Trojan.Win32.Fsysna.dpxy (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: e53ab8c0dd69e8d6351845a82f3d2a06
SHA1: a2791d44ad04874224498edd7b017ef90ff14de7
SHA256: 004e901844bf9bdbffda5cfe0ce17962174971d613f34cd42e13b059711d3800
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 3630256 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: XXL Software
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
| Behaviour | Description |
|---|---|
| WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61755 bytes in size. The following strings are added to the hosts file listed below:
| 173.224.217.75 | viabcp.com |
| 173.224.217.75 | www.viabcp.com |
| 173.224.217.75 | ww2.viabcp.com |
| 173.224.217.75 | bcpzonasegura.viabcp.com |
| 173.224.217.75 | hotmail.com |
| 173.224.217.75 | www.hotmail.com |
| 225.38.89.4 | 13iii.com |
| 2.195.128.6 | 15660808.co.kr |
| 116.178.248.157 | 2-spyware.com |
| 243.173.194.65 | 247fixes.com |
| 7.250.220.54 | 360.cn |
| 39.152.3.124 | 360.com |
| 153.134.192.207 | 360safe.cn |
| 24.130.137.183 | 360safe.com |
| 232.206.95.172 | 45pounds.com |
| 9.108.203.175 | 51nb.com |
| 123.22.67.70 | 9down.com |
| 61.86.12.234 | a-2.org |
| 13.163.226.223 | a188.x.akamai.net |
| 46.64.78.37 | abuse.ch |
| 160.235.198.120 | acs.pandasoftware.com |
| 31.42.143.28 | ad-aware-se.uptodown.com |
| 50.119.170.17 | ad.fastclick.net |
| 83.20.209.87 | ads.fastclick.net |
| 197.191.73.238 | agfirewall.ru |
| 68.254.19.146 | agnitum.com |
| 20.75.45.135 | agnitum.de |
| 120.233.84.205 | agnitum.fr |
| 166.147.205.32 | agnitum.ru |
| 105.211.150.196 | ahn.com.cn |
| 57.31.176.185 | ahnlab.com |
| 90.189.216.255 | akamai.net |
| 204.103.148.151 | aknow.prevx.com |
| 142.167.25.59 | aladdin.com |
| 94.244.51.48 | alert.rising.com.cn |
| 127.145.159.118 | alerta-antivirus.inteco.es |
| 241.60.23.201 | alerta-antivirus.red.es |
| 112.123.224.109 | alladdin.ru |
| 131.200.183.98 | aluriasoftware.com |
| 164.33.34.168 | analysis.seclab.tuwien.ac.at |
| 210.16.154.251 | andymanchesta.com |
| 149.11.100.227 | anti-virus-software-review.com |
| 101.156.126.216 | anti-virus.by |
| 133.246.165.218 | anti-virus.com |
| 247.228.30.113 | antirootkit.com |
| 186.224.231.21 | antispam.sunbeltsoftware.com |
| 138.112.1.10 | antispy.ru |
| 171.202.41.80 | antispyware.sunbeltsoftware.com |
| 29.184.161.164 | antivir.es |
| 155.180.106.140 | antiviraldp.com |
| 175.1.132.129 | antivirus-online.de |
| 208.158.172.131 | antivirus-tools.com |
| 254.141.36.26 | antivirus.about.com |
| 193.136.237.190 | antivirus.cai.com |
| 144.213.8.179 | antivirus.comodo.com |
| 177.114.115.249 | antivirus.hispavista.com |
| 35.97.235.76 | antivirus.sunbeltsoftware.com |
| 230.92.181.240 | antiy.net |
| 182.169.139.229 | anubis.iseclab.org |
| 214.71.246.43 | apac.trendmicro.com |
| 72.53.111.194 | ar.answers.yahoo.com |
| 199.49.56.102 | ar.atwola.com |
| 219.125.14.91 | arcabit.com |
| 252.27.122.161 | arcabit.pl |
| 110.9.242.245 | archive.bitdefender.com |
| 236.5.187.153 | arswp.com |
| 188.82.213.142 | arwww.fortinet.cz |
| 221.239.253.212 | asap.authentium.com |
| 79.222.117.39 | ashampoo.com |
| 18.217.62.15 | atazita.blogspot.com |
| 225.38.89.4 | atdmt.com |
| 2.195.128.6 | attechnical.com |
| 116.178.248.157 | atwola.com |
| 243.173.194.65 | au.mcafee.com |
| 7.250.220.54 | auditmypc.com |
| 39.152.3.124 | authentium.com |
| 153.134.192.207 | auwww.ealaddin.nl |
| 24.130.137.183 | avast-home.uptodown.com |
| 232.206.95.172 | avast.com |
| 9.108.203.175 | avast.ru |
| 123.22.67.70 | avg-antivirus.net |
| 61.86.12.234 | avg.com |
| 13.163.226.223 | avg.vo.llnwd.net |
| 46.64.78.37 | avgate.net |
| 160.235.198.120 | avgfrance.com |
| 31.42.143.28 | avhide.com |
| 50.119.170.17 | avira.com |
| 83.20.209.87 | avp.ch |
| 197.191.73.238 | avp.com |
| 68.254.19.146 | avp.ru |
| 20.75.45.135 | avpclub.ddns.info |
| 120.233.84.205 | avu.zonelabs.com |
| 166.147.205.32 | avx.rob-have.net |
| 105.211.150.196 | awaps.net |
| 57.31.176.185 | b-have.orgbitdefender-ar.com |
| 90.189.216.255 | babooforum.com.br |
| 204.103.148.151 | backup.comodo.com |
| 142.167.25.59 | baike.360.cn |
| 94.244.51.48 | baike.360.com |
| 127.145.159.118 | bakunos.com |
| 241.60.23.201 | banner.fastclick.net |
| 112.123.224.109 | banners.fastclick.net |
| 131.200.183.98 | baristamagazine.com |
| 164.33.34.168 | basetendencies.com |
| 210.16.154.251 | bbs.360.cn |
| 149.11.100.227 | bbs.360safe.cn |
| 101.156.126.216 | bbs.360safe.com |
| 133.246.165.218 | bbs.cfan.com.cn |
| 247.228.30.113 | bbs.cpcw.com |
| 186.224.231.21 | bbs.dswlab.com |
| 138.112.1.10 | bbs.duba.net |
| 171.202.41.80 | bbs.ikaka.com |
| 29.184.161.164 | bbs.janmeng.com |
| 155.180.106.140 | bbs.kafan.cn |
| 175.1.132.129 | bbs.kafan.com |
| 208.158.172.131 | bbs.kaspersky.com.cn |
| 254.141.36.26 | bbs.kpfans.com |
| 193.136.237.190 | bbs.mcafeefans.com |
| 144.213.8.179 | bbs.s-sos.net |
| 177.114.115.249 | bbs.sucop.com |
| 35.97.235.76 | bbs.taisha.org |
| 230.92.181.240 | bbs.trendmicro.com.cn |
| 182.169.139.229 | bbs.winzheng.com |
| 214.71.246.43 | bestofewan.com |
| 72.53.111.194 | beta.anti-virus.by |
| 199.49.56.102 | bg.virusblokada.com |
| 219.125.14.91 | bhsbees.com |
| 252.27.122.161 | bitcity.info |
| 110.9.242.245 | bitcity.org |
| 236.5.187.153 | bitdefender.co.uk |
| 188.82.213.142 | bitdefender.com |
| 221.239.253.212 | bitdefender.com.ua |
| 79.222.117.39 | bitdefender.es |
| 18.217.62.15 | bitdefender.org |
| 225.38.89.4 | bitdefender.secyber.net |
| 2.195.128.6 | bitdefenderchina.com |
| 116.178.248.157 | bitdefenderguatemala.com |
| 243.173.194.65 | bitdefendermalaysia.com |
| 7.250.220.54 | bitdefendertaiwan.com |
| 39.152.3.124 | bitdefenderuruguay.com |
| 153.134.192.207 | bitdefenderusa.com |
| 200.50.57.104 | biz.nprotect.com |
| 152.127.15.93 | bkav.com.vn |
| 185.28.123.95 | blackice.iss.net |
| 43.199.243.246 | bleedingthreats.net |
| 238.6.188.154 | bleepingcomputer.com |
| 189.83.147.143 | blitzblank.com |
| 222.240.254.213 | blog.hispasec.com |
| 80.155.118.40 | blog.threatfire.com |
| 207.218.64.204 | blog.titanium-jewelry.com |
| 227.39.90.193 | blog.trendmicro.com |
| 3.197.129.7 | blogs.icerocket.com |
| 117.111.250.158 | blogs.protegerse.com |
| 244.175.195.66 | blogschapines.com |
| 196.251.221.55 | boardreader.com |
| 41.153.4.125 | bobbondart.com |
| 87.67.125.209 | br.mcafee.com |
| 25.131.70.117 | br.trendmicro.com |
| 233.208.96.106 | brazil.kaspersky.com |
| 10.109.136.176 | buddy.bitdefender.com |
| 124.24.68.71 | bugs.clamav.net |
| 63.87.201.235 | buscafacil.com |
| 14.164.228.224 | buscalo.in |
| 47.65.79.38 | busco.in |
| 161.236.199.121 | buy.bitdefender-es.com |
| 32.43.145.29 | buy.bitdefender.com |
| 52.120.103.18 | buy.bitdefender.de |
| 84.210.210.88 | buy.drweb.com |
| 130.192.75.171 | buy.rising.com.cn |
| 69.188.20.147 | ca.com |
| 21.76.46.136 | cacomvip.ca.com |
| 54.166.85.138 | cai.com |
| 168.148.206.34 | canada.karuna-shechen.org |
| 106.144.151.198 | castlecops.com |
| 58.33.177.187 | castlecrops.com |
| 91.122.217.1 | ccslaughterspdx.com |
| 205.105.81.84 | cddchiangmai.net |
| 76.100.26.60 | cdn.atwola.com |
| 95.177.53.49 | center.rising.com.cn |
| 128.78.92.51 | centralcommand.com |
| 174.61.212.202 | cert.org |
| 113.56.158.110 | cfan.com.cn |
| 65.133.184.99 | cgi.clamav.net |
| 97.35.35.169 | changedetection.com |
| 211.17.156.252 | changelog.fr |
| 150.13.101.160 | channelpartner.trendmicro.com |
| 102.89.59.149 | chickensroamfree.com |
| 135.247.166.219 | chkrootkit.org |
| 249.229.31.115 | chollian.nprotect.co.kr |
| 119.225.232.23 | cisrt.org |
| 139.46.190.12 | cit.kookmin.ac.kr |
| 172.203.42.82 | clamav.net |
| 30.186.162.165 | clamwin.com |
| 157.181.107.73 | click.atdmt.com |
| 108.2.134.62 | clicks.atdmt.com |
| 141.159.173.132 | cloudprotection.pandasecurity.com |
| 255.142.37.215 | clubic.com |
| 194.137.239.191 | cmmings.cn |
| 146.214.9.180 | cn.mcafee.com |
| 178.116.48.182 | cn.sophos.com |
| 36.98.169.77 | cn.trendmicro.com |
| 163.94.114.241 | codehard.wordpress.com |
| 183.170.140.230 | cohartuk.com |
| 216.72.180.44 | commentcamarche.net |
| 58.38.96.112 | community.thaiware.com |
| 184.34.41.88 | comodo.com |
| 136.111.255.77 | company.drweb.com |
| 169.12.107.79 | company.hauri.co.kr |
| 27.183.227.230 | company.hauri.net |
| 222.246.172.138 | computing.net |
| 173.67.131.127 | comunidad.wilkinsonpc.com.co |
| 206.224.238.197 | configurarequipos.com |
| 64.139.102.24 | coresecurity.com |
| 191.202.48.188 | cou85.com |
| 211.23.74.177 | cowsmo.com |
| 244.181.113.247 | cpsecure.com |
| 101.95.234.142 | csc.rising.com.cn |
| 228.159.179.50 | cureit.ru |
| 180.235.205.39 | customer.symantec.com |
| 25.137.245.110 | customers.drweb.com |
| 71.51.109.193 | cutlines.org |
| 9.115.54.101 | cwsandbox.org |
| 217.192.80.90 | cybercrime.pandasecurity.com |
| 250.93.120.160 | cyberdefender.com |
| 108.8.52.55 | cybertechhelp.com |
| 47.71.185.219 | daboweb.com |
| 254.148.212.208 | daniloff.net |
| 31.49.63.22 | daniweb.com |
| 145.220.183.105 | darkclockers.com |
