Gen:Variant.Symmi.2478 (BitDefender), Worm:Win32/Esfury.X (Microsoft), Win32.HLLW.Autoruner1.24454 (DrWeb), Gen:Variant.Symmi.2478 (B) (Emsisoft), Trojan.Win32.Jorik (Ikarus), Gen:Variant.Symmi.2478 (FSecure), Generic29.AYVZ (AVG), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 54784d5167ca15db67b91a17cee7ca23
SHA1: 051fdf36859a05b6713f7ac2bb4004a7a1c60853
SHA256: 5d834bc6fe6613e7d7dced056a771a9f2f5ebab9d49db6c17624dd1e6853bd25
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 4768944 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: no certificate found
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
| Behaviour | Description |
|---|---|
| WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
| MD5 | File path |
|---|---|
| 09c53a96ba45a953562411fb4635ac2e | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif |
| 55e96e2aee74a1042f6a0260c351f2d9 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21_PROPER_320kbps_VRTX.mp3.pif |
| 17368d4c20d754c128670d3e39cdbe5b | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - Rolling In the Deep [2010-Single][SW].mp3.pif |
| f7f7db5cb87b45b563e3d034e29eb222 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Beyonce-4_(Deluxe_Edition)-2CD-2011-VOiCE.mp3.pif |
| c18d3a93a2d29d03b4f37c96d18d42c8 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Black Eyed Peas - The Beginning (Deluxe Edition) 2010-DOH.mp3.pif |
| ba1bab1244d35783462b01951b3f7032 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif |
| a1c69b731a159733d9f9df90f75ca34d | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif |
| e2ad3dbb83a98ac91fbbb6896dbee34e | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif |
| 4f470b304dc18c70552a3be86f32c696 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2011-Single@320][TJ].mp3.pif |
| e796d9235f94a4bb65aa75fed5cb3d96 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Mumford And Sons - Sigh No More (Album).mp3.pif |
| bb84ac745fd198e6a8d9fc416137ddd5 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Now Thats What I Call Music 78 (2011) - 2CD.mp3.pif |
| 86253ffc3e369cd10c9bc2abc1f1d797 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Pitbull - Give Me Everything (feat. Ne-Yo) [2011-Single][SW].mp3.pif |
| b320fa0843a27be1e0dbf3824b83a35d | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Rihanna - LOUD (2011 With 5 Bonus Tracks).mp3.pif |
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61798 bytes in size. The following strings are added to the hosts file listed below:
| 173.224.217.72 | viabcp.com |
| 173.224.217.72 | www.viabcp.com |
| 173.224.217.72 | ww2.viabcp.com |
| 173.224.217.72 | bcpzonasegura.viabcp.com |
| 173.224.217.72 | hotmail.com |
| 173.224.217.72 | www.hotmail.com |
| 93.162.213.128 | 13iii.com |
| 126.63.252.130 | 15660808.co.kr |
| 240.46.116.25 | 2-spyware.com |
| 111.41.62.189 | 247fixes.com |
| 131.118.88.178 | 360.cn |
| 163.20.127.248 | 360.com |
| 21.2.60.75 | 360safe.cn |
| 148.254.5.51 | 360safe.com |
| 100.74.219.40 | 45pounds.com |
| 133.232.70.42 | 51nb.com |
| 247.146.191.194 | 9down.com |
| 185.210.136.102 | a-2.org |
| 137.30.94.91 | a188.x.akamai.net |
| 170.188.202.161 | abuse.ch |
| 28.103.66.244 | acs.pandasoftware.com |
| 155.166.11.152 | ad-aware-se.uptodown.com |
| 174.243.38.141 | ad.fastclick.net |
| 207.144.77.211 | ads.fastclick.net |
| 65.59.197.106 | agfirewall.ru |
| 192.122.143.14 | agnitum.com |
| 144.199.169.3 | agnitum.de |
| 244.101.208.73 | agnitum.fr |
| 34.15.73.156 | agnitum.ru |
| 229.79.18.64 | ahn.com.cn |
| 181.155.44.53 | ahnlab.com |
| 214.57.83.123 | akamai.net |
| 72.227.16.19 | aknow.prevx.com |
| 10.35.149.183 | aladdin.com |
| 218.111.175.172 | alert.rising.com.cn |
| 251.13.27.242 | alerta-antivirus.inteco.es |
| 109.184.147.69 | alerta-antivirus.red.es |
| 236.247.92.233 | alladdin.ru |
| 255.68.51.222 | aluriasoftware.com |
| 32.157.158.36 | analysis.seclab.tuwien.ac.at |
| 78.140.22.119 | andymanchesta.com |
| 17.135.224.95 | anti-virus-software-review.com |
| 225.24.250.84 | anti-virus.by |
| 1.114.33.86 | anti-virus.com |
| 115.96.154.237 | antirootkit.com |
| 54.92.99.145 | antispam.sunbeltsoftware.com |
| 6.236.125.134 | antispy.ru |
| 39.70.164.204 | antispyware.sunbeltsoftware.com |
| 153.52.29.32 | antivir.es |
| 23.48.230.8 | antiviraldp.com |
| 43.124.0.253 | antivirus-online.de |
| 76.26.40.255 | antivirus-tools.com |
| 122.9.160.150 | antivirus.about.com |
| 61.4.105.58 | antivirus.cai.com |
| 12.81.132.47 | antivirus.comodo.com |
| 45.238.239.117 | antivirus.hispavista.com |
| 159.221.103.200 | antivirus.sunbeltsoftware.com |
| 98.216.49.108 | antiy.net |
| 50.37.7.97 | anubis.iseclab.org |
| 82.195.114.167 | apac.trendmicro.com |
| 196.177.235.62 | ar.answers.yahoo.com |
| 67.173.180.226 | ar.atwola.com |
| 87.249.138.215 | arcabit.com |
| 120.151.245.29 | arcabit.pl |
| 233.133.110.113 | archive.bitdefender.com |
| 104.129.55.21 | arswp.com |
| 56.205.81.10 | arwww.fortinet.cz |
| 89.107.121.80 | asap.authentium.com |
| 203.90.241.163 | ashampoo.com |
| 142.85.186.139 | atazita.blogspot.com |
| 93.162.213.128 | atdmt.com |
| 126.63.252.130 | attechnical.com |
| 240.46.116.25 | atwola.com |
| 111.41.62.189 | au.mcafee.com |
| 131.118.88.178 | auditmypc.com |
| 163.20.127.248 | authentium.com |
| 21.2.60.75 | auwww.ealaddin.nl |
| 148.254.5.51 | avast-home.uptodown.com |
| 100.74.219.40 | avast.com |
| 133.232.70.42 | avast.ru |
| 247.146.191.194 | avg-antivirus.net |
| 185.210.136.102 | avg.com |
| 137.30.94.91 | avg.vo.llnwd.net |
| 170.188.202.161 | avgate.net |
| 28.103.66.244 | avgfrance.com |
| 155.166.11.152 | avhide.com |
| 174.243.38.141 | avira.com |
| 207.144.77.211 | avp.ch |
| 65.59.197.106 | avp.com |
| 192.122.143.14 | avp.ru |
| 144.199.169.3 | avpclub.ddns.info |
| 244.101.208.73 | avu.zonelabs.com |
| 34.15.73.156 | avx.rob-have.net |
| 229.79.18.64 | awaps.net |
| 48.23.168.177 | b-have.orgbitdefender-ar.com |
| 81.180.207.247 | babooforum.com.br |
| 195.95.139.142 | backup.comodo.com |
| 134.158.17.50 | baike.360.cn |
| 86.235.43.39 | baike.360.com |
| 118.136.150.109 | bakunos.com |
| 232.51.14.192 | banner.fastclick.net |
| 103.115.216.100 | banners.fastclick.net |
| 123.191.174.89 | baristamagazine.com |
| 156.25.25.159 | basetendencies.com |
| 201.7.146.242 | bbs.360.cn |
| 140.3.91.219 | bbs.360safe.cn |
| 92.147.117.208 | bbs.360safe.com |
| 125.237.157.210 | bbs.cfan.com.cn |
| 239.220.21.105 | bbs.cpcw.com |
| 178.215.222.13 | bbs.dswlab.com |
| 129.104.249.2 | bbs.duba.net |
| 162.193.32.72 | bbs.ikaka.com |
| 20.176.152.155 | bbs.janmeng.com |
| 147.171.98.131 | bbs.kafan.cn |
| 167.248.124.120 | bbs.kafan.com |
| 199.150.163.122 | bbs.kaspersky.com.cn |
| 245.132.27.17 | bbs.kpfans.com |
| 184.128.229.181 | bbs.mcafeefans.com |
| 136.204.255.170 | bbs.s-sos.net |
| 169.106.106.240 | bbs.sucop.com |
| 26.88.227.67 | bbs.taisha.org |
| 221.84.172.232 | bbs.trendmicro.com.cn |
| 173.160.130.221 | bbs.winzheng.com |
| 206.62.238.35 | bestofewan.com |
| 64.45.102.186 | beta.anti-virus.by |
| 191.40.47.94 | bg.virusblokada.com |
| 210.117.6.83 | bhsbees.com |
| 243.18.113.153 | bitcity.info |
| 101.1.233.236 | bitcity.org |
| 228.252.179.144 | bitdefender.co.uk |
| 180.73.205.133 | bitdefender.com |
| 212.231.244.203 | bitdefender.com.ua |
| 70.213.108.30 | bitdefender.es |
| 9.209.54.6 | bitdefender.org |
| 217.29.80.251 | bitdefender.secyber.net |
| 250.187.119.132 | bitdefenderchina.com |
| 242.48.119.27 | bitdefenderguatemala.com |
| 113.44.64.191 | bitdefendermalaysia.com |
| 133.120.90.180 | bitdefendertaiwan.com |
| 166.22.129.250 | bitdefenderuruguay.com |
| 23.4.62.78 | bitdefenderusa.com |
| 150.0.7.54 | biz.nprotect.com |
| 102.76.221.43 | bkav.com.vn |
| 135.234.73.45 | blackice.iss.net |
| 249.149.193.196 | bleedingthreats.net |
| 188.212.138.104 | bleepingcomputer.com |
| 139.33.97.93 | blitzblank.com |
| 172.190.204.163 | blog.hispasec.com |
| 30.105.68.246 | blog.threatfire.com |
| 157.168.14.154 | blog.titanium-jewelry.com |
| 177.245.40.143 | blog.trendmicro.com |
| 209.147.79.213 | blogs.icerocket.com |
| 67.61.200.108 | blogs.protegerse.com |
| 194.125.145.16 | blogschapines.com |
| 146.201.171.5 | boardreader.com |
| 247.103.210.75 | bobbondart.com |
| 37.17.75.159 | br.mcafee.com |
| 231.81.20.67 | br.trendmicro.com |
| 183.157.46.56 | brazil.kaspersky.com |
| 83.182.209.249 | buddy.bitdefender.com |
| 197.97.141.144 | bugs.clamav.net |
| 136.161.19.52 | buscafacil.com |
| 88.237.45.41 | buscalo.in |
| 121.139.152.111 | busco.in |
| 234.53.17.194 | buy.bitdefender-es.com |
| 105.117.218.103 | buy.bitdefender.com |
| 125.193.176.92 | buy.bitdefender.de |
| 158.27.28.162 | buy.drweb.com |
| 204.10.148.245 | buy.rising.com.cn |
| 143.5.93.221 | ca.com |
| 94.150.120.210 | cacomvip.ca.com |
| 127.239.159.212 | cai.com |
| 241.222.23.107 | canada.karuna-shechen.org |
| 180.217.225.15 | castlecops.com |
| 132.106.251.4 | castlecrops.com |
| 164.196.34.74 | ccslaughterspdx.com |
| 22.178.154.157 | cddchiangmai.net |
| 149.174.100.133 | cdn.atwola.com |
| 169.250.126.122 | center.rising.com.cn |
| 202.152.165.124 | centralcommand.com |
| 247.134.30.19 | cert.org |
| 186.130.231.184 | cfan.com.cn |
| 138.206.1.173 | cgi.clamav.net |
| 171.108.109.243 | changedetection.com |
