Trojan.Win32.Fsysna.dpxy (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: e53ab8c0dd69e8d6351845a82f3d2a06
SHA1: a2791d44ad04874224498edd7b017ef90ff14de7
SHA256: 004e901844bf9bdbffda5cfe0ce17962174971d613f34cd42e13b059711d3800
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 3630256 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: XXL Software
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61755 bytes in size. The following strings are added to the hosts file listed below:
173.224.217.75 | viabcp.com |
173.224.217.75 | www.viabcp.com |
173.224.217.75 | ww2.viabcp.com |
173.224.217.75 | bcpzonasegura.viabcp.com |
173.224.217.75 | hotmail.com |
173.224.217.75 | www.hotmail.com |
225.38.89.4 | 13iii.com |
2.195.128.6 | 15660808.co.kr |
116.178.248.157 | 2-spyware.com |
243.173.194.65 | 247fixes.com |
7.250.220.54 | 360.cn |
39.152.3.124 | 360.com |
153.134.192.207 | 360safe.cn |
24.130.137.183 | 360safe.com |
232.206.95.172 | 45pounds.com |
9.108.203.175 | 51nb.com |
123.22.67.70 | 9down.com |
61.86.12.234 | a-2.org |
13.163.226.223 | a188.x.akamai.net |
46.64.78.37 | abuse.ch |
160.235.198.120 | acs.pandasoftware.com |
31.42.143.28 | ad-aware-se.uptodown.com |
50.119.170.17 | ad.fastclick.net |
83.20.209.87 | ads.fastclick.net |
197.191.73.238 | agfirewall.ru |
68.254.19.146 | agnitum.com |
20.75.45.135 | agnitum.de |
120.233.84.205 | agnitum.fr |
166.147.205.32 | agnitum.ru |
105.211.150.196 | ahn.com.cn |
57.31.176.185 | ahnlab.com |
90.189.216.255 | akamai.net |
204.103.148.151 | aknow.prevx.com |
142.167.25.59 | aladdin.com |
94.244.51.48 | alert.rising.com.cn |
127.145.159.118 | alerta-antivirus.inteco.es |
241.60.23.201 | alerta-antivirus.red.es |
112.123.224.109 | alladdin.ru |
131.200.183.98 | aluriasoftware.com |
164.33.34.168 | analysis.seclab.tuwien.ac.at |
210.16.154.251 | andymanchesta.com |
149.11.100.227 | anti-virus-software-review.com |
101.156.126.216 | anti-virus.by |
133.246.165.218 | anti-virus.com |
247.228.30.113 | antirootkit.com |
186.224.231.21 | antispam.sunbeltsoftware.com |
138.112.1.10 | antispy.ru |
171.202.41.80 | antispyware.sunbeltsoftware.com |
29.184.161.164 | antivir.es |
155.180.106.140 | antiviraldp.com |
175.1.132.129 | antivirus-online.de |
208.158.172.131 | antivirus-tools.com |
254.141.36.26 | antivirus.about.com |
193.136.237.190 | antivirus.cai.com |
144.213.8.179 | antivirus.comodo.com |
177.114.115.249 | antivirus.hispavista.com |
35.97.235.76 | antivirus.sunbeltsoftware.com |
230.92.181.240 | antiy.net |
182.169.139.229 | anubis.iseclab.org |
214.71.246.43 | apac.trendmicro.com |
72.53.111.194 | ar.answers.yahoo.com |
199.49.56.102 | ar.atwola.com |
219.125.14.91 | arcabit.com |
252.27.122.161 | arcabit.pl |
110.9.242.245 | archive.bitdefender.com |
236.5.187.153 | arswp.com |
188.82.213.142 | arwww.fortinet.cz |
221.239.253.212 | asap.authentium.com |
79.222.117.39 | ashampoo.com |
18.217.62.15 | atazita.blogspot.com |
225.38.89.4 | atdmt.com |
2.195.128.6 | attechnical.com |
116.178.248.157 | atwola.com |
243.173.194.65 | au.mcafee.com |
7.250.220.54 | auditmypc.com |
39.152.3.124 | authentium.com |
153.134.192.207 | auwww.ealaddin.nl |
24.130.137.183 | avast-home.uptodown.com |
232.206.95.172 | avast.com |
9.108.203.175 | avast.ru |
123.22.67.70 | avg-antivirus.net |
61.86.12.234 | avg.com |
13.163.226.223 | avg.vo.llnwd.net |
46.64.78.37 | avgate.net |
160.235.198.120 | avgfrance.com |
31.42.143.28 | avhide.com |
50.119.170.17 | avira.com |
83.20.209.87 | avp.ch |
197.191.73.238 | avp.com |
68.254.19.146 | avp.ru |
20.75.45.135 | avpclub.ddns.info |
120.233.84.205 | avu.zonelabs.com |
166.147.205.32 | avx.rob-have.net |
105.211.150.196 | awaps.net |
57.31.176.185 | b-have.orgbitdefender-ar.com |
90.189.216.255 | babooforum.com.br |
204.103.148.151 | backup.comodo.com |
142.167.25.59 | baike.360.cn |
94.244.51.48 | baike.360.com |
127.145.159.118 | bakunos.com |
241.60.23.201 | banner.fastclick.net |
112.123.224.109 | banners.fastclick.net |
131.200.183.98 | baristamagazine.com |
164.33.34.168 | basetendencies.com |
210.16.154.251 | bbs.360.cn |
149.11.100.227 | bbs.360safe.cn |
101.156.126.216 | bbs.360safe.com |
133.246.165.218 | bbs.cfan.com.cn |
247.228.30.113 | bbs.cpcw.com |
186.224.231.21 | bbs.dswlab.com |
138.112.1.10 | bbs.duba.net |
171.202.41.80 | bbs.ikaka.com |
29.184.161.164 | bbs.janmeng.com |
155.180.106.140 | bbs.kafan.cn |
175.1.132.129 | bbs.kafan.com |
208.158.172.131 | bbs.kaspersky.com.cn |
254.141.36.26 | bbs.kpfans.com |
193.136.237.190 | bbs.mcafeefans.com |
144.213.8.179 | bbs.s-sos.net |
177.114.115.249 | bbs.sucop.com |
35.97.235.76 | bbs.taisha.org |
230.92.181.240 | bbs.trendmicro.com.cn |
182.169.139.229 | bbs.winzheng.com |
214.71.246.43 | bestofewan.com |
72.53.111.194 | beta.anti-virus.by |
199.49.56.102 | bg.virusblokada.com |
219.125.14.91 | bhsbees.com |
252.27.122.161 | bitcity.info |
110.9.242.245 | bitcity.org |
236.5.187.153 | bitdefender.co.uk |
188.82.213.142 | bitdefender.com |
221.239.253.212 | bitdefender.com.ua |
79.222.117.39 | bitdefender.es |
18.217.62.15 | bitdefender.org |
225.38.89.4 | bitdefender.secyber.net |
2.195.128.6 | bitdefenderchina.com |
116.178.248.157 | bitdefenderguatemala.com |
243.173.194.65 | bitdefendermalaysia.com |
7.250.220.54 | bitdefendertaiwan.com |
39.152.3.124 | bitdefenderuruguay.com |
153.134.192.207 | bitdefenderusa.com |
200.50.57.104 | biz.nprotect.com |
152.127.15.93 | bkav.com.vn |
185.28.123.95 | blackice.iss.net |
43.199.243.246 | bleedingthreats.net |
238.6.188.154 | bleepingcomputer.com |
189.83.147.143 | blitzblank.com |
222.240.254.213 | blog.hispasec.com |
80.155.118.40 | blog.threatfire.com |
207.218.64.204 | blog.titanium-jewelry.com |
227.39.90.193 | blog.trendmicro.com |
3.197.129.7 | blogs.icerocket.com |
117.111.250.158 | blogs.protegerse.com |
244.175.195.66 | blogschapines.com |
196.251.221.55 | boardreader.com |
41.153.4.125 | bobbondart.com |
87.67.125.209 | br.mcafee.com |
25.131.70.117 | br.trendmicro.com |
233.208.96.106 | brazil.kaspersky.com |
10.109.136.176 | buddy.bitdefender.com |
124.24.68.71 | bugs.clamav.net |
63.87.201.235 | buscafacil.com |
14.164.228.224 | buscalo.in |
47.65.79.38 | busco.in |
161.236.199.121 | buy.bitdefender-es.com |
32.43.145.29 | buy.bitdefender.com |
52.120.103.18 | buy.bitdefender.de |
84.210.210.88 | buy.drweb.com |
130.192.75.171 | buy.rising.com.cn |
69.188.20.147 | ca.com |
21.76.46.136 | cacomvip.ca.com |
54.166.85.138 | cai.com |
168.148.206.34 | canada.karuna-shechen.org |
106.144.151.198 | castlecops.com |
58.33.177.187 | castlecrops.com |
91.122.217.1 | ccslaughterspdx.com |
205.105.81.84 | cddchiangmai.net |
76.100.26.60 | cdn.atwola.com |
95.177.53.49 | center.rising.com.cn |
128.78.92.51 | centralcommand.com |
174.61.212.202 | cert.org |
113.56.158.110 | cfan.com.cn |
65.133.184.99 | cgi.clamav.net |
97.35.35.169 | changedetection.com |
211.17.156.252 | changelog.fr |
150.13.101.160 | channelpartner.trendmicro.com |
102.89.59.149 | chickensroamfree.com |
135.247.166.219 | chkrootkit.org |
249.229.31.115 | chollian.nprotect.co.kr |
119.225.232.23 | cisrt.org |
139.46.190.12 | cit.kookmin.ac.kr |
172.203.42.82 | clamav.net |
30.186.162.165 | clamwin.com |
157.181.107.73 | click.atdmt.com |
108.2.134.62 | clicks.atdmt.com |
141.159.173.132 | cloudprotection.pandasecurity.com |
255.142.37.215 | clubic.com |
194.137.239.191 | cmmings.cn |
146.214.9.180 | cn.mcafee.com |
178.116.48.182 | cn.sophos.com |
36.98.169.77 | cn.trendmicro.com |
163.94.114.241 | codehard.wordpress.com |
183.170.140.230 | cohartuk.com |
216.72.180.44 | commentcamarche.net |
58.38.96.112 | community.thaiware.com |
184.34.41.88 | comodo.com |
136.111.255.77 | company.drweb.com |
169.12.107.79 | company.hauri.co.kr |
27.183.227.230 | company.hauri.net |
222.246.172.138 | computing.net |
173.67.131.127 | comunidad.wilkinsonpc.com.co |
206.224.238.197 | configurarequipos.com |
64.139.102.24 | coresecurity.com |
191.202.48.188 | cou85.com |
211.23.74.177 | cowsmo.com |
244.181.113.247 | cpsecure.com |
101.95.234.142 | csc.rising.com.cn |
228.159.179.50 | cureit.ru |
180.235.205.39 | customer.symantec.com |
25.137.245.110 | customers.drweb.com |
71.51.109.193 | cutlines.org |
9.115.54.101 | cwsandbox.org |
217.192.80.90 | cybercrime.pandasecurity.com |
250.93.120.160 | cyberdefender.com |
108.8.52.55 | cybertechhelp.com |
47.71.185.219 | daboweb.com |
254.148.212.208 | daniloff.net |
31.49.63.22 | daniweb.com |
145.220.183.105 | darkclockers.com |
16.27.129.13 | dazhizhu.cn |
36.104.87.2 | de.bitdefender.com |
