Pop-ups & My Scanner Says "infected"

hi cinderella,

do this:
Please download ComboFix (by sUBs) from one of the following links:

http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Save it to the Desktop.
Double-click combofix.exe and follow the prompts.

CAUTION: Do not mouse-click ComboFix's window while it is running.
It may cause it to stall.

When finished, it produces a log.

Please provide the contents of the ComboFix log in your reply.
———————————————————-
you can also do this:

Download SmitfraudFix (by S!Ri) to your Desktop:

http://siri.urz.free.fr/Fix/SmitfraudFix.zip


Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.
Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press Enter

This program will scan large amounts of files on your computer for known patterns so please be patient while it works. It will create a file named: c:\rapport.txt

stop here and post a HijackThis log along with the contents of the c:\rapport.txt. and the combofix log

shelf life

hi cinderella, ok good thanks for the info. go ahead and run the 2nd step the clean, of the smithfraud fix. best to do the step in safe mode: Please print out or copy these instructions/tutorial to Notepad as the internet will not be (while in Safe Mode) available to you at certain points of the removal process. Make sure to work through all the Steps in the exact order in which they are listed below. If there's anything that you don't understand, ask your question(s) before moving on with the fixes. Reboot your computer in Safe Mode. * If the computer is running, shut down Windows, and then turn off the power. * Wait 30 seconds, and then turn the computer on. * Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again. * Ensure that the Safe Mode option is selected. * Press Enter. The computer then begins to start in Safe mode. * Login on your usual account. ______________________________ Open the SmitfraudFix Folder, then double-click smitfraudfix.cmd file to start the tool. Select option #2 - Clean by typing 2 and press Enter. Wait for the tool to complete and disk cleanup to finish. You will be prompted : "Registry cleaning - Do you want to clean the registry ?" answer Yes by typing Y and hit Enter. The tool will also check if wininet.dll is infected. If a clean version is found, you will be prompted to replace wininet.dll. Answer Yes to the question "Replace infected file ?" by typing Y and hit Enter. A reboot may be needed to finish the cleaning process, if you computer does not restart automatically please do it yourself manually. Reboot in Safe Mode. The tool will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply. also while you are in safe mode, run ad aware once. after all that reboot computer normally, see if things are improved. shelf life

