Trojan.Win32.Fsysna.dqlc (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: c5391ccc75569b96ca06955b9875659b
SHA1: 0c9cbce05aa0969b06622fcce61b539d96efb2f8
SHA256: fe0ab4c681bc949787a17cae6561abdc309f4da9dbeaa8a89bbd1882863223d6
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 4501680 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: BoostSoftware Inc.
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61715 bytes in size. The following strings are added to the hosts file listed below:
173.224.216.53 | viabcp.com |
173.224.216.53 | www.viabcp.com |
173.224.216.53 | ww2.viabcp.com |
173.224.216.53 | bcpzonasegura.viabcp.com |
173.224.216.53 | hotmail.com |
173.224.216.53 | www.hotmail.com |
248.60.111.27 | 13iii.com |
25.218.151.29 | 15660808.co.kr |
139.201.15.180 | 2-spyware.com |
9.196.216.88 | 247fixes.com |
29.17.243.77 | 360.cn |
62.174.26.147 | 360.com |
176.157.214.230 | 360safe.cn |
47.152.160.206 | 360safe.com |
255.229.118.195 | 45pounds.com |
31.130.225.197 | 51nb.com |
145.45.89.92 | 9down.com |
84.109.35.0 | a-2.org |
36.185.249.245 | a188.x.akamai.net |
69.87.100.59 | abuse.ch |
182.1.221.142 | acs.pandasoftware.com |
53.65.166.51 | ad-aware-se.uptodown.com |
73.141.192.40 | ad.fastclick.net |
106.43.232.110 | ads.fastclick.net |
220.214.96.5 | agfirewall.ru |
90.21.41.169 | agnitum.com |
42.98.68.158 | agnitum.de |
143.255.107.228 | agnitum.fr |
189.170.227.55 | agnitum.ru |
128.233.173.219 | ahn.com.cn |
80.54.199.208 | ahnlab.com |
112.211.238.22 | akamai.net |
226.126.170.173 | aknow.prevx.com |
165.190.48.81 | aladdin.com |
117.10.74.70 | alert.rising.com.cn |
150.168.181.140 | alerta-antivirus.inteco.es |
7.82.46.223 | alerta-antivirus.red.es |
134.146.247.132 | alladdin.ru |
154.222.205.121 | aluriasoftware.com |
187.56.57.191 | analysis.seclab.tuwien.ac.at |
233.39.177.18 | andymanchesta.com |
171.34.122.250 | anti-virus-software-review.com |
123.179.149.239 | anti-virus.by |
156.12.188.241 | anti-virus.com |
14.251.52.136 | antirootkit.com |
209.246.254.44 | antispam.sunbeltsoftware.com |
161.135.24.33 | antispy.ru |
193.224.63.103 | antispyware.sunbeltsoftware.com |
51.207.183.186 | antivir.es |
178.203.129.162 | antiviraldp.com |
198.23.155.151 | antivirus-online.de |
231.181.194.153 | antivirus-tools.com |
20.163.59.48 | antivirus.about.com |
215.159.4.213 | antivirus.cai.com |
167.235.30.202 | antivirus.comodo.com |
200.137.138.16 | antivirus.hispavista.com |
58.120.2.99 | antivirus.sunbeltsoftware.com |
252.115.203.7 | antiy.net |
204.192.162.252 | anubis.iseclab.org |
237.93.13.66 | apac.trendmicro.com |
95.76.133.217 | ar.answers.yahoo.com |
222.71.79.125 | ar.atwola.com |
242.148.37.114 | arcabit.com |
18.49.144.184 | arcabit.pl |
132.32.8.11 | archive.bitdefender.com |
3.28.210.175 | arswp.com |
211.104.236.164 | arwww.fortinet.cz |
244.6.19.234 | asap.authentium.com |
101.244.140.61 | ashampoo.com |
40.240.85.38 | atazita.blogspot.com |
248.60.111.27 | atdmt.com |
25.218.151.29 | attechnical.com |
139.201.15.180 | atwola.com |
9.196.216.88 | au.mcafee.com |
29.17.243.77 | auditmypc.com |
62.174.26.147 | authentium.com |
176.157.214.230 | auwww.ealaddin.nl |
47.152.160.206 | avast-home.uptodown.com |
255.229.118.195 | avast.com |
31.130.225.197 | avast.ru |
145.45.89.92 | avg-antivirus.net |
84.109.35.0 | avg.com |
36.185.249.245 | avg.vo.llnwd.net |
69.87.100.59 | avgate.net |
182.1.221.142 | avgfrance.com |
53.65.166.51 | avhide.com |
73.141.192.40 | avira.com |
106.43.232.110 | avp.ch |
220.214.96.5 | avp.com |
90.21.41.169 | avp.ru |
42.98.68.158 | avpclub.ddns.info |
143.255.107.228 | avu.zonelabs.com |
189.170.227.55 | avx.rob-have.net |
128.233.173.219 | awaps.net |
80.54.199.208 | b-have.orgbitdefender-ar.com |
112.211.238.22 | babooforum.com.br |
226.126.170.173 | backup.comodo.com |
165.190.48.81 | baike.360.cn |
117.10.74.70 | baike.360.com |
150.168.181.140 | bakunos.com |
7.82.46.223 | banner.fastclick.net |
134.146.247.132 | banners.fastclick.net |
154.222.205.121 | baristamagazine.com |
187.56.57.191 | basetendencies.com |
233.39.177.18 | bbs.360.cn |
156.18.106.234 | bbs.360safe.cn |
107.163.133.223 | bbs.360safe.com |
140.252.172.225 | bbs.cfan.com.cn |
254.235.36.120 | bbs.cpcw.com |
193.230.238.28 | bbs.dswlab.com |
145.119.8.17 | bbs.duba.net |
177.209.47.87 | bbs.ikaka.com |
35.191.168.170 | bbs.janmeng.com |
162.187.113.146 | bbs.kafan.cn |
182.7.139.135 | bbs.kafan.com |
215.165.178.137 | bbs.kaspersky.com.cn |
4.147.43.32 | bbs.kpfans.com |
199.143.244.197 | bbs.mcafeefans.com |
151.219.14.186 | bbs.s-sos.net |
184.121.122.0 | bbs.sucop.com |
42.104.242.83 | bbs.taisha.org |
237.99.187.247 | bbs.trendmicro.com.cn |
188.176.146.236 | bbs.winzheng.com |
221.77.253.50 | bestofewan.com |
79.60.117.201 | beta.anti-virus.by |
206.55.63.109 | bg.virusblokada.com |
226.132.21.98 | bhsbees.com |
2.34.128.168 | bitcity.info |
116.16.249.251 | bitcity.org |
243.12.194.159 | bitdefender.co.uk |
195.88.220.148 | bitdefender.com |
228.246.3.218 | bitdefender.com.ua |
85.228.124.45 | bitdefender.es |
24.224.69.22 | bitdefender.org |
232.44.95.11 | bitdefender.secyber.net |
9.202.135.13 | bitdefenderchina.com |
123.185.255.164 | bitdefenderguatemala.com |
250.180.200.72 | bitdefendermalaysia.com |
13.1.227.61 | bitdefendertaiwan.com |
46.158.10.131 | bitdefenderuruguay.com |
160.141.198.214 | bitdefenderusa.com |
31.136.144.190 | biz.nprotect.com |
239.213.102.179 | bkav.com.vn |
15.115.209.181 | blackice.iss.net |
129.29.74.76 | bleedingthreats.net |
68.93.19.240 | bleepingcomputer.com |
20.169.233.229 | blitzblank.com |
53.71.84.43 | blog.hispasec.com |
166.241.205.126 | blog.threatfire.com |
37.49.150.35 | blog.titanium-jewelry.com |
57.125.176.24 | blog.trendmicro.com |
90.27.216.94 | blogs.icerocket.com |
204.198.80.245 | blogs.protegerse.com |
75.5.25.153 | blogschapines.com |
26.82.52.126 | boardreader.com |
111.223.75.196 | bobbondart.com |
157.138.195.23 | br.mcafee.com |
96.201.141.187 | br.trendmicro.com |
48.22.167.176 | brazil.kaspersky.com |
80.180.206.246 | buddy.bitdefender.com |
194.94.139.141 | bugs.clamav.net |
133.158.16.49 | buscafacil.com |
85.234.42.38 | buscalo.in |
118.136.149.108 | busco.in |
232.50.14.192 | buy.bitdefender-es.com |
102.114.215.100 | buy.bitdefender.com |
122.191.173.89 | buy.bitdefender.de |
155.24.25.159 | buy.drweb.com |
201.7.145.242 | buy.rising.com.cn |
140.2.90.218 | ca.com |
91.147.117.207 | cacomvip.ca.com |
124.236.156.209 | cai.com |
238.219.20.104 | canada.karuna-shechen.org |
177.214.222.12 | castlecops.com |
129.103.248.1 | castlecrops.com |
161.193.31.71 | ccslaughterspdx.com |
19.175.152.154 | cddchiangmai.net |
146.171.97.130 | cdn.atwola.com |
166.247.123.119 | center.rising.com.cn |
199.149.162.121 | centralcommand.com |
245.131.27.17 | cert.org |
183.127.228.181 | cfan.com.cn |
135.204.254.170 | cgi.clamav.net |
168.105.106.240 | changedetection.com |
26.88.226.67 | changelog.fr |
221.83.171.231 | channelpartner.trendmicro.com |
172.160.130.220 | chickensroamfree.com |
205.61.237.34 | chkrootkit.org |
63.44.101.185 | chollian.nprotect.co.kr |
190.39.47.93 | cisrt.org |
210.116.5.82 | cit.kookmin.ac.kr |
242.18.112.152 | clamav.net |
100.0.233.235 | clamwin.com |
227.252.178.143 | click.atdmt.com |
179.72.204.132 | clicks.atdmt.com |
212.230.243.202 | cloudprotection.pandasecurity.com |
70.212.108.30 | clubic.com |
8.208.53.6 | cmmings.cn |
216.29.79.251 | cn.mcafee.com |
249.186.119.253 | cn.sophos.com |
107.169.239.148 | cn.trendmicro.com |
234.164.184.56 | codehard.wordpress.com |
253.241.211.45 | cohartuk.com |
30.142.250.115 | commentcamarche.net |
144.125.182.198 | community.thaiware.com |
15.120.128.174 | comodo.com |
223.197.86.163 | company.drweb.com |
255.99.193.165 | company.hauri.co.kr |
113.13.58.60 | company.hauri.net |
52.77.3.208 | computing.net |
244.137.201.197 | comunidad.wilkinsonpc.com.co |
21.39.53.12 | configurarequipos.com |
135.209.173.95 | coresecurity.com |
5.17.118.3 | cou85.com |
25.94.144.248 | cowsmo.com |
58.251.184.62 | cpsecure.com |
172.166.48.213 | csc.rising.com.cn |
43.229.249.121 | cureit.ru |
250.50.20.110 | customer.symantec.com |
95.207.59.180 | customers.drweb.com |
141.122.179.7 | cutlines.org |
80.185.125.171 | cwsandbox.org |
32.6.151.160 | cybercrime.pandasecurity.com |
65.164.190.230 | cyberdefender.com |
178.78.123.125 | cybertechhelp.com |
117.142.0.33 | daboweb.com |
69.218.26.22 | daniloff.net |
102.120.134.93 | daniweb.com |
216.34.254.176 | darkclockers.com |
86.98.199.84 | dazhizhu.cn |
106.175.157.73 | de.bitdefender.com |
139.8.9.143 | de.mcafee.com |
185.247.129.226 | de.trendmicro.com |
124.242.74.202 | deckard.geekstogo.com |
75.131.101.191 | deerfield.com |
108.220.140.193 | defalcos.com |
222.203.4.88 | definitions.symantec.com |
161.198.206.252 | dell.symantec.com |
113.87.232.241 | demos.eset.es |