69.194.194.72 | de.mcafee.com |
114.176.59.155 | de.trendmicro.com |
53.172.4.131 | deckard.geekstogo.com |
5.60.30.120 | deerfield.com |
38.150.70.123 | defalcos.com |
152.132.190.18 | definitions.symantec.com |
90.128.135.182 | dell.symantec.com |
42.17.161.171 | demos.eset.es |
75.106.201.241 | descargas.eset.es |
189.89.65.68 | dev.depeuter.org |
60.84.10.44 | developmentdrums.org |
79.161.37.33 | dialognauka.ru |
112.62.76.35 | diamondcs.com.au |
158.45.196.186 | dicasweb.com.br |
97.41.142.94 | discussions.virtualdr.com |
49.117.168.83 | disk-encryption.comodo.com |
82.19.19.153 | dl.360safe.com |
195.1.140.236 | dl1.antivir-pe.com |
134.253.85.192 | dl1.antivir-pe.de |
134.121.91.181 | dl1.antivir.de |
167.23.198.251 | dl1.avgate.net |
24.5.63.146 | dl10.freeav.net |
151.1.8.55 | dl2.antivir-pe.com |
171.77.222.44 | dl2.antivir-pe.de |
204.235.74.114 | dl2.antivir.de |
62.218.194.197 | dl2.avgate.net |
188.213.139.105 | dl3.antivir-pe.de |
140.34.166.94 | dl3.antivir.de |
173.191.205.164 | dl3.avgate.net |
31.174.69.247 | dl4.antivir-pe.com |
226.169.15.223 | dl4.antivir-pe.de |
178.246.41.212 | dl4.antivir.de |
210.147.80.214 | dl4.avgate.net |
68.130.200.109 | dl5.avgate.net |
195.126.146.17 | dl6.avgate.net |
215.202.172.6 | dl7.avgate.net |
248.104.211.76 | dl8.avgate.net |
105.86.144.159 | dl8.freeav.net |
232.82.89.136 | dl9.avgate.net |
184.158.47.125 | dl9.freeav.net |
217.60.155.127 | dnl-cd1.kaspersky-labs.com |
75.231.19.22 | dnl-cd10.kaspersky-labs.com |
13.38.220.186 | dnl-cd11.kaspersky-labs.com |
221.115.179.175 | dnl-cd12.kaspersky-labs.com |
254.16.30.245 | dnl-cd13.kaspersky-labs.com |
112.187.150.72 | dnl-cd2.kaspersky-labs.com |
239.250.96.236 | dnl-cd3.kaspersky-labs.com |
3.71.122.225 | dnl-cd4.kaspersky-labs.com |
35.228.161.39 | dnl-cd5.kaspersky-labs.com |
149.143.25.190 | dnl-cd6.kaspersky-labs.com |
20.207.227.98 | dnl-cd7.kaspersky-labs.com |
228.27.253.87 | dnl-cd8.kaspersky-labs.com |
73.185.36.157 | dnl-cd9.kaspersky-labs.com |
118.99.157.240 | dnl-cn1.kaspersky-labs.com |
57.163.102.149 | dnl-cn10.kaspersky-labs.com |
9.239.128.138 | dnl-cn11.kaspersky-labs.com |
42.141.168.208 | dnl-cn12.kaspersky-labs.com |
156.56.100.103 | dnl-cn13.kaspersky-labs.com |
94.119.233.11 | dnl-cn14.kaspersky-labs.com |
46.196.4.0 | dnl-cn15.kaspersky-labs.com |
79.97.111.70 | dnl-cn2.kaspersky-labs.com |
193.12.231.153 | dnl-cn3.kaspersky-labs.com |
64.75.177.61 | dnl-cn4.kaspersky-labs.com |
68.136.119.34 | dnl-cn5.kaspersky-labs.com |
100.226.226.104 | dnl-cn6.kaspersky-labs.com |
146.208.91.187 | dnl-cn7.kaspersky-labs.com |
85.204.36.163 | dnl-cn8.kaspersky-labs.com |
37.92.62.152 | dnl-cn9.kaspersky-labs.com |
70.182.101.154 | dnl-eu1.kaspersky-labs.com |
183.164.222.49 | dnl-eu10.kaspersky-labs.com |
122.160.167.214 | dnl-eu11.kaspersky-labs.com |
74.48.193.203 | dnl-eu12.kaspersky-labs.com |
107.138.233.17 | dnl-eu13.kaspersky-labs.com |
221.121.97.100 | dnl-eu14.kaspersky-labs.com |
92.116.42.76 | dnl-eu15.kaspersky-labs.com |
111.193.69.65 | dnl-eu2.kaspersky-labs.com |
144.94.108.67 | dnl-eu3.kaspersky-labs.com |
190.77.228.218 | dnl-eu4.kaspersky-labs.com |
129.72.174.126 | dnl-eu5.kaspersky-labs.com |
81.149.200.115 | dnl-eu6.kaspersky-labs.com |
113.51.51.185 | dnl-eu7.kaspersky-labs.com |
227.33.172.12 | dnl-eu8.kaspersky-labs.com |
166.29.117.176 | dnl-eu9.kaspersky-labs.com |
118.105.75.165 | dnl-jp1.kaspersky-labs.com |
151.7.182.235 | dnl-jp10.kaspersky-labs.com |
8.245.47.130 | dnl-jp11.kaspersky-labs.com |
135.241.248.39 | dnl-jp12.kaspersky-labs.com |
155.61.206.28 | dnl-jp13.kaspersky-labs.com |
188.219.232.16 | dnl-jp14.kaspersky-labs.com |
220.120.97.99 | dnl-jp15.kaspersky-labs.com |
91.116.42.8 | dnl-jp2.kaspersky-labs.com |
43.192.68.253 | dnl-jp3.kaspersky-labs.com |
76.94.108.67 | dnl-jp4.kaspersky-labs.com |
190.77.228.150 | dnl-jp5.kaspersky-labs.com |
129.72.173.126 | dnl-jp6.kaspersky-labs.com |
80.149.200.115 | dnl-jp7.kaspersky-labs.com |
113.50.239.117 | dnl-jp8.kaspersky-labs.com |
227.33.103.12 | dnl-jp9.kaspersky-labs.com |
98.28.49.176 | dnl-kr1.kaspersky-labs.com |
118.105.75.165 | dnl-kr10.kaspersky-labs.com |
150.7.114.235 | dnl-kr11.kaspersky-labs.com |
8.245.46.62 | dnl-kr12.kaspersky-labs.com |
135.241.248.38 | dnl-kr13.kaspersky-labs.com |
87.61.206.27 | dnl-kr15.kaspersky-labs.com |
120.219.57.29 | dnl-kr2.kaspersky-labs.com |
233.133.178.180 | dnl-kr3.kaspersky-labs.com |
172.197.123.89 | dnl-kr4.kaspersky-labs.com |
124.17.81.78 | dnl-kr5.kaspersky-labs.com |
157.175.189.148 | dnl-kr6.kaspersky-labs.com |
15.90.53.231 | dnl-kr7.kaspersky-labs.com |
142.153.254.139 | dnl-kr8.kaspersky-labs.com |
161.230.25.128 | dnl-kr9.kaspersky-labs.com |
194.131.64.198 | dnl-ru1.kaspersky-labs.com |
52.46.184.93 | dnl-ru10.kaspersky-labs.com |
179.109.130.1 | dnl-ru11.kaspersky-labs.com |
131.186.156.246 | dnl-ru12.kaspersky-labs.com |
231.88.195.60 | dnl-ru13.kaspersky-labs.com |
21.2.60.143 | dnl-ru14.kaspersky-labs.com |
216.66.5.51 | dnl-ru15.kaspersky-labs.com |
168.142.31.40 | dnl-ru2.kaspersky-labs.com |
201.44.70.110 | dnl-ru3.kaspersky-labs.com |
43.198.243.246 | dnl-ru4.kaspersky-labs.com |
237.6.120.154 | dnl-ru5.kaspersky-labs.com |
189.82.146.143 | dnl-ru6.kaspersky-labs.com |
222.240.254.213 | dnl-ru7.kaspersky-labs.com |
80.155.118.40 | dnl-ru8.kaspersky-labs.com |
207.218.63.204 | dnl-ru9.kaspersky-labs.com |
226.39.22.193 | dnl-us1.kaspersky-labs.com |
3.128.129.7 | dnl-us10.kaspersky-labs.com |
49.111.249.90 | dnl-us11.kaspersky-labs.com |
244.106.195.66 | dnl-us12.kaspersky-labs.com |
196.251.221.55 | dnl-us13.kaspersky-labs.com |
228.85.4.57 | dnl-us14.kaspersky-labs.com |
86.67.125.208 | dnl-us15.kaspersky-labs.com |
25.63.70.116 | dnl-us2.kaspersky-labs.com |
233.207.96.105 | dnl-us3.kaspersky-labs.com |
10.41.135.175 | dnl-us4.kaspersky-labs.com |
124.23.0.3 | dnl-us5.kaspersky-labs.com |
250.19.201.235 | dnl-us6.kaspersky-labs.com |
14.96.227.224 | dnl-us7.kaspersky-labs.com |
47.253.11.226 | dnl-us8.kaspersky-labs.com |
93.236.131.121 | dnl-us9.kaspersky-labs.com |
32.231.76.29 | dougknox.com |
239.52.103.18 | down.360safe.cn |
16.209.210.88 | down.360safe.com |
130.192.74.171 | download.avg.com |
69.187.20.79 | download.bleepingcomputer.com |
21.8.234.68 | download.com |
53.166.85.138 | download.com.vn |
167.148.206.33 | download.eset.com |
38.144.199.245 | download.f-secure.com |
106.12.157.234 | download.mcafee.com |
139.170.8.48 | download.microsoft.com |
252.152.129.131 | download.microsoft.comguru0.grisoft.cz |
123.148.74.39 | download.nai.com |
75.224.100.29 | download.norman.no |
108.126.140.99 | download.rising.com.cn |
222.108.4.182 | download.softpedia.com |
160.104.205.158 | download.sysinternals.com |
112.181.232.147 | download0.avast.com |
145.82.15.149 | download1.avast.com |
3.65.135.44 | download1.emsisoft.com |
130.60.80.208 | download1.quickheal.com |
149.137.107.197 | download10.quickheal.com |
182.38.146.11 | download100.avast.com |
40.21.78.94 | download1us.softpedia.com |
167.17.24.70 | download2.avast.com |
119.93.238.59 | download2.quickheal.com |
152.251.89.61 | download200.avast.com |
9.165.210.212 | download201.avast.com |
204.229.155.120 | download202.avast.com |
156.49.113.110 | download203.avast.com |
189.207.221.180 | download204.avast.com |
47.121.85.7 | download205.avast.com |
173.185.14.155 | download206.avast.com |
177.246.41.144 | download207.avast.com |
210.147.80.214 | download208.avast.com |
68.62.200.109 | download209.avast.com |
195.125.146.17 | download210.avast.com |
147.202.172.6 | download211.avast.com |
247.103.211.76 | download212.avast.com |
37.18.75.159 | download213.avast.com |
232.82.21.67 | download214.avast.com |
184.158.47.56 | download3.avast.com |
217.60.86.126 | download3.quickheal.com |
74.230.19.21 | download4.avast.com |
13.38.152.185 | download4.emsisoft.com |
221.114.178.175 | download4.quickheal.com |
254.16.30.245 | download5.avast.com |
112.187.150.72 | download5.emsisoft.com |
238.250.95.236 | download5.quickheal.com |
2.71.54.225 | download501.avast.com |
35.160.161.39 | download502.avast.com |
81.143.25.122 | download503.avast.com |
20.138.227.98 | download504.avast.com |
228.27.253.87 | download505.avast.com |
4.116.36.9 | download511.avast.com |
38.19.77.160 | download512.avast.com |
233.15.22.68 | download513.avast.com |
185.159.48.58 | download514.avast.com |
218.249.88.128 | download515.avast.com |
76.232.208.211 | download516.avast.com |
202.227.153.187 | download535.avast.com |
222.48.180.176 | download6.avast.com |
255.205.219.178 | download6.quickheal.com |