adaware found only 1 critical object. i hope that's a good thing, & that they're all gone. here's the rapport.txt log: SmitFraudFix v2.218 Scan done at 14:52:38.01, Sat 09/01/2007 Run from C:\Documents and Settings\Owner\Desktop\SmitfraudFix\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in safe mode »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Killing process »»»»»»»»»»»»»»»»»»»»»»»» hosts 127.0.0.1 localhost 127.0.0.1 babe.the-killer.bz 127.0.0.1 babe.k-lined.com 127.0.0.1 did.i-used.cc 127.0.0.1 coolwwwsearch.com 127.0.0.1 coolwebsearch.com 127.0.0.1 hi.studioaperto.net 127.0.0.1 www.webbrowser.tv 127.0.0.1 www.wazzupnet.com 127.0.0.1 gueb.com 127.0.0.1 kabex.com 127.0.0.1 www.hityou.com 127.0.0.1 miosearch.com 127.0.0.1 wazzupnet.com 127.0.0.1 213.131.225.2 127.0.0.1 www.blue-elefant.com 127.0.0.1 babeweb.de 127.0.0.1 start-seite.com 127.0.0.1 sexolymp.com 127.0.0.1 toriii.cc 127.0.0.1 www.xtipp.de 127.0.0.1 urawa.cool.ne.jp 127.0.0.1 777search.com 127.0.0.1 ace-webmaster.com 127.0.0.1 aifind.info 127.0.0.1 amateurliveshow.com 127.0.0.1 anarchylolita.com 127.0.0.1 anarchyporn.com 127.0.0.1 approvedlinks.com 127.0.0.1 cantfind.com 127.0.0.1 castingsamateur.com 127.0.0.1 cyberrape.com 127.0.0.1 dialerclub.com 127.0.0.1 exit.megago.com 127.0.0.1 fastmetasearch.com 127.0.0.1 findwhatevernow.com 127.0.0.1 globesearch.com 127.0.0.1 hotfreebies.com 127.0.0.1 krankin.com 127.0.0.1 begin2search.com 127.0.0.1 mainstreamdollars.com 127.0.0.1 live.sex-explorer.com 127.0.0.1 loveadot.com 127.0.0.1 megaseek.net 127.0.0.1 mixsearch.com 127.0.0.1 munky.com 127.0.0.1 newtopsites.com 127.0.0.1 noblindlinks.com 127.0.0.1 r.babenet.com 127.0.0.1 searchresult.net 127.0.0.1 sexarena.org 127.0.0.1 skeech.com 127.0.0.1 superwp.by.ru 127.0.0.1 sureseeker.com 127.0.0.1 wethere.com 127.0.0.1 wowsearch.org 127.0.0.1 www.xxx.com 127.0.0.1 www.websearch.com 127.0.0.1 partner23.firehunt.com 127.0.0.1 screensaver.it 127.0.0.1 xads.cliks.org 127.0.0.1 xwebsearch.biz 127.0.0.1 znext.com 127.0.0.1 rawtocash.net 127.0.0.1 7search.com 127.0.0.1 zestyfind.com 127.0.0.1 dev.ntcor.com 127.0.0.1 search.xrenoder.com 127.0.0.1 193.125.201.50 127.0.0.1 www.allcybersearch.com 127.0.0.1 www.tinybar.com 127.0.0.1 topsite.us 127.0.0.1 topsites.us 127.0.0.1 topsitez.us 127.0.0.1 out.true-counter.com 127.0.0.1 www.cnetadd.com 127.0.0.1 okmmm.com 127.0.0.1 www.139mm.com 127.0.0.1 008k.com 127.0.0.1 00hq.com 127.0.0.1 1-domains-registrations.com 127.0.0.1 100sexlinks.com 127.0.0.1 [removed] 127.0.0.1 1sexparty.com 127.0.0.1 1stpagehere.com 127.0.0.1 2020search.com 127.0.0.1 [removed] 127.0.0.1 24teen.com 127.0.0.1 36site.com 127.0.0.1 4corn.net 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 [removed] 127.0.0.1 777top.com 127.0.0.1 8ad.com 127.0.0.1 aboutclicker.com 127.0.0.1 abrp.net 127.0.0.1 accessthefuture.net 127.0.0.1 acemedic.com 127.0.0.1 actionbreastcancer.org 127.0.0.1 activexupdate.com 127.0.0.1 adamsupportgroup.org 127.0.0.1 adasearch.com 127.0.0.1 adipics.com 127.0.0.1 adspics.com 127.0.0.1 adult-engine-search.com 127.0.0.1 adult-erotic-guide.net 127.0.0.1 adult-friends-finder.net 127.0.0.1 adulthyperlinks.com 127.0.0.1 adulttds.com 127.0.0.1 advert.exaccess.ru 127.0.0.1 agentstudio.com 127.0.0.1 africaspromise.org 127.0.0.1 akril.com 127.0.0.1 alcatel.ws 127.0.0.1 alfa-search.com 127.0.0.1 all-inet.com 127.0.0.1 allabtcars.com 127.0.0.1 allabtjeeps.com 127.0.0.1 allcybersearch.com 127.0.0.1 allhyperlinks.com 127.0.0.1 allinternetbusiness.com 127.0.0.1 almarvideos.com 127.0.0.1 amandamountains.com 127.0.0.1 amigeek.com 127.0.0.1 amisbusiness.com 127.0.0.1 analmovi.com 127.0.0.1 anin.org 127.0.0.1 annaromeo.com 127.0.0.1 antrocity.com 127.0.0.1 anything4health.com 127.0.0.1 apsua.com 127.0.0.1 aregay.com 127.0.0.1 arheo.com 127.0.0.1 arizonaweb.org 127.0.0.1 armitageinn.com 127.0.0.1 art-func.com 127.0.0.1 art-xxx.com 127.0.0.1 artachnid.com 127.0.0.1 asiankingkong.com 127.0.0.1 ass-gals.com 127.0.0.1 athenrye.com 127.0.0.1 avian-ads.com 127.0.0.1 ayakawamura.com 127.0.0.1 ayumitaniguchi.com 127.0.0.1 bannedhost.net 127.0.0.1 barbudafarms.com 127.0.0.1 barnandfence.com 127.0.0.1 batsearch.com 127.0.0.1 baygraphicsllc.com 127.0.0.1 bb-search.com 127.0.0.1 bbbsearch.com 127.0.0.1 bedhome.com 127.0.0.1 bediadance.com 127.0.0.1 bellabasketsfl.com 127.0.0.1 bernaolatwin.com 127.0.0.1 best-counter.com 127.0.0.1 best-hardpics.com 127.0.0.1 best-winning-casino.com 127.0.0.1 bestcrawler.com 127.0.0.1 bestfor.ru 127.0.0.1 bestporngate.com 127.0.0.1 bestxporno.com 127.0.0.1 blackjack-free.net 127.0.0.1 blender.xu.pl 127.0.0.1 bodaciousbabette.com 127.0.0.1 boobdoll.com 127.0.0.1 boobsandtits.com 127.0.0.1 boobsclub.com 127.0.0.1 boredlife.com 127.0.0.1 bowlofogumbo.com 127.0.0.1 bradcoem.org 127.0.0.1 brandiyoung.com 127.0.0.1 brookeburn.com 127.0.0.1 bucps.com 127.0.0.1 burgerkingbigscreen.com 127.0.0.1 buscards.net 127.0.0.1 bustyrussell.com 127.0.0.1 buttejazz.org 127.0.0.1 buyselldomain.net 127.0.0.1 calcioturris.com 127.0.0.1 canberracricketcoaching.com 127.0.0.1 candycantaloupes.com 127.0.0.1 careers.dulcineasystems.net 127.0.0.1 carsands.com 127.0.0.1 carsrentals.net 127.0.0.1 casino-gambling-1.net 127.0.0.1 casino-gambling-2.net 127.0.0.1 casino-onlines.net 127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl 