Trojan.Win32.Fsysna.dqlc (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: c5391ccc75569b96ca06955b9875659b
SHA1: 0c9cbce05aa0969b06622fcce61b539d96efb2f8
SHA256: fe0ab4c681bc949787a17cae6561abdc309f4da9dbeaa8a89bbd1882863223d6
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 4501680 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: BoostSoftware Inc.
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
| Behaviour | Description |
|---|---|
| WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61715 bytes in size. The following strings are added to the hosts file listed below:
| 173.224.216.53 | viabcp.com |
| 173.224.216.53 | www.viabcp.com |
| 173.224.216.53 | ww2.viabcp.com |
| 173.224.216.53 | bcpzonasegura.viabcp.com |
| 173.224.216.53 | hotmail.com |
| 173.224.216.53 | www.hotmail.com |
| 248.60.111.27 | 13iii.com |
| 25.218.151.29 | 15660808.co.kr |
| 139.201.15.180 | 2-spyware.com |
| 9.196.216.88 | 247fixes.com |
| 29.17.243.77 | 360.cn |
| 62.174.26.147 | 360.com |
| 176.157.214.230 | 360safe.cn |
| 47.152.160.206 | 360safe.com |
| 255.229.118.195 | 45pounds.com |
| 31.130.225.197 | 51nb.com |
| 145.45.89.92 | 9down.com |
| 84.109.35.0 | a-2.org |
| 36.185.249.245 | a188.x.akamai.net |
| 69.87.100.59 | abuse.ch |
| 182.1.221.142 | acs.pandasoftware.com |
| 53.65.166.51 | ad-aware-se.uptodown.com |
| 73.141.192.40 | ad.fastclick.net |
| 106.43.232.110 | ads.fastclick.net |
| 220.214.96.5 | agfirewall.ru |
| 90.21.41.169 | agnitum.com |
| 42.98.68.158 | agnitum.de |
| 143.255.107.228 | agnitum.fr |
| 189.170.227.55 | agnitum.ru |
| 128.233.173.219 | ahn.com.cn |
| 80.54.199.208 | ahnlab.com |
| 112.211.238.22 | akamai.net |
| 226.126.170.173 | aknow.prevx.com |
| 165.190.48.81 | aladdin.com |
| 117.10.74.70 | alert.rising.com.cn |
| 150.168.181.140 | alerta-antivirus.inteco.es |
| 7.82.46.223 | alerta-antivirus.red.es |
| 134.146.247.132 | alladdin.ru |
| 154.222.205.121 | aluriasoftware.com |
| 187.56.57.191 | analysis.seclab.tuwien.ac.at |
| 233.39.177.18 | andymanchesta.com |
| 171.34.122.250 | anti-virus-software-review.com |
| 123.179.149.239 | anti-virus.by |
| 156.12.188.241 | anti-virus.com |
| 14.251.52.136 | antirootkit.com |
| 209.246.254.44 | antispam.sunbeltsoftware.com |
| 161.135.24.33 | antispy.ru |
| 193.224.63.103 | antispyware.sunbeltsoftware.com |
| 51.207.183.186 | antivir.es |
| 178.203.129.162 | antiviraldp.com |
| 198.23.155.151 | antivirus-online.de |
| 231.181.194.153 | antivirus-tools.com |
| 20.163.59.48 | antivirus.about.com |
| 215.159.4.213 | antivirus.cai.com |
| 167.235.30.202 | antivirus.comodo.com |
| 200.137.138.16 | antivirus.hispavista.com |
| 58.120.2.99 | antivirus.sunbeltsoftware.com |
| 252.115.203.7 | antiy.net |
| 204.192.162.252 | anubis.iseclab.org |
| 237.93.13.66 | apac.trendmicro.com |
| 95.76.133.217 | ar.answers.yahoo.com |
| 222.71.79.125 | ar.atwola.com |
| 242.148.37.114 | arcabit.com |
| 18.49.144.184 | arcabit.pl |
| 132.32.8.11 | archive.bitdefender.com |
| 3.28.210.175 | arswp.com |
| 211.104.236.164 | arwww.fortinet.cz |
| 244.6.19.234 | asap.authentium.com |
| 101.244.140.61 | ashampoo.com |
| 40.240.85.38 | atazita.blogspot.com |
| 248.60.111.27 | atdmt.com |
| 25.218.151.29 | attechnical.com |
| 139.201.15.180 | atwola.com |
| 9.196.216.88 | au.mcafee.com |
| 29.17.243.77 | auditmypc.com |
| 62.174.26.147 | authentium.com |
| 176.157.214.230 | auwww.ealaddin.nl |
| 47.152.160.206 | avast-home.uptodown.com |
| 255.229.118.195 | avast.com |
| 31.130.225.197 | avast.ru |
| 145.45.89.92 | avg-antivirus.net |
| 84.109.35.0 | avg.com |
| 36.185.249.245 | avg.vo.llnwd.net |
| 69.87.100.59 | avgate.net |
| 182.1.221.142 | avgfrance.com |
| 53.65.166.51 | avhide.com |
| 73.141.192.40 | avira.com |
| 106.43.232.110 | avp.ch |
| 220.214.96.5 | avp.com |
| 90.21.41.169 | avp.ru |
| 42.98.68.158 | avpclub.ddns.info |
| 143.255.107.228 | avu.zonelabs.com |
| 189.170.227.55 | avx.rob-have.net |
| 128.233.173.219 | awaps.net |
| 80.54.199.208 | b-have.orgbitdefender-ar.com |
| 112.211.238.22 | babooforum.com.br |
| 226.126.170.173 | backup.comodo.com |
| 165.190.48.81 | baike.360.cn |
| 117.10.74.70 | baike.360.com |
| 150.168.181.140 | bakunos.com |
| 7.82.46.223 | banner.fastclick.net |
| 134.146.247.132 | banners.fastclick.net |
| 154.222.205.121 | baristamagazine.com |
| 187.56.57.191 | basetendencies.com |
| 233.39.177.18 | bbs.360.cn |
| 156.18.106.234 | bbs.360safe.cn |
| 107.163.133.223 | bbs.360safe.com |
| 140.252.172.225 | bbs.cfan.com.cn |
| 254.235.36.120 | bbs.cpcw.com |
| 193.230.238.28 | bbs.dswlab.com |
| 145.119.8.17 | bbs.duba.net |
| 177.209.47.87 | bbs.ikaka.com |
| 35.191.168.170 | bbs.janmeng.com |
| 162.187.113.146 | bbs.kafan.cn |
| 182.7.139.135 | bbs.kafan.com |
| 215.165.178.137 | bbs.kaspersky.com.cn |
| 4.147.43.32 | bbs.kpfans.com |
| 199.143.244.197 | bbs.mcafeefans.com |
| 151.219.14.186 | bbs.s-sos.net |
| 184.121.122.0 | bbs.sucop.com |
| 42.104.242.83 | bbs.taisha.org |
| 237.99.187.247 | bbs.trendmicro.com.cn |
| 188.176.146.236 | bbs.winzheng.com |
| 221.77.253.50 | bestofewan.com |
| 79.60.117.201 | beta.anti-virus.by |
| 206.55.63.109 | bg.virusblokada.com |
| 226.132.21.98 | bhsbees.com |
| 2.34.128.168 | bitcity.info |
| 116.16.249.251 | bitcity.org |
| 243.12.194.159 | bitdefender.co.uk |
| 195.88.220.148 | bitdefender.com |
| 228.246.3.218 | bitdefender.com.ua |
| 85.228.124.45 | bitdefender.es |
| 24.224.69.22 | bitdefender.org |
| 232.44.95.11 | bitdefender.secyber.net |
| 9.202.135.13 | bitdefenderchina.com |
| 123.185.255.164 | bitdefenderguatemala.com |
| 250.180.200.72 | bitdefendermalaysia.com |
| 13.1.227.61 | bitdefendertaiwan.com |
| 46.158.10.131 | bitdefenderuruguay.com |
| 160.141.198.214 | bitdefenderusa.com |
| 31.136.144.190 | biz.nprotect.com |
| 239.213.102.179 | bkav.com.vn |
| 15.115.209.181 | blackice.iss.net |
| 129.29.74.76 | bleedingthreats.net |
| 68.93.19.240 | bleepingcomputer.com |
| 20.169.233.229 | blitzblank.com |
| 53.71.84.43 | blog.hispasec.com |
| 166.241.205.126 | blog.threatfire.com |
| 37.49.150.35 | blog.titanium-jewelry.com |
| 57.125.176.24 | blog.trendmicro.com |
| 90.27.216.94 | blogs.icerocket.com |
| 204.198.80.245 | blogs.protegerse.com |
| 75.5.25.153 | blogschapines.com |
| 26.82.52.126 | boardreader.com |
| 111.223.75.196 | bobbondart.com |
| 157.138.195.23 | br.mcafee.com |
| 96.201.141.187 | br.trendmicro.com |
| 48.22.167.176 | brazil.kaspersky.com |
| 80.180.206.246 | buddy.bitdefender.com |
| 194.94.139.141 | bugs.clamav.net |
| 133.158.16.49 | buscafacil.com |
| 85.234.42.38 | buscalo.in |
| 118.136.149.108 | busco.in |
| 232.50.14.192 | buy.bitdefender-es.com |
| 102.114.215.100 | buy.bitdefender.com |
| 122.191.173.89 | buy.bitdefender.de |
| 155.24.25.159 | buy.drweb.com |
| 201.7.145.242 | buy.rising.com.cn |
| 140.2.90.218 | ca.com |
| 91.147.117.207 | cacomvip.ca.com |
| 124.236.156.209 | cai.com |
| 238.219.20.104 | canada.karuna-shechen.org |
| 177.214.222.12 | castlecops.com |
| 129.103.248.1 | castlecrops.com |
| 161.193.31.71 | ccslaughterspdx.com |
| 19.175.152.154 | cddchiangmai.net |
| 146.171.97.130 | cdn.atwola.com |
| 166.247.123.119 | center.rising.com.cn |
| 199.149.162.121 | centralcommand.com |
| 245.131.27.17 | cert.org |
| 183.127.228.181 | cfan.com.cn |
| 135.204.254.170 | cgi.clamav.net |
| 168.105.106.240 | changedetection.com |
| 26.88.226.67 | changelog.fr |
| 221.83.171.231 | channelpartner.trendmicro.com |
| 172.160.130.220 | chickensroamfree.com |
| 205.61.237.34 | chkrootkit.org |
| 63.44.101.185 | chollian.nprotect.co.kr |
| 190.39.47.93 | cisrt.org |
| 210.116.5.82 | cit.kookmin.ac.kr |
| 242.18.112.152 | clamav.net |
| 100.0.233.235 | clamwin.com |
| 227.252.178.143 | click.atdmt.com |
| 179.72.204.132 | clicks.atdmt.com |
| 212.230.243.202 | cloudprotection.pandasecurity.com |
| 70.212.108.30 | clubic.com |
| 8.208.53.6 | cmmings.cn |
| 216.29.79.251 | cn.mcafee.com |
| 249.186.119.253 | cn.sophos.com |
| 107.169.239.148 | cn.trendmicro.com |
| 234.164.184.56 | codehard.wordpress.com |
| 253.241.211.45 | cohartuk.com |
| 30.142.250.115 | commentcamarche.net |
| 144.125.182.198 | community.thaiware.com |
| 15.120.128.174 | comodo.com |
| 223.197.86.163 | company.drweb.com |
| 255.99.193.165 | company.hauri.co.kr |
| 113.13.58.60 | company.hauri.net |
| 52.77.3.208 | computing.net |
| 244.137.201.197 | comunidad.wilkinsonpc.com.co |
| 21.39.53.12 | configurarequipos.com |
| 135.209.173.95 | coresecurity.com |
| 5.17.118.3 | cou85.com |
| 25.94.144.248 | cowsmo.com |
| 58.251.184.62 | cpsecure.com |
| 172.166.48.213 | csc.rising.com.cn |
| 43.229.249.121 | cureit.ru |
| 250.50.20.110 | customer.symantec.com |
| 95.207.59.180 | customers.drweb.com |
| 141.122.179.7 | cutlines.org |
| 80.185.125.171 | cwsandbox.org |
| 32.6.151.160 | cybercrime.pandasecurity.com |
| 65.164.190.230 | cyberdefender.com |
| 178.78.123.125 | cybertechhelp.com |
| 117.142.0.33 | daboweb.com |
| 69.218.26.22 | daniloff.net |
| 102.120.134.93 | daniweb.com |
| 216.34.254.176 | darkclockers.com |
| 86.98.199.84 | dazhizhu.cn |
| 106.175.157.73 | de.bitdefender.com |
| 139.8.9.143 | de.mcafee.com |
| 185.247.129.226 | de.trendmicro.com |
| 124.242.74.202 | deckard.geekstogo.com |
| 75.131.101.191 | deerfield.com |
| 108.220.140.193 | defalcos.com |