45.188.83.73 | download600.avast.com |
240.183.29.237 | download601.avast.com |
192.4.55.226 | download602.avast.com |
224.161.162.40 | download603.avast.com |
82.144.26.123 | download604.avast.com |
21.140.228.31 | download605.avast.com |
229.216.186.20 | download606.avast.com |
6.118.37.90 | download607.avast.com |
119.100.158.241 | download608.avast.com |
246.96.103.149 | download609.avast.com |
10.172.61.139 | download617.avast.com |
43.74.169.209 | download618.avast.com |
157.57.17.20 | download619.avast.com |
12.36.218.184 | download620.avast.com |
219.113.245.173 | download621.avast.com |
252.14.28.243 | download622.avast.com |
110.253.148.70 | download623.avast.com |
49.248.94.46 | download624.avast.com |
1.69.120.35 | download625.avast.com |
33.226.159.37 | download626.avast.com |
147.209.23.188 | download627.avast.com |
18.205.225.96 | download628.avast.com |
38.25.251.85 | download629.avast.com |
71.183.34.155 | download630.avast.com |
184.165.223.238 | download631.avast.com |
55.161.168.215 | download632.avast.com |
7.237.126.204 | download633.avast.com |
40.139.234.206 | download634.avast.com |
154.54.98.101 | download635.avast.com |
93.117.43.9 | download636.avast.com |
44.194.2.254 | download637.avast.com |
77.95.109.68 | download638.avast.com |
191.10.229.199 | download639.avast.com |
110.121.222.107 | download640.avast.com |
129.198.249.96 | download641.avast.com |
162.99.32.166 | download642.avast.com |
20.14.152.61 | download643.avast.com |
147.77.98.225 | download644.avast.com |
99.154.124.214 | download645.avast.com |
199.56.163.28 | download646.avast.com |
245.226.28.111 | download647.avast.com |
184.34.229.19 | download648.avast.com |
136.110.255.8 | download649.avast.com |
169.12.39.79 | download650.avast.com |
27.182.227.230 | download651.avast.com |
221.246.104.138 | download652.avast.com |
173.67.130.127 | download653.avast.com |
206.224.238.197 | download654.avast.com |
64.139.102.24 | download655.avast.com |
191.202.47.188 | download656.avast.com |
210.23.6.177 | download658.avast.com |
243.112.113.247 | download659.avast.com |
33.95.233.74 | download660.avast.com |
228.90.179.50 | download661.avast.com |
180.235.205.39 | download662.avast.com |
213.69.244.41 | download663.avast.com |
70.51.109.192 | download664.avast.com |
9.47.54.100 | download665.avast.com |
217.191.80.89 | download666.avast.com |
250.25.120.160 | download667.avast.com |
108.7.240.243 | download668.avast.com |
234.3.185.219 | download669.avast.com |
254.80.211.208 | download670.avast.com |
31.237.251.194 | download671.avast.com |
61.204.99.89 | download672.avast.com |
0.199.44.253 | download673.avast.com |
207.20.71.242 | download674.avast.com |
240.177.178.56 | download675.avast.com |
98.160.42.139 | download676.avast.com |
37.156.244.47 | download677.avast.com |
245.232.202.36 | download678.avast.com |
22.134.53.106 | download679.avast.com |
135.116.174.1 | download680.avast.com |
6.112.119.165 | download681.avast.com |
26.188.77.154 | download682.avast.com |
59.90.185.225 | download683.avast.com |
173.72.49.52 | download684.avast.com |
43.68.250.216 | download685.avast.com |
251.145.21.205 | download686.avast.com |
28.46.60.19 | download687.avast.com |
142.29.180.102 | download688.avast.com |
81.24.125.78 | download689.avast.com |
32.101.152.67 | download690.avast.com |
65.2.191.69 | download691.avast.com |
179.241.55.220 | download692.avast.com |
50.237.1.128 | download693.avast.com |
70.57.27.117 | download694.avast.com |
103.215.66.187 | download695.avast.com |
137.117.175.191 | download696.avast.com |
7.113.120.167 | download697.avast.com |
215.190.78.156 | download698.avast.com |
248.91.186.158 | download699.avast.com |
106.6.50.53 | download7.avast.com |
45.69.251.217 | download7.quickheal.com |
252.146.210.206 | download700.avast.com |
29.47.61.20 | download701.avast.com |
143.218.181.103 | download702.avast.com |
14.26.127.11 | download703.avast.com |
34.102.153.0 | download704.avast.com |
67.4.192.70 | download705.avast.com |
180.174.57.221 | download706.avast.com |
51.238.2.129 | download707.avast.com |
3.58.28.118 | download708.avast.com |
104.216.68.189 | download709.avast.com |
150.130.188.16 | download72.avast.com |
88.194.133.180 | download73.avast.com |
40.15.159.169 | download74.avast.com |
73.172.199.239 | download75.avast.com |
187.87.131.134 | download76.avast.com |
126.150.8.42 | download77.avast.com |
77.227.35.31 | download78.avast.com |
110.128.142.101 | download79.avast.com |
224.43.6.184 | download8.quickheal.com |
95.107.208.92 | download80.avast.com |
115.183.166.81 | download81.avast.com |
148.17.17.151 | download82.avast.com |
177.239.122.218 | download83.avast.com |
116.235.67.194 | download84.avast.com |
68.123.93.184 | download85.avast.com |
101.213.133.186 | download9.quickheal.com |
215.195.253.81 | download900.avast.com |
153.191.198.245 | download901.avast.com |
105.80.225.234 | download902.avast.com |
138.169.8.48 | download903.avast.com |
252.152.128.131 | download904.avast.com |
123.147.73.107 | download905.avast.com |
143.224.100.96 | download906.avast.com |
175.125.139.98 | download907.avast.com |
221.108.3.249 | download908.avast.com |
160.104.205.157 | download909.avast.com |
112.180.231.146 | download91.avast.com |
145.82.82.216 | download910.avast.com |
2.64.203.43 | download911.avast.com |
197.60.148.207 | download912.avast.com |
149.136.106.197 | download913.avast.com |
182.38.214.11 | download914.avast.com |
40.20.78.162 | download915.avast.com |
166.16.23.70 | download916.avast.com |
186.93.238.59 | download917.avast.com |
219.250.89.129 | download918.avast.com |
77.233.209.212 | download919.avast.com |
204.228.154.120 | download92.avast.com |
156.49.181.157 | download920.avast.com |
236.254.12.227 | download921.avast.com |
94.237.132.54 | download922.avast.com |
33.232.78.30 | download923.avast.com |
241.53.104.19 | download924.avast.com |
17.211.143.21 | download925.avast.com |
131.193.8.172 | download926.avast.com |
2.189.209.80 | download927.avast.com |
22.9.235.69 | download928.avast.com |
55.167.18.139 | download929.avast.com |
168.149.207.223 | download93.avast.com |
39.145.152.199 | download930.avast.com |
247.221.110.188 | download931.avast.com |
24.123.218.190 | download932.avast.com |
138.38.82.85 | download933.avast.com |
77.101.27.249 | download934.avast.com |
28.178.242.238 | download935.avast.com |
61.79.93.52 | download936.avast.com |
175.250.213.135 | download937.avast.com |
46.57.159.43 | download938.avast.com |
66.134.185.32 | download939.avast.com |
98.36.224.102 | download94.avast.com |
212.206.89.253 | download940.avast.com |
83.14.34.161 | download941.avast.com |
35.90.60.150 | download942.avast.com |
136.248.99.220 | download943.avast.com |
166.146.204.32 | download944.avast.com |
104.210.149.196 | download945.avast.com |
56.31.175.185 | download946.avast.com |
89.188.215.255 | download947.avast.com |
203.103.147.150 | download948.avast.com |
142.166.24.58 | download949.avast.com |
93.243.51.47 | download95.avast.com |
126.144.158.117 | download950.avast.com |
240.59.22.200 | download951.avast.com |
111.122.224.108 | download952.avast.com |
131.199.182.97 | download953.avast.com |
163.33.33.167 | download954.avast.com |
209.15.154.250 | download955.avast.com |
148.11.99.226 | download956.avast.com |
100.155.125.215 | download957.avast.com |
133.245.165.218 | download958.avast.com |
247.227.29.113 | download959.avast.com |
185.223.230.21 | download96.avast.com |
137.112.0.10 | download960.avast.com |
170.201.40.80 | download961.avast.com |
28.184.160.163 | download962.avast.com |
155.179.105.139 | download963.avast.com |
174.0.132.128 | download964.avast.com |
207.157.91.50 | download965.avast.com |
173.60.212.201 | download966.avast.com |
112.56.157.109 | download967.avast.com |
64.132.183.98 | download968.avast.com |
97.34.34.168 | download969.avast.com |
211.16.155.252 | download97.avast.com |
149.12.100.160 | download970.avast.com |
101.89.58.149 | download971.avast.com |
134.246.166.219 | download972.avast.com |
248.229.30.114 | download973.avast.com |
119.224.231.22 | download974.avast.com |
138.45.190.11 | download975.avast.com |
171.202.41.81 | download976.avast.com |
29.185.161.164 | download977.avast.com |
156.180.107.72 | download978.avast.com |
108.1.133.61 | download979.avast.com |
140.159.172.131 | download98.avast.com |
254.141.37.214 | download980.avast.com |
193.137.238.190 | download99.avast.com |
145.213.8.179 | downloads-eu1.kaspersky-labs.com |
178.115.48.181 | downloads-eu2.kaspersky-labs.com |
36.97.168.77 | downloads-eu3.kaspersky-labs.com |