127.0.0.1 casino2win.net 127.0.0.1 casinomidas.net 127.0.0.1 casinonline.net 127.0.0.1 catallogue.com 127.0.0.1 catsss.da.ru 127.0.0.1 caxa.ru 127.0.0.1 cclebali.org 127.0.0.1 ceewawires.org 127.0.0.1 certumgroup.com 127.0.0.1 chelancatering.com 127.0.0.1 childrenvilla.com 127.0.0.1 chips-4-free.com 127.0.0.1 chrisswasey.com 127.0.0.1 chriswallace.net 127.0.0.1 ckick4thumbs.com 127.0.0.1 clackamasliteraryreview.com 127.0.0.1 clearsearch.cc 127.0.0.1 clearsearch.net 127.0.0.1 clickaire.com 127.0.0.1 clickyestoenter.net 127.0.0.1 clrsch.com 127.0.0.1 cmtapestry.com 127.0.0.1 cool-homepage.co 127.0.0.1 cool-homepage.com 127.0.0.1 cool-search.net 127.0.0.1 cool-search.netfartpost.com 127.0.0.1 cool-web-search.com 127.0.0.1 coolfetishsite.com 127.0.0.1 coolfreehost.com 127.0.0.1 coolfreepage.com 127.0.0.1 coolfreepages.com 127.0.0.1 coolmoneysearch.com 127.0.0.1 coolpornsearch.com 127.0.0.1 coolsearcher.info 127.0.0.1 coolwebsearch. 127.0.0.1 coolwebsearsh.com 127.0.0.1 coolwwwsearch. 127.0.0.1 copmtraine.com 127.0.0.1 couldnotfind.com 127.0.0.1 count-all.com 127.0.0.1 cracks.me.uk 127.0.0.1 creamedcutties.com 127.0.0.1 creditsearchonline.com 127.0.0.1 crestring.com 127.0.0.1 crooder.com 127.0.0.1 curvedspaces.com 127.0.0.1 cvs.jps.ru 127.0.0.1 cvsymphony.com 127.0.0.1 cydom.com 127.0.0.1 daily-gals.com 127.0.0.1 dancingbabycd.com 127.0.0.1 datanotary.com 127.0.0.1 datareco.com 127.0.0.1 davemarshall.org 127.0.0.1 dcfitusa.com 127.0.0.1 defaultsearch.net 127.0.0.1 desarrollocreativo.com 127.0.0.1 develip.com 127.0.0.1 dewis.spb.ru 127.0.0.1 dewis.us 127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz 127.0.0.1 dietpills4free.com 127.0.0.1 dietpussy.com 127.0.0.1 digistreamsa.com 127.0.0.1 dionforvalleycouncil.org 127.0.0.1 doctorwaldron.com 127.0.0.1 document-not-found.pornpic.org 127.0.0.1 doggyaction.com 127.0.0.1 domain-your-registration.com 127.0.0.1 domains-for-you-online.com 127.0.0.1 domains2003.net 127.0.0.1 domkrat.com 127.0.0.1 dp-host.com 127.0.0.1 dragqueen.gay-clan.com 127.0.0.1 drug-sources-exposed.com 127.0.0.1 drvvv.com 127.0.0.1 dutch-sex.com 127.0.0.1 dvdbank.org 127.0.0.1 e-localad.com 127.0.0.1 e-plus.cc 127.0.0.1 e-websitesolutions.com 127.0.0.1 eases.net 127.0.0.1 easy-search.net 127.0.0.1 easycategories.com 127.0.0.1 ecosrioplatenses.org 127.0.0.1 ecstasyporn.net 127.0.0.1 eikokoike.com 127.0.0.1 epornsex.com 127.0.0.1 euuu.com 127.0.0.1 evidence-detector.biz 127.0.0.1 evilspidercomics.com 127.0.0.1 ewebsearch.net 127.0.0.1 findloss.com 127.0.0.1 excellentsckin.com 127.0.0.1 extremeseek.net 127.0.0.1 f*ckdenniss.com 127.0.0.1 f*cknicepics.com 127.0.0.1 faithstevens.com 127.0.0.1 fantasiewelten.com 127.0.0.1 farmsteadbandb.com 127.0.0.1 fartpost.com 127.0.0.1 fastwebfinder.com 127.0.0.1 faxporn.com 127.0.0.1 fickenisgeil.de 127.0.0.1 finance-loans.com 127.0.0.1 find-itnow.com 127.0.0.1 find-uk-health.co.uk 127.0.0.1 find4u.net 127.0.0.1 findit-now.com 127.0.0.1 findthesite.com 127.0.0.1 findthewebsiteyouneed.com 127.0.0.1 fionasteel.com 127.0.0.1 firstbookmark.net 127.0.0.1 fitness-free.com 127.0.0.1 foodvacations.net 127.0.0.1 forex.jps.ru 127.0.0.1 forexcredit.com 127.0.0.1 forexcredit.ru 127.0.0.1 formingfusions.com 127.0.0.1 forsythfire.net 127.0.0.1 forthline.com 127.0.0.1 free-chipes.com 127.0.0.1 free-f*cking-video.com 127.0.0.1 free-hit.com 127.0.0.1 free-pics-and-movies.com 127.0.0.1 free-sex-movie-clips.net 127.0.0.1 free4porno.net 127.0.0.1 free64all.com 127.0.0.1 freebookmark.net 127.0.0.1 freebookmarks.net 127.0.0.1 freecategories.com 127.0.0.1 freecoolhost.com 127.0.0.1 freerbhost.com 127.0.0.1 freeshemalepics.net 127.0.0.1 freeyaho.com 127.0.0.1 freshseek.com 127.0.0.1 freshteensite.com 127.0.0.1 gabrielscott.com 127.0.0.1 galpostgirls.com 127.0.0.1 gals-for-free.com 127.0.0.1 gambling-online4you.com 127.0.0.1 gameterror.net 127.0.0.1 gay50.com 127.0.0.1 generalsmeltingofcanada.com 127.0.0.1 geteens.com 127.0.0.1 getpicshere.com 127.0.0.1 gimmezamore.com 127.0.0.1 gimnasiaer.com 127.0.0.1 girls-porn-life.com 127.0.0.1 glbdf.org 127.0.0.1 global-finder.com 127.0.0.1 globe-finder.cc 127.0.0.1 globe-finder.com 127.0.0.1 gocybersearch.com 127.0.0.1 golftennis.net 127.0.0.1 good-mortgages-calculator.com 127.0.0.1 good-mortgages.net 127.0.0.1 goodsexs.com 127.0.0.1 googlebar.jps.ru 127.0.0.1 googlf.com 127.0.0.1 gradforum.org 127.0.0.1 gratis-porn-movie.com 127.0.0.1 gratis-pornopics.com 127.0.0.1 guzzycats.com 127.0.0.1 gzphoenix.com 127.0.0.1 hallnetaccolade.com 127.0.0.1 hand-book.com 127.0.0.1 happyanal.com 127.0.0.1 hard-gals.com 127.0.0.1 hardbodytgp.com 127.0.0.1 hardcoreover.com 127.0.0.1 hardloved.com 127.0.0.1 hardwareseek.net 127.0.0.1 harukaigawa.com 127.0.0.1 hccsolanonapa.org 127.0.0.1 health-protein.com 127.0.0.1 hentai4u.net 127.0.0.1 here4search.com 127.0.0.1 heyrichy.com 127.0.0.1 hi-search.com 127.0.0.1 hiddenguides.com 127.0.0.1 hitlistlyrics.com 127.0.0.1 holidayautostr.com 127.0.0.1 homemortage.ws 127.0.0.1 hostssp.com 127.0.0.1 hot-cartoon-sex.anime.american-teens.net 127.0.0.1 hotbookmark.com 127.0.0.1 hotels-list.net 127.0.0.1 hotelxxxcams.com 127.0.0.1 hotpopup.com 127.0.0.1 hotsearchbox.com 127.0.0.1 hotsex-series.com 127.0.0.1 hotstartpage.com 127.0.0.1 hqsex.biz 127.0.0.1 hugeporn4u.net 127.0.0.1 hunacsa.com 127.0.0.1 