| 222.203.4.88 | definitions.symantec.com |
| 161.198.206.252 | dell.symantec.com |
| 113.87.232.241 | demos.eset.es |
| 146.177.15.55 | descargas.eset.es |
| 3.159.136.138 | dev.depeuter.org |
| 130.155.81.114 | developmentdrums.org |
| 150.231.107.103 | dialognauka.ru |
| 183.133.147.106 | diamondcs.com.au |
| 229.115.11.1 | dicasweb.com.br |
| 151.95.196.149 | discussions.virtualdr.com |
| 103.172.223.138 | disk-encryption.comodo.com |
| 136.73.74.208 | dl.360safe.com |
| 250.56.194.35 | dl1.antivir-pe.com |
| 189.51.139.199 | dl1.antivir-pe.de |
| 140.128.98.188 | dl1.antivir.de |
| 173.29.205.2 | dl1.avgate.net |
| 31.12.69.153 | dl10.freeav.net |
| 158.8.15.61 | dl2.antivir-pe.com |
| 178.84.229.50 | dl2.antivir-pe.de |
| 211.242.80.120 | dl2.antivir.de |
| 68.224.201.203 | dl2.avgate.net |
| 195.220.146.111 | dl3.antivir-pe.de |
| 147.40.172.101 | dl3.antivir.de |
| 180.198.212.171 | dl3.avgate.net |
| 38.180.76.254 | dl4.antivir-pe.com |
| 232.176.21.230 | dl4.antivir-pe.de |
| 184.253.48.219 | dl4.antivir.de |
| 217.154.87.221 | dl4.avgate.net |
| 75.137.207.116 | dl5.avgate.net |
| 202.132.152.24 | dl6.avgate.net |
| 221.209.179.13 | dl7.avgate.net |
| 254.110.218.83 | dl8.avgate.net |
| 112.93.150.166 | dl8.freeav.net |
| 239.89.96.142 | dl9.avgate.net |
| 191.165.54.131 | dl9.freeav.net |
| 224.67.161.133 | dnl-cd1.kaspersky-labs.com |
| 81.237.26.28 | dnl-cd10.kaspersky-labs.com |
| 20.45.227.192 | dnl-cd11.kaspersky-labs.com |
| 228.121.185.182 | dnl-cd12.kaspersky-labs.com |
| 5.23.37.252 | dnl-cd13.kaspersky-labs.com |
| 119.193.157.63 | dnl-cd2.kaspersky-labs.com |
| 229.241.86.227 | dnl-cd3.kaspersky-labs.com |
| 249.62.113.216 | dnl-cd4.kaspersky-labs.com |
| 26.219.152.30 | dnl-cd5.kaspersky-labs.com |
| 140.134.16.181 | dnl-cd6.kaspersky-labs.com |
| 11.197.218.89 | dnl-cd7.kaspersky-labs.com |
| 219.18.244.78 | dnl-cd8.kaspersky-labs.com |
| 63.175.27.148 | dnl-cd9.kaspersky-labs.com |
| 109.90.147.231 | dnl-cn1.kaspersky-labs.com |
| 48.154.93.139 | dnl-cn10.kaspersky-labs.com |
| 0.230.119.128 | dnl-cn11.kaspersky-labs.com |
| 33.132.158.198 | dnl-cn12.kaspersky-labs.com |
| 146.46.91.93 | dnl-cn13.kaspersky-labs.com |
| 85.110.224.1 | dnl-cn14.kaspersky-labs.com |
| 37.186.250.247 | dnl-cn15.kaspersky-labs.com |
| 70.88.102.61 | dnl-cn2.kaspersky-labs.com |
| 184.3.222.144 | dnl-cn3.kaspersky-labs.com |
| 54.66.167.52 | dnl-cn4.kaspersky-labs.com |
| 74.143.126.41 | dnl-cn5.kaspersky-labs.com |
| 107.232.233.111 | dnl-cn6.kaspersky-labs.com |
| 153.215.97.194 | dnl-cn7.kaspersky-labs.com |
| 92.210.43.170 | dnl-cn8.kaspersky-labs.com |
| 44.99.69.159 | dnl-cn9.kaspersky-labs.com |
| 76.188.108.161 | dnl-eu1.kaspersky-labs.com |
| 190.171.228.56 | dnl-eu10.kaspersky-labs.com |
| 129.167.174.220 | dnl-eu11.kaspersky-labs.com |
| 81.55.200.209 | dnl-eu12.kaspersky-labs.com |
| 114.145.239.23 | dnl-eu13.kaspersky-labs.com |
| 211.111.88.90 | dnl-eu14.kaspersky-labs.com |
| 82.107.33.67 | dnl-eu15.kaspersky-labs.com |
| 102.183.59.56 | dnl-eu2.kaspersky-labs.com |
| 135.85.99.58 | dnl-eu3.kaspersky-labs.com |
| 181.68.219.209 | dnl-eu4.kaspersky-labs.com |
| 120.63.164.117 | dnl-eu5.kaspersky-labs.com |
| 71.140.191.106 | dnl-eu6.kaspersky-labs.com |
| 104.41.42.176 | dnl-eu7.kaspersky-labs.com |
| 218.24.162.3 | dnl-eu8.kaspersky-labs.com |
| 157.19.108.167 | dnl-eu9.kaspersky-labs.com |
| 109.96.66.156 | dnl-jp1.kaspersky-labs.com |
| 141.254.173.226 | dnl-jp10.kaspersky-labs.com |
| 255.236.37.121 | dnl-jp11.kaspersky-labs.com |
| 126.232.239.29 | dnl-jp12.kaspersky-labs.com |
| 146.52.197.18 | dnl-jp13.kaspersky-labs.com |
| 179.210.48.88 | dnl-jp14.kaspersky-labs.com |
| 36.192.169.171 | dnl-jp15.kaspersky-labs.com |
| 163.188.114.80 | dnl-jp2.kaspersky-labs.com |
| 115.8.140.69 | dnl-jp3.kaspersky-labs.com |
| 148.166.180.139 | dnl-jp4.kaspersky-labs.com |
| 6.149.44.222 | dnl-jp5.kaspersky-labs.com |
| 201.144.245.198 | dnl-jp6.kaspersky-labs.com |
| 152.221.16.187 | dnl-jp7.kaspersky-labs.com |
| 185.122.55.189 | dnl-jp8.kaspersky-labs.com |
| 27.89.159.68 | dnl-jp9.kaspersky-labs.com |
| 154.84.105.232 | dnl-kr1.kaspersky-labs.com |
| 174.161.131.221 | dnl-kr10.kaspersky-labs.com |
| 206.63.170.35 | dnl-kr11.kaspersky-labs.com |
| 64.45.103.118 | dnl-kr12.kaspersky-labs.com |
| 191.41.48.94 | dnl-kr13.kaspersky-labs.com |
| 143.117.6.83 | dnl-kr15.kaspersky-labs.com |
| 176.19.113.85 | dnl-kr2.kaspersky-labs.com |
| 34.189.234.237 | dnl-kr3.kaspersky-labs.com |
| 228.253.179.145 | dnl-kr4.kaspersky-labs.com |
| 180.73.137.134 | dnl-kr5.kaspersky-labs.com |
| 213.231.245.204 | dnl-kr6.kaspersky-labs.com |
| 71.146.109.31 | dnl-kr7.kaspersky-labs.com |
| 198.209.54.195 | dnl-kr8.kaspersky-labs.com |
| 217.30.81.184 | dnl-kr9.kaspersky-labs.com |
| 250.187.120.254 | dnl-ru1.kaspersky-labs.com |
| 108.102.240.149 | dnl-ru10.kaspersky-labs.com |
| 235.165.186.57 | dnl-ru11.kaspersky-labs.com |
| 187.242.212.46 | dnl-ru12.kaspersky-labs.com |
| 31.144.251.116 | dnl-ru13.kaspersky-labs.com |
| 77.58.116.199 | dnl-ru14.kaspersky-labs.com |
| 16.122.61.107 | dnl-ru15.kaspersky-labs.com |
| 224.198.87.96 | dnl-ru2.kaspersky-labs.com |
| 1.100.126.166 | dnl-ru3.kaspersky-labs.com |
| 99.254.43.46 | dnl-ru4.kaspersky-labs.com |
| 37.62.176.210 | dnl-ru5.kaspersky-labs.com |
| 245.139.202.199 | dnl-ru6.kaspersky-labs.com |
| 22.40.54.13 | dnl-ru7.kaspersky-labs.com |
| 136.211.174.96 | dnl-ru8.kaspersky-labs.com |
| 7.18.119.4 | dnl-ru9.kaspersky-labs.com |
| 26.95.78.249 | dnl-us1.kaspersky-labs.com |
| 59.184.185.63 | dnl-us10.kaspersky-labs.com |
| 105.167.49.146 | dnl-us11.kaspersky-labs.com |
| 44.162.251.122 | dnl-us12.kaspersky-labs.com |
| 252.51.21.111 | dnl-us13.kaspersky-labs.com |
| 28.141.60.113 | dnl-us14.kaspersky-labs.com |
| 142.123.181.8 | dnl-us15.kaspersky-labs.com |
| 81.119.126.172 | dnl-us2.kaspersky-labs.com |
| 33.7.152.161 | dnl-us3.kaspersky-labs.com |
| 66.97.192.232 | dnl-us4.kaspersky-labs.com |
| 180.79.56.59 | dnl-us5.kaspersky-labs.com |
| 50.75.1.35 | dnl-us6.kaspersky-labs.com |
| 70.152.27.24 | dnl-us7.kaspersky-labs.com |
| 103.53.67.26 | dnl-us8.kaspersky-labs.com |
| 149.36.187.177 | dnl-us9.kaspersky-labs.com |
| 88.31.132.85 | dougknox.com |
| 39.108.159.74 | down.360safe.cn |
| 72.9.10.128 | down.360safe.com |
| 170.232.114.211 | download.avg.com |
| 109.228.60.119 | download.bleepingcomputer.com |
| 61.48.18.108 | download.com |
| 94.206.125.178 | download.com.vn |
| 207.188.246.73 | download.eset.com |
| 78.184.191.237 | download.f-secure.com |
| 98.4.149.226 | download.mcafee.com |
| 131.162.1.41 | download.microsoft.com |
| 245.144.121.124 | download.microsoft.comguru0.grisoft.cz |
| 115.140.66.32 | download.nai.com |
| 67.217.93.21 | download.norman.no |
| 100.118.132.91 | download.rising.com.cn |
| 214.101.252.174 | download.softpedia.com |
| 153.96.197.150 | download.sysinternals.com |
| 104.173.224.139 | download0.avast.com |
| 137.74.7.141 | download1.avast.com |
| 251.57.127.36 | download1.emsisoft.com |
| 122.53.73.200 | download1.quickheal.com |
| 142.129.99.189 | download10.quickheal.com |
| 175.31.138.3 | download100.avast.com |
| 32.13.71.86 | download1us.softpedia.com |
| 159.9.16.46 | download2.avast.com |
| 95.69.214.36 | download2.quickheal.com |
| 128.227.66.38 | download200.avast.com |
| 242.142.186.189 | download201.avast.com |
| 180.205.131.97 | download202.avast.com |
| 132.26.90.86 | download203.avast.com |
| 165.183.197.156 | download204.avast.com |
| 23.98.61.239 | download205.avast.com |
| 150.161.6.147 | download206.avast.com |
| 170.238.33.136 | download207.avast.com |
| 202.139.72.206 | download208.avast.com |
| 60.54.192.101 | download209.avast.com |
| 187.118.138.9 | download210.avast.com |
| 139.194.164.254 | download211.avast.com |
| 240.96.203.68 | download212.avast.com |
| 29.10.68.151 | download213.avast.com |
| 224.74.13.59 | download214.avast.com |
| 176.150.39.49 | download3.avast.com |
| 209.52.79.119 | download3.quickheal.com |
| 67.223.11.14 | download4.avast.com |
| 5.30.144.178 | download4.emsisoft.com |
| 213.107.171.167 | download4.quickheal.com |
| 246.8.22.237 | download5.avast.com |
| 104.179.126.48 | download5.emsisoft.com |
| 215.226.72.212 | download5.quickheal.com |
| 235.47.30.201 | download501.avast.com |
| 11.136.137.15 | download502.avast.com |
| 57.119.1.98 | download503.avast.com |
| 252.115.203.74 | download504.avast.com |
| 204.3.229.63 | download505.avast.com |
| 237.93.12.65 | download511.avast.com |
| 94.75.133.216 | download512.avast.com |
| 33.71.78.125 | download513.avast.com |
| 241.215.104.114 | download514.avast.com |
| 18.49.144.184 | download515.avast.com |
| 132.32.8.11 | download516.avast.com |
| 3.27.209.243 | download535.avast.com |
| 22.104.236.232 | download6.avast.com |
| 55.5.19.234 | download6.quickheal.com |
| 101.244.139.129 | download600.avast.com |
| 40.239.85.37 | download601.avast.com |
| 248.60.111.26 | download602.avast.com |
| 24.217.218.96 | download603.avast.com |
| 138.200.82.179 | download604.avast.com |
| 77.196.28.87 | download605.avast.com |
| 29.16.242.76 | download606.avast.com |
| 62.174.93.146 | download607.avast.com |
| 175.156.214.41 | download608.avast.com |
| 46.152.143.190 | download609.avast.com |
| 50.212.101.179 | download617.avast.com |
| 83.114.209.249 | download618.avast.com |