146.177.15.55 | descargas.eset.es |
3.159.136.138 | dev.depeuter.org |
130.155.81.114 | developmentdrums.org |
150.231.107.103 | dialognauka.ru |
183.133.147.106 | diamondcs.com.au |
229.115.11.1 | dicasweb.com.br |
151.95.196.149 | discussions.virtualdr.com |
103.172.223.138 | disk-encryption.comodo.com |
136.73.74.208 | dl.360safe.com |
250.56.194.35 | dl1.antivir-pe.com |
189.51.139.199 | dl1.antivir-pe.de |
140.128.98.188 | dl1.antivir.de |
173.29.205.2 | dl1.avgate.net |
31.12.69.153 | dl10.freeav.net |
158.8.15.61 | dl2.antivir-pe.com |
178.84.229.50 | dl2.antivir-pe.de |
211.242.80.120 | dl2.antivir.de |
68.224.201.203 | dl2.avgate.net |
195.220.146.111 | dl3.antivir-pe.de |
147.40.172.101 | dl3.antivir.de |
180.198.212.171 | dl3.avgate.net |
38.180.76.254 | dl4.antivir-pe.com |
232.176.21.230 | dl4.antivir-pe.de |
184.253.48.219 | dl4.antivir.de |
217.154.87.221 | dl4.avgate.net |
75.137.207.116 | dl5.avgate.net |
202.132.152.24 | dl6.avgate.net |
221.209.179.13 | dl7.avgate.net |
254.110.218.83 | dl8.avgate.net |
112.93.150.166 | dl8.freeav.net |
239.89.96.142 | dl9.avgate.net |
191.165.54.131 | dl9.freeav.net |
224.67.161.133 | dnl-cd1.kaspersky-labs.com |
81.237.26.28 | dnl-cd10.kaspersky-labs.com |
20.45.227.192 | dnl-cd11.kaspersky-labs.com |
228.121.185.182 | dnl-cd12.kaspersky-labs.com |
5.23.37.252 | dnl-cd13.kaspersky-labs.com |
119.193.157.63 | dnl-cd2.kaspersky-labs.com |
229.241.86.227 | dnl-cd3.kaspersky-labs.com |
249.62.113.216 | dnl-cd4.kaspersky-labs.com |
26.219.152.30 | dnl-cd5.kaspersky-labs.com |
140.134.16.181 | dnl-cd6.kaspersky-labs.com |
11.197.218.89 | dnl-cd7.kaspersky-labs.com |
219.18.244.78 | dnl-cd8.kaspersky-labs.com |
63.175.27.148 | dnl-cd9.kaspersky-labs.com |
109.90.147.231 | dnl-cn1.kaspersky-labs.com |
48.154.93.139 | dnl-cn10.kaspersky-labs.com |
0.230.119.128 | dnl-cn11.kaspersky-labs.com |
33.132.158.198 | dnl-cn12.kaspersky-labs.com |
146.46.91.93 | dnl-cn13.kaspersky-labs.com |
85.110.224.1 | dnl-cn14.kaspersky-labs.com |
37.186.250.247 | dnl-cn15.kaspersky-labs.com |
70.88.102.61 | dnl-cn2.kaspersky-labs.com |
184.3.222.144 | dnl-cn3.kaspersky-labs.com |
54.66.167.52 | dnl-cn4.kaspersky-labs.com |
74.143.126.41 | dnl-cn5.kaspersky-labs.com |
107.232.233.111 | dnl-cn6.kaspersky-labs.com |
153.215.97.194 | dnl-cn7.kaspersky-labs.com |
92.210.43.170 | dnl-cn8.kaspersky-labs.com |
44.99.69.159 | dnl-cn9.kaspersky-labs.com |
76.188.108.161 | dnl-eu1.kaspersky-labs.com |
190.171.228.56 | dnl-eu10.kaspersky-labs.com |
129.167.174.220 | dnl-eu11.kaspersky-labs.com |
81.55.200.209 | dnl-eu12.kaspersky-labs.com |
114.145.239.23 | dnl-eu13.kaspersky-labs.com |
211.111.88.90 | dnl-eu14.kaspersky-labs.com |
82.107.33.67 | dnl-eu15.kaspersky-labs.com |
102.183.59.56 | dnl-eu2.kaspersky-labs.com |
135.85.99.58 | dnl-eu3.kaspersky-labs.com |
181.68.219.209 | dnl-eu4.kaspersky-labs.com |
120.63.164.117 | dnl-eu5.kaspersky-labs.com |
71.140.191.106 | dnl-eu6.kaspersky-labs.com |
104.41.42.176 | dnl-eu7.kaspersky-labs.com |
218.24.162.3 | dnl-eu8.kaspersky-labs.com |
157.19.108.167 | dnl-eu9.kaspersky-labs.com |
109.96.66.156 | dnl-jp1.kaspersky-labs.com |
141.254.173.226 | dnl-jp10.kaspersky-labs.com |
255.236.37.121 | dnl-jp11.kaspersky-labs.com |
126.232.239.29 | dnl-jp12.kaspersky-labs.com |
146.52.197.18 | dnl-jp13.kaspersky-labs.com |
179.210.48.88 | dnl-jp14.kaspersky-labs.com |
36.192.169.171 | dnl-jp15.kaspersky-labs.com |
163.188.114.80 | dnl-jp2.kaspersky-labs.com |
115.8.140.69 | dnl-jp3.kaspersky-labs.com |
148.166.180.139 | dnl-jp4.kaspersky-labs.com |
6.149.44.222 | dnl-jp5.kaspersky-labs.com |
201.144.245.198 | dnl-jp6.kaspersky-labs.com |
152.221.16.187 | dnl-jp7.kaspersky-labs.com |
185.122.55.189 | dnl-jp8.kaspersky-labs.com |
27.89.159.68 | dnl-jp9.kaspersky-labs.com |
154.84.105.232 | dnl-kr1.kaspersky-labs.com |
174.161.131.221 | dnl-kr10.kaspersky-labs.com |
206.63.170.35 | dnl-kr11.kaspersky-labs.com |
64.45.103.118 | dnl-kr12.kaspersky-labs.com |
191.41.48.94 | dnl-kr13.kaspersky-labs.com |
143.117.6.83 | dnl-kr15.kaspersky-labs.com |
176.19.113.85 | dnl-kr2.kaspersky-labs.com |
34.189.234.237 | dnl-kr3.kaspersky-labs.com |
228.253.179.145 | dnl-kr4.kaspersky-labs.com |
180.73.137.134 | dnl-kr5.kaspersky-labs.com |
213.231.245.204 | dnl-kr6.kaspersky-labs.com |
71.146.109.31 | dnl-kr7.kaspersky-labs.com |
198.209.54.195 | dnl-kr8.kaspersky-labs.com |
217.30.81.184 | dnl-kr9.kaspersky-labs.com |
250.187.120.254 | dnl-ru1.kaspersky-labs.com |
108.102.240.149 | dnl-ru10.kaspersky-labs.com |
235.165.186.57 | dnl-ru11.kaspersky-labs.com |
187.242.212.46 | dnl-ru12.kaspersky-labs.com |
31.144.251.116 | dnl-ru13.kaspersky-labs.com |
77.58.116.199 | dnl-ru14.kaspersky-labs.com |
16.122.61.107 | dnl-ru15.kaspersky-labs.com |
224.198.87.96 | dnl-ru2.kaspersky-labs.com |
1.100.126.166 | dnl-ru3.kaspersky-labs.com |
99.254.43.46 | dnl-ru4.kaspersky-labs.com |
37.62.176.210 | dnl-ru5.kaspersky-labs.com |
245.139.202.199 | dnl-ru6.kaspersky-labs.com |
22.40.54.13 | dnl-ru7.kaspersky-labs.com |
136.211.174.96 | dnl-ru8.kaspersky-labs.com |
7.18.119.4 | dnl-ru9.kaspersky-labs.com |
26.95.78.249 | dnl-us1.kaspersky-labs.com |
59.184.185.63 | dnl-us10.kaspersky-labs.com |
105.167.49.146 | dnl-us11.kaspersky-labs.com |
44.162.251.122 | dnl-us12.kaspersky-labs.com |
252.51.21.111 | dnl-us13.kaspersky-labs.com |
28.141.60.113 | dnl-us14.kaspersky-labs.com |
142.123.181.8 | dnl-us15.kaspersky-labs.com |
81.119.126.172 | dnl-us2.kaspersky-labs.com |
33.7.152.161 | dnl-us3.kaspersky-labs.com |
66.97.192.232 | dnl-us4.kaspersky-labs.com |
180.79.56.59 | dnl-us5.kaspersky-labs.com |
50.75.1.35 | dnl-us6.kaspersky-labs.com |
70.152.27.24 | dnl-us7.kaspersky-labs.com |
103.53.67.26 | dnl-us8.kaspersky-labs.com |
149.36.187.177 | dnl-us9.kaspersky-labs.com |
88.31.132.85 | dougknox.com |
39.108.159.74 | down.360safe.cn |
72.9.10.128 | down.360safe.com |
170.232.114.211 | download.avg.com |
109.228.60.119 | download.bleepingcomputer.com |
61.48.18.108 | download.com |
94.206.125.178 | download.com.vn |
207.188.246.73 | download.eset.com |
78.184.191.237 | download.f-secure.com |
98.4.149.226 | download.mcafee.com |
131.162.1.41 | download.microsoft.com |
245.144.121.124 | download.microsoft.comguru0.grisoft.cz |
115.140.66.32 | download.nai.com |
67.217.93.21 | download.norman.no |
100.118.132.91 | download.rising.com.cn |
214.101.252.174 | download.softpedia.com |
153.96.197.150 | download.sysinternals.com |
104.173.224.139 | download0.avast.com |
137.74.7.141 | download1.avast.com |
251.57.127.36 | download1.emsisoft.com |
122.53.73.200 | download1.quickheal.com |
142.129.99.189 | download10.quickheal.com |
175.31.138.3 | download100.avast.com |
32.13.71.86 | download1us.softpedia.com |
159.9.16.46 | download2.avast.com |
95.69.214.36 | download2.quickheal.com |
128.227.66.38 | download200.avast.com |
242.142.186.189 | download201.avast.com |
180.205.131.97 | download202.avast.com |
132.26.90.86 | download203.avast.com |
165.183.197.156 | download204.avast.com |
23.98.61.239 | download205.avast.com |
150.161.6.147 | download206.avast.com |
170.238.33.136 | download207.avast.com |
202.139.72.206 | download208.avast.com |
60.54.192.101 | download209.avast.com |
187.118.138.9 | download210.avast.com |
139.194.164.254 | download211.avast.com |
240.96.203.68 | download212.avast.com |
29.10.68.151 | download213.avast.com |
224.74.13.59 | download214.avast.com |
176.150.39.49 | download3.avast.com |
209.52.79.119 | download3.quickheal.com |
67.223.11.14 | download4.avast.com |
5.30.144.178 | download4.emsisoft.com |
213.107.171.167 | download4.quickheal.com |
246.8.22.237 | download5.avast.com |
104.179.126.48 | download5.emsisoft.com |
215.226.72.212 | download5.quickheal.com |
235.47.30.201 | download501.avast.com |
11.136.137.15 | download502.avast.com |
57.119.1.98 | download503.avast.com |
252.115.203.74 | download504.avast.com |
204.3.229.63 | download505.avast.com |
237.93.12.65 | download511.avast.com |
94.75.133.216 | download512.avast.com |
33.71.78.125 | download513.avast.com |
241.215.104.114 | download514.avast.com |
18.49.144.184 | download515.avast.com |
132.32.8.11 | download516.avast.com |
3.27.209.243 | download535.avast.com |
22.104.236.232 | download6.avast.com |
55.5.19.234 | download6.quickheal.com |
101.244.139.129 | download600.avast.com |
40.239.85.37 | download601.avast.com |
248.60.111.26 | download602.avast.com |
24.217.218.96 | download603.avast.com |
138.200.82.179 | download604.avast.com |
77.196.28.87 | download605.avast.com |
29.16.242.76 | download606.avast.com |
62.174.93.146 | download607.avast.com |
175.156.214.41 | download608.avast.com |
46.152.143.190 | download609.avast.com |
50.212.101.179 | download617.avast.com |
83.114.209.249 | download618.avast.com |
197.97.73.76 | download619.avast.com |
