Gen:Variant.Symmi.2478 (BitDefender), Worm:Win32/Esfury.X (Microsoft), Win32.HLLW.Autoruner1.24454 (DrWeb), Gen:Variant.Symmi.2478 (B) (Emsisoft), Trojan.Win32.Jorik (Ikarus), Gen:Variant.Symmi.2478 (FSecure), Generic29.AYVZ (AVG), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 54784d5167ca15db67b91a17cee7ca23
SHA1: 051fdf36859a05b6713f7ac2bb4004a7a1c60853
SHA256: 5d834bc6fe6613e7d7dced056a771a9f2f5ebab9d49db6c17624dd1e6853bd25
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 4768944 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: no certificate found
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
MD5 | File path |
---|---|
09c53a96ba45a953562411fb4635ac2e | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif |
55e96e2aee74a1042f6a0260c351f2d9 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21_PROPER_320kbps_VRTX.mp3.pif |
17368d4c20d754c128670d3e39cdbe5b | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - Rolling In the Deep [2010-Single][SW].mp3.pif |
f7f7db5cb87b45b563e3d034e29eb222 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Beyonce-4_(Deluxe_Edition)-2CD-2011-VOiCE.mp3.pif |
c18d3a93a2d29d03b4f37c96d18d42c8 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Black Eyed Peas - The Beginning (Deluxe Edition) 2010-DOH.mp3.pif |
ba1bab1244d35783462b01951b3f7032 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif |
a1c69b731a159733d9f9df90f75ca34d | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif |
e2ad3dbb83a98ac91fbbb6896dbee34e | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif |
4f470b304dc18c70552a3be86f32c696 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2011-Single@320][TJ].mp3.pif |
e796d9235f94a4bb65aa75fed5cb3d96 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Mumford And Sons - Sigh No More (Album).mp3.pif |
bb84ac745fd198e6a8d9fc416137ddd5 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Now Thats What I Call Music 78 (2011) - 2CD.mp3.pif |
86253ffc3e369cd10c9bc2abc1f1d797 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Pitbull - Give Me Everything (feat. Ne-Yo) [2011-Single][SW].mp3.pif |
b320fa0843a27be1e0dbf3824b83a35d | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Rihanna - LOUD (2011 With 5 Bonus Tracks).mp3.pif |
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61798 bytes in size. The following strings are added to the hosts file listed below:
173.224.217.72 | viabcp.com |
173.224.217.72 | www.viabcp.com |
173.224.217.72 | ww2.viabcp.com |
173.224.217.72 | bcpzonasegura.viabcp.com |
173.224.217.72 | hotmail.com |
173.224.217.72 | www.hotmail.com |
93.162.213.128 | 13iii.com |
126.63.252.130 | 15660808.co.kr |
240.46.116.25 | 2-spyware.com |
111.41.62.189 | 247fixes.com |
131.118.88.178 | 360.cn |
163.20.127.248 | 360.com |
21.2.60.75 | 360safe.cn |
148.254.5.51 | 360safe.com |
100.74.219.40 | 45pounds.com |
133.232.70.42 | 51nb.com |
247.146.191.194 | 9down.com |
185.210.136.102 | a-2.org |
137.30.94.91 | a188.x.akamai.net |
170.188.202.161 | abuse.ch |
28.103.66.244 | acs.pandasoftware.com |
155.166.11.152 | ad-aware-se.uptodown.com |
174.243.38.141 | ad.fastclick.net |
207.144.77.211 | ads.fastclick.net |
65.59.197.106 | agfirewall.ru |
192.122.143.14 | agnitum.com |
144.199.169.3 | agnitum.de |
244.101.208.73 | agnitum.fr |
34.15.73.156 | agnitum.ru |
229.79.18.64 | ahn.com.cn |
181.155.44.53 | ahnlab.com |
214.57.83.123 | akamai.net |
72.227.16.19 | aknow.prevx.com |
10.35.149.183 | aladdin.com |
218.111.175.172 | alert.rising.com.cn |
251.13.27.242 | alerta-antivirus.inteco.es |
109.184.147.69 | alerta-antivirus.red.es |
236.247.92.233 | alladdin.ru |
255.68.51.222 | aluriasoftware.com |
32.157.158.36 | analysis.seclab.tuwien.ac.at |
78.140.22.119 | andymanchesta.com |
17.135.224.95 | anti-virus-software-review.com |
225.24.250.84 | anti-virus.by |
1.114.33.86 | anti-virus.com |
115.96.154.237 | antirootkit.com |
54.92.99.145 | antispam.sunbeltsoftware.com |
6.236.125.134 | antispy.ru |
39.70.164.204 | antispyware.sunbeltsoftware.com |
153.52.29.32 | antivir.es |
23.48.230.8 | antiviraldp.com |
43.124.0.253 | antivirus-online.de |
76.26.40.255 | antivirus-tools.com |
122.9.160.150 | antivirus.about.com |
61.4.105.58 | antivirus.cai.com |
12.81.132.47 | antivirus.comodo.com |
45.238.239.117 | antivirus.hispavista.com |
159.221.103.200 | antivirus.sunbeltsoftware.com |
98.216.49.108 | antiy.net |
50.37.7.97 | anubis.iseclab.org |
82.195.114.167 | apac.trendmicro.com |
196.177.235.62 | ar.answers.yahoo.com |
67.173.180.226 | ar.atwola.com |
87.249.138.215 | arcabit.com |
120.151.245.29 | arcabit.pl |
233.133.110.113 | archive.bitdefender.com |
104.129.55.21 | arswp.com |
56.205.81.10 | arwww.fortinet.cz |
89.107.121.80 | asap.authentium.com |
203.90.241.163 | ashampoo.com |
142.85.186.139 | atazita.blogspot.com |
93.162.213.128 | atdmt.com |
126.63.252.130 | attechnical.com |
240.46.116.25 | atwola.com |
111.41.62.189 | au.mcafee.com |
131.118.88.178 | auditmypc.com |
163.20.127.248 | authentium.com |
21.2.60.75 | auwww.ealaddin.nl |
148.254.5.51 | avast-home.uptodown.com |
100.74.219.40 | avast.com |
133.232.70.42 | avast.ru |
247.146.191.194 | avg-antivirus.net |
185.210.136.102 | avg.com |
137.30.94.91 | avg.vo.llnwd.net |
170.188.202.161 | avgate.net |
28.103.66.244 | avgfrance.com |
155.166.11.152 | avhide.com |
174.243.38.141 | avira.com |
207.144.77.211 | avp.ch |
65.59.197.106 | avp.com |
192.122.143.14 | avp.ru |
144.199.169.3 | avpclub.ddns.info |
244.101.208.73 | avu.zonelabs.com |
34.15.73.156 | avx.rob-have.net |
229.79.18.64 | awaps.net |
48.23.168.177 | b-have.orgbitdefender-ar.com |
81.180.207.247 | babooforum.com.br |
195.95.139.142 | backup.comodo.com |
134.158.17.50 | baike.360.cn |
86.235.43.39 | baike.360.com |
118.136.150.109 | bakunos.com |
232.51.14.192 | banner.fastclick.net |
103.115.216.100 | banners.fastclick.net |
123.191.174.89 | baristamagazine.com |
156.25.25.159 | basetendencies.com |
201.7.146.242 | bbs.360.cn |
140.3.91.219 | bbs.360safe.cn |
92.147.117.208 | bbs.360safe.com |
125.237.157.210 | bbs.cfan.com.cn |
239.220.21.105 | bbs.cpcw.com |
178.215.222.13 | bbs.dswlab.com |
129.104.249.2 | bbs.duba.net |
162.193.32.72 | bbs.ikaka.com |
20.176.152.155 | bbs.janmeng.com |
147.171.98.131 | bbs.kafan.cn |
167.248.124.120 | bbs.kafan.com |
199.150.163.122 | bbs.kaspersky.com.cn |
245.132.27.17 | bbs.kpfans.com |
184.128.229.181 | bbs.mcafeefans.com |
136.204.255.170 | bbs.s-sos.net |
169.106.106.240 | bbs.sucop.com |
26.88.227.67 | bbs.taisha.org |
221.84.172.232 | bbs.trendmicro.com.cn |
173.160.130.221 | bbs.winzheng.com |
206.62.238.35 | bestofewan.com |
64.45.102.186 | beta.anti-virus.by |
191.40.47.94 | bg.virusblokada.com |
210.117.6.83 | bhsbees.com |
243.18.113.153 | bitcity.info |
101.1.233.236 | bitcity.org |
228.252.179.144 | bitdefender.co.uk |
180.73.205.133 | bitdefender.com |
212.231.244.203 | bitdefender.com.ua |
70.213.108.30 | bitdefender.es |
9.209.54.6 | bitdefender.org |
217.29.80.251 | bitdefender.secyber.net |
250.187.119.132 | bitdefenderchina.com |
242.48.119.27 | bitdefenderguatemala.com |
113.44.64.191 | bitdefendermalaysia.com |
133.120.90.180 | bitdefendertaiwan.com |
166.22.129.250 | bitdefenderuruguay.com |
23.4.62.78 | bitdefenderusa.com |
150.0.7.54 | biz.nprotect.com |
102.76.221.43 | bkav.com.vn |
135.234.73.45 | blackice.iss.net |
249.149.193.196 | bleedingthreats.net |
188.212.138.104 | bleepingcomputer.com |
139.33.97.93 | blitzblank.com |
172.190.204.163 | blog.hispasec.com |
30.105.68.246 | blog.threatfire.com |
157.168.14.154 | blog.titanium-jewelry.com |
177.245.40.143 | blog.trendmicro.com |
209.147.79.213 | blogs.icerocket.com |
67.61.200.108 | blogs.protegerse.com |
194.125.145.16 | blogschapines.com |
146.201.171.5 | boardreader.com |
247.103.210.75 | bobbondart.com |
37.17.75.159 | br.mcafee.com |
231.81.20.67 | br.trendmicro.com |
183.157.46.56 | brazil.kaspersky.com |
83.182.209.249 | buddy.bitdefender.com |
197.97.141.144 | bugs.clamav.net |
136.161.19.52 | buscafacil.com |
88.237.45.41 | buscalo.in |
121.139.152.111 | busco.in |
234.53.17.194 | buy.bitdefender-es.com |
105.117.218.103 | buy.bitdefender.com |
125.193.176.92 | buy.bitdefender.de |
158.27.28.162 | buy.drweb.com |
204.10.148.245 | buy.rising.com.cn |
143.5.93.221 | ca.com |
94.150.120.210 | cacomvip.ca.com |
127.239.159.212 | cai.com |
241.222.23.107 | canada.karuna-shechen.org |
180.217.225.15 | castlecops.com |
132.106.251.4 | castlecrops.com |
164.196.34.74 | ccslaughterspdx.com |
22.178.154.157 | cddchiangmai.net |
149.174.100.133 | cdn.atwola.com |
169.250.126.122 | center.rising.com.cn |
202.152.165.124 | centralcommand.com |
247.134.30.19 | cert.org |
186.130.231.184 | cfan.com.cn |
138.206.1.173 | cgi.clamav.net |
171.108.109.243 | changedetection.com |