| 197.97.73.76 | download619.avast.com |
| 68.92.18.240 | download620.avast.com |
| 19.169.45.229 | download621.avast.com |
| 52.70.84.43 | download622.avast.com |
| 166.53.204.126 | download623.avast.com |
| 105.48.150.102 | download624.avast.com |
| 57.125.176.91 | download625.avast.com |
| 89.27.215.93 | download626.avast.com |
| 203.9.80.244 | download627.avast.com |
| 74.5.25.152 | download628.avast.com |
| 94.81.51.141 | download629.avast.com |
| 127.239.90.211 | download630.avast.com |
| 240.221.23.39 | download631.avast.com |
| 111.217.224.15 | download632.avast.com |
| 63.37.182.4 | download633.avast.com |
| 96.195.34.6 | download634.avast.com |
| 210.110.154.157 | download635.avast.com |
| 149.173.99.65 | download636.avast.com |
| 100.250.58.54 | download637.avast.com |
| 133.151.165.124 | download638.avast.com |
| 247.66.29.207 | download639.avast.com |
| 118.129.231.115 | download640.avast.com |
| 138.206.1.104 | download641.avast.com |
| 170.108.40.174 | download642.avast.com |
| 28.22.161.69 | download643.avast.com |
| 155.86.106.233 | download644.avast.com |
| 107.162.132.222 | download645.avast.com |
| 208.64.171.36 | download646.avast.com |
| 253.234.36.120 | download647.avast.com |
| 192.42.237.28 | download648.avast.com |
| 144.118.7.17 | download649.avast.com |
| 177.20.47.87 | download650.avast.com |
| 35.191.235.238 | download651.avast.com |
| 230.254.112.146 | download652.avast.com |
| 181.75.139.135 | download653.avast.com |
| 214.232.246.205 | download654.avast.com |
| 72.147.110.32 | download655.avast.com |
| 199.210.56.196 | download656.avast.com |
| 219.31.14.185 | download658.avast.com |
| 251.121.121.255 | download659.avast.com |
| 41.103.242.82 | download660.avast.com |
| 236.99.187.58 | download661.avast.com |
| 188.243.213.47 | download662.avast.com |
| 221.77.252.49 | download663.avast.com |
| 78.59.117.201 | download664.avast.com |
| 17.55.62.109 | download665.avast.com |
| 225.199.88.98 | download666.avast.com |
| 2.33.128.168 | download667.avast.com |
| 116.16.248.251 | download668.avast.com |
| 243.11.193.227 | download669.avast.com |
| 6.88.220.216 | download670.avast.com |
| 39.245.3.218 | download671.avast.com |
| 85.228.123.113 | download672.avast.com |
| 24.223.69.21 | download673.avast.com |
| 232.44.95.10 | download674.avast.com |
| 8.202.202.80 | download675.avast.com |
| 106.168.51.147 | download676.avast.com |
| 45.164.252.55 | download677.avast.com |
| 253.240.210.44 | download678.avast.com |
| 30.142.62.114 | download679.avast.com |
| 144.124.182.10 | download680.avast.com |
| 14.120.127.174 | download681.avast.com |
| 34.197.85.163 | download682.avast.com |
| 67.98.193.233 | download683.avast.com |
| 181.81.57.60 | download684.avast.com |
| 52.76.2.224 | download685.avast.com |
| 3.153.29.213 | download686.avast.com |
| 36.54.68.27 | download687.avast.com |
| 150.37.188.110 | download688.avast.com |
| 89.32.134.86 | download689.avast.com |
| 41.109.160.75 | download690.avast.com |
| 73.11.199.77 | download691.avast.com |
| 187.249.64.228 | download692.avast.com |
| 58.245.9.136 | download693.avast.com |
| 78.65.35.125 | download694.avast.com |
| 111.223.75.195 | download695.avast.com |
| 225.205.7.23 | download696.avast.com |
| 95.201.208.255 | download697.avast.com |
| 47.22.166.244 | download698.avast.com |
| 80.179.18.246 | download699.avast.com |
| 194.94.138.141 | download7.avast.com |
| 133.157.83.49 | download7.quickheal.com |
| 84.234.42.38 | download700.avast.com |
| 117.135.149.108 | download701.avast.com |
| 231.50.13.191 | download702.avast.com |
| 102.113.215.99 | download703.avast.com |
| 122.190.241.88 | download704.avast.com |
| 154.92.24.158 | download705.avast.com |
| 12.6.145.53 | download706.avast.com |
| 139.70.90.217 | download707.avast.com |
| 91.146.116.206 | download708.avast.com |
| 192.48.156.20 | download709.avast.com |
| 238.218.20.104 | download72.avast.com |
| 176.26.221.12 | download73.avast.com |
| 128.103.247.1 | download74.avast.com |
| 161.4.31.71 | download75.avast.com |
| 19.175.219.222 | download76.avast.com |
| 214.238.96.130 | download77.avast.com |
| 165.59.123.119 | download78.avast.com |
| 198.216.230.189 | download79.avast.com |
| 56.131.94.16 | download8.quickheal.com |
| 183.194.40.180 | download80.avast.com |
| 203.15.254.169 | download81.avast.com |
| 235.105.105.239 | download82.avast.com |
| 25.87.226.66 | download83.avast.com |
| 220.83.171.42 | download84.avast.com |
| 172.227.197.31 | download85.avast.com |
| 205.61.237.33 | download9.quickheal.com |
| 63.43.101.185 | download900.avast.com |
| 1.39.46.93 | download901.avast.com |
| 209.184.72.82 | download902.avast.com |
| 242.17.112.152 | download903.avast.com |
| 100.0.232.235 | download904.avast.com |
| 227.251.177.211 | download905.avast.com |
| 246.72.204.200 | download906.avast.com |
| 23.229.243.202 | download907.avast.com |
| 53.196.91.81 | download908.avast.com |
| 248.192.37.245 | download909.avast.com |
| 200.12.63.234 | download91.avast.com |
| 233.170.170.48 | download910.avast.com |
| 90.152.35.131 | download911.avast.com |
| 29.148.236.39 | download912.avast.com |
| 237.224.194.28 | download913.avast.com |
| 14.126.46.99 | download914.avast.com |
| 128.108.166.250 | download915.avast.com |
| 254.104.111.158 | download916.avast.com |
| 18.181.69.147 | download917.avast.com |
| 51.82.177.217 | download918.avast.com |
| 165.65.41.44 | download919.avast.com |
| 36.60.242.208 | download92.avast.com |
| 243.137.13.197 | download920.avast.com |
| 20.38.52.11 | download921.avast.com |
| 134.21.172.94 | download922.avast.com |
| 73.17.118.70 | download923.avast.com |
| 25.93.144.59 | download924.avast.com |
| 58.251.183.61 | download925.avast.com |
| 171.233.48.212 | download926.avast.com |
| 42.229.249.120 | download927.avast.com |
| 62.49.19.109 | download928.avast.com |
| 95.207.59.180 | download929.avast.com |
| 209.189.247.7 | download93.avast.com |
| 79.185.192.239 | download930.avast.com |
| 31.6.150.228 | download931.avast.com |
| 64.163.2.230 | download932.avast.com |
| 178.78.122.125 | download933.avast.com |
| 117.141.67.33 | download934.avast.com |
| 68.218.26.22 | download935.avast.com |
| 101.119.133.92 | download936.avast.com |
| 215.34.253.175 | download937.avast.com |
| 86.98.199.83 | download938.avast.com |
| 106.174.225.72 | download939.avast.com |
| 139.76.8.142 | download94.avast.com |
| 252.246.129.37 | download940.avast.com |
| 123.54.74.201 | download941.avast.com |
| 75.130.100.190 | download942.avast.com |
| 176.32.140.5 | download943.avast.com |
| 222.202.4.88 | download944.avast.com |
| 160.10.205.252 | download945.avast.com |
| 112.87.231.241 | download946.avast.com |
| 145.244.15.55 | download947.avast.com |
| 3.159.203.206 | download948.avast.com |
| 198.222.80.114 | download949.avast.com |
| 149.43.107.103 | download95.avast.com |
| 182.200.214.173 | download950.avast.com |
| 40.115.78.0 | download951.avast.com |
| 167.179.24.164 | download952.avast.com |
| 187.255.238.153 | download953.avast.com |
| 220.89.89.223 | download954.avast.com |
| 9.71.210.50 | download955.avast.com |
| 204.67.155.26 | download956.avast.com |
| 156.211.181.15 | download957.avast.com |
| 189.45.221.18 | download958.avast.com |
| 47.27.85.169 | download959.avast.com |
| 241.23.30.77 | download96.avast.com |
| 193.168.56.66 | download960.avast.com |
| 226.1.96.136 | download961.avast.com |
| 84.240.216.219 | download962.avast.com |
| 211.235.161.195 | download963.avast.com |
| 230.56.188.184 | download964.avast.com |
| 7.213.227.186 | download965.avast.com |
| 53.196.91.81 | download966.avast.com |
| 248.192.37.245 | download967.avast.com |
| 200.12.63.234 | download968.avast.com |
| 233.170.170.48 | download969.avast.com |
| 90.152.35.131 | download97.avast.com |
| 29.148.236.39 | download970.avast.com |
| 237.224.194.28 | download971.avast.com |
| 14.126.46.99 | download972.avast.com |
| 128.108.166.250 | download973.avast.com |
| 254.104.111.158 | download974.avast.com |
| 18.181.69.147 | download975.avast.com |
| 51.82.177.217 | download976.avast.com |
| 165.65.41.44 | download977.avast.com |
| 36.60.242.208 | download978.avast.com |
| 243.137.13.197 | download979.avast.com |
| 20.38.52.11 | download98.avast.com |
| 134.21.172.94 | download980.avast.com |
| 73.17.118.70 | download99.avast.com |
| 25.93.144.59 | downloads-eu1.kaspersky-labs.com |
| 58.251.183.61 | downloads-eu2.kaspersky-labs.com |
| 171.233.48.212 | downloads-eu3.kaspersky-labs.com |
| 42.229.249.120 | downloads-eu4.kaspersky-labs.com |
| 62.49.19.109 | downloads-us1.kaspersky-labs.com |
| 95.207.59.180 | downloads-us2.kaspersky-labs.com |
| 209.189.247.7 | downloads-us3.kaspersky-labs.com |
| 79.185.192.239 | downloads-us4.kaspersky-labs.com |
| 31.6.150.228 | downloads.andymanchesta.com |
| 64.163.2.230 | downloads.malwarebytes.org |
| 160.60.105.107 | downloads.microsoft.com |
| 99.124.50.15 | downloads.My-eTrust.com |
| 51.200.8.5 | downloads1.kaspersky-labs.com |
| 84.102.116.75 | downloads2.kaspersky-labs.com |
| 198.16.236.158 | downloads3.kaspersky-labs.com |
| 68.80.181.66 | downloads4.kaspersky-labs.com |
| 88.157.208.55 | downloads5.kaspersky-labs.com |
| 121.58.247.125 | dr-web-cureit.softonic.com |
| 235.229.111.20 | drsolomon.com |
| 106.36.56.184 | drweb-inside.com |