| 29.91.229.70 | changelog.fr |
| 224.86.174.234 | channelpartner.trendmicro.com |
| 175.163.133.223 | chickensroamfree.com |
| 208.64.240.37 | chkrootkit.org |
| 66.47.104.188 | chollian.nprotect.co.kr |
| 64.170.177.224 | cisrt.org |
| 84.247.135.213 | cit.kookmin.ac.kr |
| 117.148.243.27 | clamav.net |
| 231.131.107.110 | clamwin.com |
| 102.126.52.18 | click.atdmt.com |
| 53.203.79.7 | clicks.atdmt.com |
| 86.104.118.77 | cloudprotection.pandasecurity.com |
| 200.87.238.160 | clubic.com |
| 139.83.184.136 | cmmings.cn |
| 91.159.210.125 | cn.mcafee.com |
| 124.61.249.127 | cn.sophos.com |
| 237.43.114.22 | cn.trendmicro.com |
| 108.39.59.186 | codehard.wordpress.com |
| 128.115.85.175 | cohartuk.com |
| 161.17.125.246 | commentcamarche.net |
| 19.255.57.73 | community.thaiware.com |
| 145.251.2.49 | comodo.com |
| 97.72.216.38 | company.drweb.com |
| 130.229.68.40 | company.hauri.co.kr |
| 244.144.188.191 | company.hauri.net |
| 183.207.133.99 | computing.net |
| 134.28.92.88 | comunidad.wilkinsonpc.com.co |
| 167.185.199.158 | configurarequipos.com |
| 25.100.63.241 | coresecurity.com |
| 152.163.9.149 | cou85.com |
| 172.240.35.138 | cowsmo.com |
| 205.142.74.208 | cpsecure.com |
| 62.56.195.103 | csc.rising.com.cn |
| 189.120.140.11 | cureit.ru |
| 141.196.42.132 | customer.symantec.com |
| 118.230.81.202 | customers.drweb.com |
| 163.144.202.29 | cutlines.org |
| 102.208.147.193 | cwsandbox.org |
| 54.28.173.183 | cybercrime.pandasecurity.com |
| 87.186.213.253 | cyberdefender.com |
| 201.100.145.148 | cybertechhelp.com |
| 139.164.143.176 | daboweb.com |
| 212.105.169.165 | daniloff.net |
| 245.7.20.235 | daniweb.com |
| 102.177.141.62 | darkclockers.com |
| 229.241.86.226 | dazhizhu.cn |
| 249.61.44.215 | de.bitdefender.com |
| 26.151.152.30 | de.mcafee.com |
| 72.133.16.113 | de.trendmicro.com |
| 10.129.217.89 | deckard.geekstogo.com |
| 218.18.243.78 | deerfield.com |
| 251.107.27.80 | defalcos.com |
| 109.90.147.231 | definitions.symantec.com |
| 48.85.92.139 | dell.symantec.com |
| 255.230.119.128 | demos.eset.es |
| 32.63.158.198 | descargas.eset.es |
| 146.46.22.25 | dev.depeuter.org |
| 17.42.224.1 | developmentdrums.org |
| 37.118.250.246 | dialognauka.ru |
| 70.20.33.248 | diamondcs.com.au |
| 115.2.154.143 | dicasweb.com.br |
| 54.254.99.51 | discussions.virtualdr.com |
| 138.206.1.172 | disk-encryption.comodo.com |
| 171.108.108.242 | dl.360safe.com |
| 28.90.229.69 | dl1.antivir-pe.com |
| 223.86.174.233 | dl1.antivir-pe.de |
| 175.162.132.223 | dl1.antivir.de |
| 208.64.240.37 | dl1.avgate.net |
| 66.46.104.188 | dl10.freeav.net |
| 192.42.49.96 | dl2.antivir-pe.com |
| 212.119.8.85 | dl2.antivir-pe.de |
| 245.20.115.155 | dl2.antivir.de |
| 103.3.235.238 | dl2.avgate.net |
| 230.254.180.146 | dl3.antivir-pe.de |
| 182.75.207.135 | dl3.antivir.de |
| 214.232.246.205 | dl3.avgate.net |
| 72.215.110.32 | dl4.antivir-pe.com |
| 11.211.56.8 | dl4.antivir-pe.de |
| 90.159.210.125 | dl4.antivir.de |
| 123.60.249.127 | dl4.avgate.net |
| 237.43.113.22 | dl5.avgate.net |
| 108.38.59.186 | dl6.avgate.net |
| 128.115.85.175 | dl7.avgate.net |
| 160.17.124.245 | dl8.avgate.net |
| 18.255.57.72 | dl8.freeav.net |
| 145.251.2.48 | dl9.avgate.net |
| 97.71.216.37 | dl9.freeav.net |
| 130.229.67.39 | dnl-cd1.kaspersky-labs.com |
| 244.143.188.191 | dnl-cd10.kaspersky-labs.com |
| 182.207.133.99 | dnl-cd11.kaspersky-labs.com |
| 134.27.91.88 | dnl-cd12.kaspersky-labs.com |
| 167.185.199.158 | dnl-cd13.kaspersky-labs.com |
| 25.100.63.241 | dnl-cd2.kaspersky-labs.com |
| 152.163.8.149 | dnl-cd3.kaspersky-labs.com |
| 171.240.158.5 | dnl-cd4.kaspersky-labs.com |
| 72.9.197.75 | dnl-cd5.kaspersky-labs.com |
| 185.179.62.226 | dnl-cd6.kaspersky-labs.com |
| 56.243.7.135 | dnl-cd7.kaspersky-labs.com |
| 8.63.33.124 | dnl-cd8.kaspersky-labs.com |
| 109.221.73.194 | dnl-cd9.kaspersky-labs.com |
| 155.136.193.21 | dnl-cn1.kaspersky-labs.com |
| 94.199.138.185 | dnl-cn10.kaspersky-labs.com |
| 45.20.165.174 | dnl-cn11.kaspersky-labs.com |
| 78.177.204.244 | dnl-cn12.kaspersky-labs.com |
| 192.92.136.139 | dnl-cn13.kaspersky-labs.com |
| 131.155.14.47 | dnl-cn14.kaspersky-labs.com |
| 83.232.40.36 | dnl-cn15.kaspersky-labs.com |
| 115.133.147.241 | dnl-cn2.kaspersky-labs.com |
| 108.183.146.68 | dnl-cn3.kaspersky-labs.com |
| 235.246.92.232 | dnl-cn4.kaspersky-labs.com |
| 255.67.50.221 | dnl-cn5.kaspersky-labs.com |
| 31.157.157.35 | dnl-cn6.kaspersky-labs.com |
| 77.139.22.118 | dnl-cn7.kaspersky-labs.com |
| 16.135.223.94 | dnl-cn8.kaspersky-labs.com |
| 224.23.249.83 | dnl-cn9.kaspersky-labs.com |
| 1.113.32.85 | dnl-eu1.kaspersky-labs.com |
| 115.95.153.237 | dnl-eu10.kaspersky-labs.com |
| 53.91.98.145 | dnl-eu11.kaspersky-labs.com |
| 5.235.124.134 | dnl-eu12.kaspersky-labs.com |
| 38.69.164.204 | dnl-eu13.kaspersky-labs.com |
| 152.52.28.31 | dnl-eu14.kaspersky-labs.com |
| 23.47.229.7 | dnl-eu15.kaspersky-labs.com |
| 42.124.0.252 | dnl-eu2.kaspersky-labs.com |
| 75.25.39.254 | dnl-eu3.kaspersky-labs.com |
| 121.8.27.16 | dnl-eu4.kaspersky-labs.com |
| 183.127.228.181 | dnl-eu5.kaspersky-labs.com |
| 135.203.254.170 | dnl-eu6.kaspersky-labs.com |
| 168.105.106.240 | dnl-eu7.kaspersky-labs.com |
| 26.88.226.67 | dnl-eu8.kaspersky-labs.com |
| 221.83.171.231 | dnl-eu9.kaspersky-labs.com |
| 44.31.1.91 | dnl-jp1.kaspersky-labs.com |
| 77.189.109.162 | dnl-jp10.kaspersky-labs.com |
| 191.171.229.57 | dnl-jp11.kaspersky-labs.com |
| 61.167.174.221 | dnl-jp12.kaspersky-labs.com |
| 81.244.132.210 | dnl-jp13.kaspersky-labs.com |
| 114.145.240.24 | dnl-jp14.kaspersky-labs.com |
| 228.128.104.107 | dnl-jp15.kaspersky-labs.com |
| 99.123.49.15 | dnl-jp2.kaspersky-labs.com |
| 50.200.76.4 | dnl-jp3.kaspersky-labs.com |
| 83.101.115.74 | dnl-jp4.kaspersky-labs.com |
| 197.84.235.157 | dnl-jp5.kaspersky-labs.com |
| 136.80.181.133 | dnl-jp6.kaspersky-labs.com |
| 88.156.207.122 | dnl-jp7.kaspersky-labs.com |
| 121.58.246.124 | dnl-jp8.kaspersky-labs.com |
| 234.40.111.19 | dnl-jp9.kaspersky-labs.com |
| 105.36.56.183 | dnl-kr1.kaspersky-labs.com |
| 125.112.214.48 | dnl-kr10.kaspersky-labs.com |
| 34.146.253.118 | dnl-kr11.kaspersky-labs.com |
| 147.128.186.201 | dnl-kr12.kaspersky-labs.com |
| 18.124.131.177 | dnl-kr13.kaspersky-labs.com |
| 226.200.89.167 | dnl-kr15.kaspersky-labs.com |
| 123.222.61.33 | dnl-kr2.kaspersky-labs.com |
| 237.137.181.184 | dnl-kr3.kaspersky-labs.com |
| 176.200.127.92 | dnl-kr4.kaspersky-labs.com |
| 128.21.85.81 | dnl-kr5.kaspersky-labs.com |
| 161.179.192.151 | dnl-kr6.kaspersky-labs.com |
| 18.93.57.234 | dnl-kr7.kaspersky-labs.com |
| 145.157.2.142 | dnl-kr8.kaspersky-labs.com |
| 165.233.28.131 | dnl-kr9.kaspersky-labs.com |
| 198.135.68.202 | dnl-ru1.kaspersky-labs.com |
| 56.49.188.97 | dnl-ru10.kaspersky-labs.com |
| 182.113.133.5 | dnl-ru11.kaspersky-labs.com |
| 134.190.159.250 | dnl-ru12.kaspersky-labs.com |
| 111.223.75.196 | dnl-ru13.kaspersky-labs.com |
| 157.137.195.23 | dnl-ru14.kaspersky-labs.com |
| 95.201.140.187 | dnl-ru15.kaspersky-labs.com |
| 47.22.167.176 | dnl-ru2.kaspersky-labs.com |
| 80.179.206.246 | dnl-ru3.kaspersky-labs.com |
| 194.94.138.141 | dnl-ru4.kaspersky-labs.com |
| 133.157.15.49 | dnl-ru5.kaspersky-labs.com |
| 212.105.169.166 | dnl-ru6.kaspersky-labs.com |
| 245.7.21.236 | dnl-ru7.kaspersky-labs.com |
| 103.178.141.63 | dnl-ru8.kaspersky-labs.com |
| 230.241.86.227 | dnl-ru9.kaspersky-labs.com |
| 249.62.45.216 | dnl-us1.kaspersky-labs.com |
| 26.151.152.30 | dnl-us10.kaspersky-labs.com |
| 72.134.16.113 | dnl-us11.kaspersky-labs.com |
| 11.129.218.89 | dnl-us12.kaspersky-labs.com |
| 219.18.244.78 | dnl-us13.kaspersky-labs.com |
| 251.108.27.80 | dnl-us14.kaspersky-labs.com |
| 109.90.148.231 | dnl-us15.kaspersky-labs.com |
| 48.86.93.139 | dnl-us2.kaspersky-labs.com |
| 0.230.119.128 | dnl-us3.kaspersky-labs.com |
| 33.64.26.66 | dnl-us4.kaspersky-labs.com |
| 14.170.146.149 | dnl-us5.kaspersky-labs.com |
| 141.165.92.125 | dnl-us6.kaspersky-labs.com |
| 161.242.118.114 | dnl-us7.kaspersky-labs.com |
| 72.22.36.251 | dnl-us8.kaspersky-labs.com |
| 241.128.24.13 | dnl-us9.kaspersky-labs.com |
| 180.124.225.178 | dougknox.com |
| 132.200.251.167 | down.360safe.cn |
| 165.102.103.237 | down.360safe.com |
| 23.85.223.64 | download.avg.com |
| 218.80.168.228 | download.bleepingcomputer.com |
| 169.157.127.217 | download.com |
| 202.58.234.31 | download.com.vn |
| 60.41.98.182 | download.eset.com |
| 187.36.44.90 | download.f-secure.com |
| 207.113.2.79 | download.mcafee.com |
| 239.15.109.149 | download.microsoft.com |
| 97.253.229.232 | download.microsoft.comguru0.grisoft.cz |
| 96.120.46.12 | download.nai.com |
| 47.197.73.1 | download.norman.no |
| 80.98.112.71 | download.rising.com.cn |
| 194.81.232.154 | download.softpedia.com |
| 133.77.178.130 | download.sysinternals.com |
| 85.153.204.119 | download0.avast.com |
| 118.55.243.121 | download1.avast.com |
| 231.37.108.16 | download1.emsisoft.com |
| 234.165.185.56 | download1.quickheal.com |
| 254.241.211.45 | download10.quickheal.com |
| 31.143.250.115 | download100.avast.com |
| 144.125.183.198 | download1us.softpedia.com |
| 15.121.128.174 | download2.avast.com |
| 223.197.86.164 | download2.quickheal.com |
| 0.99.194.166 | download200.avast.com |