29.91.229.70 | changelog.fr |
224.86.174.234 | channelpartner.trendmicro.com |
175.163.133.223 | chickensroamfree.com |
208.64.240.37 | chkrootkit.org |
66.47.104.188 | chollian.nprotect.co.kr |
64.170.177.224 | cisrt.org |
84.247.135.213 | cit.kookmin.ac.kr |
117.148.243.27 | clamav.net |
231.131.107.110 | clamwin.com |
102.126.52.18 | click.atdmt.com |
53.203.79.7 | clicks.atdmt.com |
86.104.118.77 | cloudprotection.pandasecurity.com |
200.87.238.160 | clubic.com |
139.83.184.136 | cmmings.cn |
91.159.210.125 | cn.mcafee.com |
124.61.249.127 | cn.sophos.com |
237.43.114.22 | cn.trendmicro.com |
108.39.59.186 | codehard.wordpress.com |
128.115.85.175 | cohartuk.com |
161.17.125.246 | commentcamarche.net |
19.255.57.73 | community.thaiware.com |
145.251.2.49 | comodo.com |
97.72.216.38 | company.drweb.com |
130.229.68.40 | company.hauri.co.kr |
244.144.188.191 | company.hauri.net |
183.207.133.99 | computing.net |
134.28.92.88 | comunidad.wilkinsonpc.com.co |
167.185.199.158 | configurarequipos.com |
25.100.63.241 | coresecurity.com |
152.163.9.149 | cou85.com |
172.240.35.138 | cowsmo.com |
205.142.74.208 | cpsecure.com |
62.56.195.103 | csc.rising.com.cn |
189.120.140.11 | cureit.ru |
141.196.42.132 | customer.symantec.com |
118.230.81.202 | customers.drweb.com |
163.144.202.29 | cutlines.org |
102.208.147.193 | cwsandbox.org |
54.28.173.183 | cybercrime.pandasecurity.com |
87.186.213.253 | cyberdefender.com |
201.100.145.148 | cybertechhelp.com |
139.164.143.176 | daboweb.com |
212.105.169.165 | daniloff.net |
245.7.20.235 | daniweb.com |
102.177.141.62 | darkclockers.com |
229.241.86.226 | dazhizhu.cn |
249.61.44.215 | de.bitdefender.com |
26.151.152.30 | de.mcafee.com |
72.133.16.113 | de.trendmicro.com |
10.129.217.89 | deckard.geekstogo.com |
218.18.243.78 | deerfield.com |
251.107.27.80 | defalcos.com |
109.90.147.231 | definitions.symantec.com |
48.85.92.139 | dell.symantec.com |
255.230.119.128 | demos.eset.es |
32.63.158.198 | descargas.eset.es |
146.46.22.25 | dev.depeuter.org |
17.42.224.1 | developmentdrums.org |
37.118.250.246 | dialognauka.ru |
70.20.33.248 | diamondcs.com.au |
115.2.154.143 | dicasweb.com.br |
54.254.99.51 | discussions.virtualdr.com |
138.206.1.172 | disk-encryption.comodo.com |
171.108.108.242 | dl.360safe.com |
28.90.229.69 | dl1.antivir-pe.com |
223.86.174.233 | dl1.antivir-pe.de |
175.162.132.223 | dl1.antivir.de |
208.64.240.37 | dl1.avgate.net |
66.46.104.188 | dl10.freeav.net |
192.42.49.96 | dl2.antivir-pe.com |
212.119.8.85 | dl2.antivir-pe.de |
245.20.115.155 | dl2.antivir.de |
103.3.235.238 | dl2.avgate.net |
230.254.180.146 | dl3.antivir-pe.de |
182.75.207.135 | dl3.antivir.de |
214.232.246.205 | dl3.avgate.net |
72.215.110.32 | dl4.antivir-pe.com |
11.211.56.8 | dl4.antivir-pe.de |
90.159.210.125 | dl4.antivir.de |
123.60.249.127 | dl4.avgate.net |
237.43.113.22 | dl5.avgate.net |
108.38.59.186 | dl6.avgate.net |
128.115.85.175 | dl7.avgate.net |
160.17.124.245 | dl8.avgate.net |
18.255.57.72 | dl8.freeav.net |
145.251.2.48 | dl9.avgate.net |
97.71.216.37 | dl9.freeav.net |
130.229.67.39 | dnl-cd1.kaspersky-labs.com |
244.143.188.191 | dnl-cd10.kaspersky-labs.com |
182.207.133.99 | dnl-cd11.kaspersky-labs.com |
134.27.91.88 | dnl-cd12.kaspersky-labs.com |
167.185.199.158 | dnl-cd13.kaspersky-labs.com |
25.100.63.241 | dnl-cd2.kaspersky-labs.com |
152.163.8.149 | dnl-cd3.kaspersky-labs.com |
171.240.158.5 | dnl-cd4.kaspersky-labs.com |
72.9.197.75 | dnl-cd5.kaspersky-labs.com |
185.179.62.226 | dnl-cd6.kaspersky-labs.com |
56.243.7.135 | dnl-cd7.kaspersky-labs.com |
8.63.33.124 | dnl-cd8.kaspersky-labs.com |
109.221.73.194 | dnl-cd9.kaspersky-labs.com |
155.136.193.21 | dnl-cn1.kaspersky-labs.com |
94.199.138.185 | dnl-cn10.kaspersky-labs.com |
45.20.165.174 | dnl-cn11.kaspersky-labs.com |
78.177.204.244 | dnl-cn12.kaspersky-labs.com |
192.92.136.139 | dnl-cn13.kaspersky-labs.com |
131.155.14.47 | dnl-cn14.kaspersky-labs.com |
83.232.40.36 | dnl-cn15.kaspersky-labs.com |
115.133.147.241 | dnl-cn2.kaspersky-labs.com |
108.183.146.68 | dnl-cn3.kaspersky-labs.com |
235.246.92.232 | dnl-cn4.kaspersky-labs.com |
255.67.50.221 | dnl-cn5.kaspersky-labs.com |
31.157.157.35 | dnl-cn6.kaspersky-labs.com |
77.139.22.118 | dnl-cn7.kaspersky-labs.com |
16.135.223.94 | dnl-cn8.kaspersky-labs.com |
224.23.249.83 | dnl-cn9.kaspersky-labs.com |
1.113.32.85 | dnl-eu1.kaspersky-labs.com |
115.95.153.237 | dnl-eu10.kaspersky-labs.com |
53.91.98.145 | dnl-eu11.kaspersky-labs.com |
5.235.124.134 | dnl-eu12.kaspersky-labs.com |
38.69.164.204 | dnl-eu13.kaspersky-labs.com |
152.52.28.31 | dnl-eu14.kaspersky-labs.com |
23.47.229.7 | dnl-eu15.kaspersky-labs.com |
42.124.0.252 | dnl-eu2.kaspersky-labs.com |
75.25.39.254 | dnl-eu3.kaspersky-labs.com |
121.8.27.16 | dnl-eu4.kaspersky-labs.com |
183.127.228.181 | dnl-eu5.kaspersky-labs.com |
135.203.254.170 | dnl-eu6.kaspersky-labs.com |
168.105.106.240 | dnl-eu7.kaspersky-labs.com |
26.88.226.67 | dnl-eu8.kaspersky-labs.com |
221.83.171.231 | dnl-eu9.kaspersky-labs.com |
44.31.1.91 | dnl-jp1.kaspersky-labs.com |
77.189.109.162 | dnl-jp10.kaspersky-labs.com |
191.171.229.57 | dnl-jp11.kaspersky-labs.com |
61.167.174.221 | dnl-jp12.kaspersky-labs.com |
81.244.132.210 | dnl-jp13.kaspersky-labs.com |
114.145.240.24 | dnl-jp14.kaspersky-labs.com |
228.128.104.107 | dnl-jp15.kaspersky-labs.com |
99.123.49.15 | dnl-jp2.kaspersky-labs.com |
50.200.76.4 | dnl-jp3.kaspersky-labs.com |
83.101.115.74 | dnl-jp4.kaspersky-labs.com |
197.84.235.157 | dnl-jp5.kaspersky-labs.com |
136.80.181.133 | dnl-jp6.kaspersky-labs.com |
88.156.207.122 | dnl-jp7.kaspersky-labs.com |
121.58.246.124 | dnl-jp8.kaspersky-labs.com |
234.40.111.19 | dnl-jp9.kaspersky-labs.com |
105.36.56.183 | dnl-kr1.kaspersky-labs.com |
125.112.214.48 | dnl-kr10.kaspersky-labs.com |
34.146.253.118 | dnl-kr11.kaspersky-labs.com |
147.128.186.201 | dnl-kr12.kaspersky-labs.com |
18.124.131.177 | dnl-kr13.kaspersky-labs.com |
226.200.89.167 | dnl-kr15.kaspersky-labs.com |
123.222.61.33 | dnl-kr2.kaspersky-labs.com |
237.137.181.184 | dnl-kr3.kaspersky-labs.com |
176.200.127.92 | dnl-kr4.kaspersky-labs.com |
128.21.85.81 | dnl-kr5.kaspersky-labs.com |
161.179.192.151 | dnl-kr6.kaspersky-labs.com |
18.93.57.234 | dnl-kr7.kaspersky-labs.com |
145.157.2.142 | dnl-kr8.kaspersky-labs.com |
165.233.28.131 | dnl-kr9.kaspersky-labs.com |
198.135.68.202 | dnl-ru1.kaspersky-labs.com |
56.49.188.97 | dnl-ru10.kaspersky-labs.com |
182.113.133.5 | dnl-ru11.kaspersky-labs.com |
134.190.159.250 | dnl-ru12.kaspersky-labs.com |
111.223.75.196 | dnl-ru13.kaspersky-labs.com |
157.137.195.23 | dnl-ru14.kaspersky-labs.com |
95.201.140.187 | dnl-ru15.kaspersky-labs.com |
47.22.167.176 | dnl-ru2.kaspersky-labs.com |
80.179.206.246 | dnl-ru3.kaspersky-labs.com |
194.94.138.141 | dnl-ru4.kaspersky-labs.com |
133.157.15.49 | dnl-ru5.kaspersky-labs.com |
212.105.169.166 | dnl-ru6.kaspersky-labs.com |
245.7.21.236 | dnl-ru7.kaspersky-labs.com |
103.178.141.63 | dnl-ru8.kaspersky-labs.com |
230.241.86.227 | dnl-ru9.kaspersky-labs.com |
249.62.45.216 | dnl-us1.kaspersky-labs.com |
26.151.152.30 | dnl-us10.kaspersky-labs.com |
72.134.16.113 | dnl-us11.kaspersky-labs.com |
11.129.218.89 | dnl-us12.kaspersky-labs.com |
219.18.244.78 | dnl-us13.kaspersky-labs.com |
251.108.27.80 | dnl-us14.kaspersky-labs.com |
109.90.148.231 | dnl-us15.kaspersky-labs.com |
48.86.93.139 | dnl-us2.kaspersky-labs.com |
0.230.119.128 | dnl-us3.kaspersky-labs.com |
33.64.26.66 | dnl-us4.kaspersky-labs.com |
14.170.146.149 | dnl-us5.kaspersky-labs.com |
141.165.92.125 | dnl-us6.kaspersky-labs.com |
161.242.118.114 | dnl-us7.kaspersky-labs.com |
72.22.36.251 | dnl-us8.kaspersky-labs.com |
241.128.24.13 | dnl-us9.kaspersky-labs.com |
180.124.225.178 | dougknox.com |
132.200.251.167 | down.360safe.cn |
165.102.103.237 | down.360safe.com |
23.85.223.64 | download.avg.com |
218.80.168.228 | download.bleepingcomputer.com |
169.157.127.217 | download.com |
202.58.234.31 | download.com.vn |
60.41.98.182 | download.eset.com |
187.36.44.90 | download.f-secure.com |
207.113.2.79 | download.mcafee.com |
239.15.109.149 | download.microsoft.com |
97.253.229.232 | download.microsoft.comguru0.grisoft.cz |
96.120.46.12 | download.nai.com |
47.197.73.1 | download.norman.no |
80.98.112.71 | download.rising.com.cn |
194.81.232.154 | download.softpedia.com |
133.77.178.130 | download.sysinternals.com |
85.153.204.119 | download0.avast.com |
118.55.243.121 | download1.avast.com |
231.37.108.16 | download1.emsisoft.com |
234.165.185.56 | download1.quickheal.com |
254.241.211.45 | download10.quickheal.com |
31.143.250.115 | download100.avast.com |
144.125.183.198 | download1us.softpedia.com |
15.121.128.174 | download2.avast.com |
223.197.86.164 | download2.quickheal.com |
0.99.194.166 | download200.avast.com |