68.92.18.240 | download620.avast.com |
19.169.45.229 | download621.avast.com |
52.70.84.43 | download622.avast.com |
166.53.204.126 | download623.avast.com |
105.48.150.102 | download624.avast.com |
57.125.176.91 | download625.avast.com |
89.27.215.93 | download626.avast.com |
203.9.80.244 | download627.avast.com |
74.5.25.152 | download628.avast.com |
94.81.51.141 | download629.avast.com |
127.239.90.211 | download630.avast.com |
240.221.23.39 | download631.avast.com |
111.217.224.15 | download632.avast.com |
63.37.182.4 | download633.avast.com |
96.195.34.6 | download634.avast.com |
210.110.154.157 | download635.avast.com |
149.173.99.65 | download636.avast.com |
100.250.58.54 | download637.avast.com |
133.151.165.124 | download638.avast.com |
247.66.29.207 | download639.avast.com |
118.129.231.115 | download640.avast.com |
138.206.1.104 | download641.avast.com |
170.108.40.174 | download642.avast.com |
28.22.161.69 | download643.avast.com |
155.86.106.233 | download644.avast.com |
107.162.132.222 | download645.avast.com |
208.64.171.36 | download646.avast.com |
253.234.36.120 | download647.avast.com |
192.42.237.28 | download648.avast.com |
144.118.7.17 | download649.avast.com |
177.20.47.87 | download650.avast.com |
35.191.235.238 | download651.avast.com |
230.254.112.146 | download652.avast.com |
181.75.139.135 | download653.avast.com |
214.232.246.205 | download654.avast.com |
72.147.110.32 | download655.avast.com |
199.210.56.196 | download656.avast.com |
219.31.14.185 | download658.avast.com |
251.121.121.255 | download659.avast.com |
41.103.242.82 | download660.avast.com |
236.99.187.58 | download661.avast.com |
188.243.213.47 | download662.avast.com |
221.77.252.49 | download663.avast.com |
78.59.117.201 | download664.avast.com |
17.55.62.109 | download665.avast.com |
225.199.88.98 | download666.avast.com |
2.33.128.168 | download667.avast.com |
116.16.248.251 | download668.avast.com |
243.11.193.227 | download669.avast.com |
6.88.220.216 | download670.avast.com |
39.245.3.218 | download671.avast.com |
85.228.123.113 | download672.avast.com |
24.223.69.21 | download673.avast.com |
232.44.95.10 | download674.avast.com |
8.202.202.80 | download675.avast.com |
106.168.51.147 | download676.avast.com |
45.164.252.55 | download677.avast.com |
253.240.210.44 | download678.avast.com |
30.142.62.114 | download679.avast.com |
144.124.182.10 | download680.avast.com |
14.120.127.174 | download681.avast.com |
34.197.85.163 | download682.avast.com |
67.98.193.233 | download683.avast.com |
181.81.57.60 | download684.avast.com |
52.76.2.224 | download685.avast.com |
3.153.29.213 | download686.avast.com |
36.54.68.27 | download687.avast.com |
150.37.188.110 | download688.avast.com |
89.32.134.86 | download689.avast.com |
41.109.160.75 | download690.avast.com |
73.11.199.77 | download691.avast.com |
187.249.64.228 | download692.avast.com |
58.245.9.136 | download693.avast.com |
78.65.35.125 | download694.avast.com |
111.223.75.195 | download695.avast.com |
225.205.7.23 | download696.avast.com |
95.201.208.255 | download697.avast.com |
47.22.166.244 | download698.avast.com |
80.179.18.246 | download699.avast.com |
194.94.138.141 | download7.avast.com |
133.157.83.49 | download7.quickheal.com |
84.234.42.38 | download700.avast.com |
117.135.149.108 | download701.avast.com |
231.50.13.191 | download702.avast.com |
102.113.215.99 | download703.avast.com |
122.190.241.88 | download704.avast.com |
154.92.24.158 | download705.avast.com |
12.6.145.53 | download706.avast.com |
139.70.90.217 | download707.avast.com |
91.146.116.206 | download708.avast.com |
192.48.156.20 | download709.avast.com |
238.218.20.104 | download72.avast.com |
176.26.221.12 | download73.avast.com |
128.103.247.1 | download74.avast.com |
161.4.31.71 | download75.avast.com |
19.175.219.222 | download76.avast.com |
214.238.96.130 | download77.avast.com |
165.59.123.119 | download78.avast.com |
198.216.230.189 | download79.avast.com |
56.131.94.16 | download8.quickheal.com |
183.194.40.180 | download80.avast.com |
203.15.254.169 | download81.avast.com |
235.105.105.239 | download82.avast.com |
25.87.226.66 | download83.avast.com |
220.83.171.42 | download84.avast.com |
172.227.197.31 | download85.avast.com |
205.61.237.33 | download9.quickheal.com |
63.43.101.185 | download900.avast.com |
1.39.46.93 | download901.avast.com |
209.184.72.82 | download902.avast.com |
242.17.112.152 | download903.avast.com |
100.0.232.235 | download904.avast.com |
227.251.177.211 | download905.avast.com |
246.72.204.200 | download906.avast.com |
23.229.243.202 | download907.avast.com |
53.196.91.81 | download908.avast.com |
248.192.37.245 | download909.avast.com |
200.12.63.234 | download91.avast.com |
233.170.170.48 | download910.avast.com |
90.152.35.131 | download911.avast.com |
29.148.236.39 | download912.avast.com |
237.224.194.28 | download913.avast.com |
14.126.46.99 | download914.avast.com |
128.108.166.250 | download915.avast.com |
254.104.111.158 | download916.avast.com |
18.181.69.147 | download917.avast.com |
51.82.177.217 | download918.avast.com |
165.65.41.44 | download919.avast.com |
36.60.242.208 | download92.avast.com |
243.137.13.197 | download920.avast.com |
20.38.52.11 | download921.avast.com |
134.21.172.94 | download922.avast.com |
73.17.118.70 | download923.avast.com |
25.93.144.59 | download924.avast.com |
58.251.183.61 | download925.avast.com |
171.233.48.212 | download926.avast.com |
42.229.249.120 | download927.avast.com |
62.49.19.109 | download928.avast.com |
95.207.59.180 | download929.avast.com |
209.189.247.7 | download93.avast.com |
79.185.192.239 | download930.avast.com |
31.6.150.228 | download931.avast.com |
64.163.2.230 | download932.avast.com |
178.78.122.125 | download933.avast.com |
117.141.67.33 | download934.avast.com |
68.218.26.22 | download935.avast.com |
101.119.133.92 | download936.avast.com |
215.34.253.175 | download937.avast.com |
86.98.199.83 | download938.avast.com |
106.174.225.72 | download939.avast.com |
139.76.8.142 | download94.avast.com |
252.246.129.37 | download940.avast.com |
123.54.74.201 | download941.avast.com |
75.130.100.190 | download942.avast.com |
176.32.140.5 | download943.avast.com |
222.202.4.88 | download944.avast.com |
160.10.205.252 | download945.avast.com |
112.87.231.241 | download946.avast.com |
145.244.15.55 | download947.avast.com |
3.159.203.206 | download948.avast.com |
198.222.80.114 | download949.avast.com |
149.43.107.103 | download95.avast.com |
182.200.214.173 | download950.avast.com |
40.115.78.0 | download951.avast.com |
167.179.24.164 | download952.avast.com |
187.255.238.153 | download953.avast.com |
220.89.89.223 | download954.avast.com |
9.71.210.50 | download955.avast.com |
204.67.155.26 | download956.avast.com |
156.211.181.15 | download957.avast.com |
189.45.221.18 | download958.avast.com |
47.27.85.169 | download959.avast.com |
241.23.30.77 | download96.avast.com |
193.168.56.66 | download960.avast.com |
226.1.96.136 | download961.avast.com |
84.240.216.219 | download962.avast.com |
211.235.161.195 | download963.avast.com |
230.56.188.184 | download964.avast.com |
7.213.227.186 | download965.avast.com |
53.196.91.81 | download966.avast.com |
248.192.37.245 | download967.avast.com |
200.12.63.234 | download968.avast.com |
233.170.170.48 | download969.avast.com |
90.152.35.131 | download97.avast.com |
29.148.236.39 | download970.avast.com |
237.224.194.28 | download971.avast.com |
14.126.46.99 | download972.avast.com |
128.108.166.250 | download973.avast.com |
254.104.111.158 | download974.avast.com |
18.181.69.147 | download975.avast.com |
51.82.177.217 | download976.avast.com |
165.65.41.44 | download977.avast.com |
36.60.242.208 | download978.avast.com |
243.137.13.197 | download979.avast.com |
20.38.52.11 | download98.avast.com |
134.21.172.94 | download980.avast.com |
73.17.118.70 | download99.avast.com |
25.93.144.59 | downloads-eu1.kaspersky-labs.com |
58.251.183.61 | downloads-eu2.kaspersky-labs.com |
171.233.48.212 | downloads-eu3.kaspersky-labs.com |
42.229.249.120 | downloads-eu4.kaspersky-labs.com |
62.49.19.109 | downloads-us1.kaspersky-labs.com |
95.207.59.180 | downloads-us2.kaspersky-labs.com |
209.189.247.7 | downloads-us3.kaspersky-labs.com |
79.185.192.239 | downloads-us4.kaspersky-labs.com |
31.6.150.228 | downloads.andymanchesta.com |
64.163.2.230 | downloads.malwarebytes.org |
160.60.105.107 | downloads.microsoft.com |
99.124.50.15 | downloads.My-eTrust.com |
51.200.8.5 | downloads1.kaspersky-labs.com |
84.102.116.75 | downloads2.kaspersky-labs.com |
198.16.236.158 | downloads3.kaspersky-labs.com |
68.80.181.66 | downloads4.kaspersky-labs.com |
88.157.208.55 | downloads5.kaspersky-labs.com |
121.58.247.125 | dr-web-cureit.softonic.com |
235.229.111.20 | drsolomon.com |
106.36.56.184 | drweb-inside.com |