| 114.13.58.61 | download201.avast.com |
| 52.77.3.225 | download202.avast.com |
| 4.154.218.214 | download203.avast.com |
| 37.55.69.28 | download204.avast.com |
| 151.226.189.111 | download205.avast.com |
| 22.33.134.139 | download206.avast.com |
| 162.230.25.128 | download207.avast.com |
| 195.132.65.199 | download208.avast.com |
| 53.46.185.225 | download209.avast.com |
| 55.242.6.133 | download210.avast.com |
| 7.62.32.123 | download211.avast.com |
| 108.220.72.193 | download212.avast.com |
| 154.134.192.20 | download213.avast.com |
| 92.198.137.184 | download214.avast.com |
| 44.19.164.173 | download3.avast.com |
| 77.176.203.243 | download3.quickheal.com |
| 191.91.135.138 | download4.avast.com |
| 130.154.12.46 | download4.emsisoft.com |
| 82.231.39.35 | download4.quickheal.com |
| 114.132.146.105 | download5.avast.com |
| 228.47.10.188 | download5.emsisoft.com |
| 227.238.83.224 | download5.quickheal.com |
| 246.59.42.213 | download501.avast.com |
| 23.148.149.27 | download502.avast.com |
| 69.131.13.110 | download503.avast.com |
| 8.126.215.86 | download504.avast.com |
| 216.15.241.75 | download505.avast.com |
| 248.105.24.77 | download511.avast.com |
| 106.87.145.228 | download512.avast.com |
| 45.83.90.4 | download513.avast.com |
| 120.95.240.249 | download514.avast.com |
| 153.184.23.63 | download515.avast.com |
| 11.167.143.146 | download516.avast.com |
| 138.162.89.122 | download535.avast.com |
| 158.239.115.111 | download6.avast.com |
| 190.141.154.113 | download6.quickheal.com |
| 236.123.18.8 | download600.avast.com |
| 175.119.220.172 | download601.avast.com |
| 127.195.246.161 | download602.avast.com |
| 160.97.97.231 | download603.avast.com |
| 17.79.218.58 | download604.avast.com |
| 212.75.163.223 | download605.avast.com |
| 164.151.121.212 | download606.avast.com |
| 197.53.229.26 | download607.avast.com |
| 55.36.93.177 | download608.avast.com |
| 182.31.38.85 | download609.avast.com |
| 201.108.253.74 | download617.avast.com |
| 234.9.104.144 | download618.avast.com |
| 227.127.103.106 | download619.avast.com |
| 98.122.48.14 | download620.avast.com |
| 49.199.75.3 | download621.avast.com |
| 82.100.114.73 | download622.avast.com |
| 196.83.234.156 | download623.avast.com |
| 135.78.180.132 | download624.avast.com |
| 87.155.206.121 | download625.avast.com |
| 119.57.245.123 | download626.avast.com |
| 233.39.110.18 | download627.avast.com |
| 104.35.55.182 | download628.avast.com |
| 124.111.81.171 | download629.avast.com |
| 157.13.120.241 | download630.avast.com |
| 138.119.176.192 | download631.avast.com |
| 9.114.122.168 | download632.avast.com |
| 217.191.80.157 | download633.avast.com |
| 249.92.187.159 | download634.avast.com |
| 107.7.51.54 | download635.avast.com |
| 46.71.253.218 | download636.avast.com |
| 254.147.211.207 | download637.avast.com |
| 31.49.62.21 | download638.avast.com |
| 144.219.183.104 | download639.avast.com |
| 15.27.128.13 | download640.avast.com |
| 35.103.154.2 | download641.avast.com |
| 68.5.194.72 | download642.avast.com |
| 182.176.58.223 | download643.avast.com |
| 53.239.131.2 | download644.avast.com |
| 132.187.157.247 | download645.avast.com |
| 233.89.197.62 | download646.avast.com |
| 23.3.61.145 | download647.avast.com |
| 217.67.6.53 | download648.avast.com |
| 169.144.32.42 | download649.avast.com |
| 202.45.72.112 | download650.avast.com |
| 60.216.4.7 | download651.avast.com |
| 255.23.137.171 | download652.avast.com |
| 82.232.40.36 | download653.avast.com |
| 115.133.147.106 | download654.avast.com |
| 229.48.11.189 | download655.avast.com |
| 100.111.212.97 | download656.avast.com |
| 119.188.171.86 | download658.avast.com |
| 152.21.22.156 | download659.avast.com |
| 198.4.142.239 | download660.avast.com |
| 137.0.88.215 | download661.avast.com |
| 89.144.114.204 | download662.avast.com |
| 122.234.153.206 | download663.avast.com |
| 235.216.18.101 | download664.avast.com |
| 39.76.83.130 | download665.avast.com |
| 246.221.110.119 | download666.avast.com |
| 23.186.25.65 | download667.avast.com |
| 13.169.145.148 | download668.avast.com |
| 140.164.90.124 | download669.avast.com |
| 160.241.117.113 | download670.avast.com |
| 192.142.156.115 | download671.avast.com |
| 238.125.20.10 | download672.avast.com |
| 177.121.222.174 | download673.avast.com |
| 129.197.248.163 | download674.avast.com |
| 162.99.99.233 | download675.avast.com |
| 19.81.220.60 | download676.avast.com |
| 214.77.165.224 | download677.avast.com |
| 166.153.123.214 | download678.avast.com |
| 199.55.102.155 | download679.avast.com |
| 184.165.223.50 | download680.avast.com |
| 55.161.168.214 | download681.avast.com |
| 75.237.126.203 | download682.avast.com |
| 108.139.233.17 | download683.avast.com |
| 221.121.98.101 | download684.avast.com |
| 92.117.43.9 | download685.avast.com |
| 44.193.69.121 | download686.avast.com |
| 200.219.232.191 | download687.avast.com |
| 58.201.96.18 | download688.avast.com |
| 253.197.42.250 | download689.avast.com |
| 205.17.68.239 | download690.avast.com |
| 238.175.107.241 | download691.avast.com |
| 95.157.228.136 | download692.avast.com |
| 222.153.173.45 | download693.avast.com |
| 242.229.199.34 | download694.avast.com |
| 19.131.239.104 | download695.avast.com |
| 133.114.171.187 | download696.avast.com |
| 4.109.116.163 | download697.avast.com |
| 211.186.209.31 | download698.avast.com |
| 123.222.61.33 | download699.avast.com |
| 237.137.181.184 | download7.avast.com |
| 176.200.126.92 | download7.quickheal.com |
| 127.21.85.81 | download700.avast.com |
| 160.178.192.151 | download701.avast.com |
| 18.93.56.234 | download702.avast.com |
| 145.156.2.10 | download703.avast.com |
| 32.100.151.255 | download704.avast.com |
| 65.2.191.69 | download705.avast.com |
| 179.173.55.220 | download706.avast.com |
| 50.236.0.128 | download707.avast.com |
| 1.57.27.117 | download708.avast.com |
| 102.214.66.187 | download709.avast.com |
| 148.129.186.14 | download72.avast.com |
| 87.192.132.178 | download73.avast.com |
| 39.13.158.167 | download74.avast.com |
| 71.170.197.237 | download75.avast.com |
| 185.85.129.132 | download76.avast.com |
| 124.149.7.40 | download77.avast.com |
| 76.225.33.29 | download78.avast.com |
| 109.127.140.99 | download79.avast.com |
| 222.41.5.182 | download8.quickheal.com |
| 221.232.78.218 | download80.avast.com |
| 241.53.36.207 | download81.avast.com |
| 18.143.143.21 | download82.avast.com |
| 63.125.8.104 | download83.avast.com |
| 2.121.209.80 | download84.avast.com |
| 210.9.235.69 | download85.avast.com |
| 243.99.19.72 | download9.quickheal.com |
| 101.81.139.223 | download900.avast.com |
| 39.77.84.131 | download901.avast.com |
| 247.222.242.252 | download902.avast.com |
| 156.187.26.66 | download903.avast.com |
| 14.169.146.149 | download904.avast.com |
| 140.165.91.125 | download905.avast.com |
| 160.242.118.114 | download906.avast.com |
| 193.143.157.116 | download907.avast.com |
| 239.126.21.11 | download908.avast.com |
| 178.121.222.175 | download909.avast.com |
| 130.198.249.164 | download91.avast.com |
| 162.99.100.234 | download910.avast.com |
| 20.82.220.61 | download911.avast.com |
| 215.78.166.90 | download912.avast.com |
| 31.19.244.79 | download913.avast.com |
| 64.176.96.149 | download914.avast.com |
| 178.159.216.44 | download915.avast.com |
| 49.154.161.208 | download916.avast.com |
| 68.231.120.197 | download917.avast.com |
| 101.132.227.11 | download918.avast.com |
| 91.247.223.226 | download919.avast.com |
| 218.242.168.134 | download92.avast.com |
| 170.63.195.123 | download920.avast.com |
| 202.220.234.193 | download921.avast.com |
| 60.203.98.20 | download922.avast.com |
| 255.199.44.252 | download923.avast.com |
| 78.147.198.113 | download924.avast.com |
| 111.48.237.115 | download925.avast.com |
| 225.31.101.10 | download926.avast.com |
| 96.26.47.174 | download927.avast.com |
| 116.103.73.163 | download928.avast.com |
| 148.5.112.233 | download929.avast.com |
| 6.243.45.60 | download93.avast.com |
| 133.239.246.36 | download930.avast.com |
| 85.59.204.25 | download931.avast.com |
| 241.84.179.151 | download932.avast.com |
| 99.255.43.46 | download933.avast.com |
| 38.62.245.210 | download934.avast.com |
| 246.139.203.199 | download935.avast.com |
| 22.40.54.13 | download936.avast.com |
| 136.211.174.96 | download937.avast.com |
| 7.19.120.4 | download938.avast.com |
| 162.230.25.128 | download939.avast.com |
| 194.132.64.198 | download94.avast.com |
| 52.46.185.93 | download940.avast.com |
| 179.110.130.1 | download941.avast.com |
| 131.186.156.246 | download942.avast.com |
| 232.88.195.60 | download943.avast.com |
| 22.2.60.144 | download944.avast.com |
| 84.189.129.175 | download945.avast.com |
| 36.10.155.164 | download946.avast.com |
| 68.167.194.234 | download947.avast.com |
| 182.82.126.129 | download948.avast.com |
| 121.146.4.37 | download949.avast.com |
| 73.222.30.26 | download95.avast.com |
| 106.124.137.96 | download950.avast.com |
| 219.38.2.179 | download951.avast.com |
| 90.102.203.88 | download952.avast.com |
| 110.178.161.77 | download953.avast.com |
| 143.12.13.147 | download954.avast.com |
| 189.251.133.230 | download955.avast.com |
| 128.246.206.77 | download956.avast.com |
| 207.6.232.66 | download957.avast.com |
| 240.96.16.69 | download958.avast.com |