hupacasath.com 127.0.0.1 hzsx.com 127.0.0.1 icansearch.net 127.0.0.1 idgsearch.com 127.0.0.1 ie-search.com 127.0.0.1 incestporngate.com 127.0.0.1 infodigger.net 127.0.0.1 infoglobus.com 127.0.0.1 inherhole.com 127.0.0.1 insertthiscock.com 127.0.0.1 insurance-flood.net 127.0.0.1 insuranceall.net 127.0.0.1 internetsearch.ru 127.0.0.1 ionichost.com 127.0.0.1 ionomist.com 127.0.0.1 ipsex.net 127.0.0.1 itsanal.com 127.0.0.1 itseasy.us 127.0.0.1 iweb-commerce.com 127.0.0.1 iwebland.com 127.0.0.1 jeannineoldfield.com 127.0.0.1 jethomepage.com 127.0.0.1 jetseeker.com 127.0.0.1 jmhgallery.org 127.0.0.1 joannelatham.com 127.0.0.1 judin.ru 127.0.0.1 junkysex.com 127.0.0.1 karleyt.narod.ru 127.0.0.1 kathisomers.com 127.0.0.1 kazaa-lite.ws 127.0.0.1 keithgreenpro.com 127.0.0.1 kenmccaul.com 127.0.0.1 kilosex.com 127.0.0.1 kimhines.com 127.0.0.1 kinoru.com 127.0.0.1 ksdspups.org 127.0.0.1 landrape.com 127.0.0.1 lauraroebuck.com 127.0.0.1 leannalovelace.com 127.0.0.1 lesobank.ru 127.0.0.1 libertyonlinehosting.com 127.0.0.1 lingerie-mania.com 127.0.0.1 lisamatthew.com 127.0.0.1 liveholio.com 127.0.0.1 livenewspaper.com 127.0.0.1 louiseleeds.com 127.0.0.1 love-pix.com 127.0.0.1 lovelas.com 127.0.0.1 lovelysearch.com 127.0.0.1 low-taxes.com 127.0.0.1 luckysearch.net 127.0.0.1 lunitaweb.net 127.0.0.1 lustful-porno.com 127.0.0.1 mackinnonsbrook.org 127.0.0.1 madfinder.com 127.0.0.1 madisonmoons.com 127.0.0.1 madisonoilco.com 127.0.0.1 madonalive.com 127.0.0.1 majuozawa.com 127.0.0.1 makin-do.com 127.0.0.1 male4free.com 127.0.0.1 map-quest.org 127.0.0.1 marilynchamber.com 127.0.0.1 martfinder.com 127.0.0.1 massearch.com 127.0.0.1 matetrava.com 127.0.0.1 mature50.com 127.0.0.1 matureporngate.com 127.0.0.1 maxdzines.com 127.0.0.1 mcgeeforlabor.com 127.0.0.1 mdstunisie.org 127.0.0.1 medicare-insurance.net 127.0.0.1 medicare-supplemental.com 127.0.0.1 mega-dating-tips.com 127.0.0.1 megumikanzaki.com 127.0.0.1 meshalynn.com 127.0.0.1 meta-adult.com 127.0.0.1 meta-casino.com 127.0.0.1 meta-mobile.com 127.0.0.1 meta-porn.com 127.0.0.1 metafora.ru 127.0.0.1 metapoisk.ru 127.0.0.1 michiyonakajima.com 127.0.0.1 miconsultamedica.com 127.0.0.1 mikasakamoto.com 127.0.0.1 mikoni.com 127.0.0.1 militarygods.porn4porn.net 127.0.0.1 millennialpeople.org 127.0.0.1 mipham.org 127.0.0.1 missingcommand.com 127.0.0.1 mommykiss.com 127.0.0.1 moneyhunters.com 127.0.0.1 montgomeryhospitalanesthesia.com 127.0.0.1 morflot.com 127.0.0.1 mortgage-debt.net 127.0.0.1 mortismaximus.com 127.0.0.1 moscowwhores.com 127.0.0.1 moviecategories.com 127.0.0.1 mp3-pix.com 127.0.0.1 mrtg.jps.ru 127.0.0.1 msn-info.net 127.0.0.1 multipussy.com 127.0.0.1 mundopolar.com 127.0.0.1 mustv.com 127.0.0.1 mywebsearch.net 127.0.0.1 nativehardcore.com 127.0.0.1 naturalspy.com 127.0.0.1 nbasportsbook.net 127.0.0.1 needf*cknow.com 127.0.0.1 nellyslyrics.com 127.0.0.1 nepgyan.com 127.0.0.1 nesrecords.com 127.0.0.1 netshastra.net 127.0.0.1 nettime.ru 127.0.0.1 nettracker.jps.ru 127.0.0.1 netyellowpages.info 127.0.0.1 new-incest.com 127.0.0.1 newcategories.com 127.0.0.1 newcracks.com 127.0.0.1 newcracks.net 127.0.0.1 newlife-lajolla.com 127.0.0.1 newsexgate.com 127.0.0.1 newtonsracks.com 127.0.0.1 newxpics.com 127.0.0.1 nhlsportsbook.net 127.0.0.1 niagaracapital.com 127.0.0.1 niche-tv.com 127.0.0.1 nmrba.com 127.0.0.1 nocalories.net 127.0.0.1 nocensor.com 127.0.0.1 ormandcompany.com 127.0.0.1 nsbabes.com 127.0.0.1 nuclearwitness.org 127.0.0.1 nursemania.com 127.0.0.1 nvntour.com 127.0.0.1 nvphall.org 127.0.0.1 oborot.com 127.0.0.1 ocalalivestockmarket.com 127.0.0.1 ocsff.com 127.0.0.1 oeatlanta.com 127.0.0.1 oharrowsearch.com 127.0.0.1 ok-search.com 127.0.0.1 okulta.com 127.0.0.1 omegabrains.net 127.0.0.1 online-casino-1.net 127.0.0.1 online-casino-bonus.info 127.0.0.1 online-casinos-x.com 127.0.0.1 online-winning.net 127.0.0.1 onlineserverz.com 127.0.0.1 onlinetradings.net 127.0.0.1 onlycunt.com 127.0.0.1 onlyinsured.com 127.0.0.1 operanabuco.com 127.0.0.1 opsex.com 127.0.0.1 oregoncharters.org 127.0.0.1 otrlives.com 127.0.0.1 ozawamadoka.com 127.0.0.1 paigesummer.com 127.0.0.1 pamelacollections.com 127.0.0.1 panamcup.com 127.0.0.1 pantygirls4u.com 127.0.0.1 pantyhoserealm.com 127.0.0.1 pantyplace.com 127.0.0.1 pastubes.com 127.0.0.1 paulapage.com 127.0.0.1 paulhoover.com 127.0.0.1 payfortraffic.net 127.0.0.1 pedo.ws 127.0.0.1 people.1gb.ru 127.0.0.1 pervertbot.com 127.0.0.1 pharma-diet-pills.com 127.0.0.1 pharmacy2003.com 127.0.0.1 pharmalocator.com 127.0.0.1 phendimetrazine-tenuate-adipex.com 127.0.0.1 pics-videos.com 127.0.0.1 picsdir.com 127.0.0.1 picsforbucks.com 127.0.0.1 picsofseductiveladies.com 127.0.0.1 pills-birth-control.com 127.0.0.1 pillsmall.com 127.0.0.1 pilotronix.com 127.0.0.1 pixpox.com 127.0.0.1 planemusic.com 127.0.0.1 poiska.net 127.0.0.1 poker-casino-free.com 127.0.0.1 poker-games-free.net 127.0.0.1 polradiologia.com 127.0.0.1 pooi.net 127.0.0.1 porn-teacher.com 127.0.0.1 porncamz.com 127.0.0.1 pornfree.info 127.0.0.1 pornnightdreams.com 127.0.0.1 pornokopec.com 127.0.0.1 porntetris.com 127.0.0.1 porntwist.com 127.0.0.1 powerwebsearch.com 127.0.0.1 prblitz.com 127.0.0.1 pretypics.com 127.0.0.1 pribalt.com 127.0.0.1 privacy-support.biz 127.0.0.1 privateporn.net 127.0.0.1 prostactive.com 127.0.0.1 prostol.com 127.0.0.1 protect-yourself.biz 127.0.0.1 