58.113.83.173 | drweb.com |
158.14.122.243 | drweb.com.es |
204.185.242.70 | drweb.net |
143.249.188.234 | drwebinside.com |
95.69.214.223 | dswlab.com |
128.227.253.37 | duba.net |
241.141.186.188 | ealaddin.net |
180.205.63.96 | ealaddin.orgeshop.aladdin.com |
132.25.89.86 | easy-vpn.comodo.com |
165.183.197.156 | edm.symantec.com |
23.97.61.239 | education.symantec.com |
149.161.6.147 | eeload.com |
169.238.221.136 | eeye.com |
202.71.72.206 | eicar.org |
248.54.192.33 | elblogdemanu.com |
187.49.137.9 | elitepvpers.de |
139.194.164.254 | emea.trendmicro.com |
171.27.203.0 | emsisoft.com |
29.10.67.151 | emsisoft.de |
224.6.13.59 | encarta.msn.com |
176.150.39.48 | engine.awaps.net |
209.240.78.118 | enterprisesecur.symantec.com |
66.222.199.201 | eos.eset.es |
193.218.144.177 | eradicatespyware.net |
213.38.170.167 | es.answers.yahoo.com |
246.196.210.169 | es.kioskea.net |
36.178.74.64 | es.mcafee.com |
230.174.19.228 | es.trendmicro.com |
182.251.46.217 | es.wasalive.com |
215.152.153.31 | esafe.com |
73.135.17.114 | esecurity.livecall.co.kr |
12.130.218.22 | eset-la.com |
220.207.177.11 | eset.com |
252.108.28.81 | eset.es |
110.91.148.232 | eset.sk |
237.87.94.140 | esp.sophos.com |
1.163.52.129 | espanol.answers.yahoo.com |
34.65.159.199 | espanol.dir.groups.yahoo.com |
147.47.24.26 | espanol.groups.yahoo.com |
18.43.225.190 | esupport.trendmicro.com |
226.119.251.180 | et.symantec.com |
3.21.35.250 | etrr.co.uk |
117.3.155.77 | eugrantsadvisor.cz |
55.255.100.53 | eugrantsadvisor.de |
7.76.127.42 | eval.symantec.com |
40.233.166.44 | ewido.net |
154.216.30.195 | exchangeyourcareer.net |
25.211.231.103 | experts-exchange.com |
45.32.2.92 | f-prot.com |
77.189.41.162 | f-secure.com |
191.172.229.245 | f-secure.frf-secure.hk |
62.168.175.221 | f-secure.nlfsecure.com |
14.244.133.210 | fastclick.net |
47.146.240.212 | feedage.com |
160.60.105.107 | feeds.sophos.com |
99.124.50.15 | feeds.trendmicro.com |
51.200.8.5 | file.ikaka.cn |
84.102.116.75 | file.ikaka.com |
198.16.236.158 | file.net |
68.80.181.66 | files.avast.com |
88.157.208.55 | files.filefont.com |
121.58.247.125 | files.trendmicro-europe.com |
235.229.111.20 | filseclab.com |
106.36.56.184 | final4ever.com |
58.113.83.173 | finjan.com |
158.14.122.243 | firewall.sunbeltsoftware.com |
204.185.242.70 | firewallguide.com |
143.249.188.234 | fixmyim.com |
95.69.214.223 | foro.ethek.com |
128.227.253.37 | foros.toxico-pc.com |
241.141.186.188 | foros.zonavirus.com |
164.189.47.81 | forospanish.com |
116.9.73.70 | forospyware.com |
149.167.181.140 | forospyware.es |
7.82.45.223 | fortiguardcenter.com |
133.145.246.131 | fortihero.com |
153.222.205.120 | fortilog.com |
186.55.56.190 | fortinet.co.at |
232.38.176.17 | fortinet.com |
171.33.122.249 | fortiprotect.com |
123.178.148.238 | fortiwifi.com |
155.11.187.240 | forum.clubedohardware.com.br |
13.250.51.135 | forum.emsisoft.com |
208.246.253.43 | forum.hardware.fr |
160.134.23.32 | forum.hijackthis.de |
193.224.62.102 | forum.ikaka.com |
50.206.183.185 | forum.jiangmin.com |
177.202.128.162 | forum.kaspersky.com |
197.22.154.151 | forum.malekal.com |
230.180.194.153 | forum.piriform.com |
20.163.58.48 | forum.securitycadets.com |
214.158.3.212 | forum.sysinternals.com |
166.235.30.201 | forum.telecharger.01net.com |
199.136.137.15 | forum.tweaks.com |
57.119.1.98 | forum.zazana.com |
252.114.203.6 | forums.cnet.com |
204.191.161.251 | forums.comodo.com |
236.92.12.65 | forums.devshed.com |
94.75.132.216 | forums.maddoktor2.com |
221.71.78.124 | forums.majorgeeks.com |
241.147.36.113 | forums.techguy.org |
18.49.143.183 | forums.whatthetech.com |
131.31.8.10 | fr.bitdefender.com |
2.27.209.175 | fr.drweb.com |
210.103.235.164 | fr.mcafee.com |
243.5.19.234 | fr.trendmicro.com |
101.244.139.61 | fr1.drweb.com |
39.239.84.37 | fr2.drweb.com |
247.60.111.26 | fr3.drweb.com |
24.217.150.28 | fr4.drweb.com |
138.200.14.179 | fr5.drweb.com |
9.195.216.87 | fr6.drweb.com |
29.16.242.76 | fr7.drweb.com |
61.173.25.146 | fractus.mat.uson.mx |
175.156.213.229 | free-av.com |
46.152.159.205 | free-av.net |
254.228.117.194 | free.antivirus.com |
31.130.224.196 | free.avg.com |
144.44.89.91 | free.drweb.com |
83.108.34.0 | free.grisoft.com |
35.184.248.245 | free.grisoft.cz |
68.86.100.59 | free.pandasecurity.com |
182.1.220.142 | free.prevx.com |
52.64.165.50 | free.tinypicbox.com |
72.141.192.39 | freeav.com |
105.42.231.109 | freeav.net |
219.213.95.4 | freespywareremoval.info |
90.20.41.168 | frisk-software.com |
42.97.67.157 | fsc.norman.com |
142.254.106.227 | fsecure.nlwebyard.com |
188.169.226.54 | ftp.avp.com |
127.233.172.218 | ftp.bitdefender.com |
79.53.198.207 | ftp.ca.co |
112.211.237.21 | ftp.ca.com |
225.125.170.172 | ftp.customer.symantec.com |
164.189.47.81 | ftp.dispatch.mcafee.com |
116.9.73.70 | ftp.download.mcafee.com |
149.167.181.140 | ftp.downloads-eu1.kaspersky-labs.com |
7.82.45.223 | ftp.downloads-eu2.kaspersky-labs.com |
133.145.246.131 | ftp.downloads-eu3.kaspersky-labs.com |
153.222.205.120 | ftp.downloads-eu4.kaspersky-labs.com |
186.55.56.190 | ftp.downloads-us1.kaspersky-labs.com |
232.38.176.17 | ftp.downloads-us2.kaspersky-labs.com |
171.33.122.249 | ftp.downloads-us3.kaspersky-labs.com |
123.178.148.238 | ftp.downloads-us4.kaspersky-labs.com |
155.11.187.240 | ftp.downloads1.kaspersky-labs.com |
13.250.51.135 | ftp.downloads2.kaspersky-labs.com |
208.246.253.43 | ftp.downloads3.kaspersky-labs.com |
160.134.23.32 | ftp.downloads4.kaspersky-labs.com |
193.224.62.102 | ftp.drweb.com |
50.206.183.185 | ftp.esafe.com |
177.202.128.162 | ftp.europe.f-secure.com |
197.22.154.151 | ftp.f-prot.com |
230.180.194.153 | ftp.f-secure.com |
20.163.58.48 | ftp.grisoft.com |
199.142.243.196 | ftp.kaspersky-labs.com |
150.219.14.185 | ftp.kaspersky.com |
183.120.121.255 | ftp.kasperskylab.ru |
41.103.241.82 | ftp.liveupdate.symantec.com |
236.98.187.246 | ftp.liveupdate.symantecliveupdate.com |
188.175.145.235 | ftp.mast.mcafee.com |
220.77.252.49 | ftp.mcafee.com |
78.59.117.200 | ftp.microworldsystems.com |
205.55.62.108 | ftp.my-etrust.com |
225.131.20.97 | ftp.nai.com |
2.33.127.167 | ftp.networkassociates.com |
115.15.248.250 | ftp.norton.com |
242.11.193.159 | ftp.rads.mcafee.com |
194.87.219.148 | ftp.sandbox.norman.com |
227.245.3.218 | ftp.secure.nai.com |
85.228.123.45 | ftp.securityresponse.symantec.com |
24.223.68.21 | ftp.sophos.com |
231.44.95.10 | ftp.symantec.com |
8.201.134.12 | ftp.symantecliveupdate.com |
122.184.254.163 | ftp.symatec.com |
249.179.200.71 | ftp.trendmicro.com |
13.0.226.60 | ftp.uk.trendmicro-europe.com |
45.158.9.130 | ftp.update.symantec.com |
159.140.198.213 | ftp.updates.symantec.com |
30.136.143.189 | ftp.updates1.kaspersky-labs.com |
238.212.101.178 | ftp.updates2.kaspersky-labs.com |
15.114.208.180 | ftp.updates3.kaspersky-labs.com |
128.28.73.75 | ftp.updates4.kaspersky-labs.com |
67.92.18.240 | ftp.us.mcafee.com |
19.168.232.229 | ftp.viruslist.com |
52.70.84.43 | funkytoad.com |
166.241.204.126 | futurenow.bitdefender.com |
37.48.149.34 | fw.rising.com.cn |
56.125.176.23 | fx.dk |
89.26.215.93 | gangbang.mytijn.org |
203.197.79.244 | gdata.de |
74.4.25.152 | gdata.es |
26.81.51.141 | gecadsoftware.com |
126.239.90.211 | geekstogo.com |
172.153.211.38 | global.ahnlab.com |
111.217.156.202 | global.jiangmin.com |
63.37.182.191 | global.nprotect.com |
96.195.221.5 | go.mcafee.com |
209.109.154.156 | go.microsoft.com |
148.173.31.65 | go.rising.com.cn |
100.249.57.54 | go.sunbeltsoftware.com |
133.151.165.124 | go.symantec.com |
247.66.29.207 | go.trendmicro.com |
118.129.230.115 | greatis.com |
137.206.189.104 | grisoft.com |
170.39.40.174 | grisoft.cz |
216.22.160.1 | grv.microsoft.com |
155.17.106.233 | guiadohardware.net |
107.162.132.222 | guru.avg.com |
139.252.171.224 | guru1.grisoft.cz |
253.234.36.119 | guru2.grisoft.cz |
192.230.237.27 | guru3.grisoft.cz |
128.102.247.0 | guru4.grisoft.cz |
161.192.30.70 | guru5.grisoft.cz |
19.174.151.154 | gwava.nl |
145.170.96.130 | hacksoft.com.pe |
165.247.122.119 | hacksoft.pe |
198.148.162.121 | halmapr.com |
244.131.26.16 | hauri.co.kr |
183.126.227.180 | hauri.net |
134.203.254.169 | haurijapan.com |
167.104.105.239 | help.rising.com.cn |
25.87.225.66 | hi.baidu.com |
220.82.171.230 | hijackthis.de |
172.159.129.219 | hijackthis.download3000.com |
204.61.236.33 | hishomeforchildren.com |
62.43.101.184 | hjt-data.trend-braintree.com |
189.39.46.92 | hjt.networktechs.com |
209.115.4.81 | home.mcafee.com |
242.17.111.151 | hostedmailsecur.symantec.com |
100.255.232.235 | hotshare.net |
226.251.177.143 | housecall.com |
178.72.203.132 | housecall.trendmicro.com |
211.229.243.202 | housecall60.trendmicro.com |
69.212.107.29 | housecall65.trendmicro.com |
8.207.52.5 | howsafeismypc.com |
215.28.79.250 | huaifai.go.th |
248.185.118.252 | i-vault.comodo.com |