| 98.78.136.220 | download959.avast.com |
| 36.74.81.128 | download96.avast.com |
| 244.219.107.117 | download960.avast.com |
| 21.52.147.187 | download961.avast.com |
| 135.35.11.14 | download962.avast.com |
| 6.30.212.246 | download963.avast.com |
| 157.239.115.111 | download964.avast.com |
| 190.140.154.113 | download965.avast.com |
| 236.123.18.8 | download966.avast.com |
| 175.118.219.172 | download967.avast.com |
| 127.195.246.161 | download968.avast.com |
| 159.96.97.231 | download969.avast.com |
| 17.79.217.58 | download97.avast.com |
| 212.75.163.222 | download970.avast.com |
| 164.151.121.211 | download971.avast.com |
| 197.53.228.25 | download972.avast.com |
| 54.35.93.176 | download973.avast.com |
| 46.151.158.205 | download974.avast.com |
| 65.228.117.194 | download975.avast.com |
| 98.129.224.8 | download976.avast.com |
| 212.112.88.91 | download977.avast.com |
| 83.108.34.131 | download978.avast.com |
| 167.60.192.120 | download979.avast.com |
| 199.217.231.190 | download98.avast.com |
| 57.200.95.17 | download980.avast.com |
| 252.196.41.249 | download99.avast.com |
| 204.16.67.238 | downloads-eu1.kaspersky-labs.com |
| 237.174.106.240 | downloads-eu2.kaspersky-labs.com |
| 94.156.227.135 | downloads-eu3.kaspersky-labs.com |
| 221.152.172.43 | downloads-eu4.kaspersky-labs.com |
| 113.100.70.160 | downloads-us1.kaspersky-labs.com |
| 145.2.109.230 | downloads-us2.kaspersky-labs.com |
| 3.240.42.57 | downloads-us3.kaspersky-labs.com |
| 130.236.243.33 | downloads-us4.kaspersky-labs.com |
| 82.180.69.146 | downloads.andymanchesta.com |
| 238.81.176.148 | downloads.malwarebytes.org |
| 96.252.40.43 | downloads.microsoft.com |
| 35.59.242.207 | downloads.My-eTrust.com |
| 243.15.79.75 | downloads1.kaspersky-labs.com |
| 154.172.186.145 | downloads2.kaspersky-labs.com |
| 12.87.50.228 | downloads3.kaspersky-labs.com |
| 139.150.252.136 | downloads4.kaspersky-labs.com |
| 159.227.22.125 | downloads5.kaspersky-labs.com |
| 59.252.185.63 | dr-web-cureit.softonic.com |
| 173.38.177.85 | drsolomon.com |
| 171.102.122.249 | drweb-inside.com |
| 123.178.148.238 | drweb.com |
| 224.80.188.53 | drweb.com.es |
| 14.250.52.136 | drweb.net |
| 208.58.129.175 | drwebinside.com |
| 36.10.155.165 | dswlab.com |
| 69.168.195.235 | duba.net |
| 183.82.127.130 | ealaddin.net |
| 121.146.4.38 | ealaddin.orgeshop.aladdin.com |
| 73.223.31.27 | easy-vpn.comodo.com |
| 106.124.2.217 | edm.symantec.com |
| 84.159.123.44 | education.symantec.com |
| 211.223.68.208 | eeload.com |
| 231.43.26.197 | eeye.com |
| 8.133.134.12 | eicar.org |
| 54.115.254.226 | elblogdemanu.com |
| 124.243.75.202 | elitepvpers.de |
| 76.131.101.192 | emea.trendmicro.com |
| 109.221.141.194 | emsisoft.com |
| 223.203.5.89 | emsisoft.de |
| 161.199.206.253 | encarta.msn.com |
| 113.88.233.242 | engine.awaps.net |
| 146.177.16.183 | enterprisesecur.symantec.com |
| 132.31.8.11 | eos.eset.es |
| 2.27.209.243 | eradicatespyware.net |
| 22.103.235.232 | es.answers.yahoo.com |
| 55.5.19.234 | es.kioskea.net |
| 101.244.139.129 | es.mcafee.com |
| 40.239.84.37 | es.trendmicro.com |
| 247.60.111.26 | es.wasalive.com |
| 24.217.218.96 | esafe.com |
| 5.67.206.46 | esecurity.livecall.co.kr |
| 200.63.151.211 | eset-la.com |
| 152.139.109.200 | eset.com |
| 185.41.217.14 | eset.es |
| 43.24.81.165 | eset.sk |
| 170.19.26.73 | esp.sophos.com |
| 189.96.241.62 | espanol.answers.yahoo.com |
| 222.253.92.132 | espanol.dir.groups.yahoo.com |
| 80.236.212.215 | espanol.groups.yahoo.com |
| 86.110.36.2 | esupport.trendmicro.com |
| 37.187.63.247 | et.symantec.com |
| 70.88.102.61 | etrr.co.uk |
| 184.71.222.11 | eugrantsadvisor.cz |
| 246.190.35.244 | eugrantsadvisor.de |
| 198.10.61.233 | eval.symantec.com |
| 231.168.101.235 | ewido.net |
| 89.151.221.130 | exchangeyourcareer.net |
| 216.146.166.38 | experts-exchange.com |
| 235.223.193.27 | f-prot.com |
| 12.124.232.97 | f-secure.com |
| 126.107.164.180 | f-secure.frf-secure.hk |
| 124.230.237.28 | f-secure.nlfsecure.com |
| 76.51.195.17 | fastclick.net |
| 109.208.47.19 | feedage.com |
| 223.123.167.170 | feeds.sophos.com |
| 37.62.244.210 | feeds.trendmicro.com |
| 245.139.203.199 | file.ikaka.cn |
| 22.40.54.13 | file.ikaka.com |
| 136.211.174.96 | file.net |
| 7.18.119.4 | files.avast.com |
| 27.95.146.249 | files.filefont.com |
| 180.117.50.184 | files.trendmicro-europe.com |
| 38.31.170.79 | filseclab.com |
| 164.95.115.243 | final4ever.com |
| 116.172.141.232 | finjan.com |
| 217.73.181.46 | firewall.sunbeltsoftware.com |
| 7.244.45.129 | firewallguide.com |
| 202.51.246.37 | fixmyim.com |
| 29.4.149.158 | foro.ethek.com |
| 62.161.188.228 | foros.toxico-pc.com |
| 176.76.120.123 | foros.zonavirus.com |
| 115.139.253.31 | forospanish.com |
| 67.216.24.20 | forospyware.com |
| 227.245.3.218 | forospyware.es |
| 85.160.123.45 | fortiguardcenter.com |
| 212.223.68.209 | fortihero.com |
| 231.44.27.198 | fortilog.com |
| 8.133.134.12 | fortinet.co.at |
| 177.239.122.218 | fortinet.com |
| 116.235.67.195 | fortiprotect.com |
| 68.123.93.184 | fortiwifi.com |
| 101.213.133.64 | forum.clubedohardware.com.br |
| 94.74.132.216 | forum.emsisoft.com |
| 32.70.77.124 | forum.hardware.fr |
| 240.214.103.113 | forum.hijackthis.de |
| 17.48.143.50 | forum.ikaka.com |
| 254.154.130.133 | forum.jiangmin.com |
| 125.150.76.109 | forum.kaspersky.com |
| 145.226.102.98 | forum.malekal.com |
| 178.128.141.100 | forum.piriform.com |
| 95.238.133.123 | forum.securitycadets.com |
| 34.234.79.31 | forum.sysinternals.com |
| 242.54.105.20 | forum.telecharger.01net.com |
| 19.212.212.90 | forum.tweaks.com |
| 132.194.77.173 | forum.zazana.com |
| 71.190.22.81 | forums.cnet.com |
| 23.10.236.70 | forums.comodo.com |
| 188.44.219.16 | forums.devshed.com |
| 45.26.84.167 | forums.maddoktor2.com |
| 172.22.29.75 | forums.majorgeeks.com |
| 192.98.243.65 | forums.techguy.org |
| 225.0.95.135 | forums.whatthetech.com |
| 83.238.215.218 | fr.bitdefender.com |
| 74.99.25.246 | fr.drweb.com |
| 26.175.51.235 | fr.mcafee.com |
| 59.77.90.49 | fr.trendmicro.com |
| 172.59.211.132 | fr1.drweb.com |
| 111.55.156.240 | fr2.drweb.com |
| 195.7.58.229 | fr3.drweb.com |
| 228.165.97.231 | fr4.drweb.com |
| 85.147.218.126 | fr5.drweb.com |
| 212.143.163.34 | fr6.drweb.com |
| 232.219.189.24 | fr7.drweb.com |
| 136.249.100.221 | fractus.mat.uson.mx |
| 250.231.33.48 | free-av.com |
| 121.227.234.24 | free-av.net |
| 73.47.192.13 | free.antivirus.com |
| 106.205.43.15 | free.avg.com |
| 87.243.31.34 | free.drweb.com |
| 26.50.233.198 | free.grisoft.com |
| 234.127.191.187 | free.grisoft.cz |
| 10.28.177.136 | free.pandasecurity.com |
| 3.78.41.219 | free.prevx.com |
| 130.141.243.127 | free.tinypicbox.com |
| 150.218.13.116 | freeav.com |
| 182.120.52.186 | freeav.net |
| 40.34.40.205 | freespywareremoval.info |
| 35.221.241.113 | frisk-software.com |
| 242.42.12.102 | fsc.norman.com |
| 87.199.51.172 | fsecure.nlwebyard.com |
| 133.114.171.255 | ftp.avp.com |
| 72.49.244.35 | ftp.bitdefender.com |
| 151.126.14.24 | ftp.ca.co |
| 184.27.54.94 | ftp.ca.com |
| 42.198.242.245 | ftp.customer.symantec.com |
| 237.5.119.153 | ftp.dispatch.mcafee.com |
| 64.214.22.18 | ftp.download.mcafee.com |
| 97.115.129.88 | ftp.downloads-eu1.kaspersky-labs.com |
| 211.30.249.171 | ftp.downloads-eu2.kaspersky-labs.com |
| 82.93.194.79 | ftp.downloads-eu3.kaspersky-labs.com |
| 101.170.153.188 | ftp.downloads-eu4.kaspersky-labs.com |
| 255.124.125.3 | ftp.downloads-us1.kaspersky-labs.com |
| 45.106.245.86 | ftp.downloads-us2.kaspersky-labs.com |
| 239.102.190.62 | ftp.downloads-us3.kaspersky-labs.com |
| 191.247.216.51 | ftp.downloads-us4.kaspersky-labs.com |
| 224.80.0.185 | ftp.downloads1.kaspersky-labs.com |
| 214.194.252.80 | ftp.downloads2.kaspersky-labs.com |
| 152.190.197.244 | ftp.downloads3.kaspersky-labs.com |
| 104.79.224.233 | ftp.downloads4.kaspersky-labs.com |
| 137.40.134.174 | ftp.drweb.com |
| 123.22.255.2 | ftp.esafe.com |
| 117.141.68.101 | ftp.europe.f-secure.com |
| 137.218.94.90 | ftp.f-prot.com |
| 169.120.133.92 | ftp.f-secure.com |
| 215.102.253.243 | ftp.grisoft.com |
| 154.98.199.30 | ftp.kaspersky-labs.com |
| 241.53.104.19 | ftp.kaspersky.com |
| 17.211.211.89 | ftp.kasperskylab.ru |
| 131.193.76.172 | ftp.liveupdate.symantec.com |
| 70.189.144.204 | ftp.liveupdate.symantecliveupdate.com |
| 145.133.103.193 | ftp.mast.mcafee.com |
| 178.34.210.7 | ftp.mcafee.com |
| 36.17.74.158 | ftp.microworldsystems.com |
| 163.140.147.194 | ftp.my-etrust.com |
| 54.217.105.183 | ftp.nai.com |
| 87.118.213.253 | ftp.networkassociates.com |
| 201.101.77.80 | ftp.norton.com |
| 72.96.22.244 | ftp.rads.mcafee.com |
| 155.49.181.109 | ftp.sandbox.norman.com |
| 188.206.220.179 | ftp.secure.nai.com |
| 46.189.84.6 | ftp.securityresponse.symantec.com |
| 241.184.29.238 | ftp.sophos.com |
| 57.125.176.91 | ftp.symantec.com |
| 90.27.216.94 | ftp.symantecliveupdate.com |
| 204.9.80.245 | ftp.symatec.com |
| 74.5.157.28 | ftp.trendmicro.com |
| 226.213.183.18 | ftp.uk.trendmicro-europe.com |
| 3.115.223.88 | ftp.update.symantec.com |
| 117.97.155.171 | ftp.updates.symantec.com |
| 243.93.100.147 | ftp.updates1.kaspersky-labs.com |
| 67.41.186.7 | ftp.updates2.kaspersky-labs.com |
| 100.199.37.9 | ftp.updates3.kaspersky-labs.com |