162.93.113.241 | downloads-eu4.kaspersky-labs.com |
182.170.139.230 | downloads-us1.kaspersky-labs.com |
215.71.179.44 | downloads-us2.kaspersky-labs.com |
73.54.111.127 | downloads-us3.kaspersky-labs.com |
184.33.40.87 | downloads-us4.kaspersky-labs.com |
135.110.255.76 | downloads.andymanchesta.com |
168.11.106.78 | downloads.malwarebytes.org |
26.182.226.229 | downloads.microsoft.com |
221.245.172.137 | downloads.My-eTrust.com |
173.66.130.126 | downloads1.kaspersky-labs.com |
206.224.237.196 | downloads2.kaspersky-labs.com |
63.138.102.23 | downloads3.kaspersky-labs.com |
190.202.47.187 | downloads4.kaspersky-labs.com |
210.22.73.176 | downloads5.kaspersky-labs.com |
243.180.113.247 | dr-web-cureit.softonic.com |
101.94.233.142 | drsolomon.com |
227.158.178.50 | drweb-inside.com |
179.235.204.39 | drweb.com |
24.136.244.109 | drweb.com.es |
70.51.108.192 | drweb.net |
9.114.53.100 | drwebinside.com |
216.191.80.89 | dswlab.com |
249.92.119.159 | duba.net |
107.7.51.54 | ealaddin.net |
46.70.185.218 | ealaddin.orgeshop.aladdin.com |
254.147.211.207 | easy-vpn.comodo.com |
31.49.62.21 | edm.symantec.com |
144.219.183.104 | education.symantec.com |
63.75.176.60 | eeload.com |
83.151.134.49 | eeye.com |
116.241.241.119 | eicar.org |
161.223.106.202 | elblogdemanu.com |
100.219.51.179 | elitepvpers.de |
52.107.77.168 | emea.trendmicro.com |
85.197.117.170 | emsisoft.com |
199.180.237.65 | emsisoft.de |
137.175.182.229 | encarta.msn.com |
89.64.209.218 | engine.awaps.net |
122.153.248.32 | enterprisesecur.symantec.com |
236.136.112.115 | eos.eset.es |
107.131.58.91 | eradicatespyware.net |
127.208.84.80 | es.answers.yahoo.com |
159.109.123.82 | es.kioskea.net |
205.92.243.233 | es.mcafee.com |
144.88.189.141 | es.trendmicro.com |
96.164.215.130 | es.wasalive.com |
129.66.66.200 | esafe.com |
242.48.171.11 | esecurity.livecall.co.kr |
165.28.116.176 | eset-la.com |
117.104.74.165 | eset.com |
150.6.182.235 | eset.es |
8.245.46.130 | eset.sk |
135.240.247.38 | esp.sophos.com |
154.61.206.27 | espanol.answers.yahoo.com |
187.218.57.97 | espanol.dir.groups.yahoo.com |
45.201.177.180 | espanol.groups.yahoo.com |
172.196.123.88 | esupport.trendmicro.com |
124.17.149.77 | et.symantec.com |
156.175.188.147 | etrr.co.uk |
14.157.53.230 | eugrantsadvisor.cz |
209.153.254.206 | eugrantsadvisor.de |
161.229.24.195 | eval.symantec.com |
109.47.235.113 | ewido.net |
223.29.100.8 | exchangeyourcareer.net |
94.25.45.172 | experts-exchange.com |
114.101.71.161 | f-prot.com |
147.3.110.231 | f-secure.com |
4.241.43.58 | f-secure.frf-secure.hk |
131.237.244.35 | f-secure.nlfsecure.com |
83.57.202.24 | fastclick.net |
116.215.54.26 | feedage.com |
230.130.174.177 | feeds.sophos.com |
169.193.119.85 | feeds.trendmicro.com |
120.14.78.74 | file.ikaka.cn |
153.171.185.144 | file.ikaka.com |
11.86.49.227 | file.net |
138.149.251.135 | files.avast.com |
158.226.53.156 | files.filefont.com |
222.159.92.226 | files.trendmicro-europe.com |
80.74.212.121 | filseclab.com |
207.138.158.29 | final4ever.com |
159.214.184.18 | finjan.com |
4.116.223.88 | firewall.sunbeltsoftware.com |
49.30.88.171 | firewallguide.com |
244.94.33.79 | fixmyim.com |
196.170.59.69 | foro.ethek.com |
229.72.99.139 | foros.toxico-pc.com |
87.242.31.34 | foros.zonavirus.com |
25.50.164.198 | forospanish.com |
233.127.191.187 | forospyware.com |
10.28.42.1 | forospyware.es |
108.183.146.68 | fortiguardcenter.com |
235.246.92.232 | fortihero.com |
255.67.50.221 | fortilog.com |
31.156.157.35 | fortinet.co.at |
77.139.21.118 | fortinet.com |
16.135.223.94 | fortiprotect.com |
224.23.249.83 | fortiwifi.com |
1.113.32.85 | forum.clubedohardware.com.br |
114.95.153.236 | forum.emsisoft.com |
53.91.98.144 | forum.hardware.fr |
5.235.124.134 | forum.hijackthis.de |
38.69.164.204 | forum.ikaka.com |
152.52.28.31 | forum.jiangmin.com |
22.47.229.7 | forum.kaspersky.com |
42.124.0.172 | forum.malekal.com |
251.201.215.174 | forum.piriform.com |
41.184.79.69 | forum.securitycadets.com |
236.180.25.233 | forum.sysinternals.com |
188.0.51.222 | forum.telecharger.01net.com |
221.158.158.36 | forum.tweaks.com |
78.140.23.119 | forum.zazana.com |
17.136.224.27 | forums.cnet.com |
225.212.182.17 | forums.comodo.com |
2.114.34.87 | forums.devshed.com |
116.97.154.238 | forums.maddoktor2.com |
242.92.99.146 | forums.majorgeeks.com |
6.169.58.135 | forums.techguy.org |
39.70.165.205 | forums.whatthetech.com |
153.53.29.32 | fr.bitdefender.com |
24.48.230.196 | fr.drweb.com |
216.109.241.169 | fr.mcafee.com |
248.10.24.239 | fr.trendmicro.com |
106.249.144.66 | fr1.drweb.com |
45.245.90.42 | fr2.drweb.com |
253.65.116.31 | fr3.drweb.com |
30.223.155.33 | fr4.drweb.com |
143.205.20.184 | fr5.drweb.com |
14.201.221.93 | fr6.drweb.com |
34.21.247.82 | fr7.drweb.com |
67.179.31.152 | fractus.mat.uson.mx |
181.162.219.235 | free-av.com |
52.157.164.211 | free-av.net |
3.234.123.200 | free.antivirus.com |
36.135.230.202 | free.avg.com |
150.50.94.97 | free.drweb.com |
89.113.40.5 | free.grisoft.com |
41.190.254.250 | free.grisoft.cz |
73.91.105.64 | free.pandasecurity.com |
187.6.225.147 | free.prevx.com |
106.117.219.103 | free.tinypicbox.com |
126.194.245.92 | freeav.com |
158.96.28.162 | freeav.net |
16.10.149.57 | freespywareremoval.info |
143.74.94.221 | frisk-software.com |
95.150.120.210 | fsc.norman.com |
196.52.160.25 | fsecure.nlwebyard.com |
242.222.24.108 | ftp.avp.com |
180.30.225.16 | ftp.bitdefender.com |
132.107.251.5 | ftp.ca.co |
165.8.35.75 | ftp.ca.com |
23.179.223.226 | ftp.customer.symantec.com |
218.242.100.134 | ftp.dispatch.mcafee.com |
169.63.127.123 | ftp.download.mcafee.com |
202.220.234.193 | ftp.downloads-eu1.kaspersky-labs.com |
60.135.98.20 | ftp.downloads-eu2.kaspersky-labs.com |
187.198.44.184 | ftp.downloads-eu3.kaspersky-labs.com |
191.3.242.157 | ftp.downloads-eu4.kaspersky-labs.com |
224.93.93.227 | ftp.downloads-us1.kaspersky-labs.com |
13.75.214.54 | ftp.downloads-us2.kaspersky-labs.com |
208.71.159.30 | ftp.downloads-us3.kaspersky-labs.com |
160.215.185.19 | ftp.downloads-us4.kaspersky-labs.com |
193.49.225.22 | ftp.downloads1.kaspersky-labs.com |
51.31.89.173 | ftp.downloads2.kaspersky-labs.com |
245.27.34.81 | ftp.downloads3.kaspersky-labs.com |
197.172.61.70 | ftp.downloads4.kaspersky-labs.com |
230.5.100.140 | ftp.drweb.com |
88.244.220.223 | ftp.esafe.com |
215.239.165.199 | ftp.europe.f-secure.com |
234.60.192.188 | ftp.f-prot.com |
188.138.151.110 | ftp.f-secure.com |
233.120.16.5 | ftp.grisoft.com |
172.116.217.169 | ftp.kaspersky-labs.com |
124.192.243.158 | ftp.kaspersky.com |
157.94.95.229 | ftp.kasperskylab.ru |
15.76.215.56 | ftp.liveupdate.symantec.com |
209.72.160.220 | ftp.liveupdate.symantecliveupdate.com |
161.149.119.209 | ftp.mast.mcafee.com |
194.50.226.23 | ftp.mcafee.com |
52.33.90.174 | ftp.microworldsystems.com |
179.28.35.82 | ftp.my-etrust.com |
198.105.250.71 | ftp.nai.com |
231.6.101.141 | ftp.networkassociates.com |
89.245.221.224 | ftp.norton.com |
216.241.167.132 | ftp.rads.mcafee.com |
152.45.177.105 | ftp.sandbox.norman.com |
185.203.216.175 | ftp.secure.nai.com |
42.185.81.2 | ftp.securityresponse.symantec.com |
237.181.26.234 | ftp.sophos.com |
189.1.52.224 | ftp.symantec.com |
222.159.92.226 | ftp.symantecliveupdate.com |
80.141.212.121 | ftp.symatec.com |
206.137.157.29 | ftp.trendmicro.com |
226.214.184.18 | ftp.uk.trendmicro-europe.com |
3.115.223.88 | ftp.update.symantec.com |
117.98.155.171 | ftp.updates.symantec.com |
244.93.100.147 | ftp.updates1.kaspersky-labs.com |
196.170.59.136 | ftp.updates2.kaspersky-labs.com |
228.71.166.138 | ftp.updates3.kaspersky-labs.com |
86.242.30.33 | ftp.updates4.kaspersky-labs.com |
25.50.232.245 | ftp.us.mcafee.com |
25.174.238.234 | ftp.viruslist.com |
57.76.89.48 | funkytoad.com |
171.246.210.131 | futurenow.bitdefender.com |
42.54.155.39 | fw.rising.com.cn |
62.130.181.28 | fx.dk |
95.32.220.98 | gangbang.mytijn.org |
208.202.85.250 | gdata.de |
79.10.30.158 | gdata.es |
31.86.56.147 | gecadsoftware.com |
132.244.96.217 | geekstogo.com |
178.159.216.44 | global.ahnlab.com |
117.222.161.208 | global.jiangmin.com |
68.43.188.197 | global.nprotect.com |
101.200.227.11 | go.mcafee.com |
215.115.159.146 | go.microsoft.com |
138.162.21.54 | go.rising.com.cn |
90.239.47.43 | go.sunbeltsoftware.com |
122.141.154.113 | go.symantec.com |
236.55.19.196 | go.trendmicro.com |
107.119.220.104 | greatis.com |
127.195.178.93 | grisoft.com |
160.29.30.163 | grisoft.cz |
206.11.150.247 | grv.microsoft.com |
144.7.95.223 | guiadohardware.net |
96.152.121.212 | guru.avg.com |