106.168.238.147 | iavs.cz |
233.163.184.55 | ibusca.me |
253.240.210.44 | idauthority.com |
29.142.249.114 | ids.kaspersky-labs.com |
143.124.182.197 | ieupdate.gdata.de |
14.120.127.173 | ieupdate1.gdata.de |
222.196.85.162 | ieupdate2.gdata.de |
255.98.192.164 | ieupdate3.gdata.de |
113.12.57.60 | ieupdate4.gdata.de |
51.76.2.224 | ieupdate5.gdata.de |
3.153.216.213 | ieupdate6.gdata.de |
36.54.68.27 | ikaka.cn |
150.225.188.110 | ikaka.com |
21.32.133.18 | ikarus.at |
40.109.160.7 | ikarus.net |
73.10.199.77 | ilove.tigolbittys.info |
187.181.63.228 | images.kaspersky.com |
58.244.9.136 | in.answers.yahoo.com |
10.65.35.125 | incodesolutions.com |
110.223.74.195 | info.drweb.com |
156.137.195.22 | info.prevx.com |
95.201.140.186 | infos-du-net.com |
47.21.166.175 | infosecpodcast.com |
80.179.205.245 | infospyware.com |
194.93.138.141 | inicioid.com |
132.157.15.49 | iniciorapido.info |
68.218.25.22 | inline-software.de |
101.119.133.92 | internetsecurity.comodo.com |
215.34.253.175 | intranet.cidiroax.ipn.mx |
86.97.198.83 | investor.symantec.com |
105.174.157.72 | irc.bigshitsandwich.org |
138.7.8.142 | irc.metraiciono.com |
184.246.128.225 | iseclab.org |
123.241.74.201 | isotopecomics.com |
75.130.100.190 | iss.net |
108.220.139.192 | it.answers.yahoo.com |
221.202.4.87 | it.bitdefender.com |
160.198.205.251 | it.mcafee.com |
112.86.231.240 | it.trendmicro.com |
145.176.15.55 | itw.trendmicro.com |
3.158.135.138 | ixomodels.com |
129.154.80.114 | ixostore.ixomodels.com |
149.231.106.103 | javacoolsoftware.com |
182.132.146.105 | jetico.com |
228.115.10.0 | jiangmin.com |
167.110.211.164 | jiangmin.com.cn |
118.187.238.153 | jobs.bitdefender.com |
151.88.89.223 | jotti.org |
9.71.209.50 | jp.mcafee.com |
204.66.155.214 | jp.trendmicro.com |
156.143.113.203 | justfacebook.net |
189.45.220.17 | k-otik.com |
46.27.85.168 | k7computing.com |
173.23.30.76 | kaba.360.cn |
193.99.244.65 | kaba.360.com |
226.1.96.136 | karuna-shechen.org |
84.239.216.219 | kaspersky-fr.com |
210.235.161.127 | kaspersky-labs.com |
162.56.187.116 | kaspersky.co.jp |
195.213.227.186 | kaspersky.co.uk |
53.196.91.13 | kaspersky.com |
248.191.36.245 | kaspersky.com.cn |
199.12.63.234 | kaspersky.dk |
232.169.102.236 | kaspersky.es |
90.152.222.131 | kaspersky.gr |
217.147.168.39 | kaspersky.pl |
237.224.194.28 | kaspersky.ru |
14.126.233.98 | kaspersky.se |
127.108.166.165 | kasperskylab.co.kr |
238.88.95.141 | kasperskylab.nl |
190.164.53.131 | kav.ru |
223.66.161.133 | kav.zonelabs.com |
81.236.25.28 | kb.bitdefender.com |
19.44.226.192 | kb.bitdefender.de |
227.121.185.181 | kb.bitdefender.us |
4.22.36.251 | kerio.com |
118.193.156.78 | kimzimmer.net |
245.0.101.242 | kioskea.net |
8.77.128.231 | kpfans.com |
41.234.167.45 | kr.ahnlab.com |
155.149.31.196 | kr.sophos.com |
26.213.233.104 | krupunmai.com |
234.33.3.93 | kvup.jiangmin.com |
79.191.42.163 | kztechs.com |
124.105.163.246 | l33t.shadow-mods.net |
63.169.108.154 | la.trendmicro.com |
15.245.134.144 | ladooscuro.es |
48.147.174.214 | laneros.com |
162.61.106.109 | latam.kaspersky.com |
100.125.239.17 | latin.bitdefender.com |
52.202.10.6 | lavasoft.com |
85.103.117.76 | lavasoft.nu |
199.18.237.159 | lavasoftusa.com |
70.81.182.67 | lexikon.ikarus.at |
89.158.141.40 | license.drweb.com |
106.231.232.110 | linhadefensiva.org |
152.214.96.193 | linhadefensiva.uol.com.br |
91.210.42.169 | linux.bitdefender.com |
43.98.68.158 | lists.clamav.net |
76.188.107.160 | liutilities.com |
189.170.228.55 | live.sunbeltsoftware.com |
128.166.173.219 | liveprotect.net |
80.54.199.209 | liveupdate.symantec.com |
113.144.239.23 | liveupdate.symantec.d4p.net |
227.127.103.106 | liveupdate.symantecliveupdate.com |
97.122.48.82 | looknstop.com |
117.199.75.71 | lovings.technigoyous.net |
150.100.114.73 | lurker.clamav.net |
196.83.234.224 | mailcenter.rising.com |
135.78.180.132 | mailcenter.rising.com.cn |
87.155.206.121 | majorgeeks.com |
119.56.57.191 | mall.hauri.co.kr |
233.39.177.18 | malwarebytes.org |
172.35.123.182 | malwarecity.com |
124.111.81.171 | malwarecity.netmalwarecity.org |
157.13.188.241 | malwaredomainlist.com |
14.251.53.136 | malwarepedia.com |
141.247.254.44 | malwareremoval.com |
161.67.212.34 | malwarescan.emsisoft.com |
194.225.64.104 | malwarescan.emsisoft.de |
36.192.168.171 | malwarescan.emsisoft.es |
163.187.113.79 | mamutu.com |
114.8.140.68 | manuelruvalcaba.com |
147.165.179.138 | marian.symantec.com |
5.148.43.221 | mast.mcafee.com |
200.143.245.197 | mcafee-at-home.com |
152.220.15.186 | mcafee.com |
184.122.54.188 | mcafeeb2b.com |
42.104.174.83 | mcafeefans.com |
169.100.120.247 | mcafeeretail.com |
189.176.146.236 | mcaffee.com |
222.78.185.50 | me.kaspersky.com |
79.60.118.133 | media.fastclick.net |
206.56.63.110 | megasecurity.org |
158.132.21.99 | merijn.org |
191.34.129.101 | metascan-online.com |
49.205.249.252 | microsoft.com |
244.12.194.160 | microsoft.fr |
195.89.153.149 | midescargas.com |
228.246.4.219 | mirror02.gdata.de |
86.161.108.30 | misec.net |
197.208.54.194 | mmsk.cn |
217.29.80.183 | moneybookers.com |
249.187.119.253 | moosoft.com |
107.101.240.148 | mop.pandasecurity.com |
234.165.185.56 | mostz.com |
186.241.211.45 | mozilla-hispano.org |
31.143.250.115 | msdn.microsoft.com |
77.57.115.199 | msk.drweb.com |
15.121.60.107 | msk1.drweb.com |
223.197.86.96 | msk2.drweb.com |
0.99.126.166 | msk3.drweb.com |
114.14.58.61 | msk4.drweb.com |
53.77.191.225 | msk5.drweb.com |
4.154.218.214 | msk6.drweb.com |
37.55.69.28 | msk7.drweb.com |
151.226.189.111 | msncleaner.softonic.com |
22.33.135.19 | msnfix.changelog.fr |
42.110.93.8 | msnvirusremoval.com |
74.200.200.78 | msr.mcafee.com |
120.182.65.161 | mvps.org |
59.178.10.137 | mx.answers.yahoo.com |
11.66.36.126 | mx.mcafee.com |
44.156.75.128 | mxttchina.com |
158.138.196.24 | my-etrust.com |
96.134.141.188 | my.drweb.com |
32.7.151.161 | mygeekside.com |
65.96.191.231 | nabble.com |
179.79.55.58 | nai.com |
50.74.0.34 | natsko.com |
69.151.27.23 | naturesimages.net |
102.52.66.25 | net-security.org |
148.35.186.176 | network.drweb.com |
87.30.132.84 | networkassociates.com |
39.107.158.73 | networkassociates.nai.com |
71.9.9.143 | networkworld.com |
185.247.130.226 | neunet.orgnews.bitdefender.com |
124.243.75.134 | new-beta.drweb.com |
76.63.33.123 | new-company.drweb.com |
109.221.141.194 | new-estore.drweb.com |
223.203.5.89 | new-forum.drweb.com |
93.199.206.253 | new-partners.drweb.com |
113.20.164.242 | new-solutions.drweb.com |
146.177.16.56 | new-support.drweb.com |
4.160.136.139 | new-www.drweb.com |
131.155.81.47 | new.taringa.net |
82.232.108.36 | news.drweb.com |
115.133.147.106 | newsletters.trendmicro.com |
229.116.11.189 | niueight.norman.no |
168.111.213.165 | niufive.norman.no |
120.188.239.154 | niufour.norman.no |
152.90.22.156 | niunine.norman.no |
250.56.127.35 | niuone.norman.no |
121.52.72.199 | niuseven.norman.no |
141.128.98.188 | niusix.norman.no |
174.30.138.3 | niuthree.norman.no |
32.12.70.86 | niutwo.norman.no |
158.8.15.62 | nl.bitdefender.com |
110.85.230.51 | noadware.net |
143.242.81.53 | nod32.co.uk |
1.157.201.204 | nod32.com |
196.220.146.112 | nod32.datsec.de |
147.41.105.101 | nod32.lu |
180.198.212.171 | nod32.ru |
38.113.76.254 | norman.com |
165.177.22.162 | norton.com |
185.253.48.151 | notifier.antivir-pe.de |
218.155.87.221 | novirusthanks.org |
75.69.208.116 | nprobeta.norman.com |
202.133.153.24 | nprotect.com |
154.209.179.13 | nprotect.net |
255.111.219.84 | nprotect.seoul.go.kr |
45.25.83.167 | nsclean.com |
239.89.28.75 | ntfaq.co.kr |
191.166.55.64 | obscgi.mcafee.com |
224.67.94.134 | oem.sunbeltsoftware.com |
82.238.26.13 | offensivecomputing.net |
5.29.143.177 | office.microsoft.com |
213.106.170.166 | oldtimer.geekstogo.com |
245.7.21.236 | one.tinypicbox.com |
103.178.141.63 | onecare.live.com |
230.242.87.227 | online-backup.comodo.com |
250.62.45.216 | online.jiangmin.com |
27.152.152.30 | online.rising.com.cn |
72.134.17.113 | onlinecheck.emsisoft.com |
11.130.218.89 | onlinecheck.emsisoft.de |
219.18.244.79 | onlinecheck.emsisoft.net |
252.108.28.81 | onlinecheck.emsisoft.org |
110.91.148.232 | onlinescan.avast.com |
48.86.93.140 | openantivirus.org |
0.231.120.129 | outpost.pl |
33.64.159.199 | ozzu.com |
147.47.23.26 | p3dev.taringa.net |
18.42.224.2 | pandalabs.pandasecurity.com |
38.119.251.247 | pandasecurity.com |
70.20.34.249 | pandasoftware.com |
116.3.154.144 | pandasoftware.es |
55.255.100.52 | pantip.com |
7.75.126.41 | pcav.cn |
40.233.233.111 | pccreg.antivirus.com |
137.199.82.178 | pccreg.trendmicro.com |
76.195.27.87 | pcentraide.com |
28.15.241.76 | pcguide.com |
61.173.93.146 | pchell.com |
175.156.213.41 | pcinternetpatrol.com |
46.151.158.205 | pcsupportadvisor.com |
65.228.117.194 | pctools.com |
98.129.224.8 | pda.drweb.com |
212.112.88.91 | pedidos.protegerse.com |