| 214.113.158.161 | ftp.updates4.kaspersky-labs.com |
| 152.177.103.69 | ftp.us.mcafee.com |
| 228.121.185.181 | ftp.viruslist.com |
| 4.22.36.251 | funkytoad.com |
| 118.193.156.78 | futurenow.bitdefender.com |
| 245.1.102.242 | fw.rising.com.cn |
| 9.77.128.110 | fx.dk |
| 176.114.46.180 | gangbang.mytijn.org |
| 34.28.167.75 | gdata.de |
| 161.92.112.239 | gdata.es |
| 113.168.138.228 | gecadsoftware.com |
| 81.193.45.166 | geekstogo.com |
| 127.108.165.249 | global.ahnlab.com |
| 66.171.111.157 | global.jiangmin.com |
| 18.248.137.146 | global.nprotect.com |
| 178.21.48.88 | go.mcafee.com |
| 36.192.236.239 | go.microsoft.com |
| 231.255.113.147 | go.rising.com.cn |
| 182.76.140.136 | go.sunbeltsoftware.com |
| 91.109.123.82 | go.symantec.com |
| 205.24.243.165 | go.trendmicro.com |
| 76.87.188.73 | greatis.com |
| 95.164.147.62 | grisoft.com |
| 128.253.119.253 | grisoft.cz |
| 39.100.239.80 | grv.microsoft.com |
| 233.96.184.56 | guiadohardware.net |
| 185.241.210.45 | guru.avg.com |
| 218.74.250.179 | guru1.grisoft.cz |
| 208.188.246.74 | guru2.grisoft.cz |
| 146.184.191.238 | guru3.grisoft.cz |
| 98.73.218.227 | guru4.grisoft.cz |
| 131.162.1.41 | guru5.grisoft.cz |
| 117.16.249.252 | gwava.nl |
| 243.12.194.228 | hacksoft.com.pe |
| 7.88.220.217 | hacksoft.pe |
| 163.114.127.86 | halmapr.com |
| 209.96.247.237 | hauri.co.kr |
| 148.92.193.145 | hauri.net |
| 100.168.219.134 | haurijapan.com |
| 133.205.205.83 | help.rising.com.cn |
| 125.187.70.166 | hi.baidu.com |
| 64.50.138.198 | hijackthis.de |
| 139.127.97.187 | hijackthis.download3000.com |
| 172.28.204.1 | hishomeforchildren.com |
| 30.11.68.152 | hjt-data.trend-braintree.com |
| 157.6.141.188 | hjt.networktechs.com |
| 48.211.99.177 | home.mcafee.com |
| 81.112.207.247 | hostedmailsecur.symantec.com |
| 195.95.71.74 | hotshare.net |
| 197.222.148.114 | housecall.com |
| 149.43.39.223 | housecall.trendmicro.com |
| 47.65.78.37 | housecall60.trendmicro.com |
| 160.47.199.120 | housecall65.trendmicro.com |
| 99.43.144.96 | howsafeismypc.com |
| 51.119.170.217 | huaifai.go.th |
| 216.153.85.219 | i-vault.comodo.com |
| 73.135.206.114 | iavs.cz |
| 200.131.151.22 | ibusca.me |
| 220.207.177.12 | idauthority.com |
| 124.237.88.209 | ids.kaspersky-labs.com |
| 238.219.21.36 | ieupdate.gdata.de |
| 233.82.89.136 | ieupdate1.gdata.de |
| 184.159.48.125 | ieupdate2.gdata.de |
| 217.60.155.127 | ieupdate3.gdata.de |
| 75.231.19.22 | ieupdate4.gdata.de |
| 14.173.99.65 | ieupdate5.gdata.de |
| 100.250.58.54 | ieupdate6.gdata.de |
| 133.151.165.124 | ikaka.cn |
| 247.66.29.207 | ikaka.com |
| 118.253.98.239 | ikarus.at |
| 5.73.124.228 | ikarus.net |
| 38.231.164.42 | ilove.tigolbittys.info |
| 152.146.28.193 | images.kaspersky.com |
| 150.81.101.228 | in.answers.yahoo.com |
| 102.157.127.217 | incodesolutions.com |
| 203.59.167.32 | info.drweb.com |
| 249.229.31.115 | info.prevx.com |
| 187.169.108.154 | infos-du-net.com |
| 15.245.134.144 | infosecpodcast.com |
| 48.147.174.214 | infospyware.com |
| 162.61.106.109 | inicioid.com |
| 100.245.104.137 | iniciorapido.info |
| 173.66.130.126 | inline-software.de |
| 206.224.237.72 | internetsecurity.comodo.com |
| 195.14.233.155 | intranet.cidiroax.ipn.mx |
| 66.78.179.63 | investor.symantec.com |
| 86.154.137.52 | irc.bigshitsandwich.org |
| 119.244.244.122 | irc.metraiciono.com |
| 164.226.109.205 | iseclab.org |
| 231.217.49.177 | isotopecomics.com |
| 50.105.75.166 | iss.net |
| 83.195.249.46 | it.answers.yahoo.com |
| 76.56.114.198 | it.bitdefender.com |
| 14.52.59.106 | it.mcafee.com |
| 222.196.85.95 | it.trendmicro.com |
| 255.30.125.165 | itw.trendmicro.com |
| 236.136.112.115 | ixomodels.com |
| 107.132.58.91 | ixostore.ixomodels.com |
| 127.208.84.80 | javacoolsoftware.com |
| 160.110.123.210 | jetico.com |
| 77.220.115.105 | jiangmin.com |
| 16.216.61.13 | jiangmin.com.cn |
| 224.36.87.2 | jobs.bitdefender.com |
| 1.69.70.204 | jotti.org |
| 246.52.190.31 | jp.mcafee.com |
| 185.48.136.195 | jp.trendmicro.com |
| 137.124.94.184 | justfacebook.net |
| 170.146.66.119 | k-otik.com |
| 148.129.186.14 | k7computing.com |
| 19.124.131.178 | kaba.360.cn |
| 38.201.90.167 | kaba.360.com |
| 203.234.73.113 | karuna-shechen.org |
| 61.217.193.196 | kaspersky-fr.com |
| 188.212.138.104 | kaspersky-labs.com |
| 140.33.165.93 | kaspersky.co.jp |
| 44.62.76.35 | kaspersky.co.uk |
| 158.45.196.118 | kaspersky.com |
| 97.40.141.94 | kaspersky.com.cn |
| 48.117.168.206 | kaspersky.dk |
| 205.142.74.208 | kaspersky.es |
| 62.124.195.103 | kaspersky.gr |
| 189.120.140.146 | kaspersky.pl |
| 88.75.45.135 | kaspersky.ru |
| 121.233.84.205 | kaspersky.se |
| 234.215.17.33 | kasperskylab.co.kr |
| 105.211.218.9 | kasperskylab.nl |
| 181.155.44.121 | kav.ru |
| 213.56.151.123 | kav.zonelabs.com |
| 71.227.15.18 | kb.bitdefender.com |
| 10.35.217.54 | kb.bitdefender.de |
| 89.239.47.43 | kb.bitdefender.us |
| 122.140.154.113 | kerio.com |
| 236.55.18.196 | kimzimmer.net |
| 107.250.95.236 | kioskea.net |
| 3.71.122.225 | kpfans.com |
| 35.93.26.160 | kr.ahnlab.com |
| 14.7.146.55 | kr.sophos.com |
| 140.71.91.219 | krupunmai.com |
| 92.148.117.208 | kvup.jiangmin.com |
| 69.181.33.154 | kztechs.com |
| 115.95.153.237 | l33t.shadow-mods.net |
| 53.159.98.145 | la.trendmicro.com |
| 133.107.252.5 | ladooscuro.es |
| 166.9.35.75 | laneros.com |
| 24.179.224.227 | latam.kaspersky.com |
| 86.110.225.2 | latin.bitdefender.com |
| 38.187.251.247 | lavasoft.com |
| 70.88.102.61 | lavasoft.nu |
| 184.3.222.23 | lavasoftusa.com |
| 190.201.47.187 | lexikon.ikarus.at |
| 210.145.128.44 | license.drweb.com |
| 110.235.236.114 | linhadefensiva.org |
| 156.218.100.197 | linhadefensiva.uol.com.br |
| 95.213.45.173 | linux.bitdefender.com |
| 46.102.199.33 | lists.clamav.net |
| 207.63.239.36 | liutilities.com |
| 65.45.103.187 | live.sunbeltsoftware.com |
| 3.41.48.95 | liveprotect.net |
| 87.61.206.216 | liveupdate.symantec.com |
| 120.151.246.30 | liveupdate.symantec.d4p.net |
| 234.133.110.113 | liveupdate.symantecliveupdate.com |
| 104.129.55.89 | looknstop.com |
| 245.70.202.198 | lovings.technigoyous.net |
| 22.228.241.200 | lurker.clamav.net |
| 67.210.106.227 | mailcenter.rising.com |
| 138.82.183.135 | mailcenter.rising.com.cn |
| 90.158.209.124 | majorgeeks.com |
| 123.60.60.194 | mall.hauri.co.kr |
| 236.42.181.149 | malwarebytes.org |
| 47.165.254.57 | malwarecity.com |
| 255.242.212.46 | malwarecity.netmalwarecity.org |
| 31.11.187.240 | malwaredomainlist.com |
| 13.250.51.135 | malwarepedia.com |
| 140.245.252.43 | malwareremoval.com |
| 159.66.211.32 | malwarescan.emsisoft.com |
| 71.102.197.237 | malwarescan.emsisoft.de |
| 185.85.61.64 | malwarescan.emsisoft.es |
| 56.80.6.228 | mamutu.com |
| 131.24.156.84 | manuelruvalcaba.com |
| 164.182.195.154 | marian.symantec.com |
| 21.164.60.237 | mast.mcafee.com |
| 216.160.5.85 | mcafee-at-home.com |
| 40.108.159.74 | mcafee.com |
| 73.10.198.76 | mcafeeb2b.com |
| 186.248.63.227 | mcafeefans.com |
| 57.244.140.11 | mcafeeretail.com |
| 209.196.166.0 | mcaffee.com |
| 242.98.205.70 | me.kaspersky.com |
| 99.80.138.153 | media.fastclick.net |
| 226.76.203.250 | megasecurity.org |
| 42.17.162.239 | merijn.org |
| 75.174.13.241 | metascan-online.com |
| 189.89.133.12 | microsoft.com |
| 4.28.210.176 | microsoft.fr |
| 212.105.169.165 | midescargas.com |
| 244.6.20.235 | mirror02.gdata.de |
| 102.177.140.62 | misec.net |
| 101.112.213.98 | mmsk.cn |
| 120.189.240.87 | moneybookers.com |
| 153.90.23.24 | moosoft.com |
| 134.128.11.175 | mop.pandasecurity.com |
| 5.192.212.84 | mostz.com |
| 213.12.238.73 | mozilla-hispano.org |
| 58.170.22.143 | msdn.microsoft.com |
| 239.219.21.105 | msk.drweb.com |
| 177.27.222.13 | msk1.drweb.com |
| 129.103.248.2 | msk2.drweb.com |
| 162.5.32.195 | msk3.drweb.com |
| 143.43.87.90 | msk4.drweb.com |
| 82.107.221.254 | msk5.drweb.com |
| 34.183.247.243 | msk6.drweb.com |
| 67.85.98.57 | msk7.drweb.com |
| 52.127.90.12 | msncleaner.softonic.com |
| 179.190.36.176 | msnfix.changelog.fr |
| 199.11.250.165 | msnvirusremoval.com |
| 232.232.233.111 | msr.mcafee.com |
| 153.215.97.194 | mvps.org |
| 92.211.43.170 | mx.answers.yahoo.com |
| 44.99.69.159 | mx.mcafee.com |
| 77.53.229.26 | mxttchina.com |
| 55.36.93.177 | my-etrust.com |
| 250.31.38.85 | my.drweb.com |
| 201.176.65.74 | mygeekside.com |
| 110.141.236.20 | nabble.com |
| 224.124.100.103 | nai.com |
| 95.119.45.79 | natsko.com |
| 115.196.72.196 | naturesimages.net |
| 19.225.239.198 | net-security.org |
| 65.208.103.93 | network.drweb.com |
| 4.203.172.124 | networkassociates.com |
| 79.147.198.113 | networkassociates.nai.com |
| 112.184.184.62 | networkworld.com |
| 104.166.49.145 | neunet.orgnews.bitdefender.com |
| 43.162.250.53 | new-beta.drweb.com |
| 118.106.76.166 | new-company.drweb.com |
| 151.7.183.236 | new-estore.drweb.com |
| 9.246.47.131 | new-forum.drweb.com |
| 136.241.120.167 | new-partners.drweb.com |
| 27.190.78.156 | new-solutions.drweb.com |
| 60.91.186.226 | new-support.drweb.com |
| 174.74.50.53 | new-www.drweb.com |
| 176.201.127.93 | new.taringa.net |
| 128.22.154.82 | news.drweb.com |
| 161.179.193.16 | newsletters.trendmicro.com |
| 139.26.178.99 | niueight.norman.no |
| 78.22.123.75 | niufive.norman.no |
| 30.98.149.64 | niufour.norman.no |