129.241.161.134 | guru1.grisoft.cz |
163.144.201.29 | guru2.grisoft.cz |
102.139.147.193 | guru3.grisoft.cz |
54.28.173.182 | guru4.grisoft.cz |
86.118.212.252 | guru5.grisoft.cz |
200.100.77.79 | gwava.nl |
71.96.22.55 | hacksoft.com.pe |
91.172.48.44 | hacksoft.pe |
124.74.88.46 | halmapr.com |
170.56.208.198 | hauri.co.kr |
92.36.137.90 | hauri.net |
44.113.163.79 | haurijapan.com |
77.14.15.149 | help.rising.com.cn |
191.253.135.232 | hi.baidu.com |
130.248.80.140 | hijackthis.de |
81.69.39.129 | hijackthis.download3000.com |
114.226.146.199 | hishomeforchildren.com |
228.209.10.94 | hjt-data.trend-braintree.com |
99.204.212.2 | hjt.networktechs.com |
119.25.170.247 | home.mcafee.com |
152.183.21.61 | hostedmailsecur.symantec.com |
57.213.189.192 | hotshare.net |
184.209.135.100 | housecall.com |
136.29.161.89 | housecall.trendmicro.com |
169.187.200.159 | housecall60.trendmicro.com |
26.169.65.242 | housecall65.trendmicro.com |
221.165.10.219 | howsafeismypc.com |
173.241.36.208 | huaifai.go.th |
206.143.76.210 | i-vault.comodo.com |
64.126.196.105 | iavs.cz |
191.121.141.13 | ibusca.me |
210.198.168.242 | idauthority.com |
227.83.191.56 | ids.kaspersky-labs.com |
85.66.123.139 | ieupdate.gdata.de |
212.61.69.115 | ieupdate1.gdata.de |
164.138.27.104 | ieupdate2.gdata.de |
196.40.134.106 | ieupdate3.gdata.de |
54.210.255.1 | ieupdate4.gdata.de |
249.18.200.165 | ieupdate5.gdata.de |
201.94.158.154 | ieupdate6.gdata.de |
234.252.9.224 | ikaka.cn |
91.166.130.52 | ikaka.com |
218.230.75.216 | ikarus.at |
238.50.101.205 | ikarus.net |
15.208.141.19 | ilove.tigolbittys.info |
129.123.5.170 | images.kaspersky.com |
174.105.125.253 | in.answers.yahoo.com |
126.181.151.242 | incodesolutions.com |
227.83.191.56 | info.drweb.com |
17.254.55.139 | info.prevx.com |
212.61.0.47 | infos-du-net.com |
163.138.27.36 | infosecpodcast.com |
196.39.66.106 | infospyware.com |
54.210.254.1 | inicioid.com |
249.17.132.165 | iniciorapido.info |
201.94.158.154 | inline-software.de |
233.252.9.224 | internetsecurity.comodo.com |
91.166.129.51 | intranet.cidiroax.ipn.mx |
218.230.75.215 | investor.symantec.com |
238.50.33.204 | irc.bigshitsandwich.org |
15.140.140.18 | irc.metraiciono.com |
60.122.5.101 | iseclab.org |
255.118.206.78 | isotopecomics.com |
191.246.216.51 | iss.net |
224.80.0.53 | it.answers.yahoo.com |
82.63.120.204 | it.bitdefender.com |
21.58.65.112 | it.mcafee.com |
228.203.92.101 | it.trendmicro.com |
5.36.131.171 | itw.trendmicro.com |
119.19.251.254 | ixomodels.com |
246.14.197.230 | ixostore.ixomodels.com |
10.91.223.219 | javacoolsoftware.com |
42.249.6.221 | jetico.com |
88.231.127.116 | jiangmin.com |
27.227.72.24 | jiangmin.com.cn |
235.47.98.13 | jobs.bitdefender.com |
12.205.205.83 | jotti.org |
126.187.70.167 | jp.mcafee.com |
112.231.63.122 | jp.trendmicro.com |
64.51.21.112 | justfacebook.net |
97.209.129.182 | k-otik.com |
211.191.249.77 | k7computing.com |
81.187.194.241 | kaba.360.cn |
101.8.153.230 | kaba.360.com |
134.165.4.44 | karuna-shechen.org |
248.148.124.127 | kaspersky-fr.com |
119.143.69.35 | kaspersky-labs.com |
71.220.96.24 | kaspersky.co.jp |
103.121.135.94 | kaspersky.co.uk |
217.104.255.177 | kaspersky.com |
140.84.185.137 | kaspersky.com.cn |
92.160.211.126 | kaspersky.dk |
125.62.250.128 | kaspersky.es |
238.44.115.23 | kaspersky.gr |
109.40.60.187 | kaspersky.pl |
129.116.86.177 | kaspersky.ru |
162.18.126.247 | kaspersky.se |
20.1.58.74 | kasperskylab.co.kr |
146.252.3.50 | kasperskylab.nl |
98.73.218.39 | kav.ru |
131.230.69.41 | kav.zonelabs.com |
245.145.189.192 | kb.bitdefender.com |
184.208.135.100 | kb.bitdefender.de |
136.29.93.89 | kb.bitdefender.us |
168.186.200.159 | kerio.com |
26.101.64.242 | kimzimmer.net |
153.165.10.150 | kioskea.net |
173.241.36.60 | kpfans.com |
126.63.252.130 | kr.ahnlab.com |
240.234.116.25 | kr.sophos.com |
110.41.61.189 | krupunmai.com |
62.118.88.178 | kvup.jiangmin.com |
163.19.127.248 | kztechs.com |
209.190.247.75 | l33t.shadow-mods.net |
148.253.193.239 | la.trendmicro.com |
100.74.219.228 | ladooscuro.es |
132.231.2.42 | laneros.com |
246.146.190.193 | latam.kaspersky.com |
185.210.68.101 | latin.bitdefender.com |
137.30.94.90 | lavasoft.com |
170.188.201.160 | lavasoft.nu |
27.102.66.243 | lavasoftusa.com |
138.150.251.136 | lexikon.ikarus.at |
158.226.209.125 | license.drweb.com |
191.60.61.195 | linhadefensiva.org |
237.43.181.22 | linhadefensiva.uol.com.br |
176.38.126.254 | linux.bitdefender.com |
127.183.153.243 | lists.clamav.net |
160.16.192.245 | liutilities.com |
18.255.56.140 | live.sunbeltsoftware.com |
213.250.2.48 | liveprotect.net |
165.139.28.37 | liveupdate.symantec.com |
197.229.67.107 | liveupdate.symantec.d4p.net |
55.211.187.190 | liveupdate.symantecliveupdate.com |
182.207.133.166 | looknstop.com |
202.27.159.203 | lovings.technigoyous.net |
26.233.246.205 | lurker.clamav.net |
72.215.111.100 | mailcenter.rising.com |
11.211.56.8 | mailcenter.rising.com.cn |
219.31.82.253 | majorgeeks.com |
252.189.190.68 | mall.hauri.co.kr |
110.171.54.151 | malwarebytes.org |
48.167.255.59 | malwarecity.com |
0.244.213.48 | malwarecity.netmalwarecity.org |
33.145.65.118 | malwaredomainlist.com |
147.128.185.13 | malwarepedia.com |
18.123.130.177 | malwareremoval.com |
37.200.89.166 | malwarescan.emsisoft.com |
54.85.180.220 | malwarescan.emsisoft.de |
168.68.44.47 | malwarescan.emsisoft.es |
39.64.246.211 | mamutu.com |
247.140.16.200 | manuelruvalcaba.com |
24.42.55.14 | marian.symantec.com |
137.24.176.97 | mast.mcafee.com |
76.20.121.73 | mcafee-at-home.com |
28.96.147.62 | mcafee.com |
61.254.187.65 | mcafeeb2b.com |
175.236.51.216 | mcafeefans.com |
45.232.252.124 | mcafeeretail.com |
65.53.23.33 | mcaffee.com |
18.130.238.103 | me.kaspersky.com |
132.113.170.186 | media.fastclick.net |
3.109.116.162 | megasecurity.org |
211.185.74.151 | merijn.org |
244.87.181.153 | metascan-online.com |
101.1.46.48 | microsoft.com |
40.65.247.212 | microsoft.fr |
248.141.205.201 | midescargas.com |
25.43.57.16 | mirror02.gdata.de |
123.198.161.83 | misec.net |
249.5.106.247 | mmsk.cn |
13.82.133.236 | moneybookers.com |
46.239.172.50 | moosoft.com |
160.154.36.201 | mop.pandasecurity.com |
31.217.237.109 | mostz.com |
239.38.8.98 | mozilla-hispano.org |
83.195.47.168 | msdn.microsoft.com |
129.110.167.251 | msk.drweb.com |
68.174.113.207 | msk1.drweb.com |
68.42.187.196 | msk2.drweb.com |
100.200.226.10 | msk3.drweb.com |
214.114.159.161 | msk4.drweb.com |
153.178.36.69 | msk5.drweb.com |
105.254.62.58 | msk6.drweb.com |
138.156.169.128 | msk7.drweb.com |
251.70.34.212 | msncleaner.softonic.com |
122.134.235.120 | msnfix.changelog.fr |
126.195.177.93 | msnvirusremoval.com |
159.28.29.163 | msr.mcafee.com |
205.11.149.246 | mvps.org |
144.6.94.222 | mx.answers.yahoo.com |
95.151.121.211 | mx.mcafee.com |
128.240.160.213 | mxttchina.com |
242.223.24.108 | my-etrust.com |
181.218.226.16 | my.drweb.com |
133.107.252.5 | mygeekside.com |
86.117.211.251 | nabble.com |
200.99.76.79 | nai.com |
70.95.21.55 | natsko.com |
90.172.47.44 | naturesimages.net |
123.73.87.46 | net-security.org |
169.56.207.197 | network.drweb.com |
108.51.152.105 | networkassociates.com |
59.128.179.94 | networkassociates.nai.com |
92.29.30.164 | networkworld.com |
206.12.150.247 | neunet.orgnews.bitdefender.com |
145.7.96.139 | new-beta.drweb.com |
81.68.38.128 | new-company.drweb.com |
114.226.145.198 | new-estore.drweb.com |
227.208.10.93 | new-forum.drweb.com |
98.204.211.1 | new-partners.drweb.com |
118.24.169.246 | new-solutions.drweb.com |
151.182.21.61 | new-support.drweb.com |
56.212.189.191 | new-www.drweb.com |
183.208.134.100 | new.taringa.net |
135.28.160.89 | news.drweb.com |
168.186.200.159 | newsletters.trendmicro.com |
26.169.64.242 | niueight.norman.no |
220.164.9.218 | niufive.norman.no |
172.241.36.207 | niufour.norman.no |
205.142.75.209 | niunine.norman.no |
63.125.195.104 | niuone.norman.no |
174.104.125.252 | niuseven.norman.no |
194.181.151.241 | niusix.norman.no |
226.83.190.55 | niuthree.norman.no |
84.65.123.138 | niutwo.norman.no |
211.61.68.114 | nl.bitdefender.com |
163.137.26.103 | noadware.net |
196.39.133.105 | nod32.co.uk |
53.209.254.0 | nod32.com |
248.17.199.165 | nod32.datsec.de |
200.93.157.154 | nod32.lu |
233.251.9.224 | nod32.ru |
91.166.129.51 | norman.com |
218.229.74.215 | norton.com |
159.227.22.126 | notifier.antivir-pe.de |
192.129.62.196 | novirusthanks.org |
50.44.182.91 | nprobeta.norman.com |
177.107.127.255 | nprotect.com |
128.184.154.244 | nprotect.net |
229.85.193.58 | nprotect.seoul.go.kr |
19.0.57.141 | nsclean.com |