114.13.58.61 | download201.avast.com |
52.77.3.225 | download202.avast.com |
4.154.218.214 | download203.avast.com |
37.55.69.28 | download204.avast.com |
151.226.189.111 | download205.avast.com |
22.33.134.139 | download206.avast.com |
162.230.25.128 | download207.avast.com |
195.132.65.199 | download208.avast.com |
53.46.185.225 | download209.avast.com |
55.242.6.133 | download210.avast.com |
7.62.32.123 | download211.avast.com |
108.220.72.193 | download212.avast.com |
154.134.192.20 | download213.avast.com |
92.198.137.184 | download214.avast.com |
44.19.164.173 | download3.avast.com |
77.176.203.243 | download3.quickheal.com |
191.91.135.138 | download4.avast.com |
130.154.12.46 | download4.emsisoft.com |
82.231.39.35 | download4.quickheal.com |
114.132.146.105 | download5.avast.com |
228.47.10.188 | download5.emsisoft.com |
227.238.83.224 | download5.quickheal.com |
246.59.42.213 | download501.avast.com |
23.148.149.27 | download502.avast.com |
69.131.13.110 | download503.avast.com |
8.126.215.86 | download504.avast.com |
216.15.241.75 | download505.avast.com |
248.105.24.77 | download511.avast.com |
106.87.145.228 | download512.avast.com |
45.83.90.4 | download513.avast.com |
120.95.240.249 | download514.avast.com |
153.184.23.63 | download515.avast.com |
11.167.143.146 | download516.avast.com |
138.162.89.122 | download535.avast.com |
158.239.115.111 | download6.avast.com |
190.141.154.113 | download6.quickheal.com |
236.123.18.8 | download600.avast.com |
175.119.220.172 | download601.avast.com |
127.195.246.161 | download602.avast.com |
160.97.97.231 | download603.avast.com |
17.79.218.58 | download604.avast.com |
212.75.163.223 | download605.avast.com |
164.151.121.212 | download606.avast.com |
197.53.229.26 | download607.avast.com |
55.36.93.177 | download608.avast.com |
182.31.38.85 | download609.avast.com |
201.108.253.74 | download617.avast.com |
234.9.104.144 | download618.avast.com |
227.127.103.106 | download619.avast.com |
98.122.48.14 | download620.avast.com |
49.199.75.3 | download621.avast.com |
82.100.114.73 | download622.avast.com |
196.83.234.156 | download623.avast.com |
135.78.180.132 | download624.avast.com |
87.155.206.121 | download625.avast.com |
119.57.245.123 | download626.avast.com |
233.39.110.18 | download627.avast.com |
104.35.55.182 | download628.avast.com |
124.111.81.171 | download629.avast.com |
157.13.120.241 | download630.avast.com |
138.119.176.192 | download631.avast.com |
9.114.122.168 | download632.avast.com |
217.191.80.157 | download633.avast.com |
249.92.187.159 | download634.avast.com |
107.7.51.54 | download635.avast.com |
46.71.253.218 | download636.avast.com |
254.147.211.207 | download637.avast.com |
31.49.62.21 | download638.avast.com |
144.219.183.104 | download639.avast.com |
15.27.128.13 | download640.avast.com |
35.103.154.2 | download641.avast.com |
68.5.194.72 | download642.avast.com |
182.176.58.223 | download643.avast.com |
53.239.131.2 | download644.avast.com |
132.187.157.247 | download645.avast.com |
233.89.197.62 | download646.avast.com |
23.3.61.145 | download647.avast.com |
217.67.6.53 | download648.avast.com |
169.144.32.42 | download649.avast.com |
202.45.72.112 | download650.avast.com |
60.216.4.7 | download651.avast.com |
255.23.137.171 | download652.avast.com |
82.232.40.36 | download653.avast.com |
115.133.147.106 | download654.avast.com |
229.48.11.189 | download655.avast.com |
100.111.212.97 | download656.avast.com |
119.188.171.86 | download658.avast.com |
152.21.22.156 | download659.avast.com |
198.4.142.239 | download660.avast.com |
137.0.88.215 | download661.avast.com |
89.144.114.204 | download662.avast.com |
122.234.153.206 | download663.avast.com |
235.216.18.101 | download664.avast.com |
39.76.83.130 | download665.avast.com |
246.221.110.119 | download666.avast.com |
23.186.25.65 | download667.avast.com |
13.169.145.148 | download668.avast.com |
140.164.90.124 | download669.avast.com |
160.241.117.113 | download670.avast.com |
192.142.156.115 | download671.avast.com |
238.125.20.10 | download672.avast.com |
177.121.222.174 | download673.avast.com |
129.197.248.163 | download674.avast.com |
162.99.99.233 | download675.avast.com |
19.81.220.60 | download676.avast.com |
214.77.165.224 | download677.avast.com |
166.153.123.214 | download678.avast.com |
199.55.102.155 | download679.avast.com |
184.165.223.50 | download680.avast.com |
55.161.168.214 | download681.avast.com |
75.237.126.203 | download682.avast.com |
108.139.233.17 | download683.avast.com |
221.121.98.101 | download684.avast.com |
92.117.43.9 | download685.avast.com |
44.193.69.121 | download686.avast.com |
200.219.232.191 | download687.avast.com |
58.201.96.18 | download688.avast.com |
253.197.42.250 | download689.avast.com |
205.17.68.239 | download690.avast.com |
238.175.107.241 | download691.avast.com |
95.157.228.136 | download692.avast.com |
222.153.173.45 | download693.avast.com |
242.229.199.34 | download694.avast.com |
19.131.239.104 | download695.avast.com |
133.114.171.187 | download696.avast.com |
4.109.116.163 | download697.avast.com |
211.186.209.31 | download698.avast.com |
123.222.61.33 | download699.avast.com |
237.137.181.184 | download7.avast.com |
176.200.126.92 | download7.quickheal.com |
127.21.85.81 | download700.avast.com |
160.178.192.151 | download701.avast.com |
18.93.56.234 | download702.avast.com |
145.156.2.10 | download703.avast.com |
32.100.151.255 | download704.avast.com |
65.2.191.69 | download705.avast.com |
179.173.55.220 | download706.avast.com |
50.236.0.128 | download707.avast.com |
1.57.27.117 | download708.avast.com |
102.214.66.187 | download709.avast.com |
148.129.186.14 | download72.avast.com |
87.192.132.178 | download73.avast.com |
39.13.158.167 | download74.avast.com |
71.170.197.237 | download75.avast.com |
185.85.129.132 | download76.avast.com |
124.149.7.40 | download77.avast.com |
76.225.33.29 | download78.avast.com |
109.127.140.99 | download79.avast.com |
222.41.5.182 | download8.quickheal.com |
221.232.78.218 | download80.avast.com |
241.53.36.207 | download81.avast.com |
18.143.143.21 | download82.avast.com |
63.125.8.104 | download83.avast.com |
2.121.209.80 | download84.avast.com |
210.9.235.69 | download85.avast.com |
243.99.19.72 | download9.quickheal.com |
101.81.139.223 | download900.avast.com |
39.77.84.131 | download901.avast.com |
247.222.242.252 | download902.avast.com |
156.187.26.66 | download903.avast.com |
14.169.146.149 | download904.avast.com |
140.165.91.125 | download905.avast.com |
160.242.118.114 | download906.avast.com |
193.143.157.116 | download907.avast.com |
239.126.21.11 | download908.avast.com |
178.121.222.175 | download909.avast.com |
130.198.249.164 | download91.avast.com |
162.99.100.234 | download910.avast.com |
20.82.220.61 | download911.avast.com |
215.78.166.90 | download912.avast.com |
31.19.244.79 | download913.avast.com |
64.176.96.149 | download914.avast.com |
178.159.216.44 | download915.avast.com |
49.154.161.208 | download916.avast.com |
68.231.120.197 | download917.avast.com |
101.132.227.11 | download918.avast.com |
91.247.223.226 | download919.avast.com |
218.242.168.134 | download92.avast.com |
170.63.195.123 | download920.avast.com |
202.220.234.193 | download921.avast.com |
60.203.98.20 | download922.avast.com |
255.199.44.252 | download923.avast.com |
78.147.198.113 | download924.avast.com |
111.48.237.115 | download925.avast.com |
225.31.101.10 | download926.avast.com |
96.26.47.174 | download927.avast.com |
116.103.73.163 | download928.avast.com |
148.5.112.233 | download929.avast.com |
6.243.45.60 | download93.avast.com |
133.239.246.36 | download930.avast.com |
85.59.204.25 | download931.avast.com |
241.84.179.151 | download932.avast.com |
99.255.43.46 | download933.avast.com |
38.62.245.210 | download934.avast.com |
246.139.203.199 | download935.avast.com |
22.40.54.13 | download936.avast.com |
136.211.174.96 | download937.avast.com |
7.19.120.4 | download938.avast.com |
162.230.25.128 | download939.avast.com |
194.132.64.198 | download94.avast.com |
52.46.185.93 | download940.avast.com |
179.110.130.1 | download941.avast.com |
131.186.156.246 | download942.avast.com |
232.88.195.60 | download943.avast.com |
22.2.60.144 | download944.avast.com |
84.189.129.175 | download945.avast.com |
36.10.155.164 | download946.avast.com |
68.167.194.234 | download947.avast.com |
182.82.126.129 | download948.avast.com |
121.146.4.37 | download949.avast.com |
73.222.30.26 | download95.avast.com |
106.124.137.96 | download950.avast.com |
219.38.2.179 | download951.avast.com |
90.102.203.88 | download952.avast.com |
110.178.161.77 | download953.avast.com |
143.12.13.147 | download954.avast.com |
189.251.133.230 | download955.avast.com |
128.246.206.77 | download956.avast.com |
207.6.232.66 | download957.avast.com |