| 58.113.83.173 | drweb.com |
| 158.14.122.243 | drweb.com.es |
| 204.185.242.70 | drweb.net |
| 143.249.188.234 | drwebinside.com |
| 95.69.214.223 | dswlab.com |
| 128.227.253.37 | duba.net |
| 241.141.186.188 | ealaddin.net |
| 180.205.63.96 | ealaddin.orgeshop.aladdin.com |
| 132.25.89.86 | easy-vpn.comodo.com |
| 165.183.197.156 | edm.symantec.com |
| 23.97.61.239 | education.symantec.com |
| 149.161.6.147 | eeload.com |
| 169.238.221.136 | eeye.com |
| 202.71.72.206 | eicar.org |
| 248.54.192.33 | elblogdemanu.com |
| 187.49.137.9 | elitepvpers.de |
| 139.194.164.254 | emea.trendmicro.com |
| 171.27.203.0 | emsisoft.com |
| 29.10.67.151 | emsisoft.de |
| 224.6.13.59 | encarta.msn.com |
| 176.150.39.48 | engine.awaps.net |
| 209.240.78.118 | enterprisesecur.symantec.com |
| 66.222.199.201 | eos.eset.es |
| 193.218.144.177 | eradicatespyware.net |
| 213.38.170.167 | es.answers.yahoo.com |
| 246.196.210.169 | es.kioskea.net |
| 36.178.74.64 | es.mcafee.com |
| 230.174.19.228 | es.trendmicro.com |
| 182.251.46.217 | es.wasalive.com |
| 215.152.153.31 | esafe.com |
| 73.135.17.114 | esecurity.livecall.co.kr |
| 12.130.218.22 | eset-la.com |
| 220.207.177.11 | eset.com |
| 252.108.28.81 | eset.es |
| 110.91.148.232 | eset.sk |
| 237.87.94.140 | esp.sophos.com |
| 1.163.52.129 | espanol.answers.yahoo.com |
| 34.65.159.199 | espanol.dir.groups.yahoo.com |
| 147.47.24.26 | espanol.groups.yahoo.com |
| 18.43.225.190 | esupport.trendmicro.com |
| 226.119.251.180 | et.symantec.com |
| 3.21.35.250 | etrr.co.uk |
| 117.3.155.77 | eugrantsadvisor.cz |
| 55.255.100.53 | eugrantsadvisor.de |
| 7.76.127.42 | eval.symantec.com |
| 40.233.166.44 | ewido.net |
| 154.216.30.195 | exchangeyourcareer.net |
| 25.211.231.103 | experts-exchange.com |
| 45.32.2.92 | f-prot.com |
| 77.189.41.162 | f-secure.com |
| 191.172.229.245 | f-secure.frf-secure.hk |
| 62.168.175.221 | f-secure.nlfsecure.com |
| 14.244.133.210 | fastclick.net |
| 47.146.240.212 | feedage.com |
| 160.60.105.107 | feeds.sophos.com |
| 99.124.50.15 | feeds.trendmicro.com |
| 51.200.8.5 | file.ikaka.cn |
| 84.102.116.75 | file.ikaka.com |
| 198.16.236.158 | file.net |
| 68.80.181.66 | files.avast.com |
| 88.157.208.55 | files.filefont.com |
| 121.58.247.125 | files.trendmicro-europe.com |
| 235.229.111.20 | filseclab.com |
| 106.36.56.184 | final4ever.com |
| 58.113.83.173 | finjan.com |
| 158.14.122.243 | firewall.sunbeltsoftware.com |
| 204.185.242.70 | firewallguide.com |
| 143.249.188.234 | fixmyim.com |
| 95.69.214.223 | foro.ethek.com |
| 128.227.253.37 | foros.toxico-pc.com |
| 241.141.186.188 | foros.zonavirus.com |
| 164.189.47.81 | forospanish.com |
| 116.9.73.70 | forospyware.com |
| 149.167.181.140 | forospyware.es |
| 7.82.45.223 | fortiguardcenter.com |
| 133.145.246.131 | fortihero.com |
| 153.222.205.120 | fortilog.com |
| 186.55.56.190 | fortinet.co.at |
| 232.38.176.17 | fortinet.com |
| 171.33.122.249 | fortiprotect.com |
| 123.178.148.238 | fortiwifi.com |
| 155.11.187.240 | forum.clubedohardware.com.br |
| 13.250.51.135 | forum.emsisoft.com |
| 208.246.253.43 | forum.hardware.fr |
| 160.134.23.32 | forum.hijackthis.de |
| 193.224.62.102 | forum.ikaka.com |
| 50.206.183.185 | forum.jiangmin.com |
| 177.202.128.162 | forum.kaspersky.com |
| 197.22.154.151 | forum.malekal.com |
| 230.180.194.153 | forum.piriform.com |
| 20.163.58.48 | forum.securitycadets.com |
| 214.158.3.212 | forum.sysinternals.com |
| 166.235.30.201 | forum.telecharger.01net.com |
| 199.136.137.15 | forum.tweaks.com |
| 57.119.1.98 | forum.zazana.com |
| 252.114.203.6 | forums.cnet.com |
| 204.191.161.251 | forums.comodo.com |
| 236.92.12.65 | forums.devshed.com |
| 94.75.132.216 | forums.maddoktor2.com |
| 221.71.78.124 | forums.majorgeeks.com |
| 241.147.36.113 | forums.techguy.org |
| 18.49.143.183 | forums.whatthetech.com |
| 131.31.8.10 | fr.bitdefender.com |
| 2.27.209.175 | fr.drweb.com |
| 210.103.235.164 | fr.mcafee.com |
| 243.5.19.234 | fr.trendmicro.com |
| 101.244.139.61 | fr1.drweb.com |
| 39.239.84.37 | fr2.drweb.com |
| 247.60.111.26 | fr3.drweb.com |
| 24.217.150.28 | fr4.drweb.com |
| 138.200.14.179 | fr5.drweb.com |
| 9.195.216.87 | fr6.drweb.com |
| 29.16.242.76 | fr7.drweb.com |
| 61.173.25.146 | fractus.mat.uson.mx |
| 175.156.213.229 | free-av.com |
| 46.152.159.205 | free-av.net |
| 254.228.117.194 | free.antivirus.com |
| 31.130.224.196 | free.avg.com |
| 144.44.89.91 | free.drweb.com |
| 83.108.34.0 | free.grisoft.com |
| 35.184.248.245 | free.grisoft.cz |
| 68.86.100.59 | free.pandasecurity.com |
| 182.1.220.142 | free.prevx.com |
| 52.64.165.50 | free.tinypicbox.com |
| 72.141.192.39 | freeav.com |
| 105.42.231.109 | freeav.net |
| 219.213.95.4 | freespywareremoval.info |
| 90.20.41.168 | frisk-software.com |
| 42.97.67.157 | fsc.norman.com |
| 142.254.106.227 | fsecure.nlwebyard.com |
| 188.169.226.54 | ftp.avp.com |
| 127.233.172.218 | ftp.bitdefender.com |
| 79.53.198.207 | ftp.ca.co |
| 112.211.237.21 | ftp.ca.com |
| 225.125.170.172 | ftp.customer.symantec.com |
| 164.189.47.81 | ftp.dispatch.mcafee.com |
| 116.9.73.70 | ftp.download.mcafee.com |
| 149.167.181.140 | ftp.downloads-eu1.kaspersky-labs.com |
| 7.82.45.223 | ftp.downloads-eu2.kaspersky-labs.com |
| 133.145.246.131 | ftp.downloads-eu3.kaspersky-labs.com |
| 153.222.205.120 | ftp.downloads-eu4.kaspersky-labs.com |
| 186.55.56.190 | ftp.downloads-us1.kaspersky-labs.com |
| 232.38.176.17 | ftp.downloads-us2.kaspersky-labs.com |
| 171.33.122.249 | ftp.downloads-us3.kaspersky-labs.com |
| 123.178.148.238 | ftp.downloads-us4.kaspersky-labs.com |
| 155.11.187.240 | ftp.downloads1.kaspersky-labs.com |
| 13.250.51.135 | ftp.downloads2.kaspersky-labs.com |
| 208.246.253.43 | ftp.downloads3.kaspersky-labs.com |
| 160.134.23.32 | ftp.downloads4.kaspersky-labs.com |
| 193.224.62.102 | ftp.drweb.com |
| 50.206.183.185 | ftp.esafe.com |
| 177.202.128.162 | ftp.europe.f-secure.com |
| 197.22.154.151 | ftp.f-prot.com |
| 230.180.194.153 | ftp.f-secure.com |
| 20.163.58.48 | ftp.grisoft.com |
| 199.142.243.196 | ftp.kaspersky-labs.com |
| 150.219.14.185 | ftp.kaspersky.com |
| 183.120.121.255 | ftp.kasperskylab.ru |
| 41.103.241.82 | ftp.liveupdate.symantec.com |
| 236.98.187.246 | ftp.liveupdate.symantecliveupdate.com |
| 188.175.145.235 | ftp.mast.mcafee.com |
| 220.77.252.49 | ftp.mcafee.com |
| 78.59.117.200 | ftp.microworldsystems.com |
| 205.55.62.108 | ftp.my-etrust.com |
| 225.131.20.97 | ftp.nai.com |
| 2.33.127.167 | ftp.networkassociates.com |
| 115.15.248.250 | ftp.norton.com |
| 242.11.193.159 | ftp.rads.mcafee.com |
| 194.87.219.148 | ftp.sandbox.norman.com |
| 227.245.3.218 | ftp.secure.nai.com |
| 85.228.123.45 | ftp.securityresponse.symantec.com |
| 24.223.68.21 | ftp.sophos.com |
| 231.44.95.10 | ftp.symantec.com |
| 8.201.134.12 | ftp.symantecliveupdate.com |
| 122.184.254.163 | ftp.symatec.com |
| 249.179.200.71 | ftp.trendmicro.com |
| 13.0.226.60 | ftp.uk.trendmicro-europe.com |
| 45.158.9.130 | ftp.update.symantec.com |
| 159.140.198.213 | ftp.updates.symantec.com |
| 30.136.143.189 | ftp.updates1.kaspersky-labs.com |
| 238.212.101.178 | ftp.updates2.kaspersky-labs.com |
| 15.114.208.180 | ftp.updates3.kaspersky-labs.com |
| 128.28.73.75 | ftp.updates4.kaspersky-labs.com |
| 67.92.18.240 | ftp.us.mcafee.com |
| 19.168.232.229 | ftp.viruslist.com |
| 52.70.84.43 | funkytoad.com |
| 166.241.204.126 | futurenow.bitdefender.com |
| 37.48.149.34 | fw.rising.com.cn |
| 56.125.176.23 | fx.dk |
| 89.26.215.93 | gangbang.mytijn.org |
| 203.197.79.244 | gdata.de |
| 74.4.25.152 | gdata.es |
| 26.81.51.141 | gecadsoftware.com |
| 126.239.90.211 | geekstogo.com |
| 172.153.211.38 | global.ahnlab.com |
| 111.217.156.202 | global.jiangmin.com |
| 63.37.182.191 | global.nprotect.com |
| 96.195.221.5 | go.mcafee.com |
| 209.109.154.156 | go.microsoft.com |
| 148.173.31.65 | go.rising.com.cn |
| 100.249.57.54 | go.sunbeltsoftware.com |
| 133.151.165.124 | go.symantec.com |
| 247.66.29.207 | go.trendmicro.com |
| 118.129.230.115 | greatis.com |
| 137.206.189.104 | grisoft.com |
| 170.39.40.174 | grisoft.cz |
| 216.22.160.1 | grv.microsoft.com |
| 155.17.106.233 | guiadohardware.net |
| 107.162.132.222 | guru.avg.com |
| 139.252.171.224 | guru1.grisoft.cz |
| 253.234.36.119 | guru2.grisoft.cz |
| 192.230.237.27 | guru3.grisoft.cz |
| 128.102.247.0 | guru4.grisoft.cz |
| 161.192.30.70 | guru5.grisoft.cz |
| 19.174.151.154 | gwava.nl |
| 145.170.96.130 | hacksoft.com.pe |
| 165.247.122.119 | hacksoft.pe |
| 198.148.162.121 | halmapr.com |
| 244.131.26.16 | hauri.co.kr |
| 183.126.227.180 | hauri.net |
| 134.203.254.169 | haurijapan.com |
| 167.104.105.239 | help.rising.com.cn |
| 25.87.225.66 | hi.baidu.com |
| 220.82.171.230 | hijackthis.de |
| 172.159.129.219 | hijackthis.download3000.com |
| 204.61.236.33 | hishomeforchildren.com |
| 62.43.101.184 | hjt-data.trend-braintree.com |
| 189.39.46.92 | hjt.networktechs.com |
| 209.115.4.81 | home.mcafee.com |
| 242.17.111.151 | hostedmailsecur.symantec.com |
| 100.255.232.235 | hotshare.net |
| 226.251.177.143 | housecall.com |
| 178.72.203.132 | housecall.trendmicro.com |
| 211.229.243.202 | housecall60.trendmicro.com |
| 69.212.107.29 | housecall65.trendmicro.com |
| 8.207.52.5 | howsafeismypc.com |
| 215.28.79.250 | huaifai.go.th |