| 16.27.129.13 | dazhizhu.cn |
| 36.104.87.2 | de.bitdefender.com |
| 69.194.194.72 | de.mcafee.com |
| 114.176.59.155 | de.trendmicro.com |
| 53.172.4.131 | deckard.geekstogo.com |
| 5.60.30.120 | deerfield.com |
| 38.150.70.123 | defalcos.com |
| 152.132.190.18 | definitions.symantec.com |
| 90.128.135.182 | dell.symantec.com |
| 42.17.161.171 | demos.eset.es |
| 75.106.201.241 | descargas.eset.es |
| 189.89.65.68 | dev.depeuter.org |
| 60.84.10.44 | developmentdrums.org |
| 79.161.37.33 | dialognauka.ru |
| 112.62.76.35 | diamondcs.com.au |
| 158.45.196.186 | dicasweb.com.br |
| 97.41.142.94 | discussions.virtualdr.com |
| 49.117.168.83 | disk-encryption.comodo.com |
| 82.19.19.153 | dl.360safe.com |
| 195.1.140.236 | dl1.antivir-pe.com |
| 134.253.85.192 | dl1.antivir-pe.de |
| 134.121.91.181 | dl1.antivir.de |
| 167.23.198.251 | dl1.avgate.net |
| 24.5.63.146 | dl10.freeav.net |
| 151.1.8.55 | dl2.antivir-pe.com |
| 171.77.222.44 | dl2.antivir-pe.de |
| 204.235.74.114 | dl2.antivir.de |
| 62.218.194.197 | dl2.avgate.net |
| 188.213.139.105 | dl3.antivir-pe.de |
| 140.34.166.94 | dl3.antivir.de |
| 173.191.205.164 | dl3.avgate.net |
| 31.174.69.247 | dl4.antivir-pe.com |
| 226.169.15.223 | dl4.antivir-pe.de |
| 178.246.41.212 | dl4.antivir.de |
| 210.147.80.214 | dl4.avgate.net |
| 68.130.200.109 | dl5.avgate.net |
| 195.126.146.17 | dl6.avgate.net |
| 215.202.172.6 | dl7.avgate.net |
| 248.104.211.76 | dl8.avgate.net |
| 105.86.144.159 | dl8.freeav.net |
| 232.82.89.136 | dl9.avgate.net |
| 184.158.47.125 | dl9.freeav.net |
| 217.60.155.127 | dnl-cd1.kaspersky-labs.com |
| 75.231.19.22 | dnl-cd10.kaspersky-labs.com |
| 13.38.220.186 | dnl-cd11.kaspersky-labs.com |
| 221.115.179.175 | dnl-cd12.kaspersky-labs.com |
| 254.16.30.245 | dnl-cd13.kaspersky-labs.com |
| 112.187.150.72 | dnl-cd2.kaspersky-labs.com |
| 239.250.96.236 | dnl-cd3.kaspersky-labs.com |
| 3.71.122.225 | dnl-cd4.kaspersky-labs.com |
| 35.228.161.39 | dnl-cd5.kaspersky-labs.com |
| 149.143.25.190 | dnl-cd6.kaspersky-labs.com |
| 20.207.227.98 | dnl-cd7.kaspersky-labs.com |
| 228.27.253.87 | dnl-cd8.kaspersky-labs.com |
| 73.185.36.157 | dnl-cd9.kaspersky-labs.com |
| 118.99.157.240 | dnl-cn1.kaspersky-labs.com |
| 57.163.102.149 | dnl-cn10.kaspersky-labs.com |
| 9.239.128.138 | dnl-cn11.kaspersky-labs.com |
| 42.141.168.208 | dnl-cn12.kaspersky-labs.com |
| 156.56.100.103 | dnl-cn13.kaspersky-labs.com |
| 94.119.233.11 | dnl-cn14.kaspersky-labs.com |
| 46.196.4.0 | dnl-cn15.kaspersky-labs.com |
| 79.97.111.70 | dnl-cn2.kaspersky-labs.com |
| 193.12.231.153 | dnl-cn3.kaspersky-labs.com |
| 64.75.177.61 | dnl-cn4.kaspersky-labs.com |
| 68.136.119.34 | dnl-cn5.kaspersky-labs.com |
| 100.226.226.104 | dnl-cn6.kaspersky-labs.com |
| 146.208.91.187 | dnl-cn7.kaspersky-labs.com |
| 85.204.36.163 | dnl-cn8.kaspersky-labs.com |
| 37.92.62.152 | dnl-cn9.kaspersky-labs.com |
| 70.182.101.154 | dnl-eu1.kaspersky-labs.com |
| 183.164.222.49 | dnl-eu10.kaspersky-labs.com |
| 122.160.167.214 | dnl-eu11.kaspersky-labs.com |
| 74.48.193.203 | dnl-eu12.kaspersky-labs.com |
| 107.138.233.17 | dnl-eu13.kaspersky-labs.com |
| 221.121.97.100 | dnl-eu14.kaspersky-labs.com |
| 92.116.42.76 | dnl-eu15.kaspersky-labs.com |
| 111.193.69.65 | dnl-eu2.kaspersky-labs.com |
| 144.94.108.67 | dnl-eu3.kaspersky-labs.com |
| 190.77.228.218 | dnl-eu4.kaspersky-labs.com |
| 129.72.174.126 | dnl-eu5.kaspersky-labs.com |
| 81.149.200.115 | dnl-eu6.kaspersky-labs.com |
| 113.51.51.185 | dnl-eu7.kaspersky-labs.com |
| 227.33.172.12 | dnl-eu8.kaspersky-labs.com |
| 166.29.117.176 | dnl-eu9.kaspersky-labs.com |
| 118.105.75.165 | dnl-jp1.kaspersky-labs.com |
| 151.7.182.235 | dnl-jp10.kaspersky-labs.com |
| 8.245.47.130 | dnl-jp11.kaspersky-labs.com |
| 135.241.248.39 | dnl-jp12.kaspersky-labs.com |
| 155.61.206.28 | dnl-jp13.kaspersky-labs.com |
| 188.219.232.16 | dnl-jp14.kaspersky-labs.com |
| 220.120.97.99 | dnl-jp15.kaspersky-labs.com |
| 91.116.42.8 | dnl-jp2.kaspersky-labs.com |
| 43.192.68.253 | dnl-jp3.kaspersky-labs.com |
| 76.94.108.67 | dnl-jp4.kaspersky-labs.com |
| 190.77.228.150 | dnl-jp5.kaspersky-labs.com |
| 129.72.173.126 | dnl-jp6.kaspersky-labs.com |
| 80.149.200.115 | dnl-jp7.kaspersky-labs.com |
| 113.50.239.117 | dnl-jp8.kaspersky-labs.com |
| 227.33.103.12 | dnl-jp9.kaspersky-labs.com |
| 98.28.49.176 | dnl-kr1.kaspersky-labs.com |
| 118.105.75.165 | dnl-kr10.kaspersky-labs.com |
| 150.7.114.235 | dnl-kr11.kaspersky-labs.com |
| 8.245.46.62 | dnl-kr12.kaspersky-labs.com |
| 135.241.248.38 | dnl-kr13.kaspersky-labs.com |
| 87.61.206.27 | dnl-kr15.kaspersky-labs.com |
| 120.219.57.29 | dnl-kr2.kaspersky-labs.com |
| 233.133.178.180 | dnl-kr3.kaspersky-labs.com |
| 172.197.123.89 | dnl-kr4.kaspersky-labs.com |
| 124.17.81.78 | dnl-kr5.kaspersky-labs.com |
| 157.175.189.148 | dnl-kr6.kaspersky-labs.com |
| 15.90.53.231 | dnl-kr7.kaspersky-labs.com |
| 142.153.254.139 | dnl-kr8.kaspersky-labs.com |
| 161.230.25.128 | dnl-kr9.kaspersky-labs.com |
| 194.131.64.198 | dnl-ru1.kaspersky-labs.com |
| 52.46.184.93 | dnl-ru10.kaspersky-labs.com |
| 179.109.130.1 | dnl-ru11.kaspersky-labs.com |
| 131.186.156.246 | dnl-ru12.kaspersky-labs.com |
| 231.88.195.60 | dnl-ru13.kaspersky-labs.com |
| 21.2.60.143 | dnl-ru14.kaspersky-labs.com |
| 216.66.5.51 | dnl-ru15.kaspersky-labs.com |
| 168.142.31.40 | dnl-ru2.kaspersky-labs.com |
| 201.44.70.110 | dnl-ru3.kaspersky-labs.com |
| 43.198.243.246 | dnl-ru4.kaspersky-labs.com |
| 237.6.120.154 | dnl-ru5.kaspersky-labs.com |
| 189.82.146.143 | dnl-ru6.kaspersky-labs.com |
| 222.240.254.213 | dnl-ru7.kaspersky-labs.com |
| 80.155.118.40 | dnl-ru8.kaspersky-labs.com |
| 207.218.63.204 | dnl-ru9.kaspersky-labs.com |
| 226.39.22.193 | dnl-us1.kaspersky-labs.com |
| 3.128.129.7 | dnl-us10.kaspersky-labs.com |
| 49.111.249.90 | dnl-us11.kaspersky-labs.com |
| 244.106.195.66 | dnl-us12.kaspersky-labs.com |
| 196.251.221.55 | dnl-us13.kaspersky-labs.com |
| 228.85.4.57 | dnl-us14.kaspersky-labs.com |
| 86.67.125.208 | dnl-us15.kaspersky-labs.com |
| 25.63.70.116 | dnl-us2.kaspersky-labs.com |
| 233.207.96.105 | dnl-us3.kaspersky-labs.com |
| 10.41.135.175 | dnl-us4.kaspersky-labs.com |
| 124.23.0.3 | dnl-us5.kaspersky-labs.com |
| 250.19.201.235 | dnl-us6.kaspersky-labs.com |
| 14.96.227.224 | dnl-us7.kaspersky-labs.com |
| 47.253.11.226 | dnl-us8.kaspersky-labs.com |
| 93.236.131.121 | dnl-us9.kaspersky-labs.com |
| 32.231.76.29 | dougknox.com |
| 239.52.103.18 | down.360safe.cn |
| 16.209.210.88 | down.360safe.com |
| 130.192.74.171 | download.avg.com |
| 69.187.20.79 | download.bleepingcomputer.com |
| 21.8.234.68 | download.com |
| 53.166.85.138 | download.com.vn |
| 167.148.206.33 | download.eset.com |
| 38.144.199.245 | download.f-secure.com |
| 106.12.157.234 | download.mcafee.com |
| 139.170.8.48 | download.microsoft.com |
| 252.152.129.131 | download.microsoft.comguru0.grisoft.cz |
| 123.148.74.39 | download.nai.com |
| 75.224.100.29 | download.norman.no |
| 108.126.140.99 | download.rising.com.cn |
| 222.108.4.182 | download.softpedia.com |
| 160.104.205.158 | download.sysinternals.com |
| 112.181.232.147 | download0.avast.com |
| 145.82.15.149 | download1.avast.com |
| 3.65.135.44 | download1.emsisoft.com |
| 130.60.80.208 | download1.quickheal.com |
| 149.137.107.197 | download10.quickheal.com |
| 182.38.146.11 | download100.avast.com |
| 40.21.78.94 | download1us.softpedia.com |
| 167.17.24.70 | download2.avast.com |
| 119.93.238.59 | download2.quickheal.com |
| 152.251.89.61 | download200.avast.com |
| 9.165.210.212 | download201.avast.com |
| 204.229.155.120 | download202.avast.com |
| 156.49.113.110 | download203.avast.com |
| 189.207.221.180 | download204.avast.com |
| 47.121.85.7 | download205.avast.com |
| 173.185.14.155 | download206.avast.com |
| 177.246.41.144 | download207.avast.com |
| 210.147.80.214 | download208.avast.com |
| 68.62.200.109 | download209.avast.com |
| 195.125.146.17 | download210.avast.com |
| 147.202.172.6 | download211.avast.com |
| 247.103.211.76 | download212.avast.com |
| 37.18.75.159 | download213.avast.com |
| 232.82.21.67 | download214.avast.com |
| 184.158.47.56 | download3.avast.com |
| 217.60.86.126 | download3.quickheal.com |
| 74.230.19.21 | download4.avast.com |
| 13.38.152.185 | download4.emsisoft.com |
| 221.114.178.175 | download4.quickheal.com |
| 254.16.30.245 | download5.avast.com |
| 112.187.150.72 | download5.emsisoft.com |
| 238.250.95.236 | download5.quickheal.com |
| 2.71.54.225 | download501.avast.com |
| 35.160.161.39 | download502.avast.com |
| 81.143.25.122 | download503.avast.com |
| 20.138.227.98 | download504.avast.com |
| 228.27.253.87 | download505.avast.com |
| 4.116.36.9 | download511.avast.com |
| 38.19.77.160 | download512.avast.com |
| 233.15.22.68 | download513.avast.com |
| 185.159.48.58 | download514.avast.com |
| 218.249.88.128 | download515.avast.com |
| 76.232.208.211 | download516.avast.com |
| 202.227.153.187 | download535.avast.com |
| 222.48.180.176 | download6.avast.com |