prsainlandempire.org 127.0.0.1 put-your-link-here.com 127.0.0.1 pyrocorp.com 127.0.0.1 quick-search.ws 127.0.0.1 quiksearchgenealogy.com 127.0.0.1 radfrall.org 127.0.0.1 ramgo.com 127.0.0.1 ranafrog.ne 127.0.0.1 rapegate.com 127.0.0.1 redbudbmx.com 127.0.0.1 refinance-help.com 127.0.0.1 removeearthkeepers.org 127.0.0.1 rightfinder.net 127.0.0.1 robbsproshop.com 127.0.0.1 robertferencz.com 127.0.0.1 rotocasters.com 127.0.0.1 royalsearch.net 127.0.0.1 runsearch.com 127.0.0.1 russiansponsor.com 127.0.0.1 russogay.com 127.0.0.1 s2.exocrew.com 127.0.0.1 sacitylife.com 127.0.0.1 samplegals.com 127.0.0.1 satisf*cktion.net 127.0.0.1 sbssurvivor.com 127.0.0.1 scarypix.com 127.0.0.1 sccdnet.com 127.0.0.1 schoolforest.com 127.0.0.1 search-1.net 127.0.0.1 search-2003.com 127.0.0.1 search-about.net 127.0.0.1 search-hawk.com 127.0.0.1 search-log.com 127.0.0.1 search-meta.com 127.0.0.1 search-safe.com 127.0.0.1 search.psn.cn 127.0.0.1 searchadultweb.com 127.0.0.1 searchbutler.com 127.0.0.1 searchbuttler.com 127.0.0.1 searchbutler.org 127.0.0.1 searchcomplete.com 127.0.0.1 searchdesire.com 127.0.0.1 searchdot.net 127.0.0.1 searchexpander.com 127.0.0.1 searchfastnet.com 127.0.0.1 searchforge.com 127.0.0.1 searching-the-net.com 127.0.0.1 searchmeta.md 127.0.0.1 searchmeta.net 127.0.0.1 searchmeta.ru 127.0.0.1 searchmeta.webhost.ru 127.0.0.1 searchnow.ws 127.0.0.1 searchonfly.com 127.0.0.1 searchv.com 127.0.0.1 searchxl.com 127.0.0.1 searchxp.com 127.0.0.1 sebot.com 127.0.0.1 securenp.org 127.0.0.1 security-warning.biz 127.0.0.1 seehardcore.com 127.0.0.1 seekwell.net 127.0.0.1 selfbookmark.com 127.0.0.1 selfbookmark.info 127.0.0.1 selfbookmark.net 127.0.0.1 sex.free4porno.net 127.0.0.1 sex-coach.com 127.0.0.1 sex-festival.com 127.0.0.1 sex-video-galleries.com 127.0.0.1 sexgalleries4all.com 127.0.0.1 sexmoviesnet.com 127.0.0.1 sexpatriot.net 127.0.0.1 sexy18.cc 127.0.0.1 sexycat.adult-host.org 127.0.0.1 sfbayfolkboats.com 127.0.0.1 sgirls.net 127.0.0.1 sharempeg.com 127.0.0.1 shopcards.net 127.0.0.1 shopknights.com 127.0.0.1 sic02.com 127.0.0.1 sintrader.com 127.0.0.1 site1.ru 127.0.0.1 sites-in-web.com 127.0.0.1 sitevictoria.com 127.0.0.1 sixroads.com 127.0.0.1 skakalka.ru 127.0.0.1 slawsearch.com 127.0.0.1 slotch.com 127.0.0.1 slotchbar.com 127.0.0.1 smartsumo.com 127.0.0.1 smutarchive.net 127.0.0.1 solongas.com 127.0.0.1 sonomaevents.com 127.0.0.1 spermatrix.com 127.0.0.1 sportbooks-free4you.com 127.0.0.1 spros.com 127.0.0.1 spyass.com 127.0.0.1 spyorgy.net 127.0.0.1 staceyowens.com 127.0.0.1 stacistaxx.com 127.0.0.1 stacystaxx.com 127.0.0.1 start-space.com 127.0.0.1 steamycock.com 127.0.0.1 sterva.com 127.0.0.1 stevecashdollar.com 127.0.0.1 stop-tracking.biz 127.0.0.1 stopvotefraud.com 127.0.0.1 stopxxxpics.com 127.0.0.1 strekoza.com 127.0.0.1 stuffstore.com 127.0.0.1 styleclickink.com 127.0.0.1 summercollins.com 127.0.0.1 summitcross.com 127.0.0.1 super-spider.com 127.0.0.1 super-websearch.com 127.0.0.1 supersexmachine.com 127.0.0.1 superwebsearch.com 127.0.0.1 supret.com 127.0.0.1 suzannebrecht.com 127.0.0.1 sweeteenz.com 127.0.0.1 tacil.org 127.0.0.1 tangounion.com 127.0.0.1 tastethemusic.com 127.0.0.1 tax-refund4you.com 127.0.0.1 tech-jobs.ws 127.0.0.1 technology-related.com 127.0.0.1 teen-biz.com 127.0.0.1 teen-pic-post.com 127.0.0.1 teenpornosex.com 127.0.0.1 teens4free.net 127.0.0.1 teensact.com 127.0.0.1 teensgate.com 127.0.0.1 teensguru.com 127.0.0.1 teenswamp.com 127.0.0.1 testosterone-birth-control.com 127.0.0.1 the-exit.com 127.0.0.1 the-huns-yellow-pages.com 127.0.0.1 thefakejournal.com 127.0.0.1 thehuy.net 127.0.0.1 theproxy.org 127.0.0.1 therealsearch.com 127.0.0.1 thesten.com 127.0.0.1 thornleygroup.com 127.0.0.1 tings.org 127.0.0.1 tinybar.com 127.0.0.1 tit-x.com 127.0.0.1 titanvision.com 127.0.0.1 titsianna.com 127.0.0.1 toddhayes.com 127.0.0.1 toon-comics.com 127.0.0.1 tooncomics.com 127.0.0.1 topsearcher.com 127.0.0.1 trafficback.com 127.0.0.1 trafficswitcher.com 127.0.0.1 travel.picture-posters.com 127.0.0.1 true-counter.com 127.0.0.1 true-portal.com 127.0.0.1 trytechnical.com 127.0.0.1 ufindall.click-now.net 127.0.0.1 umaxsearch.com 127.0.0.1 une-autre-france.com 127.0.0.1 unigays.com 127.0.0.1 unipages.cc 127.0.0.1 up2you.ru 127.0.0.1 urlstat.com 127.0.0.1 urlstat.ru 127.0.0.1 uralitel.ru 127.0.0.1 ursie.net 127.0.0.1 utahsweet.com 127.0.0.1 utopicportal.com 127.0.0.1 uusocialjustice.org 127.0.0.1 v61.com 127.0.0.1 vaginpics.com 127.0.0.1 valmyers.com 127.0.0.1 vegas-free.com 127.0.0.1 vegbuy.com 127.0.0.1 veloventures.com 127.0.0.1 verzila.com 127.0.0.1 victoriaadam.com 127.0.0.1 videocategories.com 127.0.0.1 vitamins-for-each.com 127.0.0.1 votehowe.org 127.0.0.1 vxebony.com 127.0.0.1 wakeupdick.com 127.0.0.1 warnomore.org 127.0.0.1 watersport-specialties.com 127.0.0.1 web-homepage.net 127.0.0.1 web-search.tk 127.0.0.1 webcoolsearch.com 127.0.0.1 websearchdot.com 127.0.0.1 weekend-movies.com 127.0.0.1 wetpornostars.com 127.0.0.1 whatsyoursearch.com 127.0.0.1 white-pages.ws 127.0.0.1 whittierblvd.com 127.0.0.1 win-in-casino.com 127.0.0.1 wiresearch.com 127.0.0.1 wolfpacracing.com 127.0.0.1 wordlist.jps.ru 127.0.0.1 wpc2001.org 127.0.0.1 wspzone.sexpornonline.com 127.0.0.1 wwwbet.net 127.0.0.1 wwwbetting.net 127.0.0.1 wwwpokergames.com 127.0.0.1 wwwpokerplayers.com 127.0.0.1 