| 248.185.118.252 | i-vault.comodo.com |
| 106.168.238.147 | iavs.cz |
| 233.163.184.55 | ibusca.me |
| 253.240.210.44 | idauthority.com |
| 29.142.249.114 | ids.kaspersky-labs.com |
| 143.124.182.197 | ieupdate.gdata.de |
| 14.120.127.173 | ieupdate1.gdata.de |
| 222.196.85.162 | ieupdate2.gdata.de |
| 255.98.192.164 | ieupdate3.gdata.de |
| 113.12.57.60 | ieupdate4.gdata.de |
| 51.76.2.224 | ieupdate5.gdata.de |
| 3.153.216.213 | ieupdate6.gdata.de |
| 36.54.68.27 | ikaka.cn |
| 150.225.188.110 | ikaka.com |
| 21.32.133.18 | ikarus.at |
| 40.109.160.7 | ikarus.net |
| 73.10.199.77 | ilove.tigolbittys.info |
| 187.181.63.228 | images.kaspersky.com |
| 58.244.9.136 | in.answers.yahoo.com |
| 10.65.35.125 | incodesolutions.com |
| 110.223.74.195 | info.drweb.com |
| 156.137.195.22 | info.prevx.com |
| 95.201.140.186 | infos-du-net.com |
| 47.21.166.175 | infosecpodcast.com |
| 80.179.205.245 | infospyware.com |
| 194.93.138.141 | inicioid.com |
| 132.157.15.49 | iniciorapido.info |
| 68.218.25.22 | inline-software.de |
| 101.119.133.92 | internetsecurity.comodo.com |
| 215.34.253.175 | intranet.cidiroax.ipn.mx |
| 86.97.198.83 | investor.symantec.com |
| 105.174.157.72 | irc.bigshitsandwich.org |
| 138.7.8.142 | irc.metraiciono.com |
| 184.246.128.225 | iseclab.org |
| 123.241.74.201 | isotopecomics.com |
| 75.130.100.190 | iss.net |
| 108.220.139.192 | it.answers.yahoo.com |
| 221.202.4.87 | it.bitdefender.com |
| 160.198.205.251 | it.mcafee.com |
| 112.86.231.240 | it.trendmicro.com |
| 145.176.15.55 | itw.trendmicro.com |
| 3.158.135.138 | ixomodels.com |
| 129.154.80.114 | ixostore.ixomodels.com |
| 149.231.106.103 | javacoolsoftware.com |
| 182.132.146.105 | jetico.com |
| 228.115.10.0 | jiangmin.com |
| 167.110.211.164 | jiangmin.com.cn |
| 118.187.238.153 | jobs.bitdefender.com |
| 151.88.89.223 | jotti.org |
| 9.71.209.50 | jp.mcafee.com |
| 204.66.155.214 | jp.trendmicro.com |
| 156.143.113.203 | justfacebook.net |
| 189.45.220.17 | k-otik.com |
| 46.27.85.168 | k7computing.com |
| 173.23.30.76 | kaba.360.cn |
| 193.99.244.65 | kaba.360.com |
| 226.1.96.136 | karuna-shechen.org |
| 84.239.216.219 | kaspersky-fr.com |
| 210.235.161.127 | kaspersky-labs.com |
| 162.56.187.116 | kaspersky.co.jp |
| 195.213.227.186 | kaspersky.co.uk |
| 53.196.91.13 | kaspersky.com |
| 248.191.36.245 | kaspersky.com.cn |
| 199.12.63.234 | kaspersky.dk |
| 232.169.102.236 | kaspersky.es |
| 90.152.222.131 | kaspersky.gr |
| 217.147.168.39 | kaspersky.pl |
| 237.224.194.28 | kaspersky.ru |
| 14.126.233.98 | kaspersky.se |
| 127.108.166.165 | kasperskylab.co.kr |
| 238.88.95.141 | kasperskylab.nl |
| 190.164.53.131 | kav.ru |
| 223.66.161.133 | kav.zonelabs.com |
| 81.236.25.28 | kb.bitdefender.com |
| 19.44.226.192 | kb.bitdefender.de |
| 227.121.185.181 | kb.bitdefender.us |
| 4.22.36.251 | kerio.com |
| 118.193.156.78 | kimzimmer.net |
| 245.0.101.242 | kioskea.net |
| 8.77.128.231 | kpfans.com |
| 41.234.167.45 | kr.ahnlab.com |
| 155.149.31.196 | kr.sophos.com |
| 26.213.233.104 | krupunmai.com |
| 234.33.3.93 | kvup.jiangmin.com |
| 79.191.42.163 | kztechs.com |
| 124.105.163.246 | l33t.shadow-mods.net |
| 63.169.108.154 | la.trendmicro.com |
| 15.245.134.144 | ladooscuro.es |
| 48.147.174.214 | laneros.com |
| 162.61.106.109 | latam.kaspersky.com |
| 100.125.239.17 | latin.bitdefender.com |
| 52.202.10.6 | lavasoft.com |
| 85.103.117.76 | lavasoft.nu |
| 199.18.237.159 | lavasoftusa.com |
| 70.81.182.67 | lexikon.ikarus.at |
| 89.158.141.40 | license.drweb.com |
| 106.231.232.110 | linhadefensiva.org |
| 152.214.96.193 | linhadefensiva.uol.com.br |
| 91.210.42.169 | linux.bitdefender.com |
| 43.98.68.158 | lists.clamav.net |
| 76.188.107.160 | liutilities.com |
| 189.170.228.55 | live.sunbeltsoftware.com |
| 128.166.173.219 | liveprotect.net |
| 80.54.199.209 | liveupdate.symantec.com |
| 113.144.239.23 | liveupdate.symantec.d4p.net |
| 227.127.103.106 | liveupdate.symantecliveupdate.com |
| 97.122.48.82 | looknstop.com |
| 117.199.75.71 | lovings.technigoyous.net |
| 150.100.114.73 | lurker.clamav.net |
| 196.83.234.224 | mailcenter.rising.com |
| 135.78.180.132 | mailcenter.rising.com.cn |
| 87.155.206.121 | majorgeeks.com |
| 119.56.57.191 | mall.hauri.co.kr |
| 233.39.177.18 | malwarebytes.org |
| 172.35.123.182 | malwarecity.com |
| 124.111.81.171 | malwarecity.netmalwarecity.org |
| 157.13.188.241 | malwaredomainlist.com |
| 14.251.53.136 | malwarepedia.com |
| 141.247.254.44 | malwareremoval.com |
| 161.67.212.34 | malwarescan.emsisoft.com |
| 194.225.64.104 | malwarescan.emsisoft.de |
| 36.192.168.171 | malwarescan.emsisoft.es |
| 163.187.113.79 | mamutu.com |
| 114.8.140.68 | manuelruvalcaba.com |
| 147.165.179.138 | marian.symantec.com |
| 5.148.43.221 | mast.mcafee.com |
| 200.143.245.197 | mcafee-at-home.com |
| 152.220.15.186 | mcafee.com |
| 184.122.54.188 | mcafeeb2b.com |
| 42.104.174.83 | mcafeefans.com |
| 169.100.120.247 | mcafeeretail.com |
| 189.176.146.236 | mcaffee.com |
| 222.78.185.50 | me.kaspersky.com |
| 79.60.118.133 | media.fastclick.net |
| 206.56.63.110 | megasecurity.org |
| 158.132.21.99 | merijn.org |
| 191.34.129.101 | metascan-online.com |
| 49.205.249.252 | microsoft.com |
| 244.12.194.160 | microsoft.fr |
| 195.89.153.149 | midescargas.com |
| 228.246.4.219 | mirror02.gdata.de |
| 86.161.108.30 | misec.net |
| 197.208.54.194 | mmsk.cn |
| 217.29.80.183 | moneybookers.com |
| 249.187.119.253 | moosoft.com |
| 107.101.240.148 | mop.pandasecurity.com |
| 234.165.185.56 | mostz.com |
| 186.241.211.45 | mozilla-hispano.org |
| 31.143.250.115 | msdn.microsoft.com |
| 77.57.115.199 | msk.drweb.com |
| 15.121.60.107 | msk1.drweb.com |
| 223.197.86.96 | msk2.drweb.com |
| 0.99.126.166 | msk3.drweb.com |
| 114.14.58.61 | msk4.drweb.com |
| 53.77.191.225 | msk5.drweb.com |
| 4.154.218.214 | msk6.drweb.com |
| 37.55.69.28 | msk7.drweb.com |
| 151.226.189.111 | msncleaner.softonic.com |
| 22.33.135.19 | msnfix.changelog.fr |
| 42.110.93.8 | msnvirusremoval.com |
| 74.200.200.78 | msr.mcafee.com |
| 120.182.65.161 | mvps.org |
| 59.178.10.137 | mx.answers.yahoo.com |
| 11.66.36.126 | mx.mcafee.com |
| 44.156.75.128 | mxttchina.com |
| 158.138.196.24 | my-etrust.com |
| 96.134.141.188 | my.drweb.com |
| 32.7.151.161 | mygeekside.com |
| 65.96.191.231 | nabble.com |
| 179.79.55.58 | nai.com |
| 50.74.0.34 | natsko.com |
| 69.151.27.23 | naturesimages.net |
| 102.52.66.25 | net-security.org |
| 148.35.186.176 | network.drweb.com |
| 87.30.132.84 | networkassociates.com |
| 39.107.158.73 | networkassociates.nai.com |
| 71.9.9.143 | networkworld.com |
| 185.247.130.226 | neunet.orgnews.bitdefender.com |
| 124.243.75.134 | new-beta.drweb.com |
| 76.63.33.123 | new-company.drweb.com |
| 109.221.141.194 | new-estore.drweb.com |
| 223.203.5.89 | new-forum.drweb.com |
| 93.199.206.253 | new-partners.drweb.com |
| 113.20.164.242 | new-solutions.drweb.com |
| 146.177.16.56 | new-support.drweb.com |
| 4.160.136.139 | new-www.drweb.com |
| 131.155.81.47 | new.taringa.net |
| 82.232.108.36 | news.drweb.com |
| 115.133.147.106 | newsletters.trendmicro.com |
| 229.116.11.189 | niueight.norman.no |
| 168.111.213.165 | niufive.norman.no |
| 120.188.239.154 | niufour.norman.no |
| 152.90.22.156 | niunine.norman.no |
| 250.56.127.35 | niuone.norman.no |
| 121.52.72.199 | niuseven.norman.no |
| 141.128.98.188 | niusix.norman.no |
| 174.30.138.3 | niuthree.norman.no |
| 32.12.70.86 | niutwo.norman.no |
| 158.8.15.62 | nl.bitdefender.com |
| 110.85.230.51 | noadware.net |
| 143.242.81.53 | nod32.co.uk |
| 1.157.201.204 | nod32.com |
| 196.220.146.112 | nod32.datsec.de |
| 147.41.105.101 | nod32.lu |
| 180.198.212.171 | nod32.ru |
| 38.113.76.254 | norman.com |
| 165.177.22.162 | norton.com |
| 185.253.48.151 | notifier.antivir-pe.de |
| 218.155.87.221 | novirusthanks.org |
| 75.69.208.116 | nprobeta.norman.com |
| 202.133.153.24 | nprotect.com |
| 154.209.179.13 | nprotect.net |
| 255.111.219.84 | nprotect.seoul.go.kr |
| 45.25.83.167 | nsclean.com |
| 239.89.28.75 | ntfaq.co.kr |
| 191.166.55.64 | obscgi.mcafee.com |
| 224.67.94.134 | oem.sunbeltsoftware.com |
| 82.238.26.13 | offensivecomputing.net |
| 5.29.143.177 | office.microsoft.com |
| 213.106.170.166 | oldtimer.geekstogo.com |
| 245.7.21.236 | one.tinypicbox.com |
| 103.178.141.63 | onecare.live.com |
| 230.242.87.227 | online-backup.comodo.com |
| 250.62.45.216 | online.jiangmin.com |
| 27.152.152.30 | online.rising.com.cn |
| 72.134.17.113 | onlinecheck.emsisoft.com |
| 11.130.218.89 | onlinecheck.emsisoft.de |
| 219.18.244.79 | onlinecheck.emsisoft.net |
| 252.108.28.81 | onlinecheck.emsisoft.org |
| 110.91.148.232 | onlinescan.avast.com |
| 48.86.93.140 | openantivirus.org |
| 0.231.120.129 | outpost.pl |
| 33.64.159.199 | ozzu.com |
| 147.47.23.26 | p3dev.taringa.net |
| 18.42.224.2 | pandalabs.pandasecurity.com |
| 38.119.251.247 | pandasecurity.com |
| 70.20.34.249 | pandasoftware.com |
| 116.3.154.144 | pandasoftware.es |
| 55.255.100.52 | pantip.com |
| 7.75.126.41 | pcav.cn |
| 40.233.233.111 | pccreg.antivirus.com |
| 137.199.82.178 | pccreg.trendmicro.com |
| 76.195.27.87 | pcentraide.com |
| 28.15.241.76 | pcguide.com |
| 61.173.93.146 | pchell.com |
| 175.156.213.41 | pcinternetpatrol.com |
| 46.151.158.205 | pcsupportadvisor.com |
| 65.228.117.194 | pctools.com |