| 255.205.219.178 | download6.quickheal.com |
| 45.188.83.73 | download600.avast.com |
| 240.183.29.237 | download601.avast.com |
| 192.4.55.226 | download602.avast.com |
| 224.161.162.40 | download603.avast.com |
| 82.144.26.123 | download604.avast.com |
| 21.140.228.31 | download605.avast.com |
| 229.216.186.20 | download606.avast.com |
| 6.118.37.90 | download607.avast.com |
| 119.100.158.241 | download608.avast.com |
| 246.96.103.149 | download609.avast.com |
| 10.172.61.139 | download617.avast.com |
| 43.74.169.209 | download618.avast.com |
| 157.57.17.20 | download619.avast.com |
| 12.36.218.184 | download620.avast.com |
| 219.113.245.173 | download621.avast.com |
| 252.14.28.243 | download622.avast.com |
| 110.253.148.70 | download623.avast.com |
| 49.248.94.46 | download624.avast.com |
| 1.69.120.35 | download625.avast.com |
| 33.226.159.37 | download626.avast.com |
| 147.209.23.188 | download627.avast.com |
| 18.205.225.96 | download628.avast.com |
| 38.25.251.85 | download629.avast.com |
| 71.183.34.155 | download630.avast.com |
| 184.165.223.238 | download631.avast.com |
| 55.161.168.215 | download632.avast.com |
| 7.237.126.204 | download633.avast.com |
| 40.139.234.206 | download634.avast.com |
| 154.54.98.101 | download635.avast.com |
| 93.117.43.9 | download636.avast.com |
| 44.194.2.254 | download637.avast.com |
| 77.95.109.68 | download638.avast.com |
| 191.10.229.199 | download639.avast.com |
| 110.121.222.107 | download640.avast.com |
| 129.198.249.96 | download641.avast.com |
| 162.99.32.166 | download642.avast.com |
| 20.14.152.61 | download643.avast.com |
| 147.77.98.225 | download644.avast.com |
| 99.154.124.214 | download645.avast.com |
| 199.56.163.28 | download646.avast.com |
| 245.226.28.111 | download647.avast.com |
| 184.34.229.19 | download648.avast.com |
| 136.110.255.8 | download649.avast.com |
| 169.12.39.79 | download650.avast.com |
| 27.182.227.230 | download651.avast.com |
| 221.246.104.138 | download652.avast.com |
| 173.67.130.127 | download653.avast.com |
| 206.224.238.197 | download654.avast.com |
| 64.139.102.24 | download655.avast.com |
| 191.202.47.188 | download656.avast.com |
| 210.23.6.177 | download658.avast.com |
| 243.112.113.247 | download659.avast.com |
| 33.95.233.74 | download660.avast.com |
| 228.90.179.50 | download661.avast.com |
| 180.235.205.39 | download662.avast.com |
| 213.69.244.41 | download663.avast.com |
| 70.51.109.192 | download664.avast.com |
| 9.47.54.100 | download665.avast.com |
| 217.191.80.89 | download666.avast.com |
| 250.25.120.160 | download667.avast.com |
| 108.7.240.243 | download668.avast.com |
| 234.3.185.219 | download669.avast.com |
| 254.80.211.208 | download670.avast.com |
| 31.237.251.194 | download671.avast.com |
| 61.204.99.89 | download672.avast.com |
| 0.199.44.253 | download673.avast.com |
| 207.20.71.242 | download674.avast.com |
| 240.177.178.56 | download675.avast.com |
| 98.160.42.139 | download676.avast.com |
| 37.156.244.47 | download677.avast.com |
| 245.232.202.36 | download678.avast.com |
| 22.134.53.106 | download679.avast.com |
| 135.116.174.1 | download680.avast.com |
| 6.112.119.165 | download681.avast.com |
| 26.188.77.154 | download682.avast.com |
| 59.90.185.225 | download683.avast.com |
| 173.72.49.52 | download684.avast.com |
| 43.68.250.216 | download685.avast.com |
| 251.145.21.205 | download686.avast.com |
| 28.46.60.19 | download687.avast.com |
| 142.29.180.102 | download688.avast.com |
| 81.24.125.78 | download689.avast.com |
| 32.101.152.67 | download690.avast.com |
| 65.2.191.69 | download691.avast.com |
| 179.241.55.220 | download692.avast.com |
| 50.237.1.128 | download693.avast.com |
| 70.57.27.117 | download694.avast.com |
| 103.215.66.187 | download695.avast.com |
| 137.117.175.191 | download696.avast.com |
| 7.113.120.167 | download697.avast.com |
| 215.190.78.156 | download698.avast.com |
| 248.91.186.158 | download699.avast.com |
| 106.6.50.53 | download7.avast.com |
| 45.69.251.217 | download7.quickheal.com |
| 252.146.210.206 | download700.avast.com |
| 29.47.61.20 | download701.avast.com |
| 143.218.181.103 | download702.avast.com |
| 14.26.127.11 | download703.avast.com |
| 34.102.153.0 | download704.avast.com |
| 67.4.192.70 | download705.avast.com |
| 180.174.57.221 | download706.avast.com |
| 51.238.2.129 | download707.avast.com |
| 3.58.28.118 | download708.avast.com |
| 104.216.68.189 | download709.avast.com |
| 150.130.188.16 | download72.avast.com |
| 88.194.133.180 | download73.avast.com |
| 40.15.159.169 | download74.avast.com |
| 73.172.199.239 | download75.avast.com |
| 187.87.131.134 | download76.avast.com |
| 126.150.8.42 | download77.avast.com |
| 77.227.35.31 | download78.avast.com |
| 110.128.142.101 | download79.avast.com |
| 224.43.6.184 | download8.quickheal.com |
| 95.107.208.92 | download80.avast.com |
| 115.183.166.81 | download81.avast.com |
| 148.17.17.151 | download82.avast.com |
| 177.239.122.218 | download83.avast.com |
| 116.235.67.194 | download84.avast.com |
| 68.123.93.184 | download85.avast.com |
| 101.213.133.186 | download9.quickheal.com |
| 215.195.253.81 | download900.avast.com |
| 153.191.198.245 | download901.avast.com |
| 105.80.225.234 | download902.avast.com |
| 138.169.8.48 | download903.avast.com |
| 252.152.128.131 | download904.avast.com |
| 123.147.73.107 | download905.avast.com |
| 143.224.100.96 | download906.avast.com |
| 175.125.139.98 | download907.avast.com |
| 221.108.3.249 | download908.avast.com |
| 160.104.205.157 | download909.avast.com |
| 112.180.231.146 | download91.avast.com |
| 145.82.82.216 | download910.avast.com |
| 2.64.203.43 | download911.avast.com |
| 197.60.148.207 | download912.avast.com |
| 149.136.106.197 | download913.avast.com |
| 182.38.214.11 | download914.avast.com |
| 40.20.78.162 | download915.avast.com |
| 166.16.23.70 | download916.avast.com |
| 186.93.238.59 | download917.avast.com |
| 219.250.89.129 | download918.avast.com |
| 77.233.209.212 | download919.avast.com |
| 204.228.154.120 | download92.avast.com |
| 156.49.181.157 | download920.avast.com |
| 236.254.12.227 | download921.avast.com |
| 94.237.132.54 | download922.avast.com |
| 33.232.78.30 | download923.avast.com |
| 241.53.104.19 | download924.avast.com |
| 17.211.143.21 | download925.avast.com |
| 131.193.8.172 | download926.avast.com |
| 2.189.209.80 | download927.avast.com |
| 22.9.235.69 | download928.avast.com |
| 55.167.18.139 | download929.avast.com |
| 168.149.207.223 | download93.avast.com |
| 39.145.152.199 | download930.avast.com |
| 247.221.110.188 | download931.avast.com |
| 24.123.218.190 | download932.avast.com |
| 138.38.82.85 | download933.avast.com |
| 77.101.27.249 | download934.avast.com |
| 28.178.242.238 | download935.avast.com |
| 61.79.93.52 | download936.avast.com |
| 175.250.213.135 | download937.avast.com |
| 46.57.159.43 | download938.avast.com |
| 66.134.185.32 | download939.avast.com |
| 98.36.224.102 | download94.avast.com |
| 212.206.89.253 | download940.avast.com |
| 83.14.34.161 | download941.avast.com |
| 35.90.60.150 | download942.avast.com |
| 136.248.99.220 | download943.avast.com |
| 166.146.204.32 | download944.avast.com |
| 104.210.149.196 | download945.avast.com |
| 56.31.175.185 | download946.avast.com |
| 89.188.215.255 | download947.avast.com |
| 203.103.147.150 | download948.avast.com |
| 142.166.24.58 | download949.avast.com |
| 93.243.51.47 | download95.avast.com |
| 126.144.158.117 | download950.avast.com |
| 240.59.22.200 | download951.avast.com |
| 111.122.224.108 | download952.avast.com |
| 131.199.182.97 | download953.avast.com |
| 163.33.33.167 | download954.avast.com |
| 209.15.154.250 | download955.avast.com |
| 148.11.99.226 | download956.avast.com |
| 100.155.125.215 | download957.avast.com |
| 133.245.165.218 | download958.avast.com |
| 247.227.29.113 | download959.avast.com |
| 185.223.230.21 | download96.avast.com |
| 137.112.0.10 | download960.avast.com |
| 170.201.40.80 | download961.avast.com |
| 28.184.160.163 | download962.avast.com |
| 155.179.105.139 | download963.avast.com |
| 174.0.132.128 | download964.avast.com |
| 207.157.91.50 | download965.avast.com |
| 173.60.212.201 | download966.avast.com |
| 112.56.157.109 | download967.avast.com |
| 64.132.183.98 | download968.avast.com |
| 97.34.34.168 | download969.avast.com |
| 211.16.155.252 | download97.avast.com |
| 149.12.100.160 | download970.avast.com |
| 101.89.58.149 | download971.avast.com |
| 134.246.166.219 | download972.avast.com |
| 248.229.30.114 | download973.avast.com |
| 119.224.231.22 | download974.avast.com |
| 138.45.190.11 | download975.avast.com |
| 171.202.41.81 | download976.avast.com |
| 29.185.161.164 | download977.avast.com |
| 156.180.107.72 | download978.avast.com |
| 108.1.133.61 | download979.avast.com |
| 140.159.172.131 | download98.avast.com |
| 254.141.37.214 | download980.avast.com |
| 193.137.238.190 | download99.avast.com |
| 145.213.8.179 | downloads-eu1.kaspersky-labs.com |
| 178.115.48.181 | downloads-eu2.kaspersky-labs.com |
| 36.97.168.77 | downloads-eu3.kaspersky-labs.com |