240.96.16.69 | download958.avast.com |
98.78.136.220 | download959.avast.com |
36.74.81.128 | download96.avast.com |
244.219.107.117 | download960.avast.com |
21.52.147.187 | download961.avast.com |
135.35.11.14 | download962.avast.com |
6.30.212.246 | download963.avast.com |
157.239.115.111 | download964.avast.com |
190.140.154.113 | download965.avast.com |
236.123.18.8 | download966.avast.com |
175.118.219.172 | download967.avast.com |
127.195.246.161 | download968.avast.com |
159.96.97.231 | download969.avast.com |
17.79.217.58 | download97.avast.com |
212.75.163.222 | download970.avast.com |
164.151.121.211 | download971.avast.com |
197.53.228.25 | download972.avast.com |
54.35.93.176 | download973.avast.com |
46.151.158.205 | download974.avast.com |
65.228.117.194 | download975.avast.com |
98.129.224.8 | download976.avast.com |
212.112.88.91 | download977.avast.com |
83.108.34.131 | download978.avast.com |
167.60.192.120 | download979.avast.com |
199.217.231.190 | download98.avast.com |
57.200.95.17 | download980.avast.com |
252.196.41.249 | download99.avast.com |
204.16.67.238 | downloads-eu1.kaspersky-labs.com |
237.174.106.240 | downloads-eu2.kaspersky-labs.com |
94.156.227.135 | downloads-eu3.kaspersky-labs.com |
221.152.172.43 | downloads-eu4.kaspersky-labs.com |
113.100.70.160 | downloads-us1.kaspersky-labs.com |
145.2.109.230 | downloads-us2.kaspersky-labs.com |
3.240.42.57 | downloads-us3.kaspersky-labs.com |
130.236.243.33 | downloads-us4.kaspersky-labs.com |
82.180.69.146 | downloads.andymanchesta.com |
238.81.176.148 | downloads.malwarebytes.org |
96.252.40.43 | downloads.microsoft.com |
35.59.242.207 | downloads.My-eTrust.com |
243.15.79.75 | downloads1.kaspersky-labs.com |
154.172.186.145 | downloads2.kaspersky-labs.com |
12.87.50.228 | downloads3.kaspersky-labs.com |
139.150.252.136 | downloads4.kaspersky-labs.com |
159.227.22.125 | downloads5.kaspersky-labs.com |
59.252.185.63 | dr-web-cureit.softonic.com |
173.38.177.85 | drsolomon.com |
171.102.122.249 | drweb-inside.com |
123.178.148.238 | drweb.com |
224.80.188.53 | drweb.com.es |
14.250.52.136 | drweb.net |
208.58.129.175 | drwebinside.com |
36.10.155.165 | dswlab.com |
69.168.195.235 | duba.net |
183.82.127.130 | ealaddin.net |
121.146.4.38 | ealaddin.orgeshop.aladdin.com |
73.223.31.27 | easy-vpn.comodo.com |
106.124.2.217 | edm.symantec.com |
84.159.123.44 | education.symantec.com |
211.223.68.208 | eeload.com |
231.43.26.197 | eeye.com |
8.133.134.12 | eicar.org |
54.115.254.226 | elblogdemanu.com |
124.243.75.202 | elitepvpers.de |
76.131.101.192 | emea.trendmicro.com |
109.221.141.194 | emsisoft.com |
223.203.5.89 | emsisoft.de |
161.199.206.253 | encarta.msn.com |
113.88.233.242 | engine.awaps.net |
146.177.16.183 | enterprisesecur.symantec.com |
132.31.8.11 | eos.eset.es |
2.27.209.243 | eradicatespyware.net |
22.103.235.232 | es.answers.yahoo.com |
55.5.19.234 | es.kioskea.net |
101.244.139.129 | es.mcafee.com |
40.239.84.37 | es.trendmicro.com |
247.60.111.26 | es.wasalive.com |
24.217.218.96 | esafe.com |
5.67.206.46 | esecurity.livecall.co.kr |
200.63.151.211 | eset-la.com |
152.139.109.200 | eset.com |
185.41.217.14 | eset.es |
43.24.81.165 | eset.sk |
170.19.26.73 | esp.sophos.com |
189.96.241.62 | espanol.answers.yahoo.com |
222.253.92.132 | espanol.dir.groups.yahoo.com |
80.236.212.215 | espanol.groups.yahoo.com |
86.110.36.2 | esupport.trendmicro.com |
37.187.63.247 | et.symantec.com |
70.88.102.61 | etrr.co.uk |
184.71.222.11 | eugrantsadvisor.cz |
246.190.35.244 | eugrantsadvisor.de |
198.10.61.233 | eval.symantec.com |
231.168.101.235 | ewido.net |
89.151.221.130 | exchangeyourcareer.net |
216.146.166.38 | experts-exchange.com |
235.223.193.27 | f-prot.com |
12.124.232.97 | f-secure.com |
126.107.164.180 | f-secure.frf-secure.hk |
124.230.237.28 | f-secure.nlfsecure.com |
76.51.195.17 | fastclick.net |
109.208.47.19 | feedage.com |
223.123.167.170 | feeds.sophos.com |
37.62.244.210 | feeds.trendmicro.com |
245.139.203.199 | file.ikaka.cn |
22.40.54.13 | file.ikaka.com |
136.211.174.96 | file.net |
7.18.119.4 | files.avast.com |
27.95.146.249 | files.filefont.com |
180.117.50.184 | files.trendmicro-europe.com |
38.31.170.79 | filseclab.com |
164.95.115.243 | final4ever.com |
116.172.141.232 | finjan.com |
217.73.181.46 | firewall.sunbeltsoftware.com |
7.244.45.129 | firewallguide.com |
202.51.246.37 | fixmyim.com |
29.4.149.158 | foro.ethek.com |
62.161.188.228 | foros.toxico-pc.com |
176.76.120.123 | foros.zonavirus.com |
115.139.253.31 | forospanish.com |
67.216.24.20 | forospyware.com |
227.245.3.218 | forospyware.es |
85.160.123.45 | fortiguardcenter.com |
212.223.68.209 | fortihero.com |
231.44.27.198 | fortilog.com |
8.133.134.12 | fortinet.co.at |
177.239.122.218 | fortinet.com |
116.235.67.195 | fortiprotect.com |
68.123.93.184 | fortiwifi.com |
101.213.133.64 | forum.clubedohardware.com.br |
94.74.132.216 | forum.emsisoft.com |
32.70.77.124 | forum.hardware.fr |
240.214.103.113 | forum.hijackthis.de |
17.48.143.50 | forum.ikaka.com |
254.154.130.133 | forum.jiangmin.com |
125.150.76.109 | forum.kaspersky.com |
145.226.102.98 | forum.malekal.com |
178.128.141.100 | forum.piriform.com |
95.238.133.123 | forum.securitycadets.com |
34.234.79.31 | forum.sysinternals.com |
242.54.105.20 | forum.telecharger.01net.com |
19.212.212.90 | forum.tweaks.com |
132.194.77.173 | forum.zazana.com |
71.190.22.81 | forums.cnet.com |
23.10.236.70 | forums.comodo.com |
188.44.219.16 | forums.devshed.com |
45.26.84.167 | forums.maddoktor2.com |
172.22.29.75 | forums.majorgeeks.com |
192.98.243.65 | forums.techguy.org |
225.0.95.135 | forums.whatthetech.com |
83.238.215.218 | fr.bitdefender.com |
74.99.25.246 | fr.drweb.com |
26.175.51.235 | fr.mcafee.com |
59.77.90.49 | fr.trendmicro.com |
172.59.211.132 | fr1.drweb.com |
111.55.156.240 | fr2.drweb.com |
195.7.58.229 | fr3.drweb.com |
228.165.97.231 | fr4.drweb.com |
85.147.218.126 | fr5.drweb.com |
212.143.163.34 | fr6.drweb.com |
232.219.189.24 | fr7.drweb.com |
136.249.100.221 | fractus.mat.uson.mx |
250.231.33.48 | free-av.com |
121.227.234.24 | free-av.net |
73.47.192.13 | free.antivirus.com |
106.205.43.15 | free.avg.com |
87.243.31.34 | free.drweb.com |
26.50.233.198 | free.grisoft.com |
234.127.191.187 | free.grisoft.cz |
10.28.177.136 | free.pandasecurity.com |
3.78.41.219 | free.prevx.com |
130.141.243.127 | free.tinypicbox.com |
150.218.13.116 | freeav.com |
182.120.52.186 | freeav.net |
40.34.40.205 | freespywareremoval.info |
35.221.241.113 | frisk-software.com |
242.42.12.102 | fsc.norman.com |
87.199.51.172 | fsecure.nlwebyard.com |
133.114.171.255 | ftp.avp.com |
72.49.244.35 | ftp.bitdefender.com |
151.126.14.24 | ftp.ca.co |
184.27.54.94 | ftp.ca.com |
42.198.242.245 | ftp.customer.symantec.com |
237.5.119.153 | ftp.dispatch.mcafee.com |
64.214.22.18 | ftp.download.mcafee.com |
97.115.129.88 | ftp.downloads-eu1.kaspersky-labs.com |
211.30.249.171 | ftp.downloads-eu2.kaspersky-labs.com |
82.93.194.79 | ftp.downloads-eu3.kaspersky-labs.com |
101.170.153.188 | ftp.downloads-eu4.kaspersky-labs.com |
255.124.125.3 | ftp.downloads-us1.kaspersky-labs.com |
45.106.245.86 | ftp.downloads-us2.kaspersky-labs.com |
239.102.190.62 | ftp.downloads-us3.kaspersky-labs.com |
191.247.216.51 | ftp.downloads-us4.kaspersky-labs.com |
224.80.0.185 | ftp.downloads1.kaspersky-labs.com |
214.194.252.80 | ftp.downloads2.kaspersky-labs.com |
152.190.197.244 | ftp.downloads3.kaspersky-labs.com |
104.79.224.233 | ftp.downloads4.kaspersky-labs.com |
137.40.134.174 | ftp.drweb.com |
123.22.255.2 | ftp.esafe.com |
117.141.68.101 | ftp.europe.f-secure.com |
137.218.94.90 | ftp.f-prot.com |
169.120.133.92 | ftp.f-secure.com |
215.102.253.243 | ftp.grisoft.com |
154.98.199.30 | ftp.kaspersky-labs.com |
241.53.104.19 | ftp.kaspersky.com |
17.211.211.89 | ftp.kasperskylab.ru |
131.193.76.172 | ftp.liveupdate.symantec.com |
70.189.144.204 | ftp.liveupdate.symantecliveupdate.com |
145.133.103.193 | ftp.mast.mcafee.com |
178.34.210.7 | ftp.mcafee.com |
36.17.74.158 | ftp.microworldsystems.com |
163.140.147.194 | ftp.my-etrust.com |
54.217.105.183 | ftp.nai.com |
87.118.213.253 | ftp.networkassociates.com |
201.101.77.80 | ftp.norton.com |
72.96.22.244 | ftp.rads.mcafee.com |
155.49.181.109 | ftp.sandbox.norman.com |
188.206.220.179 | ftp.secure.nai.com |
46.189.84.6 | ftp.securityresponse.symantec.com |
241.184.29.238 | ftp.sophos.com |
57.125.176.91 | ftp.symantec.com |
90.27.216.94 | ftp.symantecliveupdate.com |
204.9.80.245 | ftp.symatec.com |
74.5.157.28 | ftp.trendmicro.com |
226.213.183.18 | ftp.uk.trendmicro-europe.com |
3.115.223.88 | ftp.update.symantec.com |
117.97.155.171 | ftp.updates.symantec.com |
243.93.100.147 | ftp.updates1.kaspersky-labs.com |
67.41.186.7 | ftp.updates2.kaspersky-labs.com |