| 63.0.64.198 | niunine.norman.no |
| 52.114.185.93 | niuone.norman.no |
| 179.110.130.1 | niuseven.norman.no |
| 199.186.156.247 | niusix.norman.no |
| 232.88.67.188 | niuthree.norman.no |
| 217.198.0.15 | niutwo.norman.no |
| 88.194.201.247 | nl.bitdefender.com |
| 40.14.159.236 | noadware.net |
| 196.39.134.106 | nod32.co.uk |
| 54.210.254.1 | nod32.com |
| 249.17.200.165 | nod32.datsec.de |
| 79.229.37.33 | nod32.lu |
| 112.130.144.103 | nod32.ru |
| 226.45.8.186 | norman.com |
| 97.108.210.94 | norton.com |
| 117.185.103.207 | notifier.antivir-pe.de |
| 17.210.143.21 | novirusthanks.org |
| 131.125.7.172 | nprobeta.norman.com |
| 2.188.208.80 | nprotect.com |
| 81.136.106.196 | nprotect.net |
| 182.38.146.11 | nprotect.seoul.go.kr |
| 228.208.10.94 | nsclean.com |
| 166.148.87.133 | ntfaq.co.kr |
| 250.224.113.123 | obscgi.mcafee.com |
| 27.126.153.193 | oem.sunbeltsoftware.com |
| 5.161.205.208 | offensivecomputing.net |
| 200.224.83.116 | office.microsoft.com |
| 152.45.109.105 | oldtimer.geekstogo.com |
| 60.78.92.51 | one.tinypicbox.com |
| 174.249.212.134 | onecare.live.com |
| 45.57.158.42 | online-backup.comodo.com |
| 65.133.116.31 | online.jiangmin.com |
| 98.94.95.229 | online.rising.com.cn |
| 15.77.215.56 | onlinecheck.emsisoft.com |
| 210.72.161.32 | onlinecheck.emsisoft.de |
| 162.217.187.145 | onlinecheck.emsisoft.net |
| 62.174.94.147 | onlinecheck.emsisoft.org |
| 176.157.214.42 | onlinescan.avast.com |
| 115.152.159.206 | openantivirus.org |
| 201.175.64.74 | outpost.pl |
| 234.9.104.144 | ozzu.com |
| 92.248.224.227 | p3dev.taringa.net |
| 219.111.37.70 | pandalabs.pandasecurity.com |
| 106.187.63.59 | pandasecurity.com |
| 139.89.102.189 | pandasoftware.com |
| 56.199.94.84 | pandasoftware.es |
| 251.195.40.248 | pantip.com |
| 203.15.198.113 | pcav.cn |
| 111.48.49.183 | pccreg.antivirus.com |
| 225.31.169.10 | pccreg.trendmicro.com |
| 156.19.107.167 | pcentraide.com |
| 108.96.65.156 | pcguide.com |
| 141.129.49.102 | pchell.com |
| 131.111.169.253 | pcinternetpatrol.com |
| 1.107.114.161 | pcsupportadvisor.com |
| 21.184.73.150 | pctools.com |
| 182.213.51.91 | pda.drweb.com |
| 39.195.172.175 | pedidos.protegerse.com |
| 166.191.117.83 | personal.psu.edu |
| 118.11.143.195 | personalfirewall.comodo.com |
| 18.37.50.9 | pestpatrol.com |
| 11.154.49.227 | pg.hauri.net |
| 206.149.251.203 | phx.corporate-ir.net |
| 158.226.21.192 | pineleafboys.com |
| 190.128.60.62 | podcasts.sophos.com |
| 172.234.48.213 | pogonyuto.forospanish.com |
| 43.229.249.121 | precisesecurity.com |
| 62.50.20.110 | prevx.com |
| 95.79.187.52 | privacy.microsoft.com |
| 81.61.119.135 | products.drweb.com |
| 207.57.64.111 | promotions.drweb.com |
| 159.134.22.100 | psnw.com |
| 68.167.6.234 | pspl.com |
| 182.81.126.129 | pvtc.org |
| 120.145.71.37 | qqjkw.net |
| 193.86.150.146 | quickheal.co.in |
| 226.244.1.216 | quickheal.com |
| 83.158.122.43 | radius.turvamies.com |
| 210.98.199.83 | rads.mcafee.com |
| 106.174.225.72 | ravantivirus.com |
| 139.76.8.142 | raymond.cc |
| 252.246.129.37 | reg-int.nod32-es.com |
| 123.181.202.73 | reg.eset.es |
| 203.2.228.62 | reg.rising.com.cn |
| 47.160.11.132 | register.norman.com |
| 93.198.255.83 | removetrojanvirus.org |
| 156.5.200.247 | renewalcenter.symantec.com |
| 107.82.105.115 | renewals.bitdefender.com |
| 19.118.145.185 | research.microsoft.com |
| 133.33.77.80 | research.pandasecurity.com |
| 72.96.210.244 | research.sunbelt-software.com |
| 147.40.104.100 | resplendence.com |
| 180.198.211.170 | retail.sp.f-secure.com |
| 165.240.203.125 | retail01.sp.f-secure.com |
| 36.47.149.33 | retail02.sp.f-secure.com |
| 56.124.107.22 | ribbonwarehouse.com |
| 89.214.90.224 | rising-global.com |
| 10.72.210.51 | rising.com |
| 205.68.156.27 | rising.com.cn |
| 21.77.46.137 | rolandovera.com |
| 54.166.86.139 | rootkit.com |
| 168.149.206.34 | rootkit.nl |
| 238.20.27.74 | rover800.gaima.co.uk |
| 190.165.54.190 | roysephotos.com |
| 95.126.220.4 | ru.trendmicro.com |
| 209.108.85.88 | ruben.bzin.net |
| 203.227.154.187 | runscanner.net |
| 223.48.180.176 | safe.qq.com |
| 255.206.98.57 | safecomputing.umn.edu |
| 180.67.218.208 | safer-networking.org |
| 119.62.164.116 | safetynet.com |
| 71.139.57.229 | sales.bitdefender.com |
| 227.164.165.43 | samroeng.hi5.com |
| 85.147.157.253 | sandbox.norman.com |
| 151.14.102.161 | sandboxie.com |
| 103.90.60.150 | sapcupgrades.com |
| 136.248.168.221 | sarahmcconnellphotography.net |
| 125.106.164.247 | saverssite.com |
| 252.102.229.20 | scan.anti-trojan.net |
| 136.43.188.9 | scan.kingsoft.com |
| 169.200.39.79 | scan4you.net |
| 27.183.35.38 | scanner.novirusthanks.org |
| 30.54.236.202 | scanner.virus.org |
| 109.2.134.63 | scanner2.novirusthanks.or |
| 142.160.174.133 | schemas.microsoft.com |
| 0.143.38.216 | schemas.xmlsoap.org |
| 195.6.107.194 | sea.symantec.com |
| 149.217.12.183 | search.ca.com |
| 181.119.51.185 | search.mcafee.com |
| 39.101.172.80 | search.symantec.com |
| 166.220.240.112 | seasonsecurity.com |
| 53.41.11.101 | secdreg.org |
| 86.198.50.171 | secubox.aldria.com |
| 72.52.110.126 | secunia.com |
| 198.48.55.102 | secure-email.comodo.com |
| 26.0.145.223 | secure.av-desk.com |
| 59.158.253.225 | secure.nai.com |
| 173.72.117.240 | securecomputing.com |
| 232.0.183.148 | secureme.com |
| 184.77.141.137 | securitoo.com |
| 217.110.124.83 | security.symantec.com |
| 206.25.244.166 | securitycheck.symantec.com |
| 77.89.190.74 | securitynewsportal.com |
| 97.165.88.191 | securityrespons.symantec.com |
| 1.194.127.5 | securityresponse.symantec.com |
| 115.109.247.156 | securitywonks.net |
| 242.172.60.188 | secuser.com |
| 61.116.86.177 | secuser.model-fx.com |
| 162.18.126.247 | sergiwa.com |
| 87.67.125.209 | service.mcafee.com |
| 25.131.70.117 | service1.symantec.com |
| 233.207.96.229 | servicenews.symantec.com |
| 133.232.3.43 | sfdoccentral.symantec.com |
| 247.147.191.194 | shadow.grisoft.cz |
| 186.211.69.102 | shadu.baidu.com |
| 9.159.223.219 | shadu.duba.net |
| 42.60.74.33 | shield.prevx.com |
| 32.107.70.248 | shop.hauri.co.kr |
| 159.170.15.156 | shop.pandasecurity.com |
| 178.247.230.145 | shop.sunbeltsoftware.com |
| 76.201.202.80 | shop.symantec.com |
| 122.183.66.163 | shop.trendmicro.com |
| 192.55.143.14 | shudoo.com |
| 144.199.169.4 | simplysup.com |
| 177.33.209.6 | siren24.nprotect.com |
| 162.143.201.28 | siteadvisor.com |
| 101.6.13.60 | sitedirector.symantec.com |
| 176.151.40.49 | smallbiz.symantec.com |
| 209.240.79.254 | smbstore.trendmicro.com |
| 202.102.78.81 | smokey-services.eu |
| 73.97.23.57 | soccersuck.com |
| 216.41.173.169 | softfaq.com |
| 249.199.212.171 | softonic.com |
| 38.181.77.66 | software-files.download.com |
| 233.49.150.102 | solutions.drweb.com |
| 57.125.176.91 | sophos.com |
| 90.27.27.37 | sophos.fr |
| 79.141.23.120 | sophos1.ucd.ie |
| 18.137.225.28 | sophos10.ucd.ie |
| 226.213.183.17 | sophos2.ucd.ie |
| 123.235.155.84 | sophos5.ucd.ie |
| 113.93.151.235 | sophos6.ucd.ie |
| 239.89.96.143 | sophos7.ucd.ie |
| 3.166.55.132 | sophos8.ucd.ie |
| 164.195.33.73 | sophos9.ucd.ie |
| 21.177.154.157 | soporte.pandasecurity.com |
| 148.173.223.188 | sos.rising.com.cn |
| 224.117.249.177 | sosvirus.changelog.fr |
| 0.19.32.247 | spd.atdmt.com |
| 114.1.152.74 | specs.xmlsoap.org |
| 188.131.233.185 | speedtest.comodo.com |
| 140.208.3.42 | spftrl.digitalriver.com |
| 40.233.166.44 | spyany.com |
| 154.216.30.195 | spyblocker-software.com |
| 25.211.231.103 | spybot.info |
| 172.159.129.219 | spycheck.co.uk |
| 205.61.169.34 | spycheck.es |
| 63.175.233.248 | spychecker.com |
| 65.171.178.224 | spycop.com |
| 17.247.1.78 | spywaredb.com |
| 170.13.108.80 | spywaredlls.prevx.com |
| 28.184.228.231 | spywarefiles.prevx.com |
| 223.123.49.15 | spywareguide.com |
| 51.200.8.4 | spywareinfo.com |
| 83.101.115.74 | spywareterminator.com |
| 69.144.107.29 | square.bitdefender.com |
| 196.207.52.193 | static.yoreparo.com |
| 215.151.202.49 | stats.norton.com |
| 116.53.241.119 | stdio-labs.blogspot.com |
| 229.223.106.14 | stiller.com |
| 100.31.51.57 | store.bitdefender.com |
| 187.242.212.46 | store.de.bitdefender.com |
| 32.144.251.116 | store.drweb.com |
| 78.58.239.67 | store.trendmicro.com |
| 140.245.185.103 | subs.geekstogo.com |
| 219.194.82.92 | subwiz.trendmicro.com |
| 252.95.254.38 | sucop.com |
| 242.141.186.189 | sun.symantec.com |
| 180.205.63.97 | sunbelt-software.com |
| 132.26.210.206 | sunbeltsecurity.com |
| 30.48.61.20 | sunbeltsoftware.com |
| 19.94.57.235 | superboy2010.com.au |
| 146.158.3.143 | superdicas.com.br |
| 166.234.217.132 | superuser.co.kr |
| 70.195.196.74 | support.drweb.com |
| 116.178.60.157 | support.f-secure.com |
| 178.41.129.1 | support.kaspersky.co |
| 9.64.34.124 | support.mcafee.com |
| 42.154.73.126 | support.microsoft.com |
| 23.4.61.145 | support.pandasecurity.com |
| 218.255.7.53 | support.rising-global.com |
| 170.144.33.42 | sybari.com |
| 202.105.200.240 | sygate.com |
| 188.88.64.67 | symantec-ese.baynote.net |
| 59.83.9.43 | symantec.com |
| 78.36.168.164 | symantecliveupdate.com |
| 243.193.207.166 | symatec.com |
| 33.176.71.61 | sysinternals.com |
| 228.168.13.221 | system-cleaner.comodo.com |
| 176.244.39.210 | tallemu.com |
| 209.146.146.24 | taringa.net |
| 66.128.11.235 | tds.diamondcs.com.au |