| 162.93.113.241 | downloads-eu4.kaspersky-labs.com |
| 182.170.139.230 | downloads-us1.kaspersky-labs.com |
| 215.71.179.44 | downloads-us2.kaspersky-labs.com |
| 73.54.111.127 | downloads-us3.kaspersky-labs.com |
| 184.33.40.87 | downloads-us4.kaspersky-labs.com |
| 135.110.255.76 | downloads.andymanchesta.com |
| 168.11.106.78 | downloads.malwarebytes.org |
| 26.182.226.229 | downloads.microsoft.com |
| 221.245.172.137 | downloads.My-eTrust.com |
| 173.66.130.126 | downloads1.kaspersky-labs.com |
| 206.224.237.196 | downloads2.kaspersky-labs.com |
| 63.138.102.23 | downloads3.kaspersky-labs.com |
| 190.202.47.187 | downloads4.kaspersky-labs.com |
| 210.22.73.176 | downloads5.kaspersky-labs.com |
| 243.180.113.247 | dr-web-cureit.softonic.com |
| 101.94.233.142 | drsolomon.com |
| 227.158.178.50 | drweb-inside.com |
| 179.235.204.39 | drweb.com |
| 24.136.244.109 | drweb.com.es |
| 70.51.108.192 | drweb.net |
| 9.114.53.100 | drwebinside.com |
| 216.191.80.89 | dswlab.com |
| 249.92.119.159 | duba.net |
| 107.7.51.54 | ealaddin.net |
| 46.70.185.218 | ealaddin.orgeshop.aladdin.com |
| 254.147.211.207 | easy-vpn.comodo.com |
| 31.49.62.21 | edm.symantec.com |
| 144.219.183.104 | education.symantec.com |
| 63.75.176.60 | eeload.com |
| 83.151.134.49 | eeye.com |
| 116.241.241.119 | eicar.org |
| 161.223.106.202 | elblogdemanu.com |
| 100.219.51.179 | elitepvpers.de |
| 52.107.77.168 | emea.trendmicro.com |
| 85.197.117.170 | emsisoft.com |
| 199.180.237.65 | emsisoft.de |
| 137.175.182.229 | encarta.msn.com |
| 89.64.209.218 | engine.awaps.net |
| 122.153.248.32 | enterprisesecur.symantec.com |
| 236.136.112.115 | eos.eset.es |
| 107.131.58.91 | eradicatespyware.net |
| 127.208.84.80 | es.answers.yahoo.com |
| 159.109.123.82 | es.kioskea.net |
| 205.92.243.233 | es.mcafee.com |
| 144.88.189.141 | es.trendmicro.com |
| 96.164.215.130 | es.wasalive.com |
| 129.66.66.200 | esafe.com |
| 242.48.171.11 | esecurity.livecall.co.kr |
| 165.28.116.176 | eset-la.com |
| 117.104.74.165 | eset.com |
| 150.6.182.235 | eset.es |
| 8.245.46.130 | eset.sk |
| 135.240.247.38 | esp.sophos.com |
| 154.61.206.27 | espanol.answers.yahoo.com |
| 187.218.57.97 | espanol.dir.groups.yahoo.com |
| 45.201.177.180 | espanol.groups.yahoo.com |
| 172.196.123.88 | esupport.trendmicro.com |
| 124.17.149.77 | et.symantec.com |
| 156.175.188.147 | etrr.co.uk |
| 14.157.53.230 | eugrantsadvisor.cz |
| 209.153.254.206 | eugrantsadvisor.de |
| 161.229.24.195 | eval.symantec.com |
| 109.47.235.113 | ewido.net |
| 223.29.100.8 | exchangeyourcareer.net |
| 94.25.45.172 | experts-exchange.com |
| 114.101.71.161 | f-prot.com |
| 147.3.110.231 | f-secure.com |
| 4.241.43.58 | f-secure.frf-secure.hk |
| 131.237.244.35 | f-secure.nlfsecure.com |
| 83.57.202.24 | fastclick.net |
| 116.215.54.26 | feedage.com |
| 230.130.174.177 | feeds.sophos.com |
| 169.193.119.85 | feeds.trendmicro.com |
| 120.14.78.74 | file.ikaka.cn |
| 153.171.185.144 | file.ikaka.com |
| 11.86.49.227 | file.net |
| 138.149.251.135 | files.avast.com |
| 158.226.53.156 | files.filefont.com |
| 222.159.92.226 | files.trendmicro-europe.com |
| 80.74.212.121 | filseclab.com |
| 207.138.158.29 | final4ever.com |
| 159.214.184.18 | finjan.com |
| 4.116.223.88 | firewall.sunbeltsoftware.com |
| 49.30.88.171 | firewallguide.com |
| 244.94.33.79 | fixmyim.com |
| 196.170.59.69 | foro.ethek.com |
| 229.72.99.139 | foros.toxico-pc.com |
| 87.242.31.34 | foros.zonavirus.com |
| 25.50.164.198 | forospanish.com |
| 233.127.191.187 | forospyware.com |
| 10.28.42.1 | forospyware.es |
| 108.183.146.68 | fortiguardcenter.com |
| 235.246.92.232 | fortihero.com |
| 255.67.50.221 | fortilog.com |
| 31.156.157.35 | fortinet.co.at |
| 77.139.21.118 | fortinet.com |
| 16.135.223.94 | fortiprotect.com |
| 224.23.249.83 | fortiwifi.com |
| 1.113.32.85 | forum.clubedohardware.com.br |
| 114.95.153.236 | forum.emsisoft.com |
| 53.91.98.144 | forum.hardware.fr |
| 5.235.124.134 | forum.hijackthis.de |
| 38.69.164.204 | forum.ikaka.com |
| 152.52.28.31 | forum.jiangmin.com |
| 22.47.229.7 | forum.kaspersky.com |
| 42.124.0.172 | forum.malekal.com |
| 251.201.215.174 | forum.piriform.com |
| 41.184.79.69 | forum.securitycadets.com |
| 236.180.25.233 | forum.sysinternals.com |
| 188.0.51.222 | forum.telecharger.01net.com |
| 221.158.158.36 | forum.tweaks.com |
| 78.140.23.119 | forum.zazana.com |
| 17.136.224.27 | forums.cnet.com |
| 225.212.182.17 | forums.comodo.com |
| 2.114.34.87 | forums.devshed.com |
| 116.97.154.238 | forums.maddoktor2.com |
| 242.92.99.146 | forums.majorgeeks.com |
| 6.169.58.135 | forums.techguy.org |
| 39.70.165.205 | forums.whatthetech.com |
| 153.53.29.32 | fr.bitdefender.com |
| 24.48.230.196 | fr.drweb.com |
| 216.109.241.169 | fr.mcafee.com |
| 248.10.24.239 | fr.trendmicro.com |
| 106.249.144.66 | fr1.drweb.com |
| 45.245.90.42 | fr2.drweb.com |
| 253.65.116.31 | fr3.drweb.com |
| 30.223.155.33 | fr4.drweb.com |
| 143.205.20.184 | fr5.drweb.com |
| 14.201.221.93 | fr6.drweb.com |
| 34.21.247.82 | fr7.drweb.com |
| 67.179.31.152 | fractus.mat.uson.mx |
| 181.162.219.235 | free-av.com |
| 52.157.164.211 | free-av.net |
| 3.234.123.200 | free.antivirus.com |
| 36.135.230.202 | free.avg.com |
| 150.50.94.97 | free.drweb.com |
| 89.113.40.5 | free.grisoft.com |
| 41.190.254.250 | free.grisoft.cz |
| 73.91.105.64 | free.pandasecurity.com |
| 187.6.225.147 | free.prevx.com |
| 106.117.219.103 | free.tinypicbox.com |
| 126.194.245.92 | freeav.com |
| 158.96.28.162 | freeav.net |
| 16.10.149.57 | freespywareremoval.info |
| 143.74.94.221 | frisk-software.com |
| 95.150.120.210 | fsc.norman.com |
| 196.52.160.25 | fsecure.nlwebyard.com |
| 242.222.24.108 | ftp.avp.com |
| 180.30.225.16 | ftp.bitdefender.com |
| 132.107.251.5 | ftp.ca.co |
| 165.8.35.75 | ftp.ca.com |
| 23.179.223.226 | ftp.customer.symantec.com |
| 218.242.100.134 | ftp.dispatch.mcafee.com |
| 169.63.127.123 | ftp.download.mcafee.com |
| 202.220.234.193 | ftp.downloads-eu1.kaspersky-labs.com |
| 60.135.98.20 | ftp.downloads-eu2.kaspersky-labs.com |
| 187.198.44.184 | ftp.downloads-eu3.kaspersky-labs.com |
| 191.3.242.157 | ftp.downloads-eu4.kaspersky-labs.com |
| 224.93.93.227 | ftp.downloads-us1.kaspersky-labs.com |
| 13.75.214.54 | ftp.downloads-us2.kaspersky-labs.com |
| 208.71.159.30 | ftp.downloads-us3.kaspersky-labs.com |
| 160.215.185.19 | ftp.downloads-us4.kaspersky-labs.com |
| 193.49.225.22 | ftp.downloads1.kaspersky-labs.com |
| 51.31.89.173 | ftp.downloads2.kaspersky-labs.com |
| 245.27.34.81 | ftp.downloads3.kaspersky-labs.com |
| 197.172.61.70 | ftp.downloads4.kaspersky-labs.com |
| 230.5.100.140 | ftp.drweb.com |
| 88.244.220.223 | ftp.esafe.com |
| 215.239.165.199 | ftp.europe.f-secure.com |
| 234.60.192.188 | ftp.f-prot.com |
| 188.138.151.110 | ftp.f-secure.com |
| 233.120.16.5 | ftp.grisoft.com |
| 172.116.217.169 | ftp.kaspersky-labs.com |
| 124.192.243.158 | ftp.kaspersky.com |
| 157.94.95.229 | ftp.kasperskylab.ru |
| 15.76.215.56 | ftp.liveupdate.symantec.com |
| 209.72.160.220 | ftp.liveupdate.symantecliveupdate.com |
| 161.149.119.209 | ftp.mast.mcafee.com |
| 194.50.226.23 | ftp.mcafee.com |
| 52.33.90.174 | ftp.microworldsystems.com |
| 179.28.35.82 | ftp.my-etrust.com |
| 198.105.250.71 | ftp.nai.com |
| 231.6.101.141 | ftp.networkassociates.com |
| 89.245.221.224 | ftp.norton.com |
| 216.241.167.132 | ftp.rads.mcafee.com |
| 152.45.177.105 | ftp.sandbox.norman.com |
| 185.203.216.175 | ftp.secure.nai.com |
| 42.185.81.2 | ftp.securityresponse.symantec.com |
| 237.181.26.234 | ftp.sophos.com |
| 189.1.52.224 | ftp.symantec.com |
| 222.159.92.226 | ftp.symantecliveupdate.com |
| 80.141.212.121 | ftp.symatec.com |
| 206.137.157.29 | ftp.trendmicro.com |
| 226.214.184.18 | ftp.uk.trendmicro-europe.com |
| 3.115.223.88 | ftp.update.symantec.com |
| 117.98.155.171 | ftp.updates.symantec.com |
| 244.93.100.147 | ftp.updates1.kaspersky-labs.com |
| 196.170.59.136 | ftp.updates2.kaspersky-labs.com |
| 228.71.166.138 | ftp.updates3.kaspersky-labs.com |
| 86.242.30.33 | ftp.updates4.kaspersky-labs.com |
| 25.50.232.245 | ftp.us.mcafee.com |
| 25.174.238.234 | ftp.viruslist.com |
| 57.76.89.48 | funkytoad.com |
| 171.246.210.131 | futurenow.bitdefender.com |
| 42.54.155.39 | fw.rising.com.cn |
| 62.130.181.28 | fx.dk |
| 95.32.220.98 | gangbang.mytijn.org |
| 208.202.85.250 | gdata.de |
| 79.10.30.158 | gdata.es |
| 31.86.56.147 | gecadsoftware.com |
| 132.244.96.217 | geekstogo.com |
| 178.159.216.44 | global.ahnlab.com |
| 117.222.161.208 | global.jiangmin.com |
| 68.43.188.197 | global.nprotect.com |
| 101.200.227.11 | go.mcafee.com |
| 215.115.159.146 | go.microsoft.com |
| 138.162.21.54 | go.rising.com.cn |
| 90.239.47.43 | go.sunbeltsoftware.com |
| 122.141.154.113 | go.symantec.com |
| 236.55.19.196 | go.trendmicro.com |
| 107.119.220.104 | greatis.com |
| 127.195.178.93 | grisoft.com |
| 160.29.30.163 | grisoft.cz |
| 206.11.150.247 | grv.microsoft.com |
| 144.7.95.223 | guiadohardware.net |
| 96.152.121.212 | guru.avg.com |