wwwroulette.net 127.0.0.1 x-library.com 127.0.0.1 x-webdesign.com 127.0.0.1 xcomics4u.com 127.0.0.1 xic-bs.com 127.0.0.1 xldr.com 127.0.0.1 xp18.com 127.0.0.1 xrenosearch.com 127.0.0.1 xtragay.com 127.0.0.1 xu.xu.pl 127.0.0.1 xxxcategories.com 127.0.0.1 xxxemailxxx.com 127.0.0.1 y-e-l-l-o-w.com 127.0.0.1 yellow500.com 127.0.0.1 yezol.com 127.0.0.1 you-search.com 127.0.0.1 you-search.com.ru 127.0.0.1 youfindall.com 127.0.0.1 youfindall.net 127.0.0.1 your-prescriptions.net 127.0.0.1 yourbookmarks.info 127.0.0.1 yourbookmarks.ws 127.0.0.1 ypir.com 127.0.0.1 ysa-info.net 127.0.0.1 yukohamano.com 127.0.0.1 ywebsearch.info 127.0.0.1 zapros.com 127.0.0.1 zesearch.com 127.0.0.1 ziportal.com 127.0.0.1 zipportal.com 127.0.0.1 zoneoffreeporn.com 127.0.0.1 zoomegasite.com 127.0.0.1 zvimigdal.com 127.0.0.1 zyban-zocor-levitra.com 127.0.0.1 t.rack.cc 127.0.0.1 omega-search.com 127.0.0.1 cool-xxx.net 127.0.0.1 revolto3.da.ru 127.0.0.1 dating-search.net 127.0.0.1 linksummary.com 127.0.0.1 duolaimi.net 127.0.0.1 ez-searching.com 127.0.0.1 freehqmovies.com 127.0.0.1 xzoomy.com 127.0.0.1 freescratchandwin.com 127.0.0.1 fickenisgeil.de 127.0.0.1 globalwebsearch.com 127.0.0.1 www.gocybersearch.com 127.0.0.1 mayancasino.com 127.0.0.1 www.hastalavista.com 127.0.0.1 www.free-popup-killer.com 127.0.0.1 www.digitalfan.com 127.0.0.1 google123.web1000.com 127.0.0.1 search.ieplugin.com 127.0.0.1 i-lookup.com 127.0.0.1 spidersearch.com 127.0.0.1 istarthere.com 127.0.0.1 xxxtoolbar.com 127.0.0.1 www.seekporn.org 127.0.0.1 17-plus.com 127.0.0.1 lolita4all1.xrensmagpost.com 127.0.0.1 mafiapics.com 127.0.0.1 www.teenmonster.com 127.0.0.1 ie.marketdart.com 127.0.0.1 masterbar.com 127.0.0.1 search.netzany.co 127.0.0.1 only-virgins.com 127.0.0.1 passthison.com 127.0.0.1 blondetgp.com 127.0.0.1 prolivation.com 127.0.0.1 server-au.imrworldwide.com 127.0.0.1 .roar.com 127.0.0.1 rocketsearch.com 127.0.0.1 searchaccurate.com 127.0.0.1 searchalot.com 127.0.0.1 searchandbrowse.com 127.0.0.1 gtawarehouse.com 127.0.0.1 startium.com 127.0.0.1 searchandclick.com 127.0.0.1 searchby.net 127.0.0.1 searchdot.com 127.0.0.1 search-exe.com 127.0.0.1 secret-crush.com 127.0.0.1 seekseek.com 127.0.0.1 sexarena.com 127.0.0.1 sexocean.play-lolita.com 127.0.0.1 startsurfing.com 127.0.0.1 [removed] 127.0.0.1 srng.net 127.0.0.1 apps.webservicehost.com 127.0.0.1 search.shopnav.com 127.0.0.1 wish7.com 127.0.0.1 216.65.3.68 127.0.0.1 www.supersexpass.com 127.0.0.1 surferbar.com 127.0.0.1 xlola.underagehost.com 127.0.0.1 hotlolitas.underagehost.com 127.0.0.1 loading-lolita.com 127.0.0.1 www.xupiter.com 127.0.0.1 xjupiter.com 127.0.0.1 www.xjupiter.com 127.0.0.1 www.browserwise.com 127.0.0.1 sqwire.com 127.0.0.1 orbitexplorer.com 127.0.0.1 searchcentrix.com 127.0.0.1 categories.mygeek.com 127.0.0.1 web-entrance.co 127.0.0.1 whazit.com 127.0.0.1 windowenhancer.com 127.0.0.1 buz.ru 127.0.0.1 iwon.com 127.0.0.1 www.bonzi.com 127.0.0.1 featured-results.com 127.0.0.1 searchmadesafe.net 127.0.0.1 quicklaunch.com 127.0.0.1 www.cashsurfers.com 127.0.0.1 .lop.com 127.0.0.1 .tjdo.com 127.0.0.1 /tjdo.com 127.0.0.1 .ebav.com 127.0.0.1 /ebav.com 127.0.0.1 .ebgo.com 127.0.0.1 /ebgo.com 127.0.0.1 .ebaw.com 127.0.0.1 /ebaw.com 127.0.0.1 .ebkb.com 127.0.0.1 /ebkb.com 127.0.0.1 .ebmu.com 127.0.0.1 /ebmu.com 127.0.0.1 .ecmp.com 127.0.0.1 /ecmp.com 127.0.0.1 .edhq.com 127.0.0.1 /edhq.com 127.0.0.1 .edty.com 127.0.0.1 /edty.com 127.0.0.1 .sbee.com 127.0.0.1 /sbee.com 127.0.0.1 .aavc.com 127.0.0.1 /aavc.com 127.0.0.1 .acjp.com 127.0.0.1 /acjp.com 127.0.0.1 .ecmh.com 127.0.0.1 /ecmh.com 127.0.0.1 .emch.com 127.0.0.1 /emch.com 127.0.0.1 .ecpm.com 127.0.0.1 /ecpm.com 127.0.0.1 .wabu.com 127.0.0.1 /wabu.com 127.0.0.1 .wabq.com 127.0.0.1 .wabq.com 127.0.0.1 /wabq.com 127.0.0.1 .ebch.com 127.0.0.1 /ebch.com 127.0.0.1 .ebdv.com 127.0.0.1 /ebdv.com 127.0.0.1 .ebdw.com 127.0.0.1 /ebdw.com 127.0.0.1 .ebjp.com 127.0.0.1 /ebjp.com 127.0.0.1 .ebkn.com 127.0.0.1 /ebkn.com 127.0.0.1 .ebky.com 127.0.0.1 /ebky.com 127.0.0.1 .eblv.com 127.0.0.1 /eblv.com 127.0.0.1 .wbkb.com 127.0.0.1 /wbkb.com 127.0.0.1 .ebvr.com 127.0.0.1 /ebvr.com 127.0.0.1 .ecwz.com 127.0.0.1 /ecwz.com 127.0.0.1 .ecyb.com 127.0.0.1 /ecyb.com 127.0.0.1 .eduy.com 127.0.0.1 /eduy.com 127.0.0.1 .eeev.com 127.0.0.1 /eeev.com 127.0.0.1 .farse.com 127.0.0.1 /farse.com 127.0.0.1 .ibmx.com 127.0.0.1 /ibmx.com 127.0.0.1 .icwb.com 127.0.0.1 /icwb.com 127.0.0.1 .icwo.com 127.0.0.1 /icwo.com 127.0.0.1 .icwp.com 127.0.0.1 /icwp.com 127.0.0.1 .iddh.com 127.0.0.1 /iddh.com 127.0.0.1 .idhh.com 127.0.0.1 /idhh.com 127.0.0.1 .ifiz.com 127.0.0.1 /ifiz.com 127.0.0.1 .iguu.com 127.0.0.1 /iguu.com 127.0.0.1 .samz.com 127.0.0.1 /samz.com 127.0.0.1 .saoe.com 127.0.0.1 /saoe.com 127.0.0.1 .sbjr.com 127.0.0.1 /sbjr.com 127.0.0.1 .sbnl.com 127.0.0.1 /sbnl.com 127.0.0.1 .sbnt.com 127.0.0.1 /sbnt.com 127.0.0.1 .sbvr.com 127.0.0.1 /sbvr.com 127.0.0.1 .scbm.com 127.0.0.1 /scbm.com 127.0.0.1 .sckr.com 127.0.0.1 /sckr.com 127.0.0.1 .scrk.com 127.0.0.1 /scrk.com 127.0.0.1 .sdry.com 127.0.0.1 /sdry.com 127.0.0.1 .seld.com 127.0.0.1 /seld.com 127.0.0.1 .sfux.com 127.0.0.1 /sfux.com 127.0.0.1 .sheat.com 127.0.0.1 /sheat.com 127.0.0.1 .sipo.com 127.0.0.1 /sipo.com 127.0.0.1 .smds.com 127.0.0.1 /smds.com 127.0.0.1 .srib.com 127.0.0.1 /srib.com 127.0.0.1 .srox.com 