| 98.129.224.8 | pda.drweb.com |
| 212.112.88.91 | pedidos.protegerse.com |
| 83.107.34.255 | personal.psu.edu |
| 35.184.60.244 | personalfirewall.comodo.com |
| 67.85.99.58 | pestpatrol.com |
| 181.68.219.141 | pg.hauri.net |
| 120.64.165.117 | phx.corporate-ir.net |
| 72.140.191.106 | pineleafboys.com |
| 105.42.230.108 | podcasts.sophos.com |
| 218.24.95.3 | pogonyuto.forospanish.com |
| 89.20.40.168 | precisesecurity.com |
| 109.96.66.157 | prevx.com |
| 142.254.106.227 | privacy.microsoft.com |
| 0.237.38.54 | products.drweb.com |
| 127.232.239.30 | promotions.drweb.com |
| 78.53.198.19 | psnw.com |
| 111.210.49.21 | pspl.com |
| 225.125.169.172 | pvtc.org |
| 164.188.115.80 | qqjkw.net |
| 100.249.57.53 | quickheal.co.in |
| 132.151.164.123 | quickheal.com |
| 246.65.29.206 | radius.turvamies.com |
| 117.129.230.114 | rads.mcafee.com |
| 137.205.0.103 | ravantivirus.com |
| 170.107.39.173 | raymond.cc |
| 27.21.160.69 | reg-int.nod32-es.com |
| 154.85.105.233 | reg.eset.es |
| 106.161.131.222 | reg.rising.com.cn |
| 207.63.171.36 | register.norman.com |
| 253.234.35.119 | removetrojanvirus.org |
| 192.41.236.27 | renewalcenter.symantec.com |
| 143.118.7.16 | renewals.bitdefender.com |
| 176.19.46.86 | research.microsoft.com |
| 34.190.234.237 | research.pandasecurity.com |
| 229.253.112.145 | research.sunbelt-software.com |
| 181.74.138.134 | resplendence.com |
| 213.232.245.204 | retail.sp.f-secure.com |
| 71.146.110.31 | retail01.sp.f-secure.com |
| 198.210.55.195 | retail02.sp.f-secure.com |
| 218.30.13.184 | ribbonwarehouse.com |
| 251.120.120.254 | rising-global.com |
| 25.86.225.66 | rising.com |
| 219.82.170.42 | rising.com.cn |
| 171.227.196.31 | rolandovera.com |
| 204.60.236.33 | rootkit.com |
| 62.43.100.184 | rootkit.nl |
| 1.38.45.92 | rover800.gaima.co.uk |
| 208.183.72.81 | roysephotos.com |
| 241.16.111.151 | ru.trendmicro.com |
| 99.255.231.234 | ruben.bzin.net |
| 226.250.177.210 | runscanner.net |
| 246.71.203.199 | safe.qq.com |
| 22.229.242.201 | safecomputing.umn.edu |
| 68.211.107.96 | safer-networking.org |
| 7.207.52.4 | safetynet.com |
| 215.27.78.249 | sales.bitdefender.com |
| 248.185.186.63 | samroeng.hi5.com |
| 106.167.50.147 | sandbox.norman.com |
| 44.163.251.55 | sandboxie.com |
| 252.240.209.44 | sapcupgrades.com |
| 29.141.61.114 | sarahmcconnellphotography.net |
| 143.124.181.9 | saverssite.com |
| 14.119.126.173 | scan.anti-trojan.net |
| 33.196.85.162 | scan.kingsoft.com |
| 66.97.192.232 | scan4you.net |
| 180.80.56.59 | scanner.novirusthanks.org |
| 51.75.2.223 | scanner.virus.org |
| 243.136.12.196 | scanner2.novirusthanks.or |
| 20.38.51.10 | schemas.microsoft.com |
| 133.20.172.93 | schemas.xmlsoap.org |
| 72.16.117.69 | sea.symantec.com |
| 24.92.143.58 | search.ca.com |
| 57.250.183.61 | search.mcafee.com |
| 171.232.47.212 | search.symantec.com |
| 41.228.248.120 | seasonsecurity.com |
| 61.49.18.109 | secdreg.org |
| 94.206.58.179 | secubox.aldria.com |
| 208.189.246.6 | secunia.com |
| 79.184.191.238 | secure-email.comodo.com |
| 30.5.150.227 | secure.av-desk.com |
| 63.162.1.229 | secure.nai.com |
| 177.77.121.124 | securecomputing.com |
| 116.141.67.32 | secureme.com |
| 68.217.25.21 | securitoo.com |
| 101.119.132.91 | security.symantec.com |
| 214.33.253.174 | securitycheck.symantec.com |
| 85.97.198.82 | securitynewsportal.com |
| 105.173.224.71 | securityrespons.symantec.com |
| 117.54.243.121 | securityresponse.symantec.com |
| 231.225.107.16 | securitywonks.net |
| 102.33.53.180 | secuser.com |
| 54.109.79.169 | secuser.model-fx.com |
| 155.11.118.239 | sergiwa.com |
| 200.181.239.66 | service.mcafee.com |
| 139.245.184.230 | service1.symantec.com |
| 91.65.210.220 | servicenews.symantec.com |
| 124.223.250.34 | sfdoccentral.symantec.com |
| 238.137.182.185 | shadow.grisoft.cz |
| 176.201.59.93 | shadu.baidu.com |
| 128.22.86.82 | shadu.duba.net |
| 161.179.193.152 | shield.prevx.com |
| 19.94.57.235 | shop.hauri.co.kr |
| 146.157.2.143 | shop.pandasecurity.com |
| 166.234.217.132 | shop.sunbeltsoftware.com |
| 198.67.68.202 | shop.symantec.com |
| 244.50.188.29 | shop.trendmicro.com |
| 183.46.134.5 | shudoo.com |
| 135.190.160.250 | simplysup.com |
| 168.24.199.252 | siren24.nprotect.com |
| 25.6.64.147 | siteadvisor.com |
| 220.2.9.55 | sitedirector.symantec.com |
| 156.130.19.29 | smallbiz.symantec.com |
| 189.220.59.99 | smbstore.trendmicro.com |
| 47.203.179.182 | smokey-services.eu |
| 173.198.124.158 | soccersuck.com |
| 193.19.151.147 | softfaq.com |
| 226.176.190.149 | softonic.com |
| 16.159.54.44 | software-files.download.com |
| 211.154.0.208 | solutions.drweb.com |
| 163.231.26.197 | sophos.com |
| 195.132.133.11 | sophos.fr |
| 53.115.253.94 | sophos1.ucd.ie |
| 248.111.199.2 | sophos10.ucd.ie |
| 200.187.157.247 | sophos2.ucd.ie |
| 233.89.8.61 | sophos5.ucd.ie |
| 90.71.129.212 | sophos6.ucd.ie |
| 217.67.74.121 | sophos7.ucd.ie |
| 237.143.32.110 | sophos8.ucd.ie |
| 14.45.140.180 | sophos9.ucd.ie |
| 128.28.4.7 | soporte.pandasecurity.com |
| 254.23.205.171 | sos.rising.com.cn |
| 206.100.232.160 | sosvirus.changelog.fr |
| 239.1.15.230 | spd.atdmt.com |
| 97.240.119.41 | specs.xmlsoap.org |
| 20.219.65.17 | speedtest.comodo.com |
| 228.40.91.6 | spftrl.digitalriver.com |
| 4.198.130.8 | spyany.com |
| 118.180.251.159 | spyblocker-software.com |
| 245.176.196.67 | spybot.info |
| 9.252.222.56 | spycheck.co.uk |
| 42.154.5.126 | spycheck.es |
| 155.136.194.209 | spychecker.com |
| 26.132.139.186 | spycop.com |
| 234.208.97.175 | spywaredb.com |
| 11.110.205.177 | spywaredlls.prevx.com |
| 125.25.69.72 | spywarefiles.prevx.com |
| 64.88.14.236 | spywareguide.com |
| 15.165.229.225 | spywareinfo.com |
| 48.66.80.39 | spywareterminator.com |
| 162.237.200.122 | square.bitdefender.com |
| 33.44.146.30 | static.yoreparo.com |
| 53.121.172.19 | stats.norton.com |
| 85.23.211.89 | stdio-labs.blogspot.com |
| 199.193.76.240 | stiller.com |
| 70.1.21.148 | store.bitdefender.com |
| 6.61.31.121 | store.de.bitdefender.com |
| 107.219.70.191 | store.drweb.com |
| 153.133.191.19 | store.trendmicro.com |
| 91.197.136.183 | subs.geekstogo.com |
| 43.18.162.172 | subwiz.trendmicro.com |
| 76.175.202.242 | sucop.com |
| 190.90.134.137 | sun.symantec.com |
| 129.153.11.45 | sunbelt-software.com |
| 80.230.38.34 | sunbeltsecurity.com |
| 113.131.145.104 | sunbeltsoftware.com |
| 227.46.9.187 | superboy2010.com.au |
| 98.109.211.95 | superdicas.com.br |
| 118.186.169.84 | superuser.co.kr |
| 150.20.20.154 | support.drweb.com |
| 196.2.141.237 | support.f-secure.com |
| 135.254.86.213 | support.kaspersky.co |
| 87.142.112.202 | support.mcafee.com |
| 120.232.151.204 | support.microsoft.com |
| 234.214.16.100 | support.pandasecurity.com |
| 172.210.217.8 | support.rising-global.com |
| 124.99.243.253 | sybari.com |
| 157.188.27.67 | sygate.com |
| 15.171.147.134 | symantec-ese.baynote.net |
| 126.150.76.110 | symantec.com |
| 145.227.103.99 | symantecliveupdate.com |
| 178.128.142.101 | symatec.com |
| 224.111.6.252 | sysinternals.com |
| 163.106.208.160 | system-cleaner.comodo.com |
| 115.183.234.149 | tallemu.com |
| 148.85.85.219 | taringa.net |
| 5.67.206.46 | tds.diamondcs.com.au |
| 200.63.151.210 | tech.pantip.com |
| 152.139.109.199 | techimo.com |
| 185.41.217.14 | techspot.com |
| 43.23.81.165 | techsupportforum.com |
| 169.19.26.73 | tecniservicioslys.com |
| 189.96.240.62 | tecno-soft.com |
| 222.253.92.132 | tempuri.org |
| 80.236.212.215 | thecomputerpitstop.com |
| 207.231.157.123 | thejokerx.blogspot.com |
| 158.52.184.112 | thetechguide.com |
| 191.209.223.182 | thinkpad.cn |
| 49.192.87.9 | threatexpert.com |
| 244.187.33.241 | threatinfo.trendmicro.com |
| 180.248.43.214 | timeforyourbusi.pandasecurity.com |
| 213.150.82.216 | timestamp.comodoca.com |
| 70.132.203.111 | timestamp.wosign.com |
| 197.128.148.19 | tinysoftware.com |
| 217.204.174.9 | tms.symantec.com |
| 250.106.214.79 | together.pctools.com |
| 108.88.146.162 | tool.ikaka.com |
| 234.84.91.138 | toonbox.de |
| 186.161.50.127 | tr.mcafee.com |
| 219.62.157.129 | trackingtheworld.com |
| 77.233.21.24 | training.drweb.com |
| 16.40.222.188 | training.trendmicro.com |
| 223.117.181.177 | trapware.com |
| 0.18.32.247 | trendmicro.com |
| 114.189.152.74 | trendmicro.com.cn |
| 241.253.98.238 | trendmicro.fr |
| 5.73.124.227 | trendsecure.com |
| 38.231.163.41 | trial.trendmicro.com |
| 151.145.28.192 | trucoswindows.es |
| 22.209.229.100 | trucoswindows.net |
| 230.29.255.90 | tw.mcafee.com |
| 75.187.39.160 | tw.sophos.com |
| 121.101.159.243 | tw.trendmicro.com |
| 59.165.104.151 | tweaksforgeeks.com |
| 11.242.131.140 | u0.eset.com |
| 44.143.170.194 | u1.eset.com |
| 142.42.86.89 | u10.eset.com |
| 81.105.220.253 | u100.eset.com |
| 33.182.246.242 | u11.eset.com |
| 65.83.97.56 | u12.eset.com |
| 179.254.217.139 | u13.eset.com |
| 50.62.163.47 | u14.eset.com |
| 70.138.121.36 | u15.eset.com |
| 103.228.228.106 | u16.eset.com |
| 148.210.93.189 | u17.eset.com |
| 87.206.38.165 | u18.eset.com |
| 39.94.64.155 | u19.eset.com |
| 72.184.104.157 | u2.eset.com |
| 186.167.224.52 | u20.eset.com |
| 124.162.169.216 | u21.eset.com |
| 76.51.196.205 | u22.eset.com |
| 109.140.235.19 | u23.eset.com |
| 223.123.99.102 | u24.eset.com |
| 94.118.45.78 | u25.eset.com |
| 114.195.71.67 | u26.eset.com |