214.63.3.49 | ntfaq.co.kr |
166.140.29.38 | obscgi.mcafee.com |
198.42.68.108 | oem.sunbeltsoftware.com |
56.212.0.3 | offensivecomputing.net |
251.20.134.167 | office.microsoft.com |
187.80.144.140 | oldtimer.geekstogo.com |
220.238.251.210 | one.tinypicbox.com |
78.152.116.38 | onecare.live.com |
204.216.61.202 | online-backup.comodo.com |
224.36.19.191 | online.jiangmin.com |
1.126.127.5 | online.rising.com.cn |
47.109.247.88 | onlinecheck.emsisoft.com |
242.104.192.64 | onlinecheck.emsisoft.de |
193.249.219.53 | onlinecheck.emsisoft.net |
226.82.2.55 | onlinecheck.emsisoft.org |
84.65.122.206 | onlinescan.avast.com |
23.60.68.114 | openantivirus.org |
22.253.142.151 | outpost.pl |
55.86.181.221 | ozzu.com |
169.69.45.48 | p3dev.taringa.net |
40.65.247.24 | pandalabs.pandasecurity.com |
60.141.17.13 | pandasecurity.com |
93.43.56.15 | pandasoftware.com |
138.25.177.166 | pandasoftware.es |
77.21.122.74 | pantip.com |
29.97.148.64 | pcav.cn |
62.255.0.134 | pccreg.antivirus.com |
176.237.120.217 | pccreg.trendmicro.com |
114.233.65.125 | pcentraide.com |
50.38.8.98 | pcguide.com |
83.195.115.168 | pchell.com |
197.178.235.63 | pcinternetpatrol.com |
68.173.181.227 | pcsupportadvisor.com |
88.250.139.216 | pctools.com |
120.151.246.30 | pda.drweb.com |
234.134.110.113 | pedidos.protegerse.com |
105.130.56.21 | personal.psu.edu |
57.206.82.10 | personalfirewall.comodo.com |
90.108.121.80 | pestpatrol.com |
203.90.242.163 | pg.hauri.net |
142.86.187.139 | phx.corporate-ir.net |
94.162.213.49 | pineleafboys.com |
47.240.173.51 | podcasts.sophos.com |
161.223.37.202 | pogonyuto.forospanish.com |
32.218.239.110 | precisesecurity.com |
52.39.9.99 | prevx.com |
84.196.48.169 | privacy.microsoft.com |
198.179.236.252 | products.drweb.com |
69.175.182.228 | promotions.drweb.com |
21.251.140.217 | psnw.com |
54.153.247.219 | pspl.com |
167.67.112.114 | pvtc.org |
106.131.57.22 | qqjkw.net |
58.207.15.252 | quickheal.co.in |
75.93.107.66 | quickheal.com |
189.8.227.149 | radius.turvamies.com |
60.71.172.57 | rads.mcafee.com |
79.148.199.46 | ravantivirus.com |
112.49.238.116 | raymond.cc |
226.220.102.11 | reg-int.nod32-es.com |
145.75.95.223 | reg.eset.es |
96.152.122.212 | reg.rising.com.cn |
197.53.161.26 | register.norman.com |
243.224.25.109 | removetrojanvirus.org |
182.31.227.17 | renewalcenter.symantec.com |
134.108.253.6 | renewals.bitdefender.com |
166.10.36.76 | research.microsoft.com |
24.180.225.227 | research.pandasecurity.com |
219.244.102.119 | research.sunbelt-software.com |
155.48.112.108 | resplendence.com |
188.206.220.179 | retail.sp.f-secure.com |
46.120.84.6 | retail01.sp.f-secure.com |
172.184.29.170 | retail02.sp.f-secure.com |
192.5.244.159 | ribbonwarehouse.com |
225.94.95.229 | rising-global.com |
15.77.215.232 | rising.com |
130.249.81.208 | rising.com.cn |
82.137.107.197 | rolandovera.com |
115.227.146.199 | rootkit.com |
228.209.11.94 | rootkit.nl |
167.205.212.2 | rover800.gaima.co.uk |
119.93.238.247 | roysephotos.com |
136.167.6.46 | ru.trendmicro.com |
250.149.126.129 | ruben.bzin.net |
120.145.71.105 | runscanner.net |
140.222.98.94 | safe.qq.com |
173.123.137.96 | safecomputing.umn.edu |
219.106.1.247 | safer-networking.org |
158.101.202.155 | safetynet.com |
110.178.229.144 | sales.bitdefender.com |
190.127.128.6 | samroeng.hi5.com |
48.110.248.89 | sandbox.norman.com |
243.105.194.253 | sandboxie.com |
195.182.152.242 | sapcupgrades.com |
227.84.3.56 | sarahmcconnellphotography.net |
85.66.124.207 | saverssite.com |
212.62.69.115 | scan.anti-trojan.net |
232.138.27.104 | scan.kingsoft.com |
9.40.134.174 | scan4you.net |
122.22.255.2 | scanner.novirusthanks.org |
249.18.200.166 | scanner.virus.org |
201.94.226.155 | scanner2.novirusthanks.or |
218.236.250.209 | schemas.microsoft.com |
76.219.114.36 | schemas.xmlsoap.org |
15.214.59.12 | sea.symantec.com |
222.35.86.1 | search.ca.com |
255.192.125.3 | search.mcafee.com |
113.175.245.154 | search.symantec.com |
240.170.191.62 | seasonsecurity.com |
4.247.217.51 | secdreg.org |
36.149.0.121 | secubox.aldria.com |
150.131.189.204 | secunia.com |
21.127.134.180 | secure-email.comodo.com |
229.203.92.169 | secure.av-desk.com |
182.25.120.92 | secure.nai.com |
40.196.240.243 | securecomputing.com |
235.3.185.151 | secureme.com |
186.80.144.140 | securitoo.com |
219.237.251.210 | security.symantec.com |
77.152.115.37 | securitycheck.symantec.com |
204.215.61.201 | securitynewsportal.com |
224.36.87.190 | securityrespons.symantec.com |
0.194.126.4 | securityresponse.symantec.com |
114.108.247.155 | securitywonks.net |
241.172.192.63 | secuser.com |
177.232.202.36 | secuser.model-fx.com |
22.134.242.107 | sergiwa.com |
68.48.106.190 | service.mcafee.com |
6.112.51.98 | service1.symantec.com |
214.189.77.87 | servicenews.symantec.com |
247.90.117.157 | sfdoccentral.symantec.com |
105.5.49.52 | shadow.grisoft.cz |
44.68.182.216 | shadu.baidu.com |
251.145.209.205 | shadu.duba.net |
28.46.60.19 | shield.prevx.com |
142.217.180.150 | shop.hauri.co.kr |
61.72.174.58 | shop.pandasecurity.com |
81.149.132.47 | shop.sunbeltsoftware.com |
113.238.239.117 | shop.symantec.com |
159.221.103.200 | shop.trendmicro.com |
98.217.49.176 | shudoo.com |
50.105.75.165 | simplysup.com |
83.195.114.167 | siren24.nprotect.com |
196.177.235.62 | siteadvisor.com |
135.173.180.227 | sitedirector.symantec.com |
71.45.190.200 | smallbiz.symantec.com |
104.135.230.14 | smbstore.trendmicro.com |
218.118.94.97 | smokey-services.eu |
89.113.39.73 | soccersuck.com |
108.190.66.62 | softfaq.com |
141.91.105.64 | softonic.com |
187.74.225.215 | software-files.download.com |
126.69.171.123 | solutions.drweb.com |
78.146.197.112 | sophos.com |
110.48.48.182 | sophos.fr |
224.30.169.184 | sophos1.ucd.ie |
82.200.33.92 | sophos10.ucd.ie |
34.21.247.81 | sophos2.ucd.ie |
66.179.98.151 | sophos5.ucd.ie |
180.161.218.46 | sophos6.ucd.ie |
51.157.164.210 | sophos7.ucd.ie |
71.233.122.199 | sophos8.ucd.ie |
104.135.229.13 | sophos9.ucd.ie |
217.117.94.96 | soporte.pandasecurity.com |
88.113.39.5 | sos.rising.com.cn |
40.189.65.234 | sosvirus.changelog.fr |
57.75.89.48 | spd.atdmt.com |
171.58.209.131 | specs.xmlsoap.org |
110.53.154.107 | speedtest.comodo.com |
61.130.181.96 | spftrl.digitalriver.com |
94.31.220.98 | spyany.com |
208.14.84.249 | spyblocker-software.com |
79.9.30.157 | spybot.info |
99.86.56.146 | spycheck.co.uk |
131.244.95.216 | spycheck.es |
245.226.28.43 | spychecker.com |
164.14.21.67 | spycop.com |
116.90.235.56 | spywaredb.com |
149.248.86.58 | spywaredlls.prevx.com |
6.162.207.209 | spywarefiles.prevx.com |
201.226.152.117 | spywareguide.com |
153.46.110.107 | spywareinfo.com |
186.204.218.177 | spywareterminator.com |
44.118.82.4 | square.bitdefender.com |
170.182.27.168 | static.yoreparo.com |
190.3.54.157 | stats.norton.com |
223.160.93.227 | stdio-labs.blogspot.com |
65.59.197.106 | stiller.com |
192.122.143.14 | store.bitdefender.com |
144.199.169.3 | store.de.bitdefender.com |
244.100.208.73 | store.drweb.com |
34.15.72.156 | store.trendmicro.com |
229.79.18.64 | subs.geekstogo.com |
181.75.220.230 | subwiz.trendmicro.com |
134.233.4.44 | sucop.com |
248.148.192.195 | sun.symantec.com |
186.211.69.103 | sunbelt-software.com |
138.32.96.92 | sunbeltsecurity.com |
171.189.203.162 | sunbeltsoftware.com |
29.104.67.245 | superboy2010.com.au |
156.167.12.153 | superdicas.com.br |
176.244.227.142 | superuser.co.kr |
192.62.62.196 | support.drweb.com |
238.44.182.23 | support.f-secure.com |
177.40.128.255 | support.kaspersky.co |
129.184.154.244 | support.mcafee.com |
162.18.193.246 | support.microsoft.com |
19.0.58.141 | support.pandasecurity.com |
214.252.3.50 | support.rising-global.com |
166.140.29.39 | sybari.com |
199.230.69.109 | sygate.com |
105.4.237.240 | symantec-ese.baynote.net |
231.0.182.216 | symantec.com |
251.77.208.205 | symantecliveupdate.com |
28.234.248.207 | symatec.com |
74.217.112.102 | sysinternals.com |
13.212.57.10 | system-cleaner.comodo.com |
220.33.84.255 | tallemu.com |
253.190.191.69 | taringa.net |
111.173.55.152 | tds.diamondcs.com.au |
50.168.1.60 | tech.pantip.com |
242.229.199.33 | techimo.com |
19.131.50.103 | techspot.com |
132.113.171.254 | techsupportforum.com |
3.109.116.162 | tecniservicioslys.com |
23.185.74.151 | tecno-soft.com |
56.87.182.222 | tempuri.org |
170.69.46.49 | thecomputerpitstop.com |
40.65.247.213 | thejokerx.blogspot.com |
248.142.18.202 | thetechguide.com |
25.43.57.192 | thinkpad.cn |
59.202.97.19 | threatexpert.com |
254.198.43.251 | threatinfo.trendmicro.com |