83.107.34.255 | personal.psu.edu |
35.184.60.244 | personalfirewall.comodo.com |
67.85.99.58 | pestpatrol.com |
181.68.219.141 | pg.hauri.net |
120.64.165.117 | phx.corporate-ir.net |
72.140.191.106 | pineleafboys.com |
105.42.230.108 | podcasts.sophos.com |
218.24.95.3 | pogonyuto.forospanish.com |
89.20.40.168 | precisesecurity.com |
109.96.66.157 | prevx.com |
142.254.106.227 | privacy.microsoft.com |
0.237.38.54 | products.drweb.com |
127.232.239.30 | promotions.drweb.com |
78.53.198.19 | psnw.com |
111.210.49.21 | pspl.com |
225.125.169.172 | pvtc.org |
164.188.115.80 | qqjkw.net |
100.249.57.53 | quickheal.co.in |
132.151.164.123 | quickheal.com |
246.65.29.206 | radius.turvamies.com |
117.129.230.114 | rads.mcafee.com |
137.205.0.103 | ravantivirus.com |
170.107.39.173 | raymond.cc |
27.21.160.69 | reg-int.nod32-es.com |
154.85.105.233 | reg.eset.es |
106.161.131.222 | reg.rising.com.cn |
207.63.171.36 | register.norman.com |
253.234.35.119 | removetrojanvirus.org |
192.41.236.27 | renewalcenter.symantec.com |
143.118.7.16 | renewals.bitdefender.com |
176.19.46.86 | research.microsoft.com |
34.190.234.237 | research.pandasecurity.com |
229.253.112.145 | research.sunbelt-software.com |
181.74.138.134 | resplendence.com |
213.232.245.204 | retail.sp.f-secure.com |
71.146.110.31 | retail01.sp.f-secure.com |
198.210.55.195 | retail02.sp.f-secure.com |
218.30.13.184 | ribbonwarehouse.com |
251.120.120.254 | rising-global.com |
25.86.225.66 | rising.com |
219.82.170.42 | rising.com.cn |
171.227.196.31 | rolandovera.com |
204.60.236.33 | rootkit.com |
62.43.100.184 | rootkit.nl |
1.38.45.92 | rover800.gaima.co.uk |
208.183.72.81 | roysephotos.com |
241.16.111.151 | ru.trendmicro.com |
99.255.231.234 | ruben.bzin.net |
226.250.177.210 | runscanner.net |
246.71.203.199 | safe.qq.com |
22.229.242.201 | safecomputing.umn.edu |
68.211.107.96 | safer-networking.org |
7.207.52.4 | safetynet.com |
215.27.78.249 | sales.bitdefender.com |
248.185.186.63 | samroeng.hi5.com |
106.167.50.147 | sandbox.norman.com |
44.163.251.55 | sandboxie.com |
252.240.209.44 | sapcupgrades.com |
29.141.61.114 | sarahmcconnellphotography.net |
143.124.181.9 | saverssite.com |
14.119.126.173 | scan.anti-trojan.net |
33.196.85.162 | scan.kingsoft.com |
66.97.192.232 | scan4you.net |
180.80.56.59 | scanner.novirusthanks.org |
51.75.2.223 | scanner.virus.org |
243.136.12.196 | scanner2.novirusthanks.or |
20.38.51.10 | schemas.microsoft.com |
133.20.172.93 | schemas.xmlsoap.org |
72.16.117.69 | sea.symantec.com |
24.92.143.58 | search.ca.com |
57.250.183.61 | search.mcafee.com |
171.232.47.212 | search.symantec.com |
41.228.248.120 | seasonsecurity.com |
61.49.18.109 | secdreg.org |
94.206.58.179 | secubox.aldria.com |
208.189.246.6 | secunia.com |
79.184.191.238 | secure-email.comodo.com |
30.5.150.227 | secure.av-desk.com |
63.162.1.229 | secure.nai.com |
177.77.121.124 | securecomputing.com |
116.141.67.32 | secureme.com |
68.217.25.21 | securitoo.com |
101.119.132.91 | security.symantec.com |
214.33.253.174 | securitycheck.symantec.com |
85.97.198.82 | securitynewsportal.com |
105.173.224.71 | securityrespons.symantec.com |
117.54.243.121 | securityresponse.symantec.com |
231.225.107.16 | securitywonks.net |
102.33.53.180 | secuser.com |
54.109.79.169 | secuser.model-fx.com |
155.11.118.239 | sergiwa.com |
200.181.239.66 | service.mcafee.com |
139.245.184.230 | service1.symantec.com |
91.65.210.220 | servicenews.symantec.com |
124.223.250.34 | sfdoccentral.symantec.com |
238.137.182.185 | shadow.grisoft.cz |
176.201.59.93 | shadu.baidu.com |
128.22.86.82 | shadu.duba.net |
161.179.193.152 | shield.prevx.com |
19.94.57.235 | shop.hauri.co.kr |
146.157.2.143 | shop.pandasecurity.com |
166.234.217.132 | shop.sunbeltsoftware.com |
198.67.68.202 | shop.symantec.com |
244.50.188.29 | shop.trendmicro.com |
183.46.134.5 | shudoo.com |
135.190.160.250 | simplysup.com |
168.24.199.252 | siren24.nprotect.com |
25.6.64.147 | siteadvisor.com |
220.2.9.55 | sitedirector.symantec.com |
156.130.19.29 | smallbiz.symantec.com |
189.220.59.99 | smbstore.trendmicro.com |
47.203.179.182 | smokey-services.eu |
173.198.124.158 | soccersuck.com |
193.19.151.147 | softfaq.com |
226.176.190.149 | softonic.com |
16.159.54.44 | software-files.download.com |
211.154.0.208 | solutions.drweb.com |
163.231.26.197 | sophos.com |
195.132.133.11 | sophos.fr |
53.115.253.94 | sophos1.ucd.ie |
248.111.199.2 | sophos10.ucd.ie |
200.187.157.247 | sophos2.ucd.ie |
233.89.8.61 | sophos5.ucd.ie |
90.71.129.212 | sophos6.ucd.ie |
217.67.74.121 | sophos7.ucd.ie |
237.143.32.110 | sophos8.ucd.ie |
14.45.140.180 | sophos9.ucd.ie |
128.28.4.7 | soporte.pandasecurity.com |
254.23.205.171 | sos.rising.com.cn |
206.100.232.160 | sosvirus.changelog.fr |
239.1.15.230 | spd.atdmt.com |
97.240.119.41 | specs.xmlsoap.org |
20.219.65.17 | speedtest.comodo.com |
228.40.91.6 | spftrl.digitalriver.com |
4.198.130.8 | spyany.com |
118.180.251.159 | spyblocker-software.com |
245.176.196.67 | spybot.info |
9.252.222.56 | spycheck.co.uk |
42.154.5.126 | spycheck.es |
155.136.194.209 | spychecker.com |
26.132.139.186 | spycop.com |
234.208.97.175 | spywaredb.com |
11.110.205.177 | spywaredlls.prevx.com |
125.25.69.72 | spywarefiles.prevx.com |
64.88.14.236 | spywareguide.com |
15.165.229.225 | spywareinfo.com |
48.66.80.39 | spywareterminator.com |
162.237.200.122 | square.bitdefender.com |
33.44.146.30 | static.yoreparo.com |
53.121.172.19 | stats.norton.com |
85.23.211.89 | stdio-labs.blogspot.com |
199.193.76.240 | stiller.com |
70.1.21.148 | store.bitdefender.com |
6.61.31.121 | store.de.bitdefender.com |
107.219.70.191 | store.drweb.com |
153.133.191.19 | store.trendmicro.com |
91.197.136.183 | subs.geekstogo.com |
43.18.162.172 | subwiz.trendmicro.com |
76.175.202.242 | sucop.com |
190.90.134.137 | sun.symantec.com |
129.153.11.45 | sunbelt-software.com |
80.230.38.34 | sunbeltsecurity.com |
113.131.145.104 | sunbeltsoftware.com |
227.46.9.187 | superboy2010.com.au |
98.109.211.95 | superdicas.com.br |
118.186.169.84 | superuser.co.kr |
150.20.20.154 | support.drweb.com |
196.2.141.237 | support.f-secure.com |
135.254.86.213 | support.kaspersky.co |
87.142.112.202 | support.mcafee.com |
120.232.151.204 | support.microsoft.com |
234.214.16.100 | support.pandasecurity.com |
172.210.217.8 | support.rising-global.com |
124.99.243.253 | sybari.com |
157.188.27.67 | sygate.com |
15.171.147.134 | symantec-ese.baynote.net |
126.150.76.110 | symantec.com |
145.227.103.99 | symantecliveupdate.com |
178.128.142.101 | symatec.com |
224.111.6.252 | sysinternals.com |
163.106.208.160 | system-cleaner.comodo.com |
115.183.234.149 | tallemu.com |
148.85.85.219 | taringa.net |
5.67.206.46 | tds.diamondcs.com.au |
200.63.151.210 | tech.pantip.com |
152.139.109.199 | techimo.com |
185.41.217.14 | techspot.com |
43.23.81.165 | techsupportforum.com |
169.19.26.73 | tecniservicioslys.com |
189.96.240.62 | tecno-soft.com |
222.253.92.132 | tempuri.org |
80.236.212.215 | thecomputerpitstop.com |
207.231.157.123 | thejokerx.blogspot.com |
158.52.184.112 | thetechguide.com |
191.209.223.182 | thinkpad.cn |
49.192.87.9 | threatexpert.com |
244.187.33.241 | threatinfo.trendmicro.com |
180.248.43.214 | timeforyourbusi.pandasecurity.com |
213.150.82.216 | timestamp.comodoca.com |
70.132.203.111 | timestamp.wosign.com |
197.128.148.19 | tinysoftware.com |
217.204.174.9 | tms.symantec.com |
250.106.214.79 | together.pctools.com |
108.88.146.162 | tool.ikaka.com |
234.84.91.138 | toonbox.de |
186.161.50.127 | tr.mcafee.com |
219.62.157.129 | trackingtheworld.com |
77.233.21.24 | training.drweb.com |
16.40.222.188 | training.trendmicro.com |
223.117.181.177 | trapware.com |
0.18.32.247 | trendmicro.com |
114.189.152.74 | trendmicro.com.cn |
241.253.98.238 | trendmicro.fr |
5.73.124.227 | trendsecure.com |
38.231.163.41 | trial.trendmicro.com |
151.145.28.192 | trucoswindows.es |
22.209.229.100 | trucoswindows.net |
230.29.255.90 | tw.mcafee.com |
75.187.39.160 | tw.sophos.com |
121.101.159.243 | tw.trendmicro.com |
59.165.104.151 | tweaksforgeeks.com |
11.242.131.140 | u0.eset.com |
44.143.170.194 | u1.eset.com |
142.42.86.89 | u10.eset.com |
81.105.220.253 | u100.eset.com |
33.182.246.242 | u11.eset.com |
65.83.97.56 | u12.eset.com |
179.254.217.139 | u13.eset.com |
50.62.163.47 | u14.eset.com |
70.138.121.36 | u15.eset.com |
103.228.228.106 | u16.eset.com |
148.210.93.189 | u17.eset.com |
87.206.38.165 | u18.eset.com |
39.94.64.155 | u19.eset.com |
72.184.104.157 | u2.eset.com |
186.167.224.52 | u20.eset.com |
124.162.169.216 | u21.eset.com |
76.51.196.205 | u22.eset.com |
109.140.235.19 | u23.eset.com |
223.123.99.102 | u24.eset.com |
94.118.45.78 | u25.eset.com |
114.195.71.67 | u26.eset.com |
146.96.110.69 | u27.eset.com |
192.79.230.220 | u28.eset.com |