| 129.241.161.134 | guru1.grisoft.cz |
| 163.144.201.29 | guru2.grisoft.cz |
| 102.139.147.193 | guru3.grisoft.cz |
| 54.28.173.182 | guru4.grisoft.cz |
| 86.118.212.252 | guru5.grisoft.cz |
| 200.100.77.79 | gwava.nl |
| 71.96.22.55 | hacksoft.com.pe |
| 91.172.48.44 | hacksoft.pe |
| 124.74.88.46 | halmapr.com |
| 170.56.208.198 | hauri.co.kr |
| 92.36.137.90 | hauri.net |
| 44.113.163.79 | haurijapan.com |
| 77.14.15.149 | help.rising.com.cn |
| 191.253.135.232 | hi.baidu.com |
| 130.248.80.140 | hijackthis.de |
| 81.69.39.129 | hijackthis.download3000.com |
| 114.226.146.199 | hishomeforchildren.com |
| 228.209.10.94 | hjt-data.trend-braintree.com |
| 99.204.212.2 | hjt.networktechs.com |
| 119.25.170.247 | home.mcafee.com |
| 152.183.21.61 | hostedmailsecur.symantec.com |
| 57.213.189.192 | hotshare.net |
| 184.209.135.100 | housecall.com |
| 136.29.161.89 | housecall.trendmicro.com |
| 169.187.200.159 | housecall60.trendmicro.com |
| 26.169.65.242 | housecall65.trendmicro.com |
| 221.165.10.219 | howsafeismypc.com |
| 173.241.36.208 | huaifai.go.th |
| 206.143.76.210 | i-vault.comodo.com |
| 64.126.196.105 | iavs.cz |
| 191.121.141.13 | ibusca.me |
| 210.198.168.242 | idauthority.com |
| 227.83.191.56 | ids.kaspersky-labs.com |
| 85.66.123.139 | ieupdate.gdata.de |
| 212.61.69.115 | ieupdate1.gdata.de |
| 164.138.27.104 | ieupdate2.gdata.de |
| 196.40.134.106 | ieupdate3.gdata.de |
| 54.210.255.1 | ieupdate4.gdata.de |
| 249.18.200.165 | ieupdate5.gdata.de |
| 201.94.158.154 | ieupdate6.gdata.de |
| 234.252.9.224 | ikaka.cn |
| 91.166.130.52 | ikaka.com |
| 218.230.75.216 | ikarus.at |
| 238.50.101.205 | ikarus.net |
| 15.208.141.19 | ilove.tigolbittys.info |
| 129.123.5.170 | images.kaspersky.com |
| 174.105.125.253 | in.answers.yahoo.com |
| 126.181.151.242 | incodesolutions.com |
| 227.83.191.56 | info.drweb.com |
| 17.254.55.139 | info.prevx.com |
| 212.61.0.47 | infos-du-net.com |
| 163.138.27.36 | infosecpodcast.com |
| 196.39.66.106 | infospyware.com |
| 54.210.254.1 | inicioid.com |
| 249.17.132.165 | iniciorapido.info |
| 201.94.158.154 | inline-software.de |
| 233.252.9.224 | internetsecurity.comodo.com |
| 91.166.129.51 | intranet.cidiroax.ipn.mx |
| 218.230.75.215 | investor.symantec.com |
| 238.50.33.204 | irc.bigshitsandwich.org |
| 15.140.140.18 | irc.metraiciono.com |
| 60.122.5.101 | iseclab.org |
| 255.118.206.78 | isotopecomics.com |
| 191.246.216.51 | iss.net |
| 224.80.0.53 | it.answers.yahoo.com |
| 82.63.120.204 | it.bitdefender.com |
| 21.58.65.112 | it.mcafee.com |
| 228.203.92.101 | it.trendmicro.com |
| 5.36.131.171 | itw.trendmicro.com |
| 119.19.251.254 | ixomodels.com |
| 246.14.197.230 | ixostore.ixomodels.com |
| 10.91.223.219 | javacoolsoftware.com |
| 42.249.6.221 | jetico.com |
| 88.231.127.116 | jiangmin.com |
| 27.227.72.24 | jiangmin.com.cn |
| 235.47.98.13 | jobs.bitdefender.com |
| 12.205.205.83 | jotti.org |
| 126.187.70.167 | jp.mcafee.com |
| 112.231.63.122 | jp.trendmicro.com |
| 64.51.21.112 | justfacebook.net |
| 97.209.129.182 | k-otik.com |
| 211.191.249.77 | k7computing.com |
| 81.187.194.241 | kaba.360.cn |
| 101.8.153.230 | kaba.360.com |
| 134.165.4.44 | karuna-shechen.org |
| 248.148.124.127 | kaspersky-fr.com |
| 119.143.69.35 | kaspersky-labs.com |
| 71.220.96.24 | kaspersky.co.jp |
| 103.121.135.94 | kaspersky.co.uk |
| 217.104.255.177 | kaspersky.com |
| 140.84.185.137 | kaspersky.com.cn |
| 92.160.211.126 | kaspersky.dk |
| 125.62.250.128 | kaspersky.es |
| 238.44.115.23 | kaspersky.gr |
| 109.40.60.187 | kaspersky.pl |
| 129.116.86.177 | kaspersky.ru |
| 162.18.126.247 | kaspersky.se |
| 20.1.58.74 | kasperskylab.co.kr |
| 146.252.3.50 | kasperskylab.nl |
| 98.73.218.39 | kav.ru |
| 131.230.69.41 | kav.zonelabs.com |
| 245.145.189.192 | kb.bitdefender.com |
| 184.208.135.100 | kb.bitdefender.de |
| 136.29.93.89 | kb.bitdefender.us |
| 168.186.200.159 | kerio.com |
| 26.101.64.242 | kimzimmer.net |
| 153.165.10.150 | kioskea.net |
| 173.241.36.60 | kpfans.com |
| 126.63.252.130 | kr.ahnlab.com |
| 240.234.116.25 | kr.sophos.com |
| 110.41.61.189 | krupunmai.com |
| 62.118.88.178 | kvup.jiangmin.com |
| 163.19.127.248 | kztechs.com |
| 209.190.247.75 | l33t.shadow-mods.net |
| 148.253.193.239 | la.trendmicro.com |
| 100.74.219.228 | ladooscuro.es |
| 132.231.2.42 | laneros.com |
| 246.146.190.193 | latam.kaspersky.com |
| 185.210.68.101 | latin.bitdefender.com |
| 137.30.94.90 | lavasoft.com |
| 170.188.201.160 | lavasoft.nu |
| 27.102.66.243 | lavasoftusa.com |
| 138.150.251.136 | lexikon.ikarus.at |
| 158.226.209.125 | license.drweb.com |
| 191.60.61.195 | linhadefensiva.org |
| 237.43.181.22 | linhadefensiva.uol.com.br |
| 176.38.126.254 | linux.bitdefender.com |
| 127.183.153.243 | lists.clamav.net |
| 160.16.192.245 | liutilities.com |
| 18.255.56.140 | live.sunbeltsoftware.com |
| 213.250.2.48 | liveprotect.net |
| 165.139.28.37 | liveupdate.symantec.com |
| 197.229.67.107 | liveupdate.symantec.d4p.net |
| 55.211.187.190 | liveupdate.symantecliveupdate.com |
| 182.207.133.166 | looknstop.com |
| 202.27.159.203 | lovings.technigoyous.net |
| 26.233.246.205 | lurker.clamav.net |
| 72.215.111.100 | mailcenter.rising.com |
| 11.211.56.8 | mailcenter.rising.com.cn |
| 219.31.82.253 | majorgeeks.com |
| 252.189.190.68 | mall.hauri.co.kr |
| 110.171.54.151 | malwarebytes.org |
| 48.167.255.59 | malwarecity.com |
| 0.244.213.48 | malwarecity.netmalwarecity.org |
| 33.145.65.118 | malwaredomainlist.com |
| 147.128.185.13 | malwarepedia.com |
| 18.123.130.177 | malwareremoval.com |
| 37.200.89.166 | malwarescan.emsisoft.com |
| 54.85.180.220 | malwarescan.emsisoft.de |
| 168.68.44.47 | malwarescan.emsisoft.es |
| 39.64.246.211 | mamutu.com |
| 247.140.16.200 | manuelruvalcaba.com |
| 24.42.55.14 | marian.symantec.com |
| 137.24.176.97 | mast.mcafee.com |
| 76.20.121.73 | mcafee-at-home.com |
| 28.96.147.62 | mcafee.com |
| 61.254.187.65 | mcafeeb2b.com |
| 175.236.51.216 | mcafeefans.com |
| 45.232.252.124 | mcafeeretail.com |
| 65.53.23.33 | mcaffee.com |
| 18.130.238.103 | me.kaspersky.com |
| 132.113.170.186 | media.fastclick.net |
| 3.109.116.162 | megasecurity.org |
| 211.185.74.151 | merijn.org |
| 244.87.181.153 | metascan-online.com |
| 101.1.46.48 | microsoft.com |
| 40.65.247.212 | microsoft.fr |
| 248.141.205.201 | midescargas.com |
| 25.43.57.16 | mirror02.gdata.de |
| 123.198.161.83 | misec.net |
| 249.5.106.247 | mmsk.cn |
| 13.82.133.236 | moneybookers.com |
| 46.239.172.50 | moosoft.com |
| 160.154.36.201 | mop.pandasecurity.com |
| 31.217.237.109 | mostz.com |
| 239.38.8.98 | mozilla-hispano.org |
| 83.195.47.168 | msdn.microsoft.com |
| 129.110.167.251 | msk.drweb.com |
| 68.174.113.207 | msk1.drweb.com |
| 68.42.187.196 | msk2.drweb.com |
| 100.200.226.10 | msk3.drweb.com |
| 214.114.159.161 | msk4.drweb.com |
| 153.178.36.69 | msk5.drweb.com |
| 105.254.62.58 | msk6.drweb.com |
| 138.156.169.128 | msk7.drweb.com |
| 251.70.34.212 | msncleaner.softonic.com |
| 122.134.235.120 | msnfix.changelog.fr |
| 126.195.177.93 | msnvirusremoval.com |
| 159.28.29.163 | msr.mcafee.com |
| 205.11.149.246 | mvps.org |
| 144.6.94.222 | mx.answers.yahoo.com |
| 95.151.121.211 | mx.mcafee.com |
| 128.240.160.213 | mxttchina.com |
| 242.223.24.108 | my-etrust.com |
| 181.218.226.16 | my.drweb.com |
| 133.107.252.5 | mygeekside.com |
| 86.117.211.251 | nabble.com |
| 200.99.76.79 | nai.com |
| 70.95.21.55 | natsko.com |
| 90.172.47.44 | naturesimages.net |
| 123.73.87.46 | net-security.org |
| 169.56.207.197 | network.drweb.com |
| 108.51.152.105 | networkassociates.com |
| 59.128.179.94 | networkassociates.nai.com |
| 92.29.30.164 | networkworld.com |
| 206.12.150.247 | neunet.orgnews.bitdefender.com |
| 145.7.96.139 | new-beta.drweb.com |
| 81.68.38.128 | new-company.drweb.com |
| 114.226.145.198 | new-estore.drweb.com |
| 227.208.10.93 | new-forum.drweb.com |
| 98.204.211.1 | new-partners.drweb.com |
| 118.24.169.246 | new-solutions.drweb.com |
| 151.182.21.61 | new-support.drweb.com |
| 56.212.189.191 | new-www.drweb.com |
| 183.208.134.100 | new.taringa.net |
| 135.28.160.89 | news.drweb.com |
| 168.186.200.159 | newsletters.trendmicro.com |
| 26.169.64.242 | niueight.norman.no |
| 220.164.9.218 | niufive.norman.no |
| 172.241.36.207 | niufour.norman.no |
| 205.142.75.209 | niunine.norman.no |
| 63.125.195.104 | niuone.norman.no |
| 174.104.125.252 | niuseven.norman.no |
| 194.181.151.241 | niusix.norman.no |
| 226.83.190.55 | niuthree.norman.no |
| 84.65.123.138 | niutwo.norman.no |
| 211.61.68.114 | nl.bitdefender.com |
| 163.137.26.103 | noadware.net |
| 196.39.133.105 | nod32.co.uk |
| 53.209.254.0 | nod32.com |
| 248.17.199.165 | nod32.datsec.de |
| 200.93.157.154 | nod32.lu |
| 233.251.9.224 | nod32.ru |
| 91.166.129.51 | norman.com |
| 218.229.74.215 | norton.com |
| 159.227.22.126 | notifier.antivir-pe.de |
| 192.129.62.196 | novirusthanks.org |
| 50.44.182.91 | nprobeta.norman.com |
| 177.107.127.255 | nprotect.com |
| 128.184.154.244 | nprotect.net |
| 229.85.193.58 | nprotect.seoul.go.kr |
| 19.0.57.141 | nsclean.com |