100.199.37.9 | ftp.updates3.kaspersky-labs.com |
214.113.158.161 | ftp.updates4.kaspersky-labs.com |
152.177.103.69 | ftp.us.mcafee.com |
228.121.185.181 | ftp.viruslist.com |
4.22.36.251 | funkytoad.com |
118.193.156.78 | futurenow.bitdefender.com |
245.1.102.242 | fw.rising.com.cn |
9.77.128.110 | fx.dk |
176.114.46.180 | gangbang.mytijn.org |
34.28.167.75 | gdata.de |
161.92.112.239 | gdata.es |
113.168.138.228 | gecadsoftware.com |
81.193.45.166 | geekstogo.com |
127.108.165.249 | global.ahnlab.com |
66.171.111.157 | global.jiangmin.com |
18.248.137.146 | global.nprotect.com |
178.21.48.88 | go.mcafee.com |
36.192.236.239 | go.microsoft.com |
231.255.113.147 | go.rising.com.cn |
182.76.140.136 | go.sunbeltsoftware.com |
91.109.123.82 | go.symantec.com |
205.24.243.165 | go.trendmicro.com |
76.87.188.73 | greatis.com |
95.164.147.62 | grisoft.com |
128.253.119.253 | grisoft.cz |
39.100.239.80 | grv.microsoft.com |
233.96.184.56 | guiadohardware.net |
185.241.210.45 | guru.avg.com |
218.74.250.179 | guru1.grisoft.cz |
208.188.246.74 | guru2.grisoft.cz |
146.184.191.238 | guru3.grisoft.cz |
98.73.218.227 | guru4.grisoft.cz |
131.162.1.41 | guru5.grisoft.cz |
117.16.249.252 | gwava.nl |
243.12.194.228 | hacksoft.com.pe |
7.88.220.217 | hacksoft.pe |
163.114.127.86 | halmapr.com |
209.96.247.237 | hauri.co.kr |
148.92.193.145 | hauri.net |
100.168.219.134 | haurijapan.com |
133.205.205.83 | help.rising.com.cn |
125.187.70.166 | hi.baidu.com |
64.50.138.198 | hijackthis.de |
139.127.97.187 | hijackthis.download3000.com |
172.28.204.1 | hishomeforchildren.com |
30.11.68.152 | hjt-data.trend-braintree.com |
157.6.141.188 | hjt.networktechs.com |
48.211.99.177 | home.mcafee.com |
81.112.207.247 | hostedmailsecur.symantec.com |
195.95.71.74 | hotshare.net |
197.222.148.114 | housecall.com |
149.43.39.223 | housecall.trendmicro.com |
47.65.78.37 | housecall60.trendmicro.com |
160.47.199.120 | housecall65.trendmicro.com |
99.43.144.96 | howsafeismypc.com |
51.119.170.217 | huaifai.go.th |
216.153.85.219 | i-vault.comodo.com |
73.135.206.114 | iavs.cz |
200.131.151.22 | ibusca.me |
220.207.177.12 | idauthority.com |
124.237.88.209 | ids.kaspersky-labs.com |
238.219.21.36 | ieupdate.gdata.de |
233.82.89.136 | ieupdate1.gdata.de |
184.159.48.125 | ieupdate2.gdata.de |
217.60.155.127 | ieupdate3.gdata.de |
75.231.19.22 | ieupdate4.gdata.de |
14.173.99.65 | ieupdate5.gdata.de |
100.250.58.54 | ieupdate6.gdata.de |
133.151.165.124 | ikaka.cn |
247.66.29.207 | ikaka.com |
118.253.98.239 | ikarus.at |
5.73.124.228 | ikarus.net |
38.231.164.42 | ilove.tigolbittys.info |
152.146.28.193 | images.kaspersky.com |
150.81.101.228 | in.answers.yahoo.com |
102.157.127.217 | incodesolutions.com |
203.59.167.32 | info.drweb.com |
249.229.31.115 | info.prevx.com |
187.169.108.154 | infos-du-net.com |
15.245.134.144 | infosecpodcast.com |
48.147.174.214 | infospyware.com |
162.61.106.109 | inicioid.com |
100.245.104.137 | iniciorapido.info |
173.66.130.126 | inline-software.de |
206.224.237.72 | internetsecurity.comodo.com |
195.14.233.155 | intranet.cidiroax.ipn.mx |
66.78.179.63 | investor.symantec.com |
86.154.137.52 | irc.bigshitsandwich.org |
119.244.244.122 | irc.metraiciono.com |
164.226.109.205 | iseclab.org |
231.217.49.177 | isotopecomics.com |
50.105.75.166 | iss.net |
83.195.249.46 | it.answers.yahoo.com |
76.56.114.198 | it.bitdefender.com |
14.52.59.106 | it.mcafee.com |
222.196.85.95 | it.trendmicro.com |
255.30.125.165 | itw.trendmicro.com |
236.136.112.115 | ixomodels.com |
107.132.58.91 | ixostore.ixomodels.com |
127.208.84.80 | javacoolsoftware.com |
160.110.123.210 | jetico.com |
77.220.115.105 | jiangmin.com |
16.216.61.13 | jiangmin.com.cn |
224.36.87.2 | jobs.bitdefender.com |
1.69.70.204 | jotti.org |
246.52.190.31 | jp.mcafee.com |
185.48.136.195 | jp.trendmicro.com |
137.124.94.184 | justfacebook.net |
170.146.66.119 | k-otik.com |
148.129.186.14 | k7computing.com |
19.124.131.178 | kaba.360.cn |
38.201.90.167 | kaba.360.com |
203.234.73.113 | karuna-shechen.org |
61.217.193.196 | kaspersky-fr.com |
188.212.138.104 | kaspersky-labs.com |
140.33.165.93 | kaspersky.co.jp |
44.62.76.35 | kaspersky.co.uk |
158.45.196.118 | kaspersky.com |
97.40.141.94 | kaspersky.com.cn |
48.117.168.206 | kaspersky.dk |
205.142.74.208 | kaspersky.es |
62.124.195.103 | kaspersky.gr |
189.120.140.146 | kaspersky.pl |
88.75.45.135 | kaspersky.ru |
121.233.84.205 | kaspersky.se |
234.215.17.33 | kasperskylab.co.kr |
105.211.218.9 | kasperskylab.nl |
181.155.44.121 | kav.ru |
213.56.151.123 | kav.zonelabs.com |
71.227.15.18 | kb.bitdefender.com |
10.35.217.54 | kb.bitdefender.de |
89.239.47.43 | kb.bitdefender.us |
122.140.154.113 | kerio.com |
236.55.18.196 | kimzimmer.net |
107.250.95.236 | kioskea.net |
3.71.122.225 | kpfans.com |
35.93.26.160 | kr.ahnlab.com |
14.7.146.55 | kr.sophos.com |
140.71.91.219 | krupunmai.com |
92.148.117.208 | kvup.jiangmin.com |
69.181.33.154 | kztechs.com |
115.95.153.237 | l33t.shadow-mods.net |
53.159.98.145 | la.trendmicro.com |
133.107.252.5 | ladooscuro.es |
166.9.35.75 | laneros.com |
24.179.224.227 | latam.kaspersky.com |
86.110.225.2 | latin.bitdefender.com |
38.187.251.247 | lavasoft.com |
70.88.102.61 | lavasoft.nu |
184.3.222.23 | lavasoftusa.com |
190.201.47.187 | lexikon.ikarus.at |
210.145.128.44 | license.drweb.com |
110.235.236.114 | linhadefensiva.org |
156.218.100.197 | linhadefensiva.uol.com.br |
95.213.45.173 | linux.bitdefender.com |
46.102.199.33 | lists.clamav.net |
207.63.239.36 | liutilities.com |
65.45.103.187 | live.sunbeltsoftware.com |
3.41.48.95 | liveprotect.net |
87.61.206.216 | liveupdate.symantec.com |
120.151.246.30 | liveupdate.symantec.d4p.net |
234.133.110.113 | liveupdate.symantecliveupdate.com |
104.129.55.89 | looknstop.com |
245.70.202.198 | lovings.technigoyous.net |
22.228.241.200 | lurker.clamav.net |
67.210.106.227 | mailcenter.rising.com |
138.82.183.135 | mailcenter.rising.com.cn |
90.158.209.124 | majorgeeks.com |
123.60.60.194 | mall.hauri.co.kr |
236.42.181.149 | malwarebytes.org |
47.165.254.57 | malwarecity.com |
255.242.212.46 | malwarecity.netmalwarecity.org |
31.11.187.240 | malwaredomainlist.com |
13.250.51.135 | malwarepedia.com |
140.245.252.43 | malwareremoval.com |
159.66.211.32 | malwarescan.emsisoft.com |
71.102.197.237 | malwarescan.emsisoft.de |
185.85.61.64 | malwarescan.emsisoft.es |
56.80.6.228 | mamutu.com |
131.24.156.84 | manuelruvalcaba.com |
164.182.195.154 | marian.symantec.com |
21.164.60.237 | mast.mcafee.com |
216.160.5.85 | mcafee-at-home.com |
40.108.159.74 | mcafee.com |
73.10.198.76 | mcafeeb2b.com |
186.248.63.227 | mcafeefans.com |
57.244.140.11 | mcafeeretail.com |
209.196.166.0 | mcaffee.com |
242.98.205.70 | me.kaspersky.com |
99.80.138.153 | media.fastclick.net |
226.76.203.250 | megasecurity.org |
42.17.162.239 | merijn.org |
75.174.13.241 | metascan-online.com |
189.89.133.12 | microsoft.com |
4.28.210.176 | microsoft.fr |
212.105.169.165 | midescargas.com |
244.6.20.235 | mirror02.gdata.de |
102.177.140.62 | misec.net |
101.112.213.98 | mmsk.cn |
120.189.240.87 | moneybookers.com |
153.90.23.24 | moosoft.com |
134.128.11.175 | mop.pandasecurity.com |
5.192.212.84 | mostz.com |
213.12.238.73 | mozilla-hispano.org |
58.170.22.143 | msdn.microsoft.com |
239.219.21.105 | msk.drweb.com |
177.27.222.13 | msk1.drweb.com |
129.103.248.2 | msk2.drweb.com |
162.5.32.195 | msk3.drweb.com |
143.43.87.90 | msk4.drweb.com |
82.107.221.254 | msk5.drweb.com |
34.183.247.243 | msk6.drweb.com |
67.85.98.57 | msk7.drweb.com |
52.127.90.12 | msncleaner.softonic.com |
179.190.36.176 | msnfix.changelog.fr |
199.11.250.165 | msnvirusremoval.com |
232.232.233.111 | msr.mcafee.com |
153.215.97.194 | mvps.org |
92.211.43.170 | mx.answers.yahoo.com |
44.99.69.159 | mx.mcafee.com |
77.53.229.26 | mxttchina.com |
55.36.93.177 | my-etrust.com |
250.31.38.85 | my.drweb.com |
201.176.65.74 | mygeekside.com |
110.141.236.20 | nabble.com |
224.124.100.103 | nai.com |
95.119.45.79 | natsko.com |
115.196.72.196 | naturesimages.net |
19.225.239.198 | net-security.org |
65.208.103.93 | network.drweb.com |
4.203.172.124 | networkassociates.com |
79.147.198.113 | networkassociates.nai.com |
112.184.184.62 | networkworld.com |
104.166.49.145 | neunet.orgnews.bitdefender.com |
43.162.250.53 | new-beta.drweb.com |
118.106.76.166 | new-company.drweb.com |
151.7.183.236 | new-estore.drweb.com |
9.246.47.131 | new-forum.drweb.com |
136.241.120.167 | new-partners.drweb.com |
27.190.78.156 | new-solutions.drweb.com |
60.91.186.226 | new-support.drweb.com |
174.74.50.53 | new-www.drweb.com |
176.201.127.93 | new.taringa.net |
128.22.154.82 | news.drweb.com |
161.179.193.16 | newsletters.trendmicro.com |
139.26.178.99 | niueight.norman.no |
78.22.123.75 | niufive.norman.no |
