Trojan.Win32.Fsysna.dqtl (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 28b840e7983b65a9933532f512a4480d
SHA1: e6622186f9e05f96171fe6ecd4ccb7a3463c12f9
SHA256: b64ed221860651ed9fbed9dfab0bc7bc83d02b6a78b36d3b585e51dce89bc41f
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 5117104 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: Cortado AG
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
MD5 | File path |
---|---|
502b2f50da14512b237657c411a6f828 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif |
aabe271ff61147d5cdd8da88c2f7e285 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif |
e07f48cd1f5b11ff6afe88055b417a16 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif |
3c999036703fb5a07e2cce0c716b03dc | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif |
2f7058f099eee250e96d26af65ea4cfc | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2011-Single@320][TJ].mp3.pif |
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61650 bytes in size. The following strings are added to the hosts file listed below:
173.224.216.58 | viabcp.com |
173.224.216.58 | www.viabcp.com |
173.224.216.58 | ww2.viabcp.com |
173.224.216.58 | bcpzonasegura.viabcp.com |
173.224.216.58 | hotmail.com |
173.224.216.58 | www.hotmail.com |
47.115.166.81 | 13iii.com |
80.17.205.83 | 15660808.co.kr |
193.255.70.234 | 2-spyware.com |
64.251.15.142 | 247fixes.com |
84.71.41.131 | 360.cn |
117.229.81.202 | 360.com |
231.211.13.29 | 360safe.cn |
101.207.214.5 | 360safe.com |
53.28.172.250 | 45pounds.com |
86.185.24.252 | 51nb.com |
200.100.144.147 | 9down.com |
139.163.89.55 | a-2.org |
90.240.48.44 | a188.x.akamai.net |
123.141.155.114 | abuse.ch |
237.56.19.197 | acs.pandasoftware.com |
108.120.221.105 | ad-aware-se.uptodown.com |
128.196.247.94 | ad.fastclick.net |
161.98.30.164 | ads.fastclick.net |
18.12.151.59 | agfirewall.ru |
145.76.96.223 | agnitum.com |
97.152.122.212 | agnitum.de |
198.54.162.27 | agnitum.fr |
244.224.26.110 | agnitum.ru |
182.32.227.18 | ahn.com.cn |
134.109.253.7 | ahnlab.com |
167.10.37.77 | akamai.net |
25.181.225.228 | aknow.prevx.com |
220.244.102.136 | aladdin.com |
171.65.129.125 | alert.rising.com.cn |
204.222.236.195 | alerta-antivirus.inteco.es |
62.137.100.22 | alerta-antivirus.red.es |
189.201.46.186 | alladdin.ru |
209.21.4.175 | aluriasoftware.com |
242.111.111.245 | analysis.seclab.tuwien.ac.at |
31.93.232.72 | andymanchesta.com |
226.89.177.48 | anti-virus-software-review.com |
178.233.203.37 | anti-virus.by |
211.67.243.40 | anti-virus.com |
69.49.107.191 | antirootkit.com |
7.45.52.99 | antispam.sunbeltsoftware.com |
215.190.78.88 | antispy.ru |
248.23.118.158 | antispyware.sunbeltsoftware.com |
106