206.18.69.240 | timeforyourbusi.pandasecurity.com |
239.176.108.242 | timestamp.comodoca.com |
96.158.229.137 | timestamp.wosign.com |
223.154.174.45 | tinysoftware.com |
243.230.200.34 | tms.symantec.com |
20.132.240.105 | together.pctools.com |
134.114.172.188 | tool.ikaka.com |
4.110.117.164 | toonbox.de |
196.171.60.137 | tr.mcafee.com |
229.72.167.139 | trackingtheworld.com |
87.243.31.34 | training.drweb.com |
26.50.232.198 | training.trendmicro.com |
234.127.191.187 | trapware.com |
10.28.42.1 | trendmicro.com |
124.199.162.84 | trendmicro.com.cn |
251.7.108.248 | trendmicro.fr |
15.83.134.237 | trendsecure.com |
48.241.173.51 | trial.trendmicro.com |
209.203.86.250 | trucoswindows.es |
80.11.31.158 | trucoswindows.net |
32.87.57.147 | tw.mcafee.com |
133.245.96.217 | tw.sophos.com |
179.159.217.45 | tw.trendmicro.com |
117.223.162.209 | tweaksforgeeks.com |
69.43.188.198 | u0.eset.com |
102.201.228.12 | u1.eset.com |
216.116.160.163 | u10.eset.com |
155.179.37.71 | u100.eset.com |
90.240.48.44 | u11.eset.com |
123.141.155.114 | u12.eset.com |
237.56.19.197 | u13.eset.com |
108.119.221.105 | u14.eset.com |
128.196.179.94 | u15.eset.com |
160.30.30.164 | u16.eset.com |
206.12.151.247 | u17.eset.com |
145.8.96.223 | u18.eset.com |
97.152.122.212 | u19.eset.com |
130.242.162.215 | u2.eset.com |
244.224.26.110 | u20.eset.com |
103.140.147.194 | u21.eset.com |
54.29.174.183 | u22.eset.com |
87.118.213.253 | u23.eset.com |
201.101.77.80 | u24.eset.com |
72.96.23.56 | u25.eset.com |
92.173.49.45 | u26.eset.com |
124.75.88.47 | u27.eset.com |
170.57.209.198 | u28.eset.com |
109.53.154.106 | u29.eset.com |
61.129.180.95 | u3.eset.com |
94.31.31.165 | u30.eset.com |
208.13.152.249 | u31.eset.com |
130.249.81.141 | u32.eset.com |
82.70.39.130 | u33.eset.com |
115.227.147.200 | u34.eset.com |
229.210.11.95 | u35.eset.com |
100.205.212.3 | u36.eset.com |
119.26.171.248 | u36eset.com |
152.183.22.62 | u37.eset.com |
10.166.142.145 | u37eset.com |
137.161.88.53 | u38.eset.com |
89.238.114.42 | u39.eset.com |
122.140.153.112 | u4.eset.com |
27.170.65.243 | u40.eset.com |
222.166.11.219 | u41.eset.com |
174.242.37.208 | u42.eset.com |
207.144.76.210 | u43.eset.com |
64.126.197.105 | u44.eset.com |
191.122.142.14 | u45.eset.com |
211.198.168.3 | u46.eset.com |
244.100.208.73 | u47.eset.com |
102.83.140.156 | u48.eset.com |
228.78.85.132 | u49.eset.com |
180.155.44.121 | u5.eset.com |
197.40.135.107 | u50.eset.com |
55.211.255.2 | u51.eset.com |
250.18.201.166 | u52.eset.com |
202.95.159.155 | u53.eset.com |
234.253.10.225 | u54.eset.com |
92.167.131.52 | u55.eset.com |
219.231.76.216 | u56.eset.com |
239.51.102.205 | u57.eset.com |
16.209.141.19 | u58.eset.com |
129.123.6.170 | u59.eset.com |
172.103.123.250 | u6.eset.com |
124.179.149.239 | u60.eset.com |
225.81.188.53 | u61.eset.com |
14.251.53.136 | u62.eset.com |
209.59.254.45 | u63.eset.com |
161.135.24.34 | u64.eset.com |
194.37.64.104 | u65.eset.com |
52.208.252.255 | u66.eset.com |
247.15.129.163 | u67.eset.com |
198.92.156.152 | u68.eset.com |
231.249.7.206 | u69.eset.com |
73.148.111.33 | u7.eset.com |
200.211.57.197 | u70.eset.com |
220.32.15.186 | u71.eset.com |
252.122.122.0 | u72.eset.com |
42.104.243.83 | u73.eset.com |
237.100.188.59 | u74.eset.com |
189.244.214.48 | u75.eset.com |
222.78.253.50 | u76.eset.com |
80.60.118.202 | u77.eset.com |
66.104.111.157 | u78.eset.com |
18.248.137.147 | u79.eset.com |
51.82.177.217 | u8.eset.com |
165.64.41.44 | u80.eset.com |
35.60.242.20 | u81.eset.com |
55.137.13.9 | u82.eset.com |
88.38.52.11 | u83.eset.com |
134.21.172.162 | u84.eset.com |
73.16.117.70 | u85.eset.com |
25.93.144.59 | u86.eset.com |
57.250.251.129 | u87.eset.com |
155.217.99.196 | u88.eset.com |
94.213.45.104 | u89.eset.com |
46.33.3.93 | u9.eset.com |
79.191.110.163 | u90.eset.com |
192.173.231.58 | u91.eset.com |
63.169.176.222 | u92.eset.com |
83.245.134.212 | u93.eset.com |
116.147.242.26 | u94.eset.com |
230.130.106.109 | u95.eset.com |
100.125.51.17 | u96.eset.com |
52.202.78.6 | u97.eset.com |
5.23.37.252 | u98.eset.com |
119.6.157.79 | u99.eset.com |
58.2.103.55 | uk.mcafee.com |
10.78.129.44 | uk.trendmicro-europe.com |
43.236.168.46 | uk.trendmicro.com |
156.218.33.197 | ulove.tigolbittys.info |
27.214.234.105 | up.duba.net |
47.34.4.95 | up.rising.com.cn |
64.176.28.149 | up1.nod123.cn |
178.159.216.232 | upd.zonelabs.com |
49.154.161.208 | update.360safe.cn |
0.231.120.197 | update.360safe.com |
33.132.227.199 | update.aladdin.com |
147.47.91.94 | update.authentium.com |
86.110.37.2 | update.avg.com |
38.187.251.247 | update.avgfrance.com |
70.88.102.61 | update.bitdefender.com |
184.3.222.144 | update.drweb.com |
55.67.168.52 | update.ewido.com |
123.191.242.89 | update.grisoft.com |
155.93.25.159 | update.grisoft.cz |
13.7.146.54 | update.hispasec.com |
140.71.91.218 | update.ikaka.com |
92.147.117.207 | update.ikarus-software.at |
193.49.157.22 | update.quickheal.com |
239.219.21.105 | update.rising.com.cn |
177.27.222.13 | update.sophos.com |
129.104.248.2 | update.symantec.com |
146.245.16.56 | update.trendmicro.com |
4.160.204.207 | update7.jiangmin.com |
199.223.81.115 | updatem.360safe.cn |
150.44.108.104 | updatem.360safe.com |
183.201.215.174 | updates.a-2.org |
41.116.79.1 | updates.drweb.com |
168.180.25.165 | updates.f-prot.com |
188.0.239.154 | updates.sald.com |
141.10.11.145 | updates.symantec.com |
187.248.131.228 | updates3.kaspersky-labs.com |
125.244.76.204 | updates4.kaspersky-labs.com |
77.133.102.193 | updates5.kaspersky-labs.com |
110.222.142.195 | upgrade.bitdefender.com |
224.205.6.90 | upgrade1.bitdefender.com |
163.200.207.254 | upgrade2.bitdefender.com |
99.73.218.227 | upgrade3.bitdefender.com |
131.162.1.41 | upgrade4.bitdefender.com |
245.145.121.124 | upload.changelog.fr |
116.141.67.100 | us.bitdefender.com |
136.217.93.89 | us.mcafee.com |
169.119.132.91 | us.trendmicro.com |
214.101.253.242 | usa.kaspersky.com |
153.97.198.150 | usbcleaner.cn |
105.173.224.140 | ushousecall02.trendmicro.com |
138.75.76.210 | utilidades-utiles.com |
43.105.244.85 | v.dreamwiz.com |
238.101.189.249 | v4.windowsupdate.microsoft.com |
190.177.147.238 | v5.windowsupdate.microsoft.com |
223.79.255.52 | vet.com.au |
81.62.119.203 | vicentevirtual.com |
208.57.64.111 | viguard.com |
227.134.23.100 | vil.nai.com |
4.35.130.170 | vil.nail.com |
118.18.250.253 | virobot.co.kr |
245.13.196.161 | virscan.org |
181.74.206.134 | virus.org |
213.232.245.204 | virusbuster.hu |
71.214.110.31 | viruschief.com |
10.210.55.7 | virusdoctor.jp |
218.30.81.252 | virusfreezone.info |
251.188.121.255 | virusinfo.prevx.com |
109.170.241.150 | viruslist.com |
235.166.186.58 | viruslist.ru |
255.243.212.47 | virusscan.jotti.org |
208.64.172.37 | virusscanonline.net |
66.47.104.120 | virusspy.com |
193.42.50.96 | virustotal.com |
145.119.8.85 | visualizesoftware.com |
177.21.115.87 | visualtracking.symantec.com |
35.191.236.238 | vivo-austin.com |
230.255.181.146 | vms.drweb.com |
182.75.139.135 | vncsvr.com |
215.233.246.205 | vos.symantec.com |
73.147.111.33 | vrv.com.cn |
183.195.40.181 | vsantivirus.com |
203.16.66.170 | webadmin.norman.no |
236.173.106.240 | webphand.com |
94.88.226.135 | webroot.com |
221.151.171.43 | wedoantivirus.com |
172.228.198.32 | welkam.co.jp |
17.129.237.102 | wexperts-exchange.com |
63.44.101.185 | whatthetech.com |
2.107.47.93 | wikio.es |
2.232.121.130 | wilderssecurity.com |
34.133.160.200 | wilderssecurity.net |
148.48.92.95 | wildlist.com |
87.112.226.3 | windowsupdate.microsoft.com |
39.188.252.248 | winpatrol.com |
72.90.103.62 | wmcafee.com |
185.4.224.145 | woottonfootball.com |
56.68.169.54 | wtc.trendmicro.com |
76.144.127.43 | ww.emsisoft.com |
109.234.235.97 | www.1stavenuelimousines.co.uk |
139.201.83.180 | www.2xlgames.com |
78.196.28.156 | www.ahnlab.com |
29.85.55.145 | www.aks.com |
62.174.94.147 | www.aladdin.com |
176.157.214.42 | www.anti-trojan-software.net |
115.152.160.206 | www.anti-trojan.net |
67.41.186.195 | www.anti-virus.by |
99.131.225.184 | www.antivir.es |
132.32.8.11 | www.antivirus-tools.com |
3.27.210.243 | www.antiy.net |
23.104.236.232 | www.apsecure.com |
55.6.19.234 | www.arpia.be |
101.244.140.129 | www.authentium.com |
40.240.85.37 | www.authentium.com.au |
248.60.111.26 | www.av-desk.com |
25.218.218.96 | www.avast.com |
138.200.83.179 | www.avg.com |
61.180.12.72 | www.avhide.com |
13.1.226.61 | www.avoncourt.com |
46.158.78.131 | www.avx.ro |
160.141.198.26 | www.barder.com |
31.136.143.190 | www.beautybar.com |
50.213.102.179 | www.bg.virusblokada.com |
83.114.209.249 | www.bit-defender.de |