| 214.63.3.49 | ntfaq.co.kr |
| 166.140.29.38 | obscgi.mcafee.com |
| 198.42.68.108 | oem.sunbeltsoftware.com |
| 56.212.0.3 | offensivecomputing.net |
| 251.20.134.167 | office.microsoft.com |
| 187.80.144.140 | oldtimer.geekstogo.com |
| 220.238.251.210 | one.tinypicbox.com |
| 78.152.116.38 | onecare.live.com |
| 204.216.61.202 | online-backup.comodo.com |
| 224.36.19.191 | online.jiangmin.com |
| 1.126.127.5 | online.rising.com.cn |
| 47.109.247.88 | onlinecheck.emsisoft.com |
| 242.104.192.64 | onlinecheck.emsisoft.de |
| 193.249.219.53 | onlinecheck.emsisoft.net |
| 226.82.2.55 | onlinecheck.emsisoft.org |
| 84.65.122.206 | onlinescan.avast.com |
| 23.60.68.114 | openantivirus.org |
| 22.253.142.151 | outpost.pl |
| 55.86.181.221 | ozzu.com |
| 169.69.45.48 | p3dev.taringa.net |
| 40.65.247.24 | pandalabs.pandasecurity.com |
| 60.141.17.13 | pandasecurity.com |
| 93.43.56.15 | pandasoftware.com |
| 138.25.177.166 | pandasoftware.es |
| 77.21.122.74 | pantip.com |
| 29.97.148.64 | pcav.cn |
| 62.255.0.134 | pccreg.antivirus.com |
| 176.237.120.217 | pccreg.trendmicro.com |
| 114.233.65.125 | pcentraide.com |
| 50.38.8.98 | pcguide.com |
| 83.195.115.168 | pchell.com |
| 197.178.235.63 | pcinternetpatrol.com |
| 68.173.181.227 | pcsupportadvisor.com |
| 88.250.139.216 | pctools.com |
| 120.151.246.30 | pda.drweb.com |
| 234.134.110.113 | pedidos.protegerse.com |
| 105.130.56.21 | personal.psu.edu |
| 57.206.82.10 | personalfirewall.comodo.com |
| 90.108.121.80 | pestpatrol.com |
| 203.90.242.163 | pg.hauri.net |
| 142.86.187.139 | phx.corporate-ir.net |
| 94.162.213.49 | pineleafboys.com |
| 47.240.173.51 | podcasts.sophos.com |
| 161.223.37.202 | pogonyuto.forospanish.com |
| 32.218.239.110 | precisesecurity.com |
| 52.39.9.99 | prevx.com |
| 84.196.48.169 | privacy.microsoft.com |
| 198.179.236.252 | products.drweb.com |
| 69.175.182.228 | promotions.drweb.com |
| 21.251.140.217 | psnw.com |
| 54.153.247.219 | pspl.com |
| 167.67.112.114 | pvtc.org |
| 106.131.57.22 | qqjkw.net |
| 58.207.15.252 | quickheal.co.in |
| 75.93.107.66 | quickheal.com |
| 189.8.227.149 | radius.turvamies.com |
| 60.71.172.57 | rads.mcafee.com |
| 79.148.199.46 | ravantivirus.com |
| 112.49.238.116 | raymond.cc |
| 226.220.102.11 | reg-int.nod32-es.com |
| 145.75.95.223 | reg.eset.es |
| 96.152.122.212 | reg.rising.com.cn |
| 197.53.161.26 | register.norman.com |
| 243.224.25.109 | removetrojanvirus.org |
| 182.31.227.17 | renewalcenter.symantec.com |
| 134.108.253.6 | renewals.bitdefender.com |
| 166.10.36.76 | research.microsoft.com |
| 24.180.225.227 | research.pandasecurity.com |
| 219.244.102.119 | research.sunbelt-software.com |
| 155.48.112.108 | resplendence.com |
| 188.206.220.179 | retail.sp.f-secure.com |
| 46.120.84.6 | retail01.sp.f-secure.com |
| 172.184.29.170 | retail02.sp.f-secure.com |
| 192.5.244.159 | ribbonwarehouse.com |
| 225.94.95.229 | rising-global.com |
| 15.77.215.232 | rising.com |
| 130.249.81.208 | rising.com.cn |
| 82.137.107.197 | rolandovera.com |
| 115.227.146.199 | rootkit.com |
| 228.209.11.94 | rootkit.nl |
| 167.205.212.2 | rover800.gaima.co.uk |
| 119.93.238.247 | roysephotos.com |
| 136.167.6.46 | ru.trendmicro.com |
| 250.149.126.129 | ruben.bzin.net |
| 120.145.71.105 | runscanner.net |
| 140.222.98.94 | safe.qq.com |
| 173.123.137.96 | safecomputing.umn.edu |
| 219.106.1.247 | safer-networking.org |
| 158.101.202.155 | safetynet.com |
| 110.178.229.144 | sales.bitdefender.com |
| 190.127.128.6 | samroeng.hi5.com |
| 48.110.248.89 | sandbox.norman.com |
| 243.105.194.253 | sandboxie.com |
| 195.182.152.242 | sapcupgrades.com |
| 227.84.3.56 | sarahmcconnellphotography.net |
| 85.66.124.207 | saverssite.com |
| 212.62.69.115 | scan.anti-trojan.net |
| 232.138.27.104 | scan.kingsoft.com |
| 9.40.134.174 | scan4you.net |
| 122.22.255.2 | scanner.novirusthanks.org |
| 249.18.200.166 | scanner.virus.org |
| 201.94.226.155 | scanner2.novirusthanks.or |
| 218.236.250.209 | schemas.microsoft.com |
| 76.219.114.36 | schemas.xmlsoap.org |
| 15.214.59.12 | sea.symantec.com |
| 222.35.86.1 | search.ca.com |
| 255.192.125.3 | search.mcafee.com |
| 113.175.245.154 | search.symantec.com |
| 240.170.191.62 | seasonsecurity.com |
| 4.247.217.51 | secdreg.org |
| 36.149.0.121 | secubox.aldria.com |
| 150.131.189.204 | secunia.com |
| 21.127.134.180 | secure-email.comodo.com |
| 229.203.92.169 | secure.av-desk.com |
| 182.25.120.92 | secure.nai.com |
| 40.196.240.243 | securecomputing.com |
| 235.3.185.151 | secureme.com |
| 186.80.144.140 | securitoo.com |
| 219.237.251.210 | security.symantec.com |
| 77.152.115.37 | securitycheck.symantec.com |
| 204.215.61.201 | securitynewsportal.com |
| 224.36.87.190 | securityrespons.symantec.com |
| 0.194.126.4 | securityresponse.symantec.com |
| 114.108.247.155 | securitywonks.net |
| 241.172.192.63 | secuser.com |
| 177.232.202.36 | secuser.model-fx.com |
| 22.134.242.107 | sergiwa.com |
| 68.48.106.190 | service.mcafee.com |
| 6.112.51.98 | service1.symantec.com |
| 214.189.77.87 | servicenews.symantec.com |
| 247.90.117.157 | sfdoccentral.symantec.com |
| 105.5.49.52 | shadow.grisoft.cz |
| 44.68.182.216 | shadu.baidu.com |
| 251.145.209.205 | shadu.duba.net |
| 28.46.60.19 | shield.prevx.com |
| 142.217.180.150 | shop.hauri.co.kr |
| 61.72.174.58 | shop.pandasecurity.com |
| 81.149.132.47 | shop.sunbeltsoftware.com |
| 113.238.239.117 | shop.symantec.com |
| 159.221.103.200 | shop.trendmicro.com |
| 98.217.49.176 | shudoo.com |
| 50.105.75.165 | simplysup.com |
| 83.195.114.167 | siren24.nprotect.com |
| 196.177.235.62 | siteadvisor.com |
| 135.173.180.227 | sitedirector.symantec.com |
| 71.45.190.200 | smallbiz.symantec.com |
| 104.135.230.14 | smbstore.trendmicro.com |
| 218.118.94.97 | smokey-services.eu |
| 89.113.39.73 | soccersuck.com |
| 108.190.66.62 | softfaq.com |
| 141.91.105.64 | softonic.com |
| 187.74.225.215 | software-files.download.com |
| 126.69.171.123 | solutions.drweb.com |
| 78.146.197.112 | sophos.com |
| 110.48.48.182 | sophos.fr |
| 224.30.169.184 | sophos1.ucd.ie |
| 82.200.33.92 | sophos10.ucd.ie |
| 34.21.247.81 | sophos2.ucd.ie |
| 66.179.98.151 | sophos5.ucd.ie |
| 180.161.218.46 | sophos6.ucd.ie |
| 51.157.164.210 | sophos7.ucd.ie |
| 71.233.122.199 | sophos8.ucd.ie |
| 104.135.229.13 | sophos9.ucd.ie |
| 217.117.94.96 | soporte.pandasecurity.com |
| 88.113.39.5 | sos.rising.com.cn |
| 40.189.65.234 | sosvirus.changelog.fr |
| 57.75.89.48 | spd.atdmt.com |
| 171.58.209.131 | specs.xmlsoap.org |
| 110.53.154.107 | speedtest.comodo.com |
| 61.130.181.96 | spftrl.digitalriver.com |
| 94.31.220.98 | spyany.com |
| 208.14.84.249 | spyblocker-software.com |
| 79.9.30.157 | spybot.info |
| 99.86.56.146 | spycheck.co.uk |
| 131.244.95.216 | spycheck.es |
| 245.226.28.43 | spychecker.com |
| 164.14.21.67 | spycop.com |
| 116.90.235.56 | spywaredb.com |
| 149.248.86.58 | spywaredlls.prevx.com |
| 6.162.207.209 | spywarefiles.prevx.com |
| 201.226.152.117 | spywareguide.com |
| 153.46.110.107 | spywareinfo.com |
| 186.204.218.177 | spywareterminator.com |
| 44.118.82.4 | square.bitdefender.com |
| 170.182.27.168 | static.yoreparo.com |
| 190.3.54.157 | stats.norton.com |
| 223.160.93.227 | stdio-labs.blogspot.com |
| 65.59.197.106 | stiller.com |
| 192.122.143.14 | store.bitdefender.com |
| 144.199.169.3 | store.de.bitdefender.com |
| 244.100.208.73 | store.drweb.com |
| 34.15.72.156 | store.trendmicro.com |
| 229.79.18.64 | subs.geekstogo.com |
| 181.75.220.230 | subwiz.trendmicro.com |
| 134.233.4.44 | sucop.com |
| 248.148.192.195 | sun.symantec.com |
| 186.211.69.103 | sunbelt-software.com |
| 138.32.96.92 | sunbeltsecurity.com |
| 171.189.203.162 | sunbeltsoftware.com |
| 29.104.67.245 | superboy2010.com.au |
| 156.167.12.153 | superdicas.com.br |
| 176.244.227.142 | superuser.co.kr |
| 192.62.62.196 | support.drweb.com |
| 238.44.182.23 | support.f-secure.com |
| 177.40.128.255 | support.kaspersky.co |
| 129.184.154.244 | support.mcafee.com |
| 162.18.193.246 | support.microsoft.com |
| 19.0.58.141 | support.pandasecurity.com |
| 214.252.3.50 | support.rising-global.com |
| 166.140.29.39 | sybari.com |
| 199.230.69.109 | sygate.com |
| 105.4.237.240 | symantec-ese.baynote.net |
| 231.0.182.216 | symantec.com |
| 251.77.208.205 | symantecliveupdate.com |
| 28.234.248.207 | symatec.com |
| 74.217.112.102 | sysinternals.com |
| 13.212.57.10 | system-cleaner.comodo.com |
| 220.33.84.255 | tallemu.com |
| 253.190.191.69 | taringa.net |
| 111.173.55.152 | tds.diamondcs.com.au |
| 50.168.1.60 | tech.pantip.com |
| 242.229.199.33 | techimo.com |
| 19.131.50.103 | techspot.com |
| 132.113.171.254 | techsupportforum.com |
| 3.109.116.162 | tecniservicioslys.com |
| 23.185.74.151 | tecno-soft.com |
| 56.87.182.222 | tempuri.org |
| 170.69.46.49 | thecomputerpitstop.com |
| 40.65.247.213 | thejokerx.blogspot.com |
| 248.142.18.202 | thetechguide.com |
| 25.43.57.192 | thinkpad.cn |
| 59.202.97.19 | threatexpert.com |
| 254.198.43.251 | threatinfo.trendmicro.com |
| 206.18.69.240 | timeforyourbusi.pandasecurity.com |
