.

Topic reopened at user's request.

I'm having another problem now or so my antivirus tells me. The computer is still running quite well after our last work on it, although maybe it's a little slower browsing.

The problem is my AV can't seem to get rid of something. It has come up after I run it, a few different times.

I did run AdAware and Spybot S&D, too.

The problem is my AV can't seem to get rid of something. It has come up after I run it, a few different times.

Please post the "full path name" (example: "C:\Windows\Virus.exe") of the "something" your anti-virus isn't liking, along with a current Hijack This! log file.

Interesting! I was reviewing the posts in the whole topic here, and these problems that the AV is complaining about are the same ones that came up a while ago, only now they are in a different place. See Post #17 of the thread. I think they are almost exactly the same. They were in Temp files then; now they're in a Cache. Don't know if that helps with anything, but I thought it was interesting that they've probably been there for a while longer than I thought. -Ellen

This web page describes how to remove them.

It also says:

If you are using the Sun JVM as your default virtual machine, these malicious applets cannot cause any harm to your computer.

From your log:

O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe

Looks like you've switched to Sun JVM.

I guess if they show up, just manually remove them per the link I gave, or the instructions below.

• Click Start –> Settings –> Control Panel
• In the Control Panel, open the "Java Plug-in Control Panel"
• Select the Cache Tab
• Click the Clear button inside the Cache Tab, which will clear your JRE cache directory

Does this solve the problem?

P.S. - The HJT log is ok!