30.98.149.64 | niufour.norman.no |
63.0.64.198 | niunine.norman.no |
52.114.185.93 | niuone.norman.no |
179.110.130.1 | niuseven.norman.no |
199.186.156.247 | niusix.norman.no |
232.88.67.188 | niuthree.norman.no |
217.198.0.15 | niutwo.norman.no |
88.194.201.247 | nl.bitdefender.com |
40.14.159.236 | noadware.net |
196.39.134.106 | nod32.co.uk |
54.210.254.1 | nod32.com |
249.17.200.165 | nod32.datsec.de |
79.229.37.33 | nod32.lu |
112.130.144.103 | nod32.ru |
226.45.8.186 | norman.com |
97.108.210.94 | norton.com |
117.185.103.207 | notifier.antivir-pe.de |
17.210.143.21 | novirusthanks.org |
131.125.7.172 | nprobeta.norman.com |
2.188.208.80 | nprotect.com |
81.136.106.196 | nprotect.net |
182.38.146.11 | nprotect.seoul.go.kr |
228.208.10.94 | nsclean.com |
166.148.87.133 | ntfaq.co.kr |
250.224.113.123 | obscgi.mcafee.com |
27.126.153.193 | oem.sunbeltsoftware.com |
5.161.205.208 | offensivecomputing.net |
200.224.83.116 | office.microsoft.com |
152.45.109.105 | oldtimer.geekstogo.com |
60.78.92.51 | one.tinypicbox.com |
174.249.212.134 | onecare.live.com |
45.57.158.42 | online-backup.comodo.com |
65.133.116.31 | online.jiangmin.com |
98.94.95.229 | online.rising.com.cn |
15.77.215.56 | onlinecheck.emsisoft.com |
210.72.161.32 | onlinecheck.emsisoft.de |
162.217.187.145 | onlinecheck.emsisoft.net |
62.174.94.147 | onlinecheck.emsisoft.org |
176.157.214.42 | onlinescan.avast.com |
115.152.159.206 | openantivirus.org |
201.175.64.74 | outpost.pl |
234.9.104.144 | ozzu.com |
92.248.224.227 | p3dev.taringa.net |
219.111.37.70 | pandalabs.pandasecurity.com |
106.187.63.59 | pandasecurity.com |
139.89.102.189 | pandasoftware.com |
56.199.94.84 | pandasoftware.es |
251.195.40.248 | pantip.com |
203.15.198.113 | pcav.cn |
111.48.49.183 | pccreg.antivirus.com |
225.31.169.10 | pccreg.trendmicro.com |
156.19.107.167 | pcentraide.com |
108.96.65.156 | pcguide.com |
141.129.49.102 | pchell.com |
131.111.169.253 | pcinternetpatrol.com |
1.107.114.161 | pcsupportadvisor.com |
21.184.73.150 | pctools.com |
182.213.51.91 | pda.drweb.com |
39.195.172.175 | pedidos.protegerse.com |
166.191.117.83 | personal.psu.edu |
118.11.143.195 | personalfirewall.comodo.com |
18.37.50.9 | pestpatrol.com |
11.154.49.227 | pg.hauri.net |
206.149.251.203 | phx.corporate-ir.net |
158.226.21.192 | pineleafboys.com |
190.128.60.62 | podcasts.sophos.com |
172.234.48.213 | pogonyuto.forospanish.com |
43.229.249.121 | precisesecurity.com |
62.50.20.110 | prevx.com |
95.79.187.52 | privacy.microsoft.com |
81.61.119.135 | products.drweb.com |
207.57.64.111 | promotions.drweb.com |
159.134.22.100 | psnw.com |
68.167.6.234 | pspl.com |
182.81.126.129 | pvtc.org |
120.145.71.37 | qqjkw.net |
193.86.150.146 | quickheal.co.in |
226.244.1.216 | quickheal.com |
83.158.122.43 | radius.turvamies.com |
210.98.199.83 | rads.mcafee.com |
106.174.225.72 | ravantivirus.com |
139.76.8.142 | raymond.cc |
252.246.129.37 | reg-int.nod32-es.com |
123.181.202.73 | reg.eset.es |
203.2.228.62 | reg.rising.com.cn |
47.160.11.132 | register.norman.com |
93.198.255.83 | removetrojanvirus.org |
156.5.200.247 | renewalcenter.symantec.com |
107.82.105.115 | renewals.bitdefender.com |
19.118.145.185 | research.microsoft.com |
133.33.77.80 | research.pandasecurity.com |
72.96.210.244 | research.sunbelt-software.com |
147.40.104.100 | resplendence.com |
180.198.211.170 | retail.sp.f-secure.com |
165.240.203.125 | retail01.sp.f-secure.com |
36.47.149.33 | retail02.sp.f-secure.com |
56.124.107.22 | ribbonwarehouse.com |
89.214.90.224 | rising-global.com |
10.72.210.51 | rising.com |
205.68.156.27 | rising.com.cn |
21.77.46.137 | rolandovera.com |
54.166.86.139 | rootkit.com |
168.149.206.34 | rootkit.nl |
238.20.27.74 | rover800.gaima.co.uk |
190.165.54.190 | roysephotos.com |
95.126.220.4 | ru.trendmicro.com |
209.108.85.88 | ruben.bzin.net |
203.227.154.187 | runscanner.net |
223.48.180.176 | safe.qq.com |
255.206.98.57 | safecomputing.umn.edu |
180.67.218.208 | safer-networking.org |
119.62.164.116 | safetynet.com |
71.139.57.229 | sales.bitdefender.com |
227.164.165.43 | samroeng.hi5.com |
85.147.157.253 | sandbox.norman.com |
151.14.102.161 | sandboxie.com |
103.90.60.150 | sapcupgrades.com |
136.248.168.221 | sarahmcconnellphotography.net |
125.106.164.247 | saverssite.com |
252.102.229.20 | scan.anti-trojan.net |
136.43.188.9 | scan.kingsoft.com |
169.200.39.79 | scan4you.net |
27.183.35.38 | scanner.novirusthanks.org |
30.54.236.202 | scanner.virus.org |
109.2.134.63 | scanner2.novirusthanks.or |
142.160.174.133 | schemas.microsoft.com |
0.143.38.216 | schemas.xmlsoap.org |
195.6.107.194 | sea.symantec.com |
149.217.12.183 | search.ca.com |
181.119.51.185 | search.mcafee.com |
39.101.172.80 | search.symantec.com |
166.220.240.112 | seasonsecurity.com |
53.41.11.101 | secdreg.org |
86.198.50.171 | secubox.aldria.com |
72.52.110.126 | secunia.com |
198.48.55.102 | secure-email.comodo.com |
26.0.145.223 | secure.av-desk.com |
59.158.253.225 | secure.nai.com |
173.72.117.240 | securecomputing.com |
232.0.183.148 | secureme.com |
184.77.141.137 | securitoo.com |
217.110.124.83 | security.symantec.com |
206.25.244.166 | securitycheck.symantec.com |
77.89.190.74 | securitynewsportal.com |
97.165.88.191 | securityrespons.symantec.com |
1.194.127.5 | securityresponse.symantec.com |
115.109.247.156 | securitywonks.net |
242.172.60.188 | secuser.com |
61.116.86.177 | secuser.model-fx.com |
162.18.126.247 | sergiwa.com |
87.67.125.209 | service.mcafee.com |
25.131.70.117 | service1.symantec.com |
233.207.96.229 | servicenews.symantec.com |
133.232.3.43 | sfdoccentral.symantec.com |
247.147.191.194 | shadow.grisoft.cz |
186.211.69.102 | shadu.baidu.com |
9.159.223.219 | shadu.duba.net |
42.60.74.33 | shield.prevx.com |
32.107.70.248 | shop.hauri.co.kr |
159.170.15.156 | shop.pandasecurity.com |
178.247.230.145 | shop.sunbeltsoftware.com |
76.201.202.80 | shop.symantec.com |
122.183.66.163 | shop.trendmicro.com |
192.55.143.14 | shudoo.com |
144.199.169.4 | simplysup.com |
177.33.209.6 | siren24.nprotect.com |
162.143.201.28 | siteadvisor.com |
101.6.13.60 | sitedirector.symantec.com |
176.151.40.49 | smallbiz.symantec.com |
209.240.79.254 | smbstore.trendmicro.com |
202.102.78.81 | smokey-services.eu |
73.97.23.57 | soccersuck.com |
216.41.173.169 | softfaq.com |
249.199.212.171 | softonic.com |
38.181.77.66 | software-files.download.com |
233.49.150.102 | solutions.drweb.com |
57.125.176.91 | sophos.com |
90.27.27.37 | sophos.fr |
79.141.23.120 | sophos1.ucd.ie |
18.137.225.28 | sophos10.ucd.ie |
226.213.183.17 | sophos2.ucd.ie |
123.235.155.84 | sophos5.ucd.ie |
113.93.151.235 | sophos6.ucd.ie |
239.89.96.143 | sophos7.ucd.ie |
3.166.55.132 | sophos8.ucd.ie |
164.195.33.73 | sophos9.ucd.ie |
21.177.154.157 | soporte.pandasecurity.com |
148.173.223.188 | sos.rising.com.cn |
224.117.249.177 | sosvirus.changelog.fr |
0.19.32.247 | spd.atdmt.com |
114.1.152.74 | specs.xmlsoap.org |
188.131.233.185 | speedtest.comodo.com |
140.208.3.42 | spftrl.digitalriver.com |
40.233.166.44 | spyany.com |
154.216.30.195 | spyblocker-software.com |
25.211.231.103 | spybot.info |
172.159.129.219 | spycheck.co.uk |
205.61.169.34 | spycheck.es |
63.175.233.248 | spychecker.com |
65.171.178.224 | spycop.com |
17.247.1.78 | spywaredb.com |
170.13.108.80 | spywaredlls.prevx.com |
28.184.228.231 | spywarefiles.prevx.com |
223.123.49.15 | spywareguide.com |
51.200.8.4 | spywareinfo.com |
83.101.115.74 | spywareterminator.com |
69.144.107.29 | square.bitdefender.com |
196.207.52.193 | static.yoreparo.com |
215.151.202.49 | stats.norton.com |
116.53.241.119 | stdio-labs.blogspot.com |
229.223.106.14 | stiller.com |
100.31.51.57 | store.bitdefender.com |
187.242.212.46 | store.de.bitdefender.com |
32.144.251.116 | store.drweb.com |
78.58.239.67 | store.trendmicro.com |
140.245.185.103 | subs.geekstogo.com |
219.194.82.92 | subwiz.trendmicro.com |
252.95.254.38 | sucop.com |
242.141.186.189 | sun.symantec.com |
180.205.63.97 | sunbelt-software.com |
132.26.210.206 | sunbeltsecurity.com |
30.48.61.20 | sunbeltsoftware.com |
19.94.57.235 | superboy2010.com.au |
146.158.3.143 | superdicas.com.br |
166.234.217.132 | superuser.co.kr |
70.195.196.74 | support.drweb.com |
116.178.60.157 | support.f-secure.com |
178.41.129.1 | support.kaspersky.co |
9.64.34.124 | support.mcafee.com |
42.154.73.126 | support.microsoft.com |
23.4.61.145 | support.pandasecurity.com |
218.255.7.53 | support.rising-global.com |
170.144.33.42 | sybari.com |
202.105.200.240 | sygate.com |
188.88.64.67 | symantec-ese.baynote.net |
59.83.9.43 | symantec.com |
78.36.168.164 | symantecliveupdate.com |
243.193.207.166 | symatec.com |
33.176.71.61 | sysinternals.com |
228.168.13.221 | system-cleaner.comodo.com |
176.244.39.210 | tallemu.com |
209.146.146.24 | taringa.net |