| 239.176.108.242 | timestamp.comodoca.com |
| 96.158.229.137 | timestamp.wosign.com |
| 223.154.174.45 | tinysoftware.com |
| 243.230.200.34 | tms.symantec.com |
| 20.132.240.105 | together.pctools.com |
| 134.114.172.188 | tool.ikaka.com |
| 4.110.117.164 | toonbox.de |
| 196.171.60.137 | tr.mcafee.com |
| 229.72.167.139 | trackingtheworld.com |
| 87.243.31.34 | training.drweb.com |
| 26.50.232.198 | training.trendmicro.com |
| 234.127.191.187 | trapware.com |
| 10.28.42.1 | trendmicro.com |
| 124.199.162.84 | trendmicro.com.cn |
| 251.7.108.248 | trendmicro.fr |
| 15.83.134.237 | trendsecure.com |
| 48.241.173.51 | trial.trendmicro.com |
| 209.203.86.250 | trucoswindows.es |
| 80.11.31.158 | trucoswindows.net |
| 32.87.57.147 | tw.mcafee.com |
| 133.245.96.217 | tw.sophos.com |
| 179.159.217.45 | tw.trendmicro.com |
| 117.223.162.209 | tweaksforgeeks.com |
| 69.43.188.198 | u0.eset.com |
| 102.201.228.12 | u1.eset.com |
| 216.116.160.163 | u10.eset.com |
| 155.179.37.71 | u100.eset.com |
| 90.240.48.44 | u11.eset.com |
| 123.141.155.114 | u12.eset.com |
| 237.56.19.197 | u13.eset.com |
| 108.119.221.105 | u14.eset.com |
| 128.196.179.94 | u15.eset.com |
| 160.30.30.164 | u16.eset.com |
| 206.12.151.247 | u17.eset.com |
| 145.8.96.223 | u18.eset.com |
| 97.152.122.212 | u19.eset.com |
| 130.242.162.215 | u2.eset.com |
| 244.224.26.110 | u20.eset.com |
| 103.140.147.194 | u21.eset.com |
| 54.29.174.183 | u22.eset.com |
| 87.118.213.253 | u23.eset.com |
| 201.101.77.80 | u24.eset.com |
| 72.96.23.56 | u25.eset.com |
| 92.173.49.45 | u26.eset.com |
| 124.75.88.47 | u27.eset.com |
| 170.57.209.198 | u28.eset.com |
| 109.53.154.106 | u29.eset.com |
| 61.129.180.95 | u3.eset.com |
| 94.31.31.165 | u30.eset.com |
| 208.13.152.249 | u31.eset.com |
| 130.249.81.141 | u32.eset.com |
| 82.70.39.130 | u33.eset.com |
| 115.227.147.200 | u34.eset.com |
| 229.210.11.95 | u35.eset.com |
| 100.205.212.3 | u36.eset.com |
| 119.26.171.248 | u36eset.com |
| 152.183.22.62 | u37.eset.com |
| 10.166.142.145 | u37eset.com |
| 137.161.88.53 | u38.eset.com |
| 89.238.114.42 | u39.eset.com |
| 122.140.153.112 | u4.eset.com |
| 27.170.65.243 | u40.eset.com |
| 222.166.11.219 | u41.eset.com |
| 174.242.37.208 | u42.eset.com |
| 207.144.76.210 | u43.eset.com |
| 64.126.197.105 | u44.eset.com |
| 191.122.142.14 | u45.eset.com |
| 211.198.168.3 | u46.eset.com |
| 244.100.208.73 | u47.eset.com |
| 102.83.140.156 | u48.eset.com |
| 228.78.85.132 | u49.eset.com |
| 180.155.44.121 | u5.eset.com |
| 197.40.135.107 | u50.eset.com |
| 55.211.255.2 | u51.eset.com |
| 250.18.201.166 | u52.eset.com |
| 202.95.159.155 | u53.eset.com |
| 234.253.10.225 | u54.eset.com |
| 92.167.131.52 | u55.eset.com |
| 219.231.76.216 | u56.eset.com |
| 239.51.102.205 | u57.eset.com |
| 16.209.141.19 | u58.eset.com |
| 129.123.6.170 | u59.eset.com |
| 172.103.123.250 | u6.eset.com |
| 124.179.149.239 | u60.eset.com |
| 225.81.188.53 | u61.eset.com |
| 14.251.53.136 | u62.eset.com |
| 209.59.254.45 | u63.eset.com |
| 161.135.24.34 | u64.eset.com |
| 194.37.64.104 | u65.eset.com |
| 52.208.252.255 | u66.eset.com |
| 247.15.129.163 | u67.eset.com |
| 198.92.156.152 | u68.eset.com |
| 231.249.7.206 | u69.eset.com |
| 73.148.111.33 | u7.eset.com |
| 200.211.57.197 | u70.eset.com |
| 220.32.15.186 | u71.eset.com |
| 252.122.122.0 | u72.eset.com |
| 42.104.243.83 | u73.eset.com |
| 237.100.188.59 | u74.eset.com |
| 189.244.214.48 | u75.eset.com |
| 222.78.253.50 | u76.eset.com |
| 80.60.118.202 | u77.eset.com |
| 66.104.111.157 | u78.eset.com |
| 18.248.137.147 | u79.eset.com |
| 51.82.177.217 | u8.eset.com |
| 165.64.41.44 | u80.eset.com |
| 35.60.242.20 | u81.eset.com |
| 55.137.13.9 | u82.eset.com |
| 88.38.52.11 | u83.eset.com |
| 134.21.172.162 | u84.eset.com |
| 73.16.117.70 | u85.eset.com |
| 25.93.144.59 | u86.eset.com |
| 57.250.251.129 | u87.eset.com |
| 155.217.99.196 | u88.eset.com |
| 94.213.45.104 | u89.eset.com |
| 46.33.3.93 | u9.eset.com |
| 79.191.110.163 | u90.eset.com |
| 192.173.231.58 | u91.eset.com |
| 63.169.176.222 | u92.eset.com |
| 83.245.134.212 | u93.eset.com |
| 116.147.242.26 | u94.eset.com |
| 230.130.106.109 | u95.eset.com |
| 100.125.51.17 | u96.eset.com |
| 52.202.78.6 | u97.eset.com |
| 5.23.37.252 | u98.eset.com |
| 119.6.157.79 | u99.eset.com |
| 58.2.103.55 | uk.mcafee.com |
| 10.78.129.44 | uk.trendmicro-europe.com |
| 43.236.168.46 | uk.trendmicro.com |
| 156.218.33.197 | ulove.tigolbittys.info |
| 27.214.234.105 | up.duba.net |
| 47.34.4.95 | up.rising.com.cn |
| 64.176.28.149 | up1.nod123.cn |
| 178.159.216.232 | upd.zonelabs.com |
| 49.154.161.208 | update.360safe.cn |
| 0.231.120.197 | update.360safe.com |
| 33.132.227.199 | update.aladdin.com |
| 147.47.91.94 | update.authentium.com |
| 86.110.37.2 | update.avg.com |
| 38.187.251.247 | update.avgfrance.com |
| 70.88.102.61 | update.bitdefender.com |
| 184.3.222.144 | update.drweb.com |
| 55.67.168.52 | update.ewido.com |
| 123.191.242.89 | update.grisoft.com |
| 155.93.25.159 | update.grisoft.cz |
| 13.7.146.54 | update.hispasec.com |
| 140.71.91.218 | update.ikaka.com |
| 92.147.117.207 | update.ikarus-software.at |
| 193.49.157.22 | update.quickheal.com |
| 239.219.21.105 | update.rising.com.cn |
| 177.27.222.13 | update.sophos.com |
| 129.104.248.2 | update.symantec.com |
| 146.245.16.56 | update.trendmicro.com |
| 4.160.204.207 | update7.jiangmin.com |
| 199.223.81.115 | updatem.360safe.cn |
| 150.44.108.104 | updatem.360safe.com |
| 183.201.215.174 | updates.a-2.org |
| 41.116.79.1 | updates.drweb.com |
| 168.180.25.165 | updates.f-prot.com |
| 188.0.239.154 | updates.sald.com |
| 141.10.11.145 | updates.symantec.com |
| 187.248.131.228 | updates3.kaspersky-labs.com |
| 125.244.76.204 | updates4.kaspersky-labs.com |
| 77.133.102.193 | updates5.kaspersky-labs.com |
| 110.222.142.195 | upgrade.bitdefender.com |
| 224.205.6.90 | upgrade1.bitdefender.com |
| 163.200.207.254 | upgrade2.bitdefender.com |
| 99.73.218.227 | upgrade3.bitdefender.com |
| 131.162.1.41 | upgrade4.bitdefender.com |
| 245.145.121.124 | upload.changelog.fr |
| 116.141.67.100 | us.bitdefender.com |
| 136.217.93.89 | us.mcafee.com |
| 169.119.132.91 | us.trendmicro.com |
| 214.101.253.242 | usa.kaspersky.com |
| 153.97.198.150 | usbcleaner.cn |
| 105.173.224.140 | ushousecall02.trendmicro.com |
| 138.75.76.210 | utilidades-utiles.com |
| 43.105.244.85 | v.dreamwiz.com |
| 238.101.189.249 | v4.windowsupdate.microsoft.com |
| 190.177.147.238 | v5.windowsupdate.microsoft.com |
| 223.79.255.52 | vet.com.au |
| 81.62.119.203 | vicentevirtual.com |
| 208.57.64.111 | viguard.com |
| 227.134.23.100 | vil.nai.com |
| 4.35.130.170 | vil.nail.com |
| 118.18.250.253 | virobot.co.kr |
| 245.13.196.161 | virscan.org |
| 181.74.206.134 | virus.org |
| 213.232.245.204 | virusbuster.hu |
| 71.214.110.31 | viruschief.com |
| 10.210.55.7 | virusdoctor.jp |
| 218.30.81.252 | virusfreezone.info |
| 251.188.121.255 | virusinfo.prevx.com |
| 109.170.241.150 | viruslist.com |
| 235.166.186.58 | viruslist.ru |
| 255.243.212.47 | virusscan.jotti.org |
| 208.64.172.37 | virusscanonline.net |
| 66.47.104.120 | virusspy.com |
| 193.42.50.96 | virustotal.com |
| 145.119.8.85 | visualizesoftware.com |
| 177.21.115.87 | visualtracking.symantec.com |
| 35.191.236.238 | vivo-austin.com |
| 230.255.181.146 | vms.drweb.com |
| 182.75.139.135 | vncsvr.com |
| 215.233.246.205 | vos.symantec.com |
| 73.147.111.33 | vrv.com.cn |
| 183.195.40.181 | vsantivirus.com |
| 203.16.66.170 | webadmin.norman.no |
| 236.173.106.240 | webphand.com |
| 94.88.226.135 | webroot.com |
| 221.151.171.43 | wedoantivirus.com |
| 172.228.198.32 | welkam.co.jp |
| 17.129.237.102 | wexperts-exchange.com |
| 63.44.101.185 | whatthetech.com |
| 2.107.47.93 | wikio.es |
| 2.232.121.130 | wilderssecurity.com |
| 34.133.160.200 | wilderssecurity.net |
| 148.48.92.95 | wildlist.com |
| 87.112.226.3 | windowsupdate.microsoft.com |
| 39.188.252.248 | winpatrol.com |
| 72.90.103.62 | wmcafee.com |
| 185.4.224.145 | woottonfootball.com |
| 56.68.169.54 | wtc.trendmicro.com |
| 76.144.127.43 | ww.emsisoft.com |
| 109.234.235.97 | www.1stavenuelimousines.co.uk |
| 139.201.83.180 | www.2xlgames.com |
| 78.196.28.156 | www.ahnlab.com |
| 29.85.55.145 | www.aks.com |
| 62.174.94.147 | www.aladdin.com |
| 176.157.214.42 | www.anti-trojan-software.net |
| 115.152.160.206 | www.anti-trojan.net |
| 67.41.186.195 | www.anti-virus.by |
| 99.131.225.184 | www.antivir.es |
| 132.32.8.11 | www.antivirus-tools.com |
| 3.27.210.243 | www.antiy.net |
| 23.104.236.232 | www.apsecure.com |
| 55.6.19.234 | www.arpia.be |
| 101.244.140.129 | www.authentium.com |
| 40.240.85.37 | www.authentium.com.au |
| 248.60.111.26 | www.av-desk.com |
| 25.218.218.96 | www.avast.com |
| 138.200.83.179 | www.avg.com |
| 61.180.12.72 | www.avhide.com |
| 13.1.226.61 | www.avoncourt.com |
| 46.158.78.131 | www.avx.ro |
| 160.141.198.26 | www.barder.com |
| 31.136.143.190 | www.beautybar.com |
| 50.213.102.179 | www.bg.virusblokada.com |