| 133.251.84.143 | tech.pantip.com |
| 85.72.42.132 | techimo.com |
| 243.99.19.72 | techspot.com |
| 101.82.139.223 | techsupportforum.com |
| 228.77.85.131 | tecniservicioslys.com |
| 248.154.43.248 | tecno-soft.com |
| 152.183.22.62 | tempuri.org |
| 10.166.142.145 | thecomputerpitstop.com |
| 137.161.87.49 | thejokerx.blogspot.com |
| 85.234.110.38 | thetechguide.com |
| 118.136.149.108 | thinkpad.cn |
| 107.250.145.67 | threatexpert.com |
| 46.246.91.43 | threatinfo.trendmicro.com |
| 254.66.117.32 | timeforyourbusi.pandasecurity.com |
| 156.93.25.159 | timestamp.comodoca.com |
| 13.75.146.54 | timestamp.wosign.com |
| 140.71.91.218 | tinysoftware.com |
| 36.23.249.83 | tms.symantec.com |
| 69.181.32.153 | together.pctools.com |
| 182.163.221.236 | tool.ikaka.com |
| 53.159.160.206 | toonbox.de |
| 255.229.118.195 | tr.mcafee.com |
| 31.130.225.197 | trackingtheworld.com |
| 145.45.217.220 | training.drweb.com |
| 212.236.162.128 | training.trendmicro.com |
| 163.57.121.117 | trapware.com |
| 68.86.100.59 | trendmicro.com |
| 182.1.220.142 | trendmicro.com.cn |
| 53.65.166.50 | trendmicro.fr |
| 200.13.64.167 | trendsecure.com |
| 233.170.103.237 | trial.trendmicro.com |
| 91.85.91.255 | trucoswindows.es |
| 85.16.36.164 | trucoswindows.net |
| 37.92.62.153 | tw.mcafee.com |
| 138.250.232.97 | tw.sophos.com |
| 58.38.96.180 | tw.trendmicro.com |
| 252.102.41.88 | tweaksforgeeks.com |
| 204.179.67.209 | u0.eset.com |
| 113.212.239.23 | u1.eset.com |
| 227.126.171.174 | u10.eset.com |
| 165.190.48.206 | u100.eset.com |
| 241.134.198.195 | u11.eset.com |
| 18.36.50.9 | u12.eset.com |
| 132.207.170.92 | u13.eset.com |
| 126.138.239.123 | u14.eset.com |
| 146.214.197.112 | u15.eset.com |
| 179.48.48.182 | u16.eset.com |
| 227.33.171.12 | u17.eset.com |
| 166.28.116.115 | u18.eset.com |
| 245.44.14.104 | u19.eset.com |
| 22.134.54.107 | u2.eset.com |
| 136.116.174.133 | u20.eset.com |
| 206.244.251.41 | u21.eset.com |
| 158.132.21.31 | u22.eset.com |
| 55.86.181.221 | u23.eset.com |
| 169.69.45.48 | u24.eset.com |
| 40.65.247.24 | u25.eset.com |
| 192.17.149.145 | u26.eset.com |
| 224.174.188.147 | u27.eset.com |
| 14.29.180.170 | u28.eset.com |
| 81.24.125.78 | u29.eset.com |
| 32.224.19.190 | u3.eset.com |
| 189.126.126.4 | u30.eset.com |
| 46.108.247.87 | u31.eset.com |
| 120.239.71.130 | u32.eset.com |
| 72.59.29.119 | u33.eset.com |
| 105.217.136.57 | u34.eset.com |
| 86.67.124.208 | u35.eset.com |
| 84.190.197.244 | u36.eset.com |
| 104.11.155.233 | u36eset.com |
| 137.168.139.179 | u37.eset.com |
| 127.26.3.6 | u37eset.com |
| 253.22.69.34 | u38.eset.com |
| 70.219.95.23 | u39.eset.com |
| 103.121.134.93 | u4.eset.com |
| 216.103.130.52 | u40.eset.com |
| 31.102.203.156 | u41.eset.com |
| 110.179.230.145 | u42.eset.com |
| 143.80.13.147 | u43.eset.com |
| 1.63.1.165 | u44.eset.com |
| 251.182.202.74 | u45.eset.com |
| 15.2.228.63 | u46.eset.com |
| 48.39.146.11 | u47.eset.com |
| 40.21.79.95 | u48.eset.com |
| 167.17.148.194 | u49.eset.com |
| 243.217.106.183 | u5.eset.com |
| 19.118.213.185 | u50.eset.com |
| 133.33.205.208 | u51.eset.com |
| 200.224.150.116 | u52.eset.com |
| 151.177.241.237 | u53.eset.com |
| 60.78.92.51 | u54.eset.com |
| 174.249.212.134 | u55.eset.com |
| 165.177.22.162 | u56.eset.com |
| 185.253.48.27 | u57.eset.com |
| 94.31.219.97 | u58.eset.com |
| 207.201.84.248 | u59.eset.com |
| 78.136.157.28 | u6.eset.com |
| 158.213.183.17 | u60.eset.com |
| 126.238.90.211 | u61.eset.com |
| 172.31.89.173 | u62.eset.com |
| 245.95.34.81 | u63.eset.com |
| 65.39.184.193 | u64.eset.com |
| 97.196.223.7 | u65.eset.com |
| 83.239.27.30 | u66.eset.com |
| 22.46.160.194 | u67.eset.com |
| 229.123.63.59 | u68.eset.com |
| 138.156.170.129 | u69.eset.com |
| 252.71.34.212 | u7.eset.com |
| 123.255.100.240 | u70.eset.com |
| 7.75.58.105 | u71.eset.com |
| 172.41.41.175 | u72.eset.com |
| 217.23.162.2 | u73.eset.com |
| 156.19.107.106 | u74.eset.com |
| 236.35.5.219 | u75.eset.com |
| 136.248.168.221 | u76.eset.com |
| 250.231.32.116 | u77.eset.com |
| 189.226.233.159 | u78.eset.com |
| 19.249.138.148 | u79.eset.com |
| 175.207.45.85 | u8.eset.com |
| 33.189.165.168 | u80.eset.com |
| 160.185.111.144 | u81.eset.com |
| 51.133.9.5 | u82.eset.com |
| 84.34.48.7 | u83.eset.com |
| 6.149.44.34 | u84.eset.com |
| 201.144.245.198 | u85.eset.com |
| 153.221.16.187 | u86.eset.com |
| 50.243.244.122 | u87.eset.com |
| 164.225.108.205 | u88.eset.com |
| 102.221.53.113 | u89.eset.com |
| 54.42.11.102 | u9.eset.com |
| 87.199.119.172 | u90.eset.com |
| 201.57.115.199 | u91.eset.com |
| 203.53.60.107 | u92.eset.com |
| 223.130.146.223 | u93.eset.com |
| 251.26.121.161 | u94.eset.com |
| 109.9.241.244 | u95.eset.com |
| 236.4.187.152 | u96.eset.com |
| 188.81.213.141 | u97.eset.com |
| 220.239.254.213 | u98.eset.com |
| 80.223.119.40 | u99.eset.com |
| 19.219.64.17 | uk.mcafee.com |
| 227.39.90.6 | uk.trendmicro-europe.com |
| 4.197.130.8 | uk.trendmicro.com |
| 118.180.250.162 | ulove.tigolbittys.info |
| 248.179.199.70 | up.duba.net |
| 12.255.225.59 | up.rising.com.cn |
| 45.157.8.129 | up1.nod123.cn |
| 158.139.197.212 | upd.zonelabs.com |
| 29.135.142.188 | update.360safe.cn |
| 237.208.97.174 | update.360safe.com |
| 10.109.204.176 | update.aladdin.com |
| 252.151.196.199 | update.authentium.com |
| 190.215.141.107 | update.avg.com |
| 142.35.99.96 | update.avgfrance.com |
| 175.193.74.33 | update.bitdefender.com |
| 156.231.194.116 | update.drweb.com |
| 27.39.140.24 | update.ewido.com |
| 47.115.166.13 | update.grisoft.com |
| 214.152.84.218 | update.grisoft.cz |
| 196.190.72.237 | update.hispasec.com |
| 67.253.17.145 | update.ikaka.com |
| 18.74.44.134 | update.ikarus-software.at |
| 119.231.83.204 | update.quickheal.com |
| 165.146.203.159 | update.rising.com.cn |
| 231.81.20.67 | update.sophos.com |
| 59.33.178.188 | update.symantec.com |
| 92.191.218.2 | update.trendmicro.com |
| 206.105.150.153 | update7.jiangmin.com |
| 144.169.27.61 | updatem.360safe.cn |
| 96.246.54.170 | updatem.360safe.com |
| 125.143.157.116 | updates.a-2.org |
| 239.58.21.199 | updates.drweb.com |
| 110.122.223.107 | updates.f-prot.com |
| 130.198.181.96 | updates.sald.com |
| 163.32.32.166 | updates.symantec.com |
| 208.14.153.249 | updates3.kaspersky-labs.com |
| 147.10.98.225 | updates4.kaspersky-labs.com |
| 99.154.124.215 | updates5.kaspersky-labs.com |
| 127.239.159.212 | upgrade.bitdefender.com |
| 241.222.23.107 | upgrade1.bitdefender.com |
| 180.217.224.15 | upgrade2.bitdefender.com |
| 131.106.251.4 | upgrade3.bitdefender.com |
| 164.195.34.74 | upgrade4.bitdefender.com |
| 22.178.154.157 | upload.changelog.fr |
| 149.173.100.133 | us.bitdefender.com |
| 169.250.126.122 | us.mcafee.com |
| 201.152.165.124 | us.trendmicro.com |
| 126.13.164.154 | usa.kaspersky.com |
| 65.8.110.62 | usbcleaner.cn |
| 17.85.136.51 | ushousecall02.trendmicro.com |
| 49.243.243.121 | utilidades-utiles.com |
| 163.225.108.204 | v.dreamwiz.com |
| 102.221.53.112 | v4.windowsupdate.microsoft.com |
| 54.41.11.101 | v5.windowsupdate.microsoft.com |
| 87.199.118.171 | vet.com.au |
| 201.181.239.67 | vicentevirtual.com |
| 66.172.179.226 | viguard.com |
| 86.249.137.215 | vil.nai.com |
| 119.150.245.29 | vil.nail.com |
| 233.133.109.112 | virobot.co.kr |
| 104.128.54.20 | virscan.org |
| 55.205.81.9 | virus.org |
| 88.106.120.79 | virusbuster.hu |
| 202.89.240.162 | viruschief.com |
| 141.85.186.138 | virusdoctor.jp |
| 93.161.212.127 | virusfreezone.info |
| 126.63.251.129 | virusinfo.prevx.com |
| 239.45.116.24 | viruslist.com |
| 110.41.61.188 | viruslist.ru |
| 130.117.87.177 | virusscan.jotti.org |
| 163.19.127.248 | virusscanonline.net |
| 152.133.191.206 | virusspy.com |
| 23.129.136.182 | virustotal.com |
| 95.70.215.36 | visualizesoftware.com |
| 128.227.66.38 | visualtracking.symantec.com |
| 242.142.186.189 | vivo-austin.com |
| 181.205.132.97 | vms.drweb.com |
| 133.26.90.86 | vncsvr.com |
| 166.184.197.156 | vos.symantec.com |
| 23.98.62.239 | vrv.com.cn |
| 150.162.7.147 | vsantivirus.com |
| 170.114.165.12 | webadmin.norman.no |
| 79.16.204.82 | webphand.com |
| 64.58.196.105 | webroot.com |
| 191.121.142.13 | wedoantivirus.com |
| 143.198.168.2 | welkam.co.jp |
| 243.100.207.72 | wexperts-exchange.com |
| 157.138.195.23 | whatthetech.com |
| 96.201.140.187 | wikio.es |
| 47.22.167.176 | wilderssecurity.com |
| 80.179.206.246 | wilderssecurity.net |
| 194.94.138.141 | wildlist.com |
| 133.157.16.49 | windowsupdate.microsoft.com |
| 85.234.42.38 | winpatrol.com |
| 117.135.149.108 | wmcafee.com |
| 231.50.13.191 | woottonfootball.com |
| 102.114.215.99 | wtc.trendmicro.com |
| 122.190.173.88 | ww.emsisoft.com |
| 33.159.159.37 | www.1stavenuelimousines.co.uk |
| 79.141.24.120 | www.2xlgames.com |
| 18.137.225.96 | www.ahnlab.com |
| 226.25.251.85 | www.aks.com |
| 3.115.34.87 | www.aladdin.com |
| 117.97.155.239 | www.anti-trojan-software.net |
| 55.93.100.147 | www.anti-trojan.net |
| 7.237.126.136 | www.anti-virus.by |
| 163.195.33.73 | www.antivir.es |
| 21.177.153.156 | www.antivirus-tools.com |
| 148.173.99.132 | www.antiy.net |
| 168.249.125.121 | www.apsecure.com |
| 201.151.164.123 | www.arpia.be |
| 246.133.29.18 | www.authentium.com |
| 185.129.230.183 | www.authentium.com.au |
| 137.205.0.172 | www.av-desk.com |