66.128.11.235 | tds.diamondcs.com.au |
133.251.84.143 | tech.pantip.com |
85.72.42.132 | techimo.com |
243.99.19.72 | techspot.com |
101.82.139.223 | techsupportforum.com |
228.77.85.131 | tecniservicioslys.com |
248.154.43.248 | tecno-soft.com |
152.183.22.62 | tempuri.org |
10.166.142.145 | thecomputerpitstop.com |
137.161.87.49 | thejokerx.blogspot.com |
85.234.110.38 | thetechguide.com |
118.136.149.108 | thinkpad.cn |
107.250.145.67 | threatexpert.com |
46.246.91.43 | threatinfo.trendmicro.com |
254.66.117.32 | timeforyourbusi.pandasecurity.com |
156.93.25.159 | timestamp.comodoca.com |
13.75.146.54 | timestamp.wosign.com |
140.71.91.218 | tinysoftware.com |
36.23.249.83 | tms.symantec.com |
69.181.32.153 | together.pctools.com |
182.163.221.236 | tool.ikaka.com |
53.159.160.206 | toonbox.de |
255.229.118.195 | tr.mcafee.com |
31.130.225.197 | trackingtheworld.com |
145.45.217.220 | training.drweb.com |
212.236.162.128 | training.trendmicro.com |
163.57.121.117 | trapware.com |
68.86.100.59 | trendmicro.com |
182.1.220.142 | trendmicro.com.cn |
53.65.166.50 | trendmicro.fr |
200.13.64.167 | trendsecure.com |
233.170.103.237 | trial.trendmicro.com |
91.85.91.255 | trucoswindows.es |
85.16.36.164 | trucoswindows.net |
37.92.62.153 | tw.mcafee.com |
138.250.232.97 | tw.sophos.com |
58.38.96.180 | tw.trendmicro.com |
252.102.41.88 | tweaksforgeeks.com |
204.179.67.209 | u0.eset.com |
113.212.239.23 | u1.eset.com |
227.126.171.174 | u10.eset.com |
165.190.48.206 | u100.eset.com |
241.134.198.195 | u11.eset.com |
18.36.50.9 | u12.eset.com |
132.207.170.92 | u13.eset.com |
126.138.239.123 | u14.eset.com |
146.214.197.112 | u15.eset.com |
179.48.48.182 | u16.eset.com |
227.33.171.12 | u17.eset.com |
166.28.116.115 | u18.eset.com |
245.44.14.104 | u19.eset.com |
22.134.54.107 | u2.eset.com |
136.116.174.133 | u20.eset.com |
206.244.251.41 | u21.eset.com |
158.132.21.31 | u22.eset.com |
55.86.181.221 | u23.eset.com |
169.69.45.48 | u24.eset.com |
40.65.247.24 | u25.eset.com |
192.17.149.145 | u26.eset.com |
224.174.188.147 | u27.eset.com |
14.29.180.170 | u28.eset.com |
81.24.125.78 | u29.eset.com |
32.224.19.190 | u3.eset.com |
189.126.126.4 | u30.eset.com |
46.108.247.87 | u31.eset.com |
120.239.71.130 | u32.eset.com |
72.59.29.119 | u33.eset.com |
105.217.136.57 | u34.eset.com |
86.67.124.208 | u35.eset.com |
84.190.197.244 | u36.eset.com |
104.11.155.233 | u36eset.com |
137.168.139.179 | u37.eset.com |
127.26.3.6 | u37eset.com |
253.22.69.34 | u38.eset.com |
70.219.95.23 | u39.eset.com |
103.121.134.93 | u4.eset.com |
216.103.130.52 | u40.eset.com |
31.102.203.156 | u41.eset.com |
110.179.230.145 | u42.eset.com |
143.80.13.147 | u43.eset.com |
1.63.1.165 | u44.eset.com |
251.182.202.74 | u45.eset.com |
15.2.228.63 | u46.eset.com |
48.39.146.11 | u47.eset.com |
40.21.79.95 | u48.eset.com |
167.17.148.194 | u49.eset.com |
243.217.106.183 | u5.eset.com |
19.118.213.185 | u50.eset.com |
133.33.205.208 | u51.eset.com |
200.224.150.116 | u52.eset.com |
151.177.241.237 | u53.eset.com |
60.78.92.51 | u54.eset.com |
174.249.212.134 | u55.eset.com |
165.177.22.162 | u56.eset.com |
185.253.48.27 | u57.eset.com |
94.31.219.97 | u58.eset.com |
207.201.84.248 | u59.eset.com |
78.136.157.28 | u6.eset.com |
158.213.183.17 | u60.eset.com |
126.238.90.211 | u61.eset.com |
172.31.89.173 | u62.eset.com |
245.95.34.81 | u63.eset.com |
65.39.184.193 | u64.eset.com |
97.196.223.7 | u65.eset.com |
83.239.27.30 | u66.eset.com |
22.46.160.194 | u67.eset.com |
229.123.63.59 | u68.eset.com |
138.156.170.129 | u69.eset.com |
252.71.34.212 | u7.eset.com |
123.255.100.240 | u70.eset.com |
7.75.58.105 | u71.eset.com |
172.41.41.175 | u72.eset.com |
217.23.162.2 | u73.eset.com |
156.19.107.106 | u74.eset.com |
236.35.5.219 | u75.eset.com |
136.248.168.221 | u76.eset.com |
250.231.32.116 | u77.eset.com |
189.226.233.159 | u78.eset.com |
19.249.138.148 | u79.eset.com |
175.207.45.85 | u8.eset.com |
33.189.165.168 | u80.eset.com |
160.185.111.144 | u81.eset.com |
51.133.9.5 | u82.eset.com |
84.34.48.7 | u83.eset.com |
6.149.44.34 | u84.eset.com |
201.144.245.198 | u85.eset.com |
153.221.16.187 | u86.eset.com |
50.243.244.122 | u87.eset.com |
164.225.108.205 | u88.eset.com |
102.221.53.113 | u89.eset.com |
54.42.11.102 | u9.eset.com |
87.199.119.172 | u90.eset.com |
201.57.115.199 | u91.eset.com |
203.53.60.107 | u92.eset.com |
223.130.146.223 | u93.eset.com |
251.26.121.161 | u94.eset.com |
109.9.241.244 | u95.eset.com |
236.4.187.152 | u96.eset.com |
188.81.213.141 | u97.eset.com |
220.239.254.213 | u98.eset.com |
80.223.119.40 | u99.eset.com |
19.219.64.17 | uk.mcafee.com |
227.39.90.6 | uk.trendmicro-europe.com |
4.197.130.8 | uk.trendmicro.com |
118.180.250.162 | ulove.tigolbittys.info |
248.179.199.70 | up.duba.net |
12.255.225.59 | up.rising.com.cn |
45.157.8.129 | up1.nod123.cn |
158.139.197.212 | upd.zonelabs.com |
29.135.142.188 | update.360safe.cn |
237.208.97.174 | update.360safe.com |
10.109.204.176 | update.aladdin.com |
252.151.196.199 | update.authentium.com |
190.215.141.107 | update.avg.com |
142.35.99.96 | update.avgfrance.com |
175.193.74.33 | update.bitdefender.com |
156.231.194.116 | update.drweb.com |
27.39.140.24 | update.ewido.com |
47.115.166.13 | update.grisoft.com |
214.152.84.218 | update.grisoft.cz |
196.190.72.237 | update.hispasec.com |
67.253.17.145 | update.ikaka.com |
18.74.44.134 | update.ikarus-software.at |
119.231.83.204 | update.quickheal.com |
165.146.203.159 | update.rising.com.cn |
231.81.20.67 | update.sophos.com |
59.33.178.188 | update.symantec.com |
92.191.218.2 | update.trendmicro.com |
206.105.150.153 | update7.jiangmin.com |
144.169.27.61 | updatem.360safe.cn |
96.246.54.170 | updatem.360safe.com |
125.143.157.116 | updates.a-2.org |
239.58.21.199 | updates.drweb.com |
110.122.223.107 | updates.f-prot.com |
130.198.181.96 | updates.sald.com |
163.32.32.166 | updates.symantec.com |
208.14.153.249 | updates3.kaspersky-labs.com |
147.10.98.225 | updates4.kaspersky-labs.com |
99.154.124.215 | updates5.kaspersky-labs.com |
127.239.159.212 | upgrade.bitdefender.com |
241.222.23.107 | upgrade1.bitdefender.com |
180.217.224.15 | upgrade2.bitdefender.com |
131.106.251.4 | upgrade3.bitdefender.com |
164.195.34.74 | upgrade4.bitdefender.com |
22.178.154.157 | upload.changelog.fr |
149.173.100.133 | us.bitdefender.com |
169.250.126.122 | us.mcafee.com |
201.152.165.124 | us.trendmicro.com |
126.13.164.154 | usa.kaspersky.com |
65.8.110.62 | usbcleaner.cn |
17.85.136.51 | ushousecall02.trendmicro.com |
49.243.243.121 | utilidades-utiles.com |
163.225.108.204 | v.dreamwiz.com |
102.221.53.112 | v4.windowsupdate.microsoft.com |
54.41.11.101 | v5.windowsupdate.microsoft.com |
87.199.118.171 | vet.com.au |
201.181.239.67 | vicentevirtual.com |
66.172.179.226 | viguard.com |
86.249.137.215 | vil.nai.com |
119.150.245.29 | vil.nail.com |
233.133.109.112 | virobot.co.kr |
104.128.54.20 | virscan.org |
55.205.81.9 | virus.org |
88.106.120.79 | virusbuster.hu |
202.89.240.162 | viruschief.com |
141.85.186.138 | virusdoctor.jp |
93.161.212.127 | virusfreezone.info |
126.63.251.129 | virusinfo.prevx.com |
239.45.116.24 | viruslist.com |
110.41.61.188 | viruslist.ru |
130.117.87.177 | virusscan.jotti.org |
163.19.127.248 | virusscanonline.net |
152.133.191.206 | virusspy.com |
23.129.136.182 | virustotal.com |
95.70.215.36 | visualizesoftware.com |
128.227.66.38 | visualtracking.symantec.com |
242.142.186.189 | vivo-austin.com |
181.205.132.97 | vms.drweb.com |
133.26.90.86 | vncsvr.com |
166.184.197.156 | vos.symantec.com |
23.98.62.239 | vrv.com.cn |
150.162.7.147 | vsantivirus.com |
170.114.165.12 | webadmin.norman.no |
79.16.204.82 | webphand.com |
64.58.196.105 | webroot.com |
191.121.142.13 | wedoantivirus.com |
143.198.168.2 | welkam.co.jp |
243.100.207.72 | wexperts-exchange.com |
157.138.195.23 | whatthetech.com |
96.201.140.187 | wikio.es |
47.22.167.176 | wilderssecurity.com |
80.179.206.246 | wilderssecurity.net |
194.94.138.141 | wildlist.com |
133.157.16.49 | windowsupdate.microsoft.com |
85.234.42.38 | winpatrol.com |
117.135.149.108 | wmcafee.com |
231.50.13.191 | woottonfootball.com |
102.114.215.99 | wtc.trendmicro.com |
122.190.173.88 | ww.emsisoft.com |
33.159.159.37 | www.1stavenuelimousines.co.uk |
79.141.24.120 | www.2xlgames.com |
18.137.225.96 | www.ahnlab.com |
226.25.251.85 | www.aks.com |
3.115.34.87 | www.aladdin.com |
117.97.155.239 | www.anti-trojan-software.net |
55.93.100.147 | www.anti-trojan.net |
7.237.126.136 | www.anti-virus.by |
163.195.33.73 | www.antivir.es |
21.177.153.156 | www.antivirus-tools.com |
148.173.99.132 | www.antiy.net |
168.249.125.121 | www.apsecure.com |
201.151.164.123 | www.arpia.be |
246.133.29.18 | www.authentium.com |
185.129.230.183 | www.authentium.com.au |
137.205.0.172 | www.av-desk.com |