| 83.114.209.249 | www.bit-defender.de |
| 197.97.73.76 | www.bitdefende.de |
| 68.92.19.240 | www.bitdefender-es.com |
| 68.217.93.21 | www.bitdefender.be |
| 100.118.132.91 | www.bitdefender.cl |
| 214.101.252.174 | www.bitdefender.co.uk |
| 153.97.198.150 | www.bitdefender.com |
| 105.173.224.139 | www.bitdefender.com.au |
| 138.75.7.141 | www.bitdefender.com.sg |
| 251.57.128.36 | www.bitdefender.com.tw |
| 122.53.73.200 | www.bitdefender.com.vn |
| 142.129.99.174 | www.bitdefender.de |
| 159.15.123.244 | www.bitdefender.es |
| 17.254.55.71 | www.bitdefender.fr |
| 143.249.0.47 | www.bitdefender.hk |
| 95.70.215.36 | www.bitdefender.us |
| 128.227.66.38 | www.bitdefenderme.com |
| 242.142.186.189 | www.briarhurst.com |
| 181.205.132.97 | www.brightoctober.com |
| 133.26.90.86 | www.buraka.tv |
| 165.183.197.156 | www.buscafacil.com |
| 199.18.238.159 | www.buscalo.in |
| 70.82.183.67 | www.busco.in |
| 90.158.209.57 | www.ca.com |
| 123.60.249.127 | www.cambridge-steiner-school.co.uk |
| 237.231.113.22 | www.ccssforum.org |
| 107.38.58.186 | www.celticmerchant.com |
| 59.115.85.175 | www.clamav.net |
| 160.16.124.245 | www.collectedcurios.com |
| 206.187.244.72 | www.comodo.com |
| 129.234.174.220 | www.comodo.tv |
| 81.55.200.209 | www.comodoantispam.com |
| 113.212.239.23 | www.comodopartners.com |
| 227.127.171.174 | www.computing.net |
| 166.191.49.82 | www.configurarequipos.com |
| 118.11.75.71 | www.contentverification.com |
| 151.169.182.141 | www.deborahshelton.net |
| 8.83.47.224 | www.dr-bull.com |
| 135.147.248.180 | www.drweb.com |
| 203.15.254.169 | www.ealaddin.com |
| 236.105.106.240 | www.elvis-express.com |
| 26.87.226.67 | www.emeraldclassic.co.uk |
| 220.83.171.43 | www.emsisoft.at |
| 172.228.197.32 | www.emsisoft.com |
| 205.61.237.34 | www.emsisoft.de |
| 63.44.101.185 | www.emsisoft.es |
| 2.39.46.93 | www.emsisoft.fr |
| 209.184.73.82 | www.emsisoft.it |
| 226.1.96.136 | www.emsisoft.jp |
| 84.240.216.219 | www.emsisoft.net |
| 211.236.162.195 | www.emsisoft.nl |
| 231.56.188.184 | www.emsisoft.org |
| 8.214.227.186 | www.engyro.com |
| 53.196.92.81 | www.entercept.com |
| 248.192.37.245 | www.esafe.com |
| 200.12.63.234 | www.eset.es |
| 233.170.171.49 | www.eugrantsadvisor.com |
| 91.152.35.132 | www.eugrantsadvisor.de |
| 29.148.236.40 | www.eugrantsadvisor.ie |
| 237.225.195.205 | www.eugrantsadvisor.se |
| 190.46.222.19 | www.exchangeyourcareer.com |
| 48.29.86.170 | www.f-prot.com |
| 175.25.32.78 | www.f-secure.com |
| 195.101.246.67 | www.fimasys.com |
| 228.3.97.137 | www.flairweddings.co.uk |
| 85.241.218.220 | www.forospyware.com |
| 212.237.163.128 | www.fortifed.com |
| 164.57.189.117 | www.fortiid.com |
| 197.215.229.172 | www.fortimail.com |
| 39.181.77.255 | www.fortinet-apac.com |
| 233.177.22.231 | www.fortinet.ch |
| 185.254.49.220 | www.fortinet.co.il |
| 218.155.88.222 | www.fortinet.com |
| 76.138.208.117 | www.fortinet.net |
| 203.133.153.25 | www.fortinet.nl |
| 223.210.180.14 | www.fortinet.sg |
| 255.111.219.84 | www.fortinetuk.com |
| 113.94.151.167 | www.freeality.com |
| 32.137.145.191 | www.freedrweb.ru |
| 240.214.103.180 | www.freerav.com |
| 16.116.210.182 | www.frisk-software.com |
| 130.30.75.77 | www.frisk.is |
| 69.94.20.241 | www.fsecure.com |
| 21.170.234.230 | www.garryowen.com |
| 54.72.85.44 | www.gdata.es |
| 167.242.206.128 | www.globalhauri.com |
| 38.50.151.36 | www.gokidding.com |
| 58.126.177.25 | www.grisoft.com |
| 91.28.217.95 | www.hackshields.com |
| 189.183.65.230 | www.hacksoft.com.pe |
| 60.246.10.138 | www.hacksoft.pe |
| 11.67.37.127 | www.handwritingforkids.com |
| 112.224.76.197 | www.hasp.se |
| 158.139.196.24 | www.hauri.co.kr |
| 97.202.142.188 | www.hauri.net |
| 49.23.168.177 | www.hxproduction.com |
| 81.181.207.247 | www.ibusca.me |
| 195.95.140.142 | www.ikarus.at |
| 134.159.17.50 | www.imddomains.co.uk |
| 6.156.219.216 | www.indielisboa.com |
| 39.57.71.30 | www.inicioid.com |
| 153.228.191.113 | www.iniciorapido.info |
| 24.35.136.21 | www.internationalservicecheck.com |
| 43.112.95.10 | www.irangoals.com |
| 76.201.202.80 | www.iseclab.org |
| 122.184.66.163 | www.ixomodels.com |
| 61.179.12.139 | www.jiangmin.com |
| 13.68.38.128 | www.jiangmin.com.cn |
| 45.158.77.130 | www.jotti.org |
| 159.140.198.25 | www.kaspersky.com |
| 98.136.143.189 | www.kioskea.net |
| 34.8.153.162 | www.latin-mass-society.org |
| 67.98.193.233 | www.livepcsupport.com |
| 181.80.57.60 | www.malwarecity.com |
| 51.76.2.36 | www.malwarecity.fr |
| 71.153.28.25 | www.mamutu.com |
| 104.54.68.27 | www.mamutu.de |
| 150.37.188.178 | www.manchester-offices.co.uk |
| 89.32.133.86 | www.mcafee.at |
| 40.109.160.75 | www.mcafee.com |
| 73.10.11.145 | www.metascan-online.com |
| 235.41.179.20 | www.microsoft.com |
| 174.36.125.184 | www.midescargas.com |
| 126.113.83.173 | www.mountainlakeslodge.com |
| 158.14.190.243 | www.mtr-design.com |
| 16.253.54.138 | www.mygeekside.com |
| 143.249.0.46 | www.netegrity.com |
| 163.69.214.35 | www.norman.com |
| 196.227.65.105 | www.nottinghampoetryseries.com |
| 53.209.186.188 | www.novirusthanks.org |
| 180.205.131.97 | www.npin.co.kr |
| 116.9.141.70 | www.nprotect.co.kr |
| 149.167.181.140 | www.nprotect.com |
| 7.150.45.223 | www.nprotect.com.br |
| 202.145.246.199 | www.nsclean.com |
| 153.222.17.188 | www.owen.org |
| 186.123.56.190 | www.pandasecurity.com |
| 44.106.176.85 | www.pctools.com |
| 171.101.122.249 | www.peterhearnwaste.co.uk |
| 191.178.148.238 | www.phoenixtrikeworks.com |
| 223.80.187.52 | www.prdouglas.co.uk |
| 81.62.120.135 | www.prevx.com |
| 208.58.65.111 | www.prevx1.com |
| 82.56.201.22 | www.professorbeyer.com |
| 114.214.52.24 | www.quickheal.com |
| 228.128.172.175 | www.removetrojanvirus.org |
| 167.192.118.83 | www.renningers.com |
| 119.12.76.72 | www.residentphotography.com |
| 152.170.183.142 | www.retento.com |
| 9.84.48.225 | www.reviewsofbooks.com |
| 136.148.249.134 | www.rising-global.com |
| 156.224.19.123 | www.risingav.com.au |
| 189.126.59.193 | www.safenet-inc.com |
| 47.41.179.88 | www.scan4you.net |
| 174.104.124.252 | www.seasonsecurity.com |
| 125.181.151.241 | www.secondchanceboxer.com |
| 210.66.174.39 | www.secure-elements.com |
| 0.237.38.122 | www.sheffieldmind.co.uk |
| 195.44.240.30 | www.smf.org |
| 147.121.10.19 | www.softfaq.com |
| 179.23.49.89 | www.sophos.com |
| 37.193.238.240 | www.spycheck.co.uk |
| 232.1.115.148 | www.spycheck.es |
| 184.77.141.137 | www.stadiumpage.com |
| 217.235.248.207 | www.sunbeltsoftware.com |
| 75.149.113.35 | www.symantec.com |
| 201.213.58.199 | www.sysinternals.com |
| 221.33.16.188 | www.tecniservicioslys.com |
| 254.123.124.2 | www.testmypcsecurity.com |
| 44.106.244.85 | www.threatexpert.com |
| 239.101.189.61 | www.tomorrowsedge.net |
| 238.38.8.98 | www.trendmicro.com |
| 15.127.47.100 | www.trojaner.info |
| 129.110.167.251 | www.trustix.com |
| 68.105.112.159 | www.trustlogo.com |
| 19.250.139.148 | www.vba.com.by |
| 52.83.178.218 | www.virscan.org |
| 166.66.42.45 | www.virus.fi |
| 37.62.244.21 | www.virus.org |
| 57.138.14.10 | www.virusbuster.hu |
| 90.40.53.12 | www.viruschief.com |
| 135.22.174.163 | www.virusfreezone.info |
| 58.2.103.55 | www.virustotal.com |
| 10.78.129.45 | www.wellgousa.com |
| 43.236.237.115 | www.whichssl.com |
| 157.219.101.198 | www.willsee.com |
| 95.214.46.106 | www.xmlsoap.org |
| 47.35.5.95 | www.zarya.info |
| 80.192.112.165 | www1.my-etrust.com |
| 194.175.232.60 | www3.ca.com |
| 65.170.178.224 | www3.safenet-inc.com |
| 85.247.136.213 | www4.symantec.com |
| 117.148.243.27 | wwws.clamav.net |
| 231.131.107.110 | x-cleaner.com |
| 102.127.53.18 | x.360safe.com |
| 54.203.79.7 | yoreparo.com |
| 87.105.118.77 | z-oleg.com |
| 121.8.159.81 | zeustracker.abuse.ch |
| 59.3.104.57 | zeylstra.nl |
| 11.80.131.46 | zhidao.baidu.com |
| 44.237.170.48 | zhidao.ikaka.com |
| 158.220.34.199 | ziggamza.net |
| 29.215.236.107 | zonavirus.com |
| 49.36.6.96 | zonealarm.com |
| 81.193.45.166 | zonelabs.com |
| 195.176.233.249 | zonelabs.fr |
| 66.172.179.225 | zonelog.co.uk |
| 18.248.137.214 | zs.kingsoft.com |
| 51.150.244.216 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 12644 | 12800 | 3.76874 | 55d274f88e5ab59aa27a86516437f7d8 |
| .data | 20480 | 64 | 512 | 0.164757 | 75fe664fdcd708925b7ca712ee127c19 |
| .rdata | 24576 | 1328 | 1536 | 3.03097 | 2707a7526abdc69c43f37dd3b6665e30 |
| .bss | 28672 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .idata | 32768 | 800 | 1024 | 2.18489 | 4e803ebabfbd6fe3233c57c1b6e762a8 |
| .rsrc | 36864 | 87232 | 87552 | 5.54166 | 34b5a2a0306aa053bf792aa7f84ba6c7 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a
Network Activity
URLs
| URL | IP |
|---|---|
| hxxp://x0r25mcn4uyk00240n5hi32jd154n9.ipgreat.com/ | 192.230.78.93 |
| hxxp://widgets.amung.us/small/00/4.png | 50.23.131.235 |
| 8q56k4xoo37w3w88qu7r05106ca978.ipcheker.com | 75.126.104.226 |
| 255o43r0kp51helaq29l512zg6j438.ipcheker.com | 75.126.104.226 |
| www.buscaid.com | 8.5.1.51 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):