131.75.176.128 | u29.eset.com |
83.151.202.117 | u3.eset.com |
116.53.53.187 | u30.eset.com |
229.35.174.14 | u31.eset.com |
168.31.119.178 | u32.eset.com |
120.107.77.168 | u33.eset.com |
153.9.185.238 | u34.eset.com |
11.248.49.133 | u35.eset.com |
137.243.250.41 | u36.eset.com |
157.64.209.30 | u36eset.com |
190.221.60.100 | u37.eset.com |
32.188.164.167 | u37eset.com |
159.183.110.75 | u38.eset.com |
111.4.136.64 | u39.eset.com |
143.162.175.134 | u4.eset.com |
1.144.39.217 | u40.eset.com |
196.140.241.193 | u41.eset.com |
148.216.11.182 | u42.eset.com |
181.118.50.184 | u43.eset.com |
38.100.171.79 | u44.eset.com |
165.96.116.244 | u45.eset.com |
185.172.142.233 | u46.eset.com |
218.74.182.47 | u47.eset.com |
76.57.114.130 | u48.eset.com |
203.52.59.106 | u49.eset.com |
154.129.18.95 | u5.eset.com |
187.30.125.97 | u50.eset.com |
45.201.245.248 | u51.eset.com |
240.8.191.156 | u52.eset.com |
192.85.149.145 | u53.eset.com |
224.243.0.215 | u54.eset.com |
82.157.120.42 | u55.eset.com |
209.221.66.206 | u56.eset.com |
229.41.92.195 | u57.eset.com |
6.199.131.9 | u58.eset.com |
104.97.236.145 | u59.eset.com |
230.161.181.53 | u6.eset.com |
182.237.207.42 | u60.eset.com |
27.139.247.112 | u61.eset.com |
73.54.111.195 | u62.eset.com |
12.117.56.103 | u63.eset.com |
219.194.83.92 | u64.eset.com |
252.95.122.162 | u65.eset.com |
110.10.54.57 | u66.eset.com |
49.73.188.221 | u67.eset.com |
1.150.214.210 | u68.eset.com |
33.52.65.24 | u69.eset.com |
147.222.186.107 | u7.eset.com |
18.30.131.15 | u70.eset.com |
38.106.89.4 | u71.eset.com |
71.196.196.74 | u72.eset.com |
117.178.61.158 | u73.eset.com |
55.174.6.134 | u74.eset.com |
7.62.32.123 | u75.eset.com |
40.152.72.125 | u76.eset.com |
154.135.192.20 | u77.eset.com |
93.130.137.184 | u78.eset.com |
44.19.164.173 | u79.eset.com |
77.108.203.243 | u8.eset.com |
191.91.67.70 | u80.eset.com |
62.86.13.46 | u81.eset.com |
82.163.39.35 | u82.eset.com |
114.65.78.37 | u83.eset.com |
160.47.199.188 | u84.eset.com |
99.43.144.96 | u85.eset.com |
51.119.170.85 | u86.eset.com |
84.21.21.155 | u87.eset.com |
198.3.142.239 | u88.eset.com |
136.255.87.147 | u89.eset.com |
88.75.45.136 | u9.eset.com |
105.217.137.190 | u90.eset.com |
219.200.1.85 | u91.eset.com |
90.195.202.249 | u92.eset.com |
109.16.161.238 | u93.eset.com |
142.173.12.52 | u94.eset.com |
0.156.132.135 | u95.eset.com |
127.151.78.43 | u96.eset.com |
79.228.104.32 | u97.eset.com |
111.130.143.102 | u98.eset.com |
225.112.8.185 | u99.eset.com |
164.108.209.161 | uk.mcafee.com |
116.184.235.150 | uk.trendmicro-europe.com |
149.86.19.153 | uk.trendmicro.com |
7.68.139.48 | ulove.tigolbittys.info |
133.64.84.212 | up.duba.net |
153.141.110.201 | up.rising.com.cn |
186.42.150.15 | up1.nod123.cn |
44.25.82.98 | upd.zonelabs.com |
171.20.27.74 | update.360safe.cn |
122.97.242.63 | update.360safe.com |
155.254.93.65 | update.aladdin.com |
13.169.213.216 | update.authentium.com |
208.232.159.124 | update.avg.com |
160.53.117.113 | update.avgfrance.com |
192.211.224.183 | update.bitdefender.com |
50.125.89.10 | update.drweb.com |
177.189.34.174 | update.ewido.com |
181.249.44.147 | update.grisoft.com |
214.151.84.218 | update.grisoft.cz |
72.65.204.113 | update.hispasec.com |
198.129.149.21 | update.ikaka.com |
150.206.176.10 | update.ikarus-software.at |
251.107.215.80 | update.quickheal.com |
41.22.79.163 | update.rising.com.cn |
236.85.24.71 | update.sophos.com |
187.162.51.60 | update.symantec.com |
220.63.90.130 | update.trendmicro.com |
78.234.22.25 | update7.jiangmin.com |
17.42.156.189 | updatem.360safe.cn |
225.118.182.178 | updatem.360safe.com |
2.20.33.248 | updates.a-2.org |
115.190.154.75 | updates.drweb.com |
242.254.99.239 | updates.f-prot.com |
6.74.57.228 | updates.sald.com |
39.164.165.43 | updates.symantec.com |
85.146.29.126 | updates3.kaspersky-labs.com |
23.142.230.102 | updates4.kaspersky-labs.com |
231.31.1.91 | updates5.kaspersky-labs.com |
8.120.40.93 | upgrade.bitdefender.com |
122.103.160.244 | upgrade1.bitdefender.com |
61.98.105.152 | upgrade2.bitdefender.com |
12.243.132.141 | upgrade3.bitdefender.com |
45.76.171.211 | upgrade4.bitdefender.com |
159.59.35.38 | upload.changelog.fr |
14.39.221.254 | us.bitdefender.com |
34.115.247.243 | us.mcafee.com |
67.17.30.245 | us.trendmicro.com |
112.255.151.140 | usa.kaspersky.com |
51.251.96.48 | usbcleaner.cn |
3.71.122.38 | ushousecall02.trendmicro.com |
36.229.230.108 | utilidades-utiles.com |
150.212.94.191 | v.dreamwiz.com |
88.207.39.99 | v4.windowsupdate.microsoft.com |
40.28.254.88 | v5.windowsupdate.microsoft.com |
73.185.105.158 | vet.com.au |
187.168.225.53 | vicentevirtual.com |
58.163.170.217 | viguard.com |
78.240.129.206 | vil.nai.com |
110.141.236.20 | vil.nail.com |
224.124.100.103 | virobot.co.kr |
95.120.46.11 | virscan.org |
47.196.72.0 | virus.org |
80.98.111.70 | virusbuster.hu |
193.80.232.153 | viruschief.com |
132.76.177.129 | virusdoctor.jp |
84.152.203.119 | virusfreezone.info |
117.54.243.121 | virusinfo.prevx.com |
231.37.107.16 | viruslist.com |
101.32.52.180 | viruslist.ru |
121.109.79.169 | virusscan.jotti.org |
138.250.102.223 | virusscanonline.net |
252.233.34.50 | virusspy.com |
123.228.236.26 | virustotal.com |
75.49.194.15 | visualizesoftware.com |
107.206.45.17 | visualtracking.symantec.com |
221.121.165.168 | vivo-austin.com |
160.185.111.76 | vms.drweb.com |
112.5.69.65 | vncsvr.com |
145.163.176.135 | vos.symantec.com |
2.77.41.218 | vrv.com.cn |
129.141.242.127 | vsantivirus.com |
149.217.12.116 | webadmin.norman.no |
182.119.52.186 | webphand.com |
40.34.172.81 | webroot.com |
167.97.117.245 | wedoantivirus.com |
118.174.144.234 | welkam.co.jp |
219.75.183.48 | wexperts-exchange.com |
9.246.47.131 | whatthetech.com |
204.53.249.39 | wikio.es |
156.130.19.28 | wilderssecurity.com |
188.31.58.98 | wilderssecurity.net |
46.202.246.249 | wildlist.com |
241.10.124.157 | windowsupdate.microsoft.com |
193.86.150.146 | winpatrol.com |
226.244.1.216 | wmcafee.com |
83.158.122.43 | woottonfootball.com |
210.222.67.208 | wtc.trendmicro.com |
214.26.9.181 | ww.emsisoft.com |
247.116.117.251 | www.1stavenuelimousines.co.uk |
37.99.237.78 | www.2xlgames.com |
232.94.182.54 | www.ahnlab.com |
183.239.209.43 | www.aks.com |
216.72.248.45 | www.aladdin.com |
74.55.112.196 | www.anti-trojan-software.net |
13.50.58.104 | www.anti-trojan.net |
221.195.84.93 | www.anti-virus.by |
253.29.123.163 | www.antivir.es |
111.11.244.246 | www.antivirus-tools.com |
238.7.189.222 | www.antiy.net |
2.83.215.211 | www.apsecure.com |
35.241.254.213 | www.arpia.be |
80.223.119.109 | www.authentium.com |
19.219.64.17 | www.authentium.com.au |
227.39.90.6 | www.av-desk.com |
4.197.198.76 | www.avast.com |
118.180.62.159 | www.avg.com |
57.175.7.67 | www.avhide.com |
8.252.222.56 | www.avoncourt.com |
41.153.73.126 | www.avx.ro |
155.136.193.21 | www.barder.com |
26.131.139.185 | www.beautybar.com |
46.208.97.174 | www.bg.virusblokada.com |
78.110.204.244 | www.bit-defender.de |
192.92.69.71 | www.bitdefende.de |
63.88.14.235 | www.bitdefender-es.com |
15.164.40.224 | www.bitdefender.be |
48.66.79.38 | www.bitdefender.cl |
161.48.200.122 | www.bitdefender.co.uk |
100.44.145.98 | www.bitdefender.com |
52.120.171.71 | www.bitdefender.com.au |
69.6.195.73 | www.bitdefender.com.sg |
183.245.59.224 | www.bitdefender.com.tw |
54.240.4.132 | www.bitdefender.com.vn |
73.61.31.121 | www.bitdefender.de |
106.218.70.191 | www.bitdefender.es |
220.201.2.18 | www.bitdefender.fr |
91.196.204.250 | www.bitdefender.hk |
43.17.162.239 | www.bitdefender.us |
75.175.13.241 | www.bitdefenderme.com |
189.89.134.136 | www.briarhurst.com |
128.153.79.44 | www.brightoctober.com |
80.229.37.33 | www.buraka.tv |
113.131.145.103 | www.buscafacil.com |
227.45.9.187 | www.buscalo.in |
97.109.210.95 | www.busco.in |
117.186.236.84 | www.ca.com |
150.87.20.154 | www.cambridge-steiner-school.co.uk |
8.2.140.49 | www.ccssforum.org |
135.65.85.213 | www.celticmerchant.com |
86.142.112.202 | www.clamav.net |
187.43.151.16 | www.collectedcurios.com |
233.214.15.99 | www.comodo.com |
172.21.217.7 | www.comodo.tv |
124.98.243.252 | www.comodoantispam.com |
156.0.26.66 | www.comodopartners.com |
14.170.215.217 | www.computing.net |
209.234.92.125 | www.configurarequipos.com |
161.54.118.114 | www.contentverification.com |
194.212.226.184 | www.deborahshelton.net |
52.126.90.12 | www.dr-bull.com |
178.190.35.176 | www.drweb.com |
198.11.249.165 | www.ealaddin.com |
231.100.101.235 | www.elvis-express.com |
21.83.205.46 | www.emeraldclassic.co.uk |
200.62.150.22 | www.emsisoft.at |
151.207.177.11 | www.emsisoft.com |
184.40.216.13 | www.emsisoft.de |
42.23.80.164 | www.emsisoft.es |
237.19.26.72 | www.emsisoft.fr |
189.163.52.61 | www.emsisoft.it |
222.253.91.131 | www.emsisoft.jp |
79.235.212.214 | www.emsisoft.net |
206.231.157.190 | www.emsisoft.nl |