173.110.111.245 | www.avast.com |
31.93.231.72 | www.avg.com |
226.89.177.236 | www.avhide.com |
178.165.135.225 | www.avoncourt.com |
211.67.242.39 | www.avx.ro |
68.49.107.190 | www.barder.com |
195.45.52.98 | www.beautybar.com |
215.121.10.88 | www.bg.virusblokada.com |
112.143.238.22 | www.bit-defender.de |
226.126.102.105 | www.bitdefende.de |
97.122.48.13 | www.bitdefender-es.com |
49.198.74.2 | www.bitdefender.be |
82.100.113.72 | www.bitdefender.cl |
195.82.234.155 | www.bitdefender.co.uk |
134.78.179.131 | www.bitdefender.com |
86.154.205.120 | www.bitdefender.com.au |
119.56.245.123 | www.bitdefender.com.sg |
233.38.109.18 | www.bitdefender.com.tw |
103.34.54.57 | www.bitdefender.com.vn |
255.242.212.47 | www.bitdefender.de |
32.144.252.117 | www.bitdefender.es |
146.126.184.200 | www.bitdefender.fr |
16.122.129.176 | www.bitdefender.hk |
224.199.88.165 | www.bitdefender.us |
1.100.195.167 | www.bitdefenderme.com |
115.15.59.62 | www.briarhurst.com |
54.78.4.226 | www.brightoctober.com |
6.155.219.215 | www.buraka.tv |
38.56.70.29 | www.buscafacil.com |
147.222.185.107 | www.buscalo.in |
18.30.131.15 | www.busco.in |
38.106.157.4 | www.ca.com |
71.8.196.74 | www.cambridge-steiner-school.co.uk |
184.178.61.225 | www.ccssforum.org |
55.242.6.134 | www.celticmerchant.com |
7.62.32.123 | www.clamav.net |
108.220.72.193 | www.collectedcurios.com |
154.135.192.20 | www.comodo.com |
93.198.137.184 | www.comodo.tv |
44.19.164.173 | www.comodoantispam.com |
77.176.203.243 | www.comodopartners.com |
70.226.14.17 | www.computing.net |
9.33.147.181 | www.configurarequipos.com |
216.110.174.170 | www.contentverification.com |
117.135.148.107 | www.deborahshelton.net |
230.49.13.190 | www.dr-bull.com |
101.113.214.99 | www.drweb.com |
121.189.172.88 | www.ealaddin.com |
154.23.24.158 | www.elvis-express.com |
200.6.144.241 | www.emeraldclassic.co.uk |
139.1.89.217 | www.emsisoft.at |
94.149.119.209 | www.emsisoft.com |
127.239.158.211 | www.emsisoft.de |
240.221.23.106 | www.emsisoft.es |
44.81.88.135 | www.emsisoft.fr |
251.226.115.124 | www.emsisoft.it |
28.59.154.194 | www.emsisoft.jp |
142.42.18.21 | www.emsisoft.net |
13.38.220.253 | www.emsisoft.nl |
33.114.246.242 | www.emsisoft.org |
66.16.29.244 | www.engyro.com |
111.254.150.139 | www.entercept.com |
50.250.95.47 | www.esafe.com |
2.70.121.36 | www.eset.es |
167.104.104.238 | www.eugrantsadvisor.com |
24.86.225.65 | www.eugrantsadvisor.de |
219.82.170.229 | www.eugrantsadvisor.ie |
171.158.128.219 | www.eugrantsadvisor.se |
204.60.236.33 | www.exchangeyourcareer.com |
62.42.100.184 | www.f-prot.com |
60.166.173.219 | www.f-secure.com |
80.242.131.208 | www.fimasys.com |
113.144.238.22 | www.flairweddings.co.uk |
226.126.103.106 | www.forospyware.com |
97.122.48.14 | www.fortifed.com |
49.198.74.3 | www.fortiid.com |
82.100.114.73 | www.fortimail.com |
196.83.234.156 | www.fortinet-apac.com |
2.202.47.255 | www.fortinet.ch |
210.22.73.244 | www.fortinet.co.il |
243.180.112.246 | www.fortinet.com |
100.162.233.141 | www.fortinet.net |
227.158.178.50 | www.fortinet.nl |
247.234.204.39 | www.fortinet.sg |
24.136.244.109 | www.fortinetuk.com |
138.119.176.192 | www.freeality.com |
9.114.121.168 | www.freedrweb.ru |
219.193.82.159 | www.freerav.com |
251.94.189.161 | www.frisk-software.com |
109.9.53.56 | www.frisk.is |
48.73.255.220 | www.fsecure.com |
0.149.213.209 | www.garryowen.com |
33.51.64.23 | www.gdata.es |
146.221.185.106 | www.globalhauri.com |
17.29.130.15 | www.gokidding.com |
37.105.156.4 | www.grisoft.com |
70.7.196.74 | www.hackshields.com |
184.178.60.225 | www.hacksoft.com.pe |
55.241.5.133 | www.hacksoft.pe |
6.62.32.122 | www.handwritingforkids.com |
107.219.71.192 | www.hasp.se |
153.134.191.19 | www.hauri.co.kr |
95.201.140.186 | www.hauri.net |
47.21.166.176 | www.hxproduction.com |
80.179.206.246 | www.ibusca.me |
194.93.138.141 | www.ikarus.at |
132.157.15.49 | www.imddomains.co.uk |
84.234.42.38 | www.indielisboa.com |
117.135.149.108 | www.inicioid.com |
231.50.13.191 | www.iniciorapido.info |
102.113.214.99 | www.internationalservicecheck.com |
121.190.173.88 | www.irangoals.com |
19.144.145.23 | www.iseclab.org |
65.126.9.106 | www.ixomodels.com |
3.122.210.82 | www.jiangmin.com |
211.11.236.71 | www.jiangmin.com.cn |
244.100.20.73 | www.jotti.org |
102.83.140.224 | www.kaspersky.com |
41.78.85.132 | www.kioskea.net |
252.226.115.124 | www.latin-mass-society.org |
29.60.154.194 | www.livepcsupport.com |
143.42.19.22 | www.malwarecity.com |
137.161.88.121 | www.malwarecity.fr |
157.238.114.110 | www.mamutu.com |
189.140.153.112 | www.mamutu.de |
235.122.17.7 | www.manchester-offices.co.uk |
174.118.219.171 | www.mcafee.at |
126.194.245.160 | www.mcafee.com |
159.96.96.230 | www.metascan-online.com |
16.78.217.57 | www.microsoft.com |
211.74.162.222 | www.midescargas.com |
163.150.120.211 | www.mountainlakeslodge.com |
196.52.228.25 | www.mtr-design.com |
54.35.92.176 | www.mygeekside.com |
183.32.40.86 | www.netegrity.com |
203.109.254.75 | www.norman.com |
235.11.105.145 | www.nottinghampoetryseries.com |
93.249.225.228 | www.novirusthanks.org |
220.245.171.136 | www.npin.co.kr |
172.65.197.125 | www.nprotect.co.kr |
205.223.236.195 | www.nprotect.com |
62.205.101.22 | www.nprotect.com.br |
1.201.46.255 | www.nsclean.com |
209.21.72.244 | www.owen.org |
242.179.112.246 | www.pandasecurity.com |
100.162.232.141 | www.pctools.com |
230.161.181.52 | www.peterhearnwaste.co.uk |
250.237.207.41 | www.phoenixtrikeworks.com |
27.139.246.111 | www.prdouglas.co.uk |
140.121.179.194 | www.prevx.com |
11.117.124.170 | www.prevx1.com |
219.193.82.160 | www.professorbeyer.com |
252.95.190.162 | www.quickheal.com |
110.9.54.57 | www.removetrojanvirus.org |
48.73.255.221 | www.renningers.com |
0.150.214.210 | www.residentphotography.com |
154.172.185.144 | www.retento.com |
11.86.50.227 | www.reviewsofbooks.com |
138.150.251.135 | www.rising-global.com |
158.226.21.124 | www.risingav.com.au |
191.128.61.195 | www.safenet-inc.com |
49.42.181.90 | www.scan4you.net |
175.106.126.254 | www.seasonsecurity.com |
3.58.28.119 | www.secondchanceboxer.com |
104.216.68.189 | www.secure-elements.com |
150.130.188.16 | www.sheffieldmind.co.uk |
88.194.133.180 | www.smf.org |
168.10.155.164 | www.softfaq.com |
68.167.194.234 | www.sophos.com |
182.82.126.129 | www.spycheck.co.uk |
121.145.4.37 | www.spycheck.es |
73.222.30.26 | www.stadiumpage.com |
240.2.16.231 | www.sunbeltsoftware.com |
98.173.136.58 | www.symantec.com |
225.236.82.222 | www.sysinternals.com |
112.180.163.79 | www.tecniservicioslys.com |
145.14.15.149 | www.testmypcsecurity.com |
191.253.135.232 | www.threatexpert.com |
130.248.80.208 | www.tomorrowsedge.net |
81.137.107.197 | www.trendmicro.com |
114.226.146.199 | www.trojaner.info |
228.209.10.94 | www.trustix.com |
167.204.212.2 | www.trustlogo.com |
122.96.241.251 | www.vba.com.by |
155.186.25.65 | www.virscan.org |
13.168.145.148 | www.virus.fi |
139.164.90.124 | www.virus.org |
159.241.117.113 | www.virusbuster.hu |
57.7.20.235 | www.viruschief.com |
102.245.141.130 | www.virusfreezone.info |
41.241.86.38 | www.virustotal.com |
249.61.112.27 | www.wellgousa.com |
26.219.220.98 | www.whichssl.com |
140.201.84.181 | www.willsee.com |
78.197.29.89 | www.xmlsoap.org |
162.149.119.210 | www.zarya.info |
195.51.227.24 | www1.my-etrust.com |
53.33.91.175 | www3.ca.com |
51.157.164.210 | www3.safenet-inc.com |
71.233.122.199 | www4.symantec.com |
104.135.229.13 | wwws.clamav.net |
217.241.217.220 | x-cleaner.com |
212.236.163.128 | x.360safe.com |
164.57.189.117 | yoreparo.com |
196.215.228.187 | z-oleg.com |
189.76.227.149 | zeustracker.abuse.ch |
128.71.173.125 | zeylstra.nl |
80.148.199.114 | zhidao.baidu.com |
112.50.238.116 | zhidao.ikaka.com |
226.32.103.11 | ziggamza.net |
97.28.48.175 | zonavirus.com |
240.228.198.32 | zonealarm.com |
17.129.237.102 | zonelabs.com |
3.239.41.57 | zonelabs.fr |
129.235.242.33 | zonelog.co.uk |
81.56.200.22 | zs.kingsoft.com |
114.213.52.24 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 12644 | 12800 | 3.76874 | 55d274f88e5ab59aa27a86516437f7d8 |
.data | 20480 | 64 | 512 | 0.164757 | 75fe664fdcd708925b7ca712ee127c19 |
.rdata | 24576 | 1328 | 1536 | 3.03097 | 2707a7526abdc69c43f37dd3b6665e30 |
.bss | 28672 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.idata | 32768 | 800 | 1024 | 2.18489 | 4e803ebabfbd6fe3233c57c1b6e762a8 |
.rsrc | 36864 | 87232 | 87552 | 5.54166 | 34b5a2a0306aa053bf792aa7f84ba6c7 |
Dropped from:
71909eada4fca1fc018487d0e6b657efe12a6dd5698996f0f6eb4e1e57c6ba03
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a
Network Activity
URLs
URL | IP |
---|---|
hxxp://4rl144t5h0m232fpeig438v5n565cm.ipcheker.com/ | 75.126.104.226 |
www.buscaid.com | 8.5.1.51 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):