197.97.73.76 | www.bitdefende.de |
68.92.19.240 | www.bitdefender-es.com |
68.217.93.21 | www.bitdefender.be |
100.118.132.91 | www.bitdefender.cl |
214.101.252.174 | www.bitdefender.co.uk |
153.97.198.150 | www.bitdefender.com |
105.173.224.139 | www.bitdefender.com.au |
138.75.7.141 | www.bitdefender.com.sg |
251.57.128.36 | www.bitdefender.com.tw |
122.53.73.200 | www.bitdefender.com.vn |
142.129.99.174 | www.bitdefender.de |
159.15.123.244 | www.bitdefender.es |
17.254.55.71 | www.bitdefender.fr |
143.249.0.47 | www.bitdefender.hk |
95.70.215.36 | www.bitdefender.us |
128.227.66.38 | www.bitdefenderme.com |
242.142.186.189 | www.briarhurst.com |
181.205.132.97 | www.brightoctober.com |
133.26.90.86 | www.buraka.tv |
165.183.197.156 | www.buscafacil.com |
199.18.238.159 | www.buscalo.in |
70.82.183.67 | www.busco.in |
90.158.209.57 | www.ca.com |
123.60.249.127 | www.cambridge-steiner-school.co.uk |
237.231.113.22 | www.ccssforum.org |
107.38.58.186 | www.celticmerchant.com |
59.115.85.175 | www.clamav.net |
160.16.124.245 | www.collectedcurios.com |
206.187.244.72 | www.comodo.com |
129.234.174.220 | www.comodo.tv |
81.55.200.209 | www.comodoantispam.com |
113.212.239.23 | www.comodopartners.com |
227.127.171.174 | www.computing.net |
166.191.49.82 | www.configurarequipos.com |
118.11.75.71 | www.contentverification.com |
151.169.182.141 | www.deborahshelton.net |
8.83.47.224 | www.dr-bull.com |
135.147.248.180 | www.drweb.com |
203.15.254.169 | www.ealaddin.com |
236.105.106.240 | www.elvis-express.com |
26.87.226.67 | www.emeraldclassic.co.uk |
220.83.171.43 | www.emsisoft.at |
172.228.197.32 | www.emsisoft.com |
205.61.237.34 | www.emsisoft.de |
63.44.101.185 | www.emsisoft.es |
2.39.46.93 | www.emsisoft.fr |
209.184.73.82 | www.emsisoft.it |
226.1.96.136 | www.emsisoft.jp |
84.240.216.219 | www.emsisoft.net |
211.236.162.195 | www.emsisoft.nl |
231.56.188.184 | www.emsisoft.org |
8.214.227.186 | www.engyro.com |
53.196.92.81 | www.entercept.com |
248.192.37.245 | www.esafe.com |
200.12.63.234 | www.eset.es |
233.170.171.49 | www.eugrantsadvisor.com |
91.152.35.132 | www.eugrantsadvisor.de |
29.148.236.40 | www.eugrantsadvisor.ie |
237.225.195.205 | www.eugrantsadvisor.se |
190.46.222.19 | www.exchangeyourcareer.com |
48.29.86.170 | www.f-prot.com |
175.25.32.78 | www.f-secure.com |
195.101.246.67 | www.fimasys.com |
228.3.97.137 | www.flairweddings.co.uk |
85.241.218.220 | www.forospyware.com |
212.237.163.128 | www.fortifed.com |
164.57.189.117 | www.fortiid.com |
197.215.229.172 | www.fortimail.com |
39.181.77.255 | www.fortinet-apac.com |
233.177.22.231 | www.fortinet.ch |
185.254.49.220 | www.fortinet.co.il |
218.155.88.222 | www.fortinet.com |
76.138.208.117 | www.fortinet.net |
203.133.153.25 | www.fortinet.nl |
223.210.180.14 | www.fortinet.sg |
255.111.219.84 | www.fortinetuk.com |
113.94.151.167 | www.freeality.com |
32.137.145.191 | www.freedrweb.ru |
240.214.103.180 | www.freerav.com |
16.116.210.182 | www.frisk-software.com |
130.30.75.77 | www.frisk.is |
69.94.20.241 | www.fsecure.com |
21.170.234.230 | www.garryowen.com |
54.72.85.44 | www.gdata.es |
167.242.206.128 | www.globalhauri.com |
38.50.151.36 | www.gokidding.com |
58.126.177.25 | www.grisoft.com |
91.28.217.95 | www.hackshields.com |
189.183.65.230 | www.hacksoft.com.pe |
60.246.10.138 | www.hacksoft.pe |
11.67.37.127 | www.handwritingforkids.com |
112.224.76.197 | www.hasp.se |
158.139.196.24 | www.hauri.co.kr |
97.202.142.188 | www.hauri.net |
49.23.168.177 | www.hxproduction.com |
81.181.207.247 | www.ibusca.me |
195.95.140.142 | www.ikarus.at |
134.159.17.50 | www.imddomains.co.uk |
6.156.219.216 | www.indielisboa.com |
39.57.71.30 | www.inicioid.com |
153.228.191.113 | www.iniciorapido.info |
24.35.136.21 | www.internationalservicecheck.com |
43.112.95.10 | www.irangoals.com |
76.201.202.80 | www.iseclab.org |
122.184.66.163 | www.ixomodels.com |
61.179.12.139 | www.jiangmin.com |
13.68.38.128 | www.jiangmin.com.cn |
45.158.77.130 | www.jotti.org |
159.140.198.25 | www.kaspersky.com |
98.136.143.189 | www.kioskea.net |
34.8.153.162 | www.latin-mass-society.org |
67.98.193.233 | www.livepcsupport.com |
181.80.57.60 | www.malwarecity.com |
51.76.2.36 | www.malwarecity.fr |
71.153.28.25 | www.mamutu.com |
104.54.68.27 | www.mamutu.de |
150.37.188.178 | www.manchester-offices.co.uk |
89.32.133.86 | www.mcafee.at |
40.109.160.75 | www.mcafee.com |
73.10.11.145 | www.metascan-online.com |
235.41.179.20 | www.microsoft.com |
174.36.125.184 | www.midescargas.com |
126.113.83.173 | www.mountainlakeslodge.com |
158.14.190.243 | www.mtr-design.com |
16.253.54.138 | www.mygeekside.com |
143.249.0.46 | www.netegrity.com |
163.69.214.35 | www.norman.com |
196.227.65.105 | www.nottinghampoetryseries.com |
53.209.186.188 | www.novirusthanks.org |
180.205.131.97 | www.npin.co.kr |
116.9.141.70 | www.nprotect.co.kr |
149.167.181.140 | www.nprotect.com |
7.150.45.223 | www.nprotect.com.br |
202.145.246.199 | www.nsclean.com |
153.222.17.188 | www.owen.org |
186.123.56.190 | www.pandasecurity.com |
44.106.176.85 | www.pctools.com |
171.101.122.249 | www.peterhearnwaste.co.uk |
191.178.148.238 | www.phoenixtrikeworks.com |
223.80.187.52 | www.prdouglas.co.uk |
81.62.120.135 | www.prevx.com |
208.58.65.111 | www.prevx1.com |
82.56.201.22 | www.professorbeyer.com |
114.214.52.24 | www.quickheal.com |
228.128.172.175 | www.removetrojanvirus.org |
167.192.118.83 | www.renningers.com |
119.12.76.72 | www.residentphotography.com |
152.170.183.142 | www.retento.com |
9.84.48.225 | www.reviewsofbooks.com |
136.148.249.134 | www.rising-global.com |
156.224.19.123 | www.risingav.com.au |
189.126.59.193 | www.safenet-inc.com |
47.41.179.88 | www.scan4you.net |
174.104.124.252 | www.seasonsecurity.com |
125.181.151.241 | www.secondchanceboxer.com |
210.66.174.39 | www.secure-elements.com |
0.237.38.122 | www.sheffieldmind.co.uk |
195.44.240.30 | www.smf.org |
147.121.10.19 | www.softfaq.com |
179.23.49.89 | www.sophos.com |
37.193.238.240 | www.spycheck.co.uk |
232.1.115.148 | www.spycheck.es |
184.77.141.137 | www.stadiumpage.com |
217.235.248.207 | www.sunbeltsoftware.com |
75.149.113.35 | www.symantec.com |
201.213.58.199 | www.sysinternals.com |
221.33.16.188 | www.tecniservicioslys.com |
254.123.124.2 | www.testmypcsecurity.com |
44.106.244.85 | www.threatexpert.com |
239.101.189.61 | www.tomorrowsedge.net |
238.38.8.98 | www.trendmicro.com |
15.127.47.100 | www.trojaner.info |
129.110.167.251 | www.trustix.com |
68.105.112.159 | www.trustlogo.com |
19.250.139.148 | www.vba.com.by |
52.83.178.218 | www.virscan.org |
166.66.42.45 | www.virus.fi |
37.62.244.21 | www.virus.org |
57.138.14.10 | www.virusbuster.hu |
90.40.53.12 | www.viruschief.com |
135.22.174.163 | www.virusfreezone.info |
58.2.103.55 | www.virustotal.com |
10.78.129.45 | www.wellgousa.com |
43.236.237.115 | www.whichssl.com |
157.219.101.198 | www.willsee.com |
95.214.46.106 | www.xmlsoap.org |
47.35.5.95 | www.zarya.info |
80.192.112.165 | www1.my-etrust.com |
194.175.232.60 | www3.ca.com |
65.170.178.224 | www3.safenet-inc.com |
85.247.136.213 | www4.symantec.com |
117.148.243.27 | wwws.clamav.net |
231.131.107.110 | x-cleaner.com |
102.127.53.18 | x.360safe.com |
54.203.79.7 | yoreparo.com |
87.105.118.77 | z-oleg.com |
121.8.159.81 | zeustracker.abuse.ch |
59.3.104.57 | zeylstra.nl |
11.80.131.46 | zhidao.baidu.com |
44.237.170.48 | zhidao.ikaka.com |
158.220.34.199 | ziggamza.net |
29.215.236.107 | zonavirus.com |
49.36.6.96 | zonealarm.com |
81.193.45.166 | zonelabs.com |
195.176.233.249 | zonelabs.fr |
66.172.179.225 | zonelog.co.uk |
18.248.137.214 | zs.kingsoft.com |
51.150.244.216 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 12644 | 12800 | 3.76874 | 55d274f88e5ab59aa27a86516437f7d8 |
.data | 20480 | 64 | 512 | 0.164757 | 75fe664fdcd708925b7ca712ee127c19 |
.rdata | 24576 | 1328 | 1536 | 3.03097 | 2707a7526abdc69c43f37dd3b6665e30 |
.bss | 28672 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.idata | 32768 | 800 | 1024 | 2.18489 | 4e803ebabfbd6fe3233c57c1b6e762a8 |
.rsrc | 36864 | 87232 | 87552 | 5.54166 | 34b5a2a0306aa053bf792aa7f84ba6c7 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a
Network Activity
URLs
URL | IP |
---|---|
hxxp://x0r25mcn4uyk00240n5hi32jd154n9.ipgreat.com/ | 192.230.78.93 |
hxxp://widgets.amung.us/small/00/4.png | 50.23.131.235 |
8q56k4xoo37w3w88qu7r05106ca978.ipcheker.com | 75.126.104.226 |
255o43r0kp51helaq29l512zg6j438.ipcheker.com | 75.126.104.226 |
www.buscaid.com | 8.5.1.51 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):