226.51.183.179 | www.emsisoft.org |
3.209.223.182 | www.engyro.com |
49.191.87.77 | www.entercept.com |
243.187.32.241 | www.esafe.com |
195.8.58.230 | www.eset.es |
228.165.166.44 | www.eugrantsadvisor.com |
86.148.30.127 | www.eugrantsadvisor.de |
25.143.231.35 | www.eugrantsadvisor.ie |
232.220.190.24 | www.eugrantsadvisor.se |
9.121.41.94 | www.exchangeyourcareer.com |
123.104.161.245 | www.f-prot.com |
250.100.107.153 | www.f-secure.com |
14.176.65.142 | www.fimasys.com |
47.78.172.212 | www.flairweddings.co.uk |
160.60.37.39 | www.forospyware.com |
31.56.238.203 | www.fortifed.com |
239.132.8.192 | www.fortiid.com |
16.34.48.7 | www.fortimail.com |
130.16.168.90 | www.fortinet-apac.com |
51.251.96.48 | www.fortinet.ch |
3.71.122.37 | www.fortinet.co.il |
36.229.161.39 | www.fortinet.com |
149.211.26.190 | www.fortinet.net |
20.207.227.98 | www.fortinet.nl |
40.27.253.88 | www.fortinet.sg |
73.185.37.158 | www.fortinetuk.com |
187.167.225.241 | www.freeality.com |
57.163.170.217 | www.freedrweb.ru |
9.240.129.206 | www.freerav.com |
42.141.236.208 | www.frisk-software.com |
156.56.100.103 | www.frisk.is |
95.119.45.11 | www.fsecure.com |
47.196.4.0 | www.garryowen.com |
79.97.111.70 | www.gdata.es |
193.12.231.153 | www.globalhauri.com |
64.76.177.61 | www.gokidding.com |
84.152.203.50 | www.grisoft.com |
117.54.242.120 | www.hackshields.com |
230.224.107.15 | www.hacksoft.com.pe |
101.32.52.179 | www.hacksoft.pe |
53.108.78.169 | www.handwritingforkids.com |
154.10.118.239 | www.hasp.se |
200.180.238.66 | www.hauri.co.kr |
138.244.183.230 | www.hauri.net |
90.65.210.219 | www.hxproduction.com |
123.222.249.33 | www.ibusca.me |
221.121.165.168 | www.ikarus.at |
160.184.43.76 | www.imddomains.co.uk |
112.5.69.65 | www.indielisboa.com |
144.162.176.135 | www.inicioid.com |
2.77.40.218 | www.iniciorapido.info |
129.141.242.126 | www.internationalservicecheck.com |
149.217.200.115 | www.irangoals.com |
182.51.51.185 | www.iseclab.org |
227.33.172.12 | www.ixomodels.com |
166.29.117.245 | www.jiangmin.com |
118.173.143.234 | www.jiangmin.com.cn |
151.7.183.236 | www.jotti.org |
9.246.47.131 | www.kaspersky.com |
203.241.248.39 | www.kioskea.net |
155.130.19.28 | www.latin-mass-society.org |
188.219.58.98 | www.livepcsupport.com |
46.202.178.181 | www.malwarecity.com |
173.197.124.157 | www.malwarecity.fr |
193.18.150.146 | www.mamutu.com |
225.175.189.148 | www.mamutu.de |
15.158.53.43 | www.manchester-offices.co.uk |
210.154.255.207 | www.mcafee.at |
162.230.25.196 | www.mcafee.com |
195.132.132.10 | www.metascan-online.com |
52.114.253.93 | www.microsoft.com |
231.94.182.242 | www.midescargas.com |
183.170.140.231 | www.mountainlakeslodge.com |
216.72.248.45 | www.mtr-design.com |
74.55.112.196 | www.mygeekside.com |
201.50.57.104 | www.netegrity.com |
220.127.16.93 | www.norman.com |
253.28.123.163 | www.nottinghampoetryseries.com |
111.11.243.246 | www.novirusthanks.org |
238.6.189.154 | www.npin.co.kr |
190.83.215.143 | www.nprotect.co.kr |
222.241.254.213 | www.nprotect.com |
80.223.119.40 | www.nprotect.com.br |
19.219.64.16 | www.nsclean.com |
227.39.90.5 | www.owen.org |
4.197.129.7 | www.pandasecurity.com |
117.179.250.158 | www.pctools.com |
244.175.195.67 | www.peterhearnwaste.co.uk |
8.251.221.56 | www.phoenixtrikeworks.com |
41.153.5.126 | www.prdouglas.co.uk |
155.136.193.209 | www.prevx.com |
26.131.138.185 | www.prevx1.com |
233.208.97.174 | www.professorbeyer.com |
10.109.204.176 | www.quickheal.com |
124.24.68.71 | www.removetrojanvirus.org |
47.71.254.219 | www.renningers.com |
255.148.212.208 | www.residentphotography.com |
31.50.63.22 | www.retento.com |
145.220.184.105 | www.reviewsofbooks.com |
16.28.129.13 | www.rising-global.com |
36.104.155.2 | www.risingav.com.au |
69.6.194.72 | www.safenet-inc.com |
183.176.59.224 | www.scan4you.net |
53.240.4.132 | www.seasonsecurity.com |
5.61.30.121 | www.secondchanceboxer.com |
106.218.70.191 | www.secure-elements.com |
152.133.190.18 | www.sheffieldmind.co.uk |
91.196.135.182 | www.smf.org |
42.17.162.171 | www.softfaq.com |
75.174.201.241 | www.sophos.com |
189.89.133.136 | www.spycheck.co.uk |
128.152.11.44 | www.spycheck.es |
80.229.37.33 | www.stadiumpage.com |
112.131.144.103 | www.sunbeltsoftware.com |
226.45.9.186 | www.symantec.com |
97.109.210.94 | www.sysinternals.com |
117.185.168.83 | www.tecniservicioslys.com |
150.19.19.153 | www.testmypcsecurity.com |
180.241.124.221 | www.threatexpert.com |
118.237.69.197 | www.tomorrowsedge.net |
70.126.95.186 | www.trendmicro.com |
103.215.135.188 | www.trojaner.info |
217.198.255.83 | www.trustix.com |
156.193.200.247 | www.trustlogo.com |
107.82.227.236 | www.vba.com.by |
140.171.10.50 | www.virscan.org |
254.154.130.133 | www.virus.fi |
125.149.76.109 | www.virus.org |
145.226.102.98 | www.virusbuster.hu |
178.128.141.100 | www.viruschief.com |
223.110.6.251 | www.virusfreezone.info |
162.106.207.159 | www.virustotal.com |
114.182.233.148 | www.wellgousa.com |
147.84.85.219 | www.whichssl.com |
5.66.205.46 | www.willsee.com |
199.62.150.210 | www.xmlsoap.org |
151.139.108.199 | www.zarya.info |
184.40.216.13 | www1.my-etrust.com |
42.23.80.164 | www3.ca.com |
169.18.25.72 | www3.safenet-inc.com |
188.95.240.61 | www4.symantec.com |
221.252.91.131 | wwws.clamav.net |
63.219.195.198 | x-cleaner.com |
190.215.141.106 | x.360safe.com |
142.35.167.95 | yoreparo.com |
175.193.206.165 | z-oleg.com |
32.175.71.248 | zeustracker.abuse.ch |
227.171.16.224 | zeylstra.nl |
179.247.42.214 | zhidao.baidu.com |
212.149.82.216 | zhidao.ikaka.com |
70.131.202.111 | ziggamza.net |
196.127.147.19 | zonavirus.com |
216.204.174.8 | zonealarm.com |
249.105.213.78 | zonelabs.com |
107.88.145.161 | zonelabs.fr |
234.83.90.137 | zonelog.co.uk |
185.160.49.126 | zs.kingsoft.com |
218.61.156.128 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 12644 | 12800 | 3.76874 | 55d274f88e5ab59aa27a86516437f7d8 |
.data | 20480 | 64 | 512 | 0.164757 | 75fe664fdcd708925b7ca712ee127c19 |
.rdata | 24576 | 1328 | 1536 | 3.03097 | 2707a7526abdc69c43f37dd3b6665e30 |
.bss | 28672 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.idata | 32768 | 800 | 1024 | 2.18489 | 4e803ebabfbd6fe3233c57c1b6e762a8 |
.rsrc | 36864 | 87232 | 87552 | 5.54166 | 34b5a2a0306aa053bf792aa7f84ba6c7 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a
Network Activity
URLs
URL | IP |
---|---|
hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab | 8.253.83.14 |
hxxp://www.googleadservices.com/pagead/aclk?sa=L&ai=C6BI79o-aV_WaKvLDyAOEs77YCN_1npNF6rGfu8oCwI23ARACIIHv8BcoBmClnqSGmCOgAZSqxKQDyAEBqQIqHi_k_6RlPqgDAaoEaE_QS_nyNYr4hTk5i6j5qy7lA2rHrMraUxWmRamSF16A7T-l6g3YUwF0HIFbHTjq-gcWfG7zuhhv1uv7xkfnT3FaeyZI1AgkXGdTWB3hSOEKEULM-EWG31ZiqTRdhS_vHJrdOZZYOaoCgAfU1btbqAemvhvYBwHYEww&num=2&client=ca-dp-demandmedia_test_js&val=ChAyMjI3NjkxOTZkMDkwMDRkEIGg6rwFGggxeX2KaRfVAiABKAE&sig=AOD64_3EJddS5GODohBfSL-7DXjDT2U5mw&adurl=https://browser.yandex.ua/ru/desktop/turbo/?net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725&utm_source=google&utm_medium=gdn&utm_campaign=Text_gdn&utm_term=&utm_content=buscaid.com | 173.194.113.217 |
hxxp://widgets.amung.us/small/00/2.png | 173.192.200.70 |
hxxp://widgets.amung.us/small/00/7.png | 173.192.200.70 |
hxxp://whos.amung.us/swidget/243dr2pd8x85 | 67.202.94.86 |
hxxp://whos.amung.us/swidget/26n2qf7pnk0x | 67.202.94.86 |
hxxp://www.google.com/images/cleardot.gif | 173.194.113.210 |
hxxp://repository.certum.pl/ca.cer | 213.222.201.214 |
hxxp://pass.yandex.ua/?retpath=http://browser.yandex.ua/desktop/turbo/?lang=ru&intl=1&net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725&utm_source=google&utm_medium=gdn&utm_campaign=Text_gdn&utm_term=&utm_content=buscaid.com&gclid=CLXb4_6il84CFcbUcgodOKcMhQ | 213.180.204.51 |
hxxp://googleads.g.doubleclick.net/aclk?sa=l&ai=C6BI79o-aV_WaKvLDyAOEs77YCN_1npNF6rGfu8oCwI23ARACIIHv8BcoBmClnqSGmCOgAZSqxKQDyAEBqQIqHi_k_6RlPqgDAaoEaE_QS_nyNYr4hTk5i6j5qy7lA2rHrMraUxWmRamSF16A7T-l6g3YUwF0HIFbHTjq-gcWfG7zuhhv1uv7xkfnT3FaeyZI1AgkXGdTWB3hSOEKEULM-EWG31ZiqTRdhS_vHJrdOZZYOaoCgAfU1btbqAemvhvYBwHYEww&num=2&sig=AOD64_1TeF4pzrytmr5FMsmWIoYEXlE6nA&adurl=https://browser.yandex.ua/ru/desktop/turbo/?net=yes&from=adwords_gdn__turbo_ru|&banerid=0860000725&utm_source=google&utm_medium=gdn&utm_campaign=Text_gdn&utm_term=&utm_content=buscaid.com&client=ca-dp-demandmedia_test_js | 173.194.113.218 |
hxxp://www.buscaid.com/?adf | 8.5.1.51 |
hxxp://08p60eo4hzuuw7vm4dvhsab1nwu0yx.ipcheker.com/ | 75.126.104.226 |
hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt | 8.253.83.14 |
hxxp://dp.g.doubleclick.net/apps/domainpark/domainpark.cgi?client=ca-dp-demandmedia_test_js&channel=mobile&domain_name=buscaid.com&output=html&drid=as-drid-oo-1750951074443211 | 173.194.113.218 |
browser.yandex.ua | 213.180.204.206 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):