| 146.96.110.69 | u27.eset.com |
| 192.79.230.220 | u28.eset.com |
| 131.75.176.128 | u29.eset.com |
| 83.151.202.117 | u3.eset.com |
| 116.53.53.187 | u30.eset.com |
| 229.35.174.14 | u31.eset.com |
| 168.31.119.178 | u32.eset.com |
| 120.107.77.168 | u33.eset.com |
| 153.9.185.238 | u34.eset.com |
| 11.248.49.133 | u35.eset.com |
| 137.243.250.41 | u36.eset.com |
| 157.64.209.30 | u36eset.com |
| 190.221.60.100 | u37.eset.com |
| 32.188.164.167 | u37eset.com |
| 159.183.110.75 | u38.eset.com |
| 111.4.136.64 | u39.eset.com |
| 143.162.175.134 | u4.eset.com |
| 1.144.39.217 | u40.eset.com |
| 196.140.241.193 | u41.eset.com |
| 148.216.11.182 | u42.eset.com |
| 181.118.50.184 | u43.eset.com |
| 38.100.171.79 | u44.eset.com |
| 165.96.116.244 | u45.eset.com |
| 185.172.142.233 | u46.eset.com |
| 218.74.182.47 | u47.eset.com |
| 76.57.114.130 | u48.eset.com |
| 203.52.59.106 | u49.eset.com |
| 154.129.18.95 | u5.eset.com |
| 187.30.125.97 | u50.eset.com |
| 45.201.245.248 | u51.eset.com |
| 240.8.191.156 | u52.eset.com |
| 192.85.149.145 | u53.eset.com |
| 224.243.0.215 | u54.eset.com |
| 82.157.120.42 | u55.eset.com |
| 209.221.66.206 | u56.eset.com |
| 229.41.92.195 | u57.eset.com |
| 6.199.131.9 | u58.eset.com |
| 104.97.236.145 | u59.eset.com |
| 230.161.181.53 | u6.eset.com |
| 182.237.207.42 | u60.eset.com |
| 27.139.247.112 | u61.eset.com |
| 73.54.111.195 | u62.eset.com |
| 12.117.56.103 | u63.eset.com |
| 219.194.83.92 | u64.eset.com |
| 252.95.122.162 | u65.eset.com |
| 110.10.54.57 | u66.eset.com |
| 49.73.188.221 | u67.eset.com |
| 1.150.214.210 | u68.eset.com |
| 33.52.65.24 | u69.eset.com |
| 147.222.186.107 | u7.eset.com |
| 18.30.131.15 | u70.eset.com |
| 38.106.89.4 | u71.eset.com |
| 71.196.196.74 | u72.eset.com |
| 117.178.61.158 | u73.eset.com |
| 55.174.6.134 | u74.eset.com |
| 7.62.32.123 | u75.eset.com |
| 40.152.72.125 | u76.eset.com |
| 154.135.192.20 | u77.eset.com |
| 93.130.137.184 | u78.eset.com |
| 44.19.164.173 | u79.eset.com |
| 77.108.203.243 | u8.eset.com |
| 191.91.67.70 | u80.eset.com |
| 62.86.13.46 | u81.eset.com |
| 82.163.39.35 | u82.eset.com |
| 114.65.78.37 | u83.eset.com |
| 160.47.199.188 | u84.eset.com |
| 99.43.144.96 | u85.eset.com |
| 51.119.170.85 | u86.eset.com |
| 84.21.21.155 | u87.eset.com |
| 198.3.142.239 | u88.eset.com |
| 136.255.87.147 | u89.eset.com |
| 88.75.45.136 | u9.eset.com |
| 105.217.137.190 | u90.eset.com |
| 219.200.1.85 | u91.eset.com |
| 90.195.202.249 | u92.eset.com |
| 109.16.161.238 | u93.eset.com |
| 142.173.12.52 | u94.eset.com |
| 0.156.132.135 | u95.eset.com |
| 127.151.78.43 | u96.eset.com |
| 79.228.104.32 | u97.eset.com |
| 111.130.143.102 | u98.eset.com |
| 225.112.8.185 | u99.eset.com |
| 164.108.209.161 | uk.mcafee.com |
| 116.184.235.150 | uk.trendmicro-europe.com |
| 149.86.19.153 | uk.trendmicro.com |
| 7.68.139.48 | ulove.tigolbittys.info |
| 133.64.84.212 | up.duba.net |
| 153.141.110.201 | up.rising.com.cn |
| 186.42.150.15 | up1.nod123.cn |
| 44.25.82.98 | upd.zonelabs.com |
| 171.20.27.74 | update.360safe.cn |
| 122.97.242.63 | update.360safe.com |
| 155.254.93.65 | update.aladdin.com |
| 13.169.213.216 | update.authentium.com |
| 208.232.159.124 | update.avg.com |
| 160.53.117.113 | update.avgfrance.com |
| 192.211.224.183 | update.bitdefender.com |
| 50.125.89.10 | update.drweb.com |
| 177.189.34.174 | update.ewido.com |
| 181.249.44.147 | update.grisoft.com |
| 214.151.84.218 | update.grisoft.cz |
| 72.65.204.113 | update.hispasec.com |
| 198.129.149.21 | update.ikaka.com |
| 150.206.176.10 | update.ikarus-software.at |
| 251.107.215.80 | update.quickheal.com |
| 41.22.79.163 | update.rising.com.cn |
| 236.85.24.71 | update.sophos.com |
| 187.162.51.60 | update.symantec.com |
| 220.63.90.130 | update.trendmicro.com |
| 78.234.22.25 | update7.jiangmin.com |
| 17.42.156.189 | updatem.360safe.cn |
| 225.118.182.178 | updatem.360safe.com |
| 2.20.33.248 | updates.a-2.org |
| 115.190.154.75 | updates.drweb.com |
| 242.254.99.239 | updates.f-prot.com |
| 6.74.57.228 | updates.sald.com |
| 39.164.165.43 | updates.symantec.com |
| 85.146.29.126 | updates3.kaspersky-labs.com |
| 23.142.230.102 | updates4.kaspersky-labs.com |
| 231.31.1.91 | updates5.kaspersky-labs.com |
| 8.120.40.93 | upgrade.bitdefender.com |
| 122.103.160.244 | upgrade1.bitdefender.com |
| 61.98.105.152 | upgrade2.bitdefender.com |
| 12.243.132.141 | upgrade3.bitdefender.com |
| 45.76.171.211 | upgrade4.bitdefender.com |
| 159.59.35.38 | upload.changelog.fr |
| 14.39.221.254 | us.bitdefender.com |
| 34.115.247.243 | us.mcafee.com |
| 67.17.30.245 | us.trendmicro.com |
| 112.255.151.140 | usa.kaspersky.com |
| 51.251.96.48 | usbcleaner.cn |
| 3.71.122.38 | ushousecall02.trendmicro.com |
| 36.229.230.108 | utilidades-utiles.com |
| 150.212.94.191 | v.dreamwiz.com |
| 88.207.39.99 | v4.windowsupdate.microsoft.com |
| 40.28.254.88 | v5.windowsupdate.microsoft.com |
| 73.185.105.158 | vet.com.au |
| 187.168.225.53 | vicentevirtual.com |
| 58.163.170.217 | viguard.com |
| 78.240.129.206 | vil.nai.com |
| 110.141.236.20 | vil.nail.com |
| 224.124.100.103 | virobot.co.kr |
| 95.120.46.11 | virscan.org |
| 47.196.72.0 | virus.org |
| 80.98.111.70 | virusbuster.hu |
| 193.80.232.153 | viruschief.com |
| 132.76.177.129 | virusdoctor.jp |
| 84.152.203.119 | virusfreezone.info |
| 117.54.243.121 | virusinfo.prevx.com |
| 231.37.107.16 | viruslist.com |
| 101.32.52.180 | viruslist.ru |
| 121.109.79.169 | virusscan.jotti.org |
| 138.250.102.223 | virusscanonline.net |
| 252.233.34.50 | virusspy.com |
| 123.228.236.26 | virustotal.com |
| 75.49.194.15 | visualizesoftware.com |
| 107.206.45.17 | visualtracking.symantec.com |
| 221.121.165.168 | vivo-austin.com |
| 160.185.111.76 | vms.drweb.com |
| 112.5.69.65 | vncsvr.com |
| 145.163.176.135 | vos.symantec.com |
| 2.77.41.218 | vrv.com.cn |
| 129.141.242.127 | vsantivirus.com |
| 149.217.12.116 | webadmin.norman.no |
| 182.119.52.186 | webphand.com |
| 40.34.172.81 | webroot.com |
| 167.97.117.245 | wedoantivirus.com |
| 118.174.144.234 | welkam.co.jp |
| 219.75.183.48 | wexperts-exchange.com |
| 9.246.47.131 | whatthetech.com |
| 204.53.249.39 | wikio.es |
| 156.130.19.28 | wilderssecurity.com |
| 188.31.58.98 | wilderssecurity.net |
| 46.202.246.249 | wildlist.com |
| 241.10.124.157 | windowsupdate.microsoft.com |
| 193.86.150.146 | winpatrol.com |
| 226.244.1.216 | wmcafee.com |
| 83.158.122.43 | woottonfootball.com |
| 210.222.67.208 | wtc.trendmicro.com |
| 214.26.9.181 | ww.emsisoft.com |
| 247.116.117.251 | www.1stavenuelimousines.co.uk |
| 37.99.237.78 | www.2xlgames.com |
| 232.94.182.54 | www.ahnlab.com |
| 183.239.209.43 | www.aks.com |
| 216.72.248.45 | www.aladdin.com |
| 74.55.112.196 | www.anti-trojan-software.net |
| 13.50.58.104 | www.anti-trojan.net |
| 221.195.84.93 | www.anti-virus.by |
| 253.29.123.163 | www.antivir.es |
| 111.11.244.246 | www.antivirus-tools.com |
| 238.7.189.222 | www.antiy.net |
| 2.83.215.211 | www.apsecure.com |
| 35.241.254.213 | www.arpia.be |
| 80.223.119.109 | www.authentium.com |
| 19.219.64.17 | www.authentium.com.au |
| 227.39.90.6 | www.av-desk.com |
| 4.197.198.76 | www.avast.com |
| 118.180.62.159 | www.avg.com |
| 57.175.7.67 | www.avhide.com |
| 8.252.222.56 | www.avoncourt.com |
| 41.153.73.126 | www.avx.ro |
| 155.136.193.21 | www.barder.com |
| 26.131.139.185 | www.beautybar.com |
| 46.208.97.174 | www.bg.virusblokada.com |
| 78.110.204.244 | www.bit-defender.de |
| 192.92.69.71 | www.bitdefende.de |
| 63.88.14.235 | www.bitdefender-es.com |
| 15.164.40.224 | www.bitdefender.be |
| 48.66.79.38 | www.bitdefender.cl |
| 161.48.200.122 | www.bitdefender.co.uk |
| 100.44.145.98 | www.bitdefender.com |
| 52.120.171.71 | www.bitdefender.com.au |
| 69.6.195.73 | www.bitdefender.com.sg |
| 183.245.59.224 | www.bitdefender.com.tw |
| 54.240.4.132 | www.bitdefender.com.vn |
| 73.61.31.121 | www.bitdefender.de |
| 106.218.70.191 | www.bitdefender.es |
| 220.201.2.18 | www.bitdefender.fr |
| 91.196.204.250 | www.bitdefender.hk |
| 43.17.162.239 | www.bitdefender.us |
| 75.175.13.241 | www.bitdefenderme.com |
| 189.89.134.136 | www.briarhurst.com |
| 128.153.79.44 | www.brightoctober.com |
| 80.229.37.33 | www.buraka.tv |
| 113.131.145.103 | www.buscafacil.com |
| 227.45.9.187 | www.buscalo.in |
| 97.109.210.95 | www.busco.in |
| 117.186.236.84 | www.ca.com |
| 150.87.20.154 | www.cambridge-steiner-school.co.uk |
| 8.2.140.49 | www.ccssforum.org |
| 135.65.85.213 | www.celticmerchant.com |
| 86.142.112.202 | www.clamav.net |
| 187.43.151.16 | www.collectedcurios.com |
| 233.214.15.99 | www.comodo.com |
| 172.21.217.7 | www.comodo.tv |
| 124.98.243.252 | www.comodoantispam.com |
| 156.0.26.66 | www.comodopartners.com |
| 14.170.215.217 | www.computing.net |
| 209.234.92.125 | www.configurarequipos.com |
| 161.54.118.114 | www.contentverification.com |
| 194.212.226.184 | www.deborahshelton.net |
| 52.126.90.12 | www.dr-bull.com |
| 178.190.35.176 | www.drweb.com |
| 198.11.249.165 | www.ealaddin.com |
| 231.100.101.235 | www.elvis-express.com |
| 21.83.205.46 | www.emeraldclassic.co.uk |
| 200.62.150.22 | www.emsisoft.at |
| 151.207.177.11 | www.emsisoft.com |
| 184.40.216.13 | www.emsisoft.de |
| 42.23.80.164 | www.emsisoft.es |
| 237.19.26.72 | www.emsisoft.fr |
| 189.163.52.61 | www.emsisoft.it |