| 173.110.111.245 | www.avast.com |
| 31.93.231.72 | www.avg.com |
| 226.89.177.236 | www.avhide.com |
| 178.165.135.225 | www.avoncourt.com |
| 211.67.242.39 | www.avx.ro |
| 68.49.107.190 | www.barder.com |
| 195.45.52.98 | www.beautybar.com |
| 215.121.10.88 | www.bg.virusblokada.com |
| 112.143.238.22 | www.bit-defender.de |
| 226.126.102.105 | www.bitdefende.de |
| 97.122.48.13 | www.bitdefender-es.com |
| 49.198.74.2 | www.bitdefender.be |
| 82.100.113.72 | www.bitdefender.cl |
| 195.82.234.155 | www.bitdefender.co.uk |
| 134.78.179.131 | www.bitdefender.com |
| 86.154.205.120 | www.bitdefender.com.au |
| 119.56.245.123 | www.bitdefender.com.sg |
| 233.38.109.18 | www.bitdefender.com.tw |
| 103.34.54.57 | www.bitdefender.com.vn |
| 255.242.212.47 | www.bitdefender.de |
| 32.144.252.117 | www.bitdefender.es |
| 146.126.184.200 | www.bitdefender.fr |
| 16.122.129.176 | www.bitdefender.hk |
| 224.199.88.165 | www.bitdefender.us |
| 1.100.195.167 | www.bitdefenderme.com |
| 115.15.59.62 | www.briarhurst.com |
| 54.78.4.226 | www.brightoctober.com |
| 6.155.219.215 | www.buraka.tv |
| 38.56.70.29 | www.buscafacil.com |
| 147.222.185.107 | www.buscalo.in |
| 18.30.131.15 | www.busco.in |
| 38.106.157.4 | www.ca.com |
| 71.8.196.74 | www.cambridge-steiner-school.co.uk |
| 184.178.61.225 | www.ccssforum.org |
| 55.242.6.134 | www.celticmerchant.com |
| 7.62.32.123 | www.clamav.net |
| 108.220.72.193 | www.collectedcurios.com |
| 154.135.192.20 | www.comodo.com |
| 93.198.137.184 | www.comodo.tv |
| 44.19.164.173 | www.comodoantispam.com |
| 77.176.203.243 | www.comodopartners.com |
| 70.226.14.17 | www.computing.net |
| 9.33.147.181 | www.configurarequipos.com |
| 216.110.174.170 | www.contentverification.com |
| 117.135.148.107 | www.deborahshelton.net |
| 230.49.13.190 | www.dr-bull.com |
| 101.113.214.99 | www.drweb.com |
| 121.189.172.88 | www.ealaddin.com |
| 154.23.24.158 | www.elvis-express.com |
| 200.6.144.241 | www.emeraldclassic.co.uk |
| 139.1.89.217 | www.emsisoft.at |
| 94.149.119.209 | www.emsisoft.com |
| 127.239.158.211 | www.emsisoft.de |
| 240.221.23.106 | www.emsisoft.es |
| 44.81.88.135 | www.emsisoft.fr |
| 251.226.115.124 | www.emsisoft.it |
| 28.59.154.194 | www.emsisoft.jp |
| 142.42.18.21 | www.emsisoft.net |
| 13.38.220.253 | www.emsisoft.nl |
| 33.114.246.242 | www.emsisoft.org |
| 66.16.29.244 | www.engyro.com |
| 111.254.150.139 | www.entercept.com |
| 50.250.95.47 | www.esafe.com |
| 2.70.121.36 | www.eset.es |
| 167.104.104.238 | www.eugrantsadvisor.com |
| 24.86.225.65 | www.eugrantsadvisor.de |
| 219.82.170.229 | www.eugrantsadvisor.ie |
| 171.158.128.219 | www.eugrantsadvisor.se |
| 204.60.236.33 | www.exchangeyourcareer.com |
| 62.42.100.184 | www.f-prot.com |
| 60.166.173.219 | www.f-secure.com |
| 80.242.131.208 | www.fimasys.com |
| 113.144.238.22 | www.flairweddings.co.uk |
| 226.126.103.106 | www.forospyware.com |
| 97.122.48.14 | www.fortifed.com |
| 49.198.74.3 | www.fortiid.com |
| 82.100.114.73 | www.fortimail.com |
| 196.83.234.156 | www.fortinet-apac.com |
| 2.202.47.255 | www.fortinet.ch |
| 210.22.73.244 | www.fortinet.co.il |
| 243.180.112.246 | www.fortinet.com |
| 100.162.233.141 | www.fortinet.net |
| 227.158.178.50 | www.fortinet.nl |
| 247.234.204.39 | www.fortinet.sg |
| 24.136.244.109 | www.fortinetuk.com |
| 138.119.176.192 | www.freeality.com |
| 9.114.121.168 | www.freedrweb.ru |
| 219.193.82.159 | www.freerav.com |
| 251.94.189.161 | www.frisk-software.com |
| 109.9.53.56 | www.frisk.is |
| 48.73.255.220 | www.fsecure.com |
| 0.149.213.209 | www.garryowen.com |
| 33.51.64.23 | www.gdata.es |
| 146.221.185.106 | www.globalhauri.com |
| 17.29.130.15 | www.gokidding.com |
| 37.105.156.4 | www.grisoft.com |
| 70.7.196.74 | www.hackshields.com |
| 184.178.60.225 | www.hacksoft.com.pe |
| 55.241.5.133 | www.hacksoft.pe |
| 6.62.32.122 | www.handwritingforkids.com |
| 107.219.71.192 | www.hasp.se |
| 153.134.191.19 | www.hauri.co.kr |
| 95.201.140.186 | www.hauri.net |
| 47.21.166.176 | www.hxproduction.com |
| 80.179.206.246 | www.ibusca.me |
| 194.93.138.141 | www.ikarus.at |
| 132.157.15.49 | www.imddomains.co.uk |
| 84.234.42.38 | www.indielisboa.com |
| 117.135.149.108 | www.inicioid.com |
| 231.50.13.191 | www.iniciorapido.info |
| 102.113.214.99 | www.internationalservicecheck.com |
| 121.190.173.88 | www.irangoals.com |
| 19.144.145.23 | www.iseclab.org |
| 65.126.9.106 | www.ixomodels.com |
| 3.122.210.82 | www.jiangmin.com |
| 211.11.236.71 | www.jiangmin.com.cn |
| 244.100.20.73 | www.jotti.org |
| 102.83.140.224 | www.kaspersky.com |
| 41.78.85.132 | www.kioskea.net |
| 252.226.115.124 | www.latin-mass-society.org |
| 29.60.154.194 | www.livepcsupport.com |
| 143.42.19.22 | www.malwarecity.com |
| 137.161.88.121 | www.malwarecity.fr |
| 157.238.114.110 | www.mamutu.com |
| 189.140.153.112 | www.mamutu.de |
| 235.122.17.7 | www.manchester-offices.co.uk |
| 174.118.219.171 | www.mcafee.at |
| 126.194.245.160 | www.mcafee.com |
| 159.96.96.230 | www.metascan-online.com |
| 16.78.217.57 | www.microsoft.com |
| 211.74.162.222 | www.midescargas.com |
| 163.150.120.211 | www.mountainlakeslodge.com |
| 196.52.228.25 | www.mtr-design.com |
| 54.35.92.176 | www.mygeekside.com |
| 183.32.40.86 | www.netegrity.com |
| 203.109.254.75 | www.norman.com |
| 235.11.105.145 | www.nottinghampoetryseries.com |
| 93.249.225.228 | www.novirusthanks.org |
| 220.245.171.136 | www.npin.co.kr |
| 172.65.197.125 | www.nprotect.co.kr |
| 205.223.236.195 | www.nprotect.com |
| 62.205.101.22 | www.nprotect.com.br |
| 1.201.46.255 | www.nsclean.com |
| 209.21.72.244 | www.owen.org |
| 242.179.112.246 | www.pandasecurity.com |
| 100.162.232.141 | www.pctools.com |
| 230.161.181.52 | www.peterhearnwaste.co.uk |
| 250.237.207.41 | www.phoenixtrikeworks.com |
| 27.139.246.111 | www.prdouglas.co.uk |
| 140.121.179.194 | www.prevx.com |
| 11.117.124.170 | www.prevx1.com |
| 219.193.82.160 | www.professorbeyer.com |
| 252.95.190.162 | www.quickheal.com |
| 110.9.54.57 | www.removetrojanvirus.org |
| 48.73.255.221 | www.renningers.com |
| 0.150.214.210 | www.residentphotography.com |
| 154.172.185.144 | www.retento.com |
| 11.86.50.227 | www.reviewsofbooks.com |
| 138.150.251.135 | www.rising-global.com |
| 158.226.21.124 | www.risingav.com.au |
| 191.128.61.195 | www.safenet-inc.com |
| 49.42.181.90 | www.scan4you.net |
| 175.106.126.254 | www.seasonsecurity.com |
| 3.58.28.119 | www.secondchanceboxer.com |
| 104.216.68.189 | www.secure-elements.com |
| 150.130.188.16 | www.sheffieldmind.co.uk |
| 88.194.133.180 | www.smf.org |
| 168.10.155.164 | www.softfaq.com |
| 68.167.194.234 | www.sophos.com |
| 182.82.126.129 | www.spycheck.co.uk |
| 121.145.4.37 | www.spycheck.es |
| 73.222.30.26 | www.stadiumpage.com |
| 240.2.16.231 | www.sunbeltsoftware.com |
| 98.173.136.58 | www.symantec.com |
| 225.236.82.222 | www.sysinternals.com |
| 112.180.163.79 | www.tecniservicioslys.com |
| 145.14.15.149 | www.testmypcsecurity.com |
| 191.253.135.232 | www.threatexpert.com |
| 130.248.80.208 | www.tomorrowsedge.net |
| 81.137.107.197 | www.trendmicro.com |
| 114.226.146.199 | www.trojaner.info |
| 228.209.10.94 | www.trustix.com |
| 167.204.212.2 | www.trustlogo.com |
| 122.96.241.251 | www.vba.com.by |
| 155.186.25.65 | www.virscan.org |
| 13.168.145.148 | www.virus.fi |
| 139.164.90.124 | www.virus.org |
| 159.241.117.113 | www.virusbuster.hu |
| 57.7.20.235 | www.viruschief.com |
| 102.245.141.130 | www.virusfreezone.info |
| 41.241.86.38 | www.virustotal.com |
| 249.61.112.27 | www.wellgousa.com |
| 26.219.220.98 | www.whichssl.com |
| 140.201.84.181 | www.willsee.com |
| 78.197.29.89 | www.xmlsoap.org |
| 162.149.119.210 | www.zarya.info |
| 195.51.227.24 | www1.my-etrust.com |
| 53.33.91.175 | www3.ca.com |
| 51.157.164.210 | www3.safenet-inc.com |
| 71.233.122.199 | www4.symantec.com |
| 104.135.229.13 | wwws.clamav.net |
| 217.241.217.220 | x-cleaner.com |
| 212.236.163.128 | x.360safe.com |
| 164.57.189.117 | yoreparo.com |
| 196.215.228.187 | z-oleg.com |
| 189.76.227.149 | zeustracker.abuse.ch |
| 128.71.173.125 | zeylstra.nl |
| 80.148.199.114 | zhidao.baidu.com |
| 112.50.238.116 | zhidao.ikaka.com |
| 226.32.103.11 | ziggamza.net |
| 97.28.48.175 | zonavirus.com |
| 240.228.198.32 | zonealarm.com |
| 17.129.237.102 | zonelabs.com |
| 3.239.41.57 | zonelabs.fr |
| 129.235.242.33 | zonelog.co.uk |
| 81.56.200.22 | zs.kingsoft.com |
| 114.213.52.24 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 12644 | 12800 | 3.76874 | 55d274f88e5ab59aa27a86516437f7d8 |
| .data | 20480 | 64 | 512 | 0.164757 | 75fe664fdcd708925b7ca712ee127c19 |
| .rdata | 24576 | 1328 | 1536 | 3.03097 | 2707a7526abdc69c43f37dd3b6665e30 |
| .bss | 28672 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .idata | 32768 | 800 | 1024 | 2.18489 | 4e803ebabfbd6fe3233c57c1b6e762a8 |
| .rsrc | 36864 | 87232 | 87552 | 5.54166 | 34b5a2a0306aa053bf792aa7f84ba6c7 |
Dropped from:
71909eada4fca1fc018487d0e6b657efe12a6dd5698996f0f6eb4e1e57c6ba03
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a
Network Activity
URLs
| URL | IP |
|---|---|
| hxxp://4rl144t5h0m232fpeig438v5n565cm.ipcheker.com/ | 75.126.104.226 |
| www.buscaid.com | 8.5.1.51 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):