127.0.0.1 /srox.com 127.0.0.1 .srsf.com 127.0.0.1 /srsf.com 127.0.0.1 .ssaw.com 127.0.0.1 /ssaw.com 127.0.0.1 .ssby.com 127.0.0.1 /ssby.com 127.0.0.1 .surj.com 127.0.0.1 /surj.com 127.0.0.1 .tbvg.com 127.0.0.1 /tbvg.com 127.0.0.1 .tdak.com 127.0.0.1 /tdak.com 127.0.0.1 .tdmy.com 127.0.0.1 /tdmy.com 127.0.0.1 .tefs.com 127.0.0.1 /tefs.com 127.0.0.1 .tfil.com 127.0.0.1 /tfil.com 127.0.0.1 .tjar.com 127.0.0.1 /tjar.com 127.0.0.1 .tjaw.com 127.0.0.1 /tjaw.com 127.0.0.1 .tjgo.com 127.0.0.1 /tjgo.com 127.0.0.1 .tjem.com 127.0.0.1 /tjem.com 127.0.0.1 .torc.com 127.0.0.1 /torc.com 127.0.0.1 .wfix.com 127.0.0.1 /wfix.com 127.0.0.1 .wflu.com 127.0.0.1 /wflu.com 127.0.0.1 .tdko.com 127.0.0.1 /tdko.com 127.0.0.1 .thko.com 127.0.0.1 /thko.com 127.0.0.1 H24413.tfil.com 127.0.0.1 germany.rub.to 127.0.0.1 search.rub.to 127.0.0.1 unitedstates.rub.to 127.0.0.1 www.commonname.com 127.0.0.1 www.ezcybersearch.com 127.0.0.1 www.jethomepage.com 127.0.0.1 www.gohip.com 127.0.0.1 hotbar.com 127.0.0.1 www.huntbar.com 127.0.0.1 search.imiserver.com 127.0.0.1 infospace.com/blsrch.dp.toolbar 127.0.0.1 searchenhancement.com 127.0.0.1 newtonknows.com 127.0.0.1 search-explorer.net 127.0.0.1 searchsquire.com 127.0.0.1 secondpower.com 127.0.0.1 2ndpower.com 127.0.0.1 searchgateway.net 127.0.0.1 worldusa.com 127.0.0.1 www.topsearcher.com 127.0.0.1 smutserver.com 127.0.0.1 searchmeup.com 127.0.0.1 cameup.com 127.0.0.1 kliksearch.com 127.0.0.1 realphx.com 127.0.0.1 blazefind.com 127.0.0.1 [removed] 127.0.0.1 zoofil.com 127.0.0.1 terafinder.com 127.0.0.1 008i.com 127.0.0.1 171203.com 127.0.0.1 39-93.com 127.0.0.1 adult-personal.us 127.0.0.1 cashsearch.biz 127.0.0.1 cl55.biz 127.0.0.1 dailyteenspic.com 127.0.0.1 dialer2004.com 127.0.0.1 digital-pornography.com 127.0.0.1 eager-sex.com 127.0.0.1 ergosites.com 127.0.0.1 freecj.com 127.0.0.1 greg-search.com 127.0.0.1 incest-host.com 127.0.0.1 ironcarteam.com 127.0.0.1 is-best.com 127.0.0.1 killerpornstars.com 127.0.0.1 lollitop.com 127.0.0.1 love-host.com 127.0.0.1 myexexex.com 127.0.0.1 my-finder.com 127.0.0.1 onlineclick.net 127.0.0.1 onlysex.ws 127.0.0.1 regfreeze.com 127.0.0.1 ruworld.com 127.0.0.1 selltraffic.biz 127.0.0.1 sexunique.net 127.0.0.1 sinpussy.com 127.0.0.1 teenhost.net 127.0.0.1 ultraload.net 127.0.0.1 vse-moe.biz 127.0.0.1 xsex.ws 127.0.0.1 .75tz.com 127.0.0.1 /75tz.com 127.0.0.1 .iefeadsl.com 127.0.0.1 /iefeadsl.com 127.0.0.1 /rf104.com 127.0.0.1 .rf104.com 127.0.0.1 www.v61.com 127.0.0.1 .00hq.com 127.0.0.1 /00hq.com 127.0.0.1 ads.centralmedia.ws 127.0.0.1 c.centralmedia.ws 127.0.0.1 .count.cc 127.0.0.1 /count.cc 127.0.0.1 .topx.cc 127.0.0.1 /topx.cc 127.0.0.1 sidefind.com 127.0.0.1 thenewsearch.com 127.0.0.1 new-search.net 127.0.0.1 x-google.net 127.0.0.1 adultgambling.org 127.0.0.1 bitchesonline.net 127.0.0.1 girls4rent.net 127.0.0.1 usefullsoft.net 127.0.0.1 livegambling.com 127.0.0.1 adultsgames.net 127.0.0.1 easyantispy.com 127.0.0.1 spybotremover.net 127.0.0.1 winprotect.net 127.0.0.1 funny-girls.com 127.0.0.1 winmsn.com 127.0.0.1 oneclicksearches.com 127.0.0.1 bestweblinks.com 127.0.0.1 iqsearch.net 127.0.0.1 dumpserv.com 127.0.0.1 helpyoursearch.com 127.0.0.1 sgrunt.biz 127.0.0.1 yeak.net 127.0.0.1 u45.cx 127.0.0.1 u46.cx 127.0.0.1 u47.cc 127.0.0.1 u48.cc 127.0.0.1 sfonditalia.biz 127.0.0.1 realarea.biz 127.0.0.1 archiviosex.net 127.0.0.1 agava.com 127.0.0.1 agava.ru 127.0.0.1 hut1.ru 127.0.0.1 hu15.ru 127.0.0.1 winfixer.com 127.0.0.1 3721.com 127.0.0.1 easysearchingtips.com 127.0.0.1 fine-search.net 127.0.0.1 noproblemsurf.com 127.0.0.1 pcspyremover.com 127.0.0.1 search-motor.com 127.0.0.1 searchwhatuwant.com 127.0.0.1 ad25.com 127.0.0.1 ad45.com 127.0.0.1 ad77.com 127.0.0.1 ad86.com 127.0.0.1 full-search.net 127.0.0.1 go2-search.com 127.0.0.1 onemoresearch.net 127.0.0.1 search-777.com 127.0.0.1 search-to-find.com 127.0.0.1 search-what.net 127.0.0.1 winshow.biz 127.0.0.1 lookfor.cc 127.0.0.1 looking-for.cc 127.0.0.1 tgp-4-you.com 127.0.0.1 veryeasysearch.com 127.0.0.1 010402.com 127.0.0.1 20x2p.com 127.0.0.1 db105.com 127.0.0.1 ga31.com 127.0.0.1 mpeg-look.com 127.0.0.1 n-udd.com 127.0.0.1 p-uud.com 127.0.0.1 porn-screen.com 127.0.0.1 rb37.com 127.0.0.1 t058.com 127.0.0.1 u-239.com 127.0.0.1 v-224.com 127.0.0.1 trackhits.cc 127.0.0.1 tracktraff.cc 127.0.0.1 power-cleaner.com 127.0.0.1 yoursitebar.com 127.0.0.1 ysbweb.com 127.0.0.1 installcash.com 127.0.0.1 toolbarcash.com »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix GenericRenosFix by S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files C:\WINDOWS\warnhp.html Deleted »»»»»»»»»»»»»»»»»»»»»»»» DNS HKLM\SYSTEM\CCS\Services\Tcpip\..\{A4753197-1F77-40EC-BB4C-C95C36021BE3}: DhcpNameServer=[removed] [removed] [removed] HKLM\SYSTEM\CS1\Services\Tcpip\..\{A4753197-1F77-40EC-BB4C-C95C36021BE3}: DhcpNameServer=[removed] [removed] [removed] HKLM\SYSTEM\CS2\Services\Tcpip\..\{A4753197-1F77-40EC-BB4C-C95C36021BE3}: DhcpNameServer=[removed] [removed] [removed] HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed] [removed] HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed] [removed] HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed] [removed] »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning Registry Cleaning done. »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» End