| 222.253.91.131 | www.emsisoft.jp |
| 79.235.212.214 | www.emsisoft.net |
| 206.231.157.190 | www.emsisoft.nl |
| 226.51.183.179 | www.emsisoft.org |
| 3.209.223.182 | www.engyro.com |
| 49.191.87.77 | www.entercept.com |
| 243.187.32.241 | www.esafe.com |
| 195.8.58.230 | www.eset.es |
| 228.165.166.44 | www.eugrantsadvisor.com |
| 86.148.30.127 | www.eugrantsadvisor.de |
| 25.143.231.35 | www.eugrantsadvisor.ie |
| 232.220.190.24 | www.eugrantsadvisor.se |
| 9.121.41.94 | www.exchangeyourcareer.com |
| 123.104.161.245 | www.f-prot.com |
| 250.100.107.153 | www.f-secure.com |
| 14.176.65.142 | www.fimasys.com |
| 47.78.172.212 | www.flairweddings.co.uk |
| 160.60.37.39 | www.forospyware.com |
| 31.56.238.203 | www.fortifed.com |
| 239.132.8.192 | www.fortiid.com |
| 16.34.48.7 | www.fortimail.com |
| 130.16.168.90 | www.fortinet-apac.com |
| 51.251.96.48 | www.fortinet.ch |
| 3.71.122.37 | www.fortinet.co.il |
| 36.229.161.39 | www.fortinet.com |
| 149.211.26.190 | www.fortinet.net |
| 20.207.227.98 | www.fortinet.nl |
| 40.27.253.88 | www.fortinet.sg |
| 73.185.37.158 | www.fortinetuk.com |
| 187.167.225.241 | www.freeality.com |
| 57.163.170.217 | www.freedrweb.ru |
| 9.240.129.206 | www.freerav.com |
| 42.141.236.208 | www.frisk-software.com |
| 156.56.100.103 | www.frisk.is |
| 95.119.45.11 | www.fsecure.com |
| 47.196.4.0 | www.garryowen.com |
| 79.97.111.70 | www.gdata.es |
| 193.12.231.153 | www.globalhauri.com |
| 64.76.177.61 | www.gokidding.com |
| 84.152.203.50 | www.grisoft.com |
| 117.54.242.120 | www.hackshields.com |
| 230.224.107.15 | www.hacksoft.com.pe |
| 101.32.52.179 | www.hacksoft.pe |
| 53.108.78.169 | www.handwritingforkids.com |
| 154.10.118.239 | www.hasp.se |
| 200.180.238.66 | www.hauri.co.kr |
| 138.244.183.230 | www.hauri.net |
| 90.65.210.219 | www.hxproduction.com |
| 123.222.249.33 | www.ibusca.me |
| 221.121.165.168 | www.ikarus.at |
| 160.184.43.76 | www.imddomains.co.uk |
| 112.5.69.65 | www.indielisboa.com |
| 144.162.176.135 | www.inicioid.com |
| 2.77.40.218 | www.iniciorapido.info |
| 129.141.242.126 | www.internationalservicecheck.com |
| 149.217.200.115 | www.irangoals.com |
| 182.51.51.185 | www.iseclab.org |
| 227.33.172.12 | www.ixomodels.com |
| 166.29.117.245 | www.jiangmin.com |
| 118.173.143.234 | www.jiangmin.com.cn |
| 151.7.183.236 | www.jotti.org |
| 9.246.47.131 | www.kaspersky.com |
| 203.241.248.39 | www.kioskea.net |
| 155.130.19.28 | www.latin-mass-society.org |
| 188.219.58.98 | www.livepcsupport.com |
| 46.202.178.181 | www.malwarecity.com |
| 173.197.124.157 | www.malwarecity.fr |
| 193.18.150.146 | www.mamutu.com |
| 225.175.189.148 | www.mamutu.de |
| 15.158.53.43 | www.manchester-offices.co.uk |
| 210.154.255.207 | www.mcafee.at |
| 162.230.25.196 | www.mcafee.com |
| 195.132.132.10 | www.metascan-online.com |
| 52.114.253.93 | www.microsoft.com |
| 231.94.182.242 | www.midescargas.com |
| 183.170.140.231 | www.mountainlakeslodge.com |
| 216.72.248.45 | www.mtr-design.com |
| 74.55.112.196 | www.mygeekside.com |
| 201.50.57.104 | www.netegrity.com |
| 220.127.16.93 | www.norman.com |
| 253.28.123.163 | www.nottinghampoetryseries.com |
| 111.11.243.246 | www.novirusthanks.org |
| 238.6.189.154 | www.npin.co.kr |
| 190.83.215.143 | www.nprotect.co.kr |
| 222.241.254.213 | www.nprotect.com |
| 80.223.119.40 | www.nprotect.com.br |
| 19.219.64.16 | www.nsclean.com |
| 227.39.90.5 | www.owen.org |
| 4.197.129.7 | www.pandasecurity.com |
| 117.179.250.158 | www.pctools.com |
| 244.175.195.67 | www.peterhearnwaste.co.uk |
| 8.251.221.56 | www.phoenixtrikeworks.com |
| 41.153.5.126 | www.prdouglas.co.uk |
| 155.136.193.209 | www.prevx.com |
| 26.131.138.185 | www.prevx1.com |
| 233.208.97.174 | www.professorbeyer.com |
| 10.109.204.176 | www.quickheal.com |
| 124.24.68.71 | www.removetrojanvirus.org |
| 47.71.254.219 | www.renningers.com |
| 255.148.212.208 | www.residentphotography.com |
| 31.50.63.22 | www.retento.com |
| 145.220.184.105 | www.reviewsofbooks.com |
| 16.28.129.13 | www.rising-global.com |
| 36.104.155.2 | www.risingav.com.au |
| 69.6.194.72 | www.safenet-inc.com |
| 183.176.59.224 | www.scan4you.net |
| 53.240.4.132 | www.seasonsecurity.com |
| 5.61.30.121 | www.secondchanceboxer.com |
| 106.218.70.191 | www.secure-elements.com |
| 152.133.190.18 | www.sheffieldmind.co.uk |
| 91.196.135.182 | www.smf.org |
| 42.17.162.171 | www.softfaq.com |
| 75.174.201.241 | www.sophos.com |
| 189.89.133.136 | www.spycheck.co.uk |
| 128.152.11.44 | www.spycheck.es |
| 80.229.37.33 | www.stadiumpage.com |
| 112.131.144.103 | www.sunbeltsoftware.com |
| 226.45.9.186 | www.symantec.com |
| 97.109.210.94 | www.sysinternals.com |
| 117.185.168.83 | www.tecniservicioslys.com |
| 150.19.19.153 | www.testmypcsecurity.com |
| 180.241.124.221 | www.threatexpert.com |
| 118.237.69.197 | www.tomorrowsedge.net |
| 70.126.95.186 | www.trendmicro.com |
| 103.215.135.188 | www.trojaner.info |
| 217.198.255.83 | www.trustix.com |
| 156.193.200.247 | www.trustlogo.com |
| 107.82.227.236 | www.vba.com.by |
| 140.171.10.50 | www.virscan.org |
| 254.154.130.133 | www.virus.fi |
| 125.149.76.109 | www.virus.org |
| 145.226.102.98 | www.virusbuster.hu |
| 178.128.141.100 | www.viruschief.com |
| 223.110.6.251 | www.virusfreezone.info |
| 162.106.207.159 | www.virustotal.com |
| 114.182.233.148 | www.wellgousa.com |
| 147.84.85.219 | www.whichssl.com |
| 5.66.205.46 | www.willsee.com |
| 199.62.150.210 | www.xmlsoap.org |
| 151.139.108.199 | www.zarya.info |
| 184.40.216.13 | www1.my-etrust.com |
| 42.23.80.164 | www3.ca.com |
| 169.18.25.72 | www3.safenet-inc.com |
| 188.95.240.61 | www4.symantec.com |
| 221.252.91.131 | wwws.clamav.net |
| 63.219.195.198 | x-cleaner.com |
| 190.215.141.106 | x.360safe.com |
| 142.35.167.95 | yoreparo.com |
| 175.193.206.165 | z-oleg.com |
| 32.175.71.248 | zeustracker.abuse.ch |
| 227.171.16.224 | zeylstra.nl |
| 179.247.42.214 | zhidao.baidu.com |
| 212.149.82.216 | zhidao.ikaka.com |
| 70.131.202.111 | ziggamza.net |
| 196.127.147.19 | zonavirus.com |
| 216.204.174.8 | zonealarm.com |
| 249.105.213.78 | zonelabs.com |
| 107.88.145.161 | zonelabs.fr |
| 234.83.90.137 | zonelog.co.uk |
| 185.160.49.126 | zs.kingsoft.com |
| 218.61.156.128 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 12644 | 12800 | 3.76874 | 55d274f88e5ab59aa27a86516437f7d8 |
| .data | 20480 | 64 | 512 | 0.164757 | 75fe664fdcd708925b7ca712ee127c19 |
| .rdata | 24576 | 1328 | 1536 | 3.03097 | 2707a7526abdc69c43f37dd3b6665e30 |
| .bss | 28672 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .idata | 32768 | 800 | 1024 | 2.18489 | 4e803ebabfbd6fe3233c57c1b6e762a8 |
| .rsrc | 36864 | 87232 | 87552 | 5.54166 | 34b5a2a0306aa053bf792aa7f84ba6c7 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a
Network Activity
URLs
| URL | IP |
|---|---|
| hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab | 8.253.83.14 |
| hxxp://www.googleadservices.com/pagead/aclk?sa=L&ai=C6BI79o-aV_WaKvLDyAOEs77YCN_1npNF6rGfu8oCwI23ARACIIHv8BcoBmClnqSGmCOgAZSqxKQDyAEBqQIqHi_k_6RlPqgDAaoEaE_QS_nyNYr4hTk5i6j5qy7lA2rHrMraUxWmRamSF16A7T-l6g3YUwF0HIFbHTjq-gcWfG7zuhhv1uv7xkfnT3FaeyZI1AgkXGdTWB3hSOEKEULM-EWG31ZiqTRdhS_vHJrdOZZYOaoCgAfU1btbqAemvhvYBwHYEww&num=2&client=ca-dp-demandmedia_test_js&val=ChAyMjI3NjkxOTZkMDkwMDRkEIGg6rwFGggxeX2KaRfVAiABKAE&sig=AOD64_3EJddS5GODohBfSL-7DXjDT2U5mw&adurl=https://browser.yandex.ua/ru/desktop/turbo/?net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725&utm_source=google&utm_medium=gdn&utm_campaign=Text_gdn&utm_term=&utm_content=buscaid.com | 173.194.113.217 |
| hxxp://widgets.amung.us/small/00/2.png | 173.192.200.70 |
| hxxp://widgets.amung.us/small/00/7.png | 173.192.200.70 |
| hxxp://whos.amung.us/swidget/243dr2pd8x85 | 67.202.94.86 |
| hxxp://whos.amung.us/swidget/26n2qf7pnk0x | 67.202.94.86 |
| hxxp://www.google.com/images/cleardot.gif | 173.194.113.210 |
| hxxp://repository.certum.pl/ca.cer | 213.222.201.214 |
| hxxp://pass.yandex.ua/?retpath=http://browser.yandex.ua/desktop/turbo/?lang=ru&intl=1&net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725&utm_source=google&utm_medium=gdn&utm_campaign=Text_gdn&utm_term=&utm_content=buscaid.com&gclid=CLXb4_6il84CFcbUcgodOKcMhQ | 213.180.204.51 |
| hxxp://googleads.g.doubleclick.net/aclk?sa=l&ai=C6BI79o-aV_WaKvLDyAOEs77YCN_1npNF6rGfu8oCwI23ARACIIHv8BcoBmClnqSGmCOgAZSqxKQDyAEBqQIqHi_k_6RlPqgDAaoEaE_QS_nyNYr4hTk5i6j5qy7lA2rHrMraUxWmRamSF16A7T-l6g3YUwF0HIFbHTjq-gcWfG7zuhhv1uv7xkfnT3FaeyZI1AgkXGdTWB3hSOEKEULM-EWG31ZiqTRdhS_vHJrdOZZYOaoCgAfU1btbqAemvhvYBwHYEww&num=2&sig=AOD64_1TeF4pzrytmr5FMsmWIoYEXlE6nA&adurl=https://browser.yandex.ua/ru/desktop/turbo/?net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725&utm_source=google&utm_medium=gdn&utm_campaign=Text_gdn&utm_term=&utm_content=buscaid.com&client=ca-dp-demandmedia_test_js | 173.194.113.218 |
| hxxp://www.buscaid.com/?adf | 8.5.1.51 |
| hxxp://08p60eo4hzuuw7vm4dvhsab1nwu0yx.ipcheker.com/ | 75.126.104.226 |
| hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt | 8.253.83.14 |
| hxxp://dp.g.doubleclick.net/apps/domainpark/domainpark.cgi?client=ca-dp-demandmedia_test_js&channel=mobile&domain_name=buscaid.com&output=html&drid=as-drid-oo-1750951074443211 | 173.194.113.218 |
| browser.yandex.ua | 213.180.204.206 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):