hi cinderella, ok thanks for the info. looks ok. hows it on that end now?? do use a custom host file? shelf life

Hello shelf life, Everything seems good now. Thanks for all your help. Sorry, what is a custom host file? I can navigate around a computer but don't know all the terminology, haha.

hi cinderella,

good. cruise around, make sure its all ok, then we will make new restore points.

a host file is to prevent people going to certain websites, it fools your computer into looking for the site on your own computer. you can make your own host file, theres also some apps out there that do it for you and maintain lists of websites to block.

more info:
one of the originals:
http://www.accs-net.com/hosts/

more:
http://www.mvps.org/winhelp2002/hosts.htm

shelf life

So far so good. I haven't seen a pop-up yet, thank god. i'm still confused about the host file; i understand what it is, but i'm not sure if i'm using one.. my cousin tweaks my computer when he's in town sometimes, so maybe he fixed one up..? is there a way to tell? Also, do you know why my computer wasn't able to perform system restore?

hi cinderella,

ok good, no popups.

looks like you are using a host file. as a test you could pick out one of those in the list, copy it to your browser and you shouldnt get to the web page. heres one copy paste this into your browser:

http://munky.com/
—————————————
all those in the list all look like porn or malware sites.

malware can keep you from going to good websites also by writing to the hosts file, except the entries would look like this:

127.0.0.1 Ad aware
127.0.0.1 Norton
127.0.0.1 Avast
you wouldnt be able to update or download.

—————————————

is there a way to tell

i didnt see anything in the hjt log, you can generate a add/remove programs list to see if anything is in there:

start hjt, click on "open misc tools"
click on "misc tools" at the top
click on "open uninstall manager"
click on save list.

copy/paste the list in next reply and we will see if anythings is in there.

Also, do you know why my computer wasn't able to perform system restore?

no, but we need to make new restore points first:

To reset your restore points, please note that you will need to log into your computer with an account which has full administrator access. You will know if the account has administrator access because you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.

(winXP)

1. Turn off System Restore. (deletes old possibly infected restore point)
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

2. Reboot.

3. Turn ON System Restore.(new restore points on a clean system)
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK, then reboot
————————————-
shelf life

Ad-Aware SE Personal Adobe Acrobat 5.0 Adobe Flash Player 9 ActiveX ArcSoft Picture Software Audacity 1.2.6 Avanquest update avast! Antivirus Azureus CCleaner (remove only) HijackThis 1.99.1 hp deskjet 3600 HP Deskjet printer preloaded drivers HP Digital Imaging Album Printing 1.0 HP Instant Support HP Memories Disc HP Photo and Imaging 1.2 - Photosmart Cameras HP Photo and Imaging 2.0 - Deskjet Series HP Photosmart printers preloaded drivers hp print screen utility Intel® Extreme Graphics Driver IntelliMover Data Transfer Demo iPod for Windows 2005-03-23 iTunes J2SE Runtime Environment 5.0 Update 8 Java 2 Runtime Environment, SE v1.4.2_05 KBD Lernout & Hauspie TruVoice American English TTS Engine LimeWire 4.12.6 LiveReg (Symantec Corporation) LiveUpdate 1.80 (Symantec Corporation) Macromedia Shockwave Player Messenger Control Plugin for Ad-aware Microsoft .NET Framework (English) Microsoft .NET Framework (English) v1.0.3705 Microsoft Data Access Components KB870669 Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 Microsoft Office PowerPoint Viewer 2003 Motorola Driver Installation Motorola Phone Tools NVIDIA Windows 2000/XP Display Drivers PC-Doctor for Windows PS2 Python 2.2 combined Win32 extensions Python 2.2.1 Quicken 2003 New User Edition QuickTime RealPlayer RecordNow Rhapsody Player Engine S3Display S3Gamma2 S3Info2 S3Overlay scarf Screen Saver Security Update for Step By Step Interactive Training (KB898458) Security Update for Step By Step Interactive Training (KB923723) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB911565) Security Update for Windows Media Player 9 (KB917734) Security Update for Windows Media Player 9 (KB936782) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896422) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB896688) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899588) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB905915) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB908531) Security Update for Windows XP (KB911280) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911567) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912812) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913446) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917159) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB918899) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920214) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB921883) Security Update for Windows XP (KB922616) Security Update for Windows XP (KB922760) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925454) Security Update for Windows XP (KB925486) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928090) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB929969) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931768) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933566) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB937143) Security Update for Windows XP (KB938127) Security Update for Windows XP (KB938829) Simple Backup for My Pictures Simple Installer - Multilanguage Version Sony Picture Utility Sony USB Driver toolkit Update for Windows XP (KB894391) Update for Windows XP (KB896727) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB910437) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB929338) Update for Windows XP (KB930916) Update for Windows XP (KB931836) Update for Windows XP (KB933360) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Updates from HP Winamp (remove only) Windows Installer 3.1 (KB893803) Windows Installer 3.1 (KB893803) Windows XP Hotfix - KB834707 Windows XP Hotfix - KB867282 Windows XP Hotfix - KB873333 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB887742 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890047 Windows XP Hotfix - KB890175 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB890923 Windows XP Hotfix - KB891781 Windows XP Hotfix - KB893066 Windows XP Hotfix - KB893086 Windows XP Service Pack 2 WordPerfect Productivity Pack WordPerfect Productivity Pack

hi cinderella, thanks for the list. i dont recognize anything listed as host file software. somebody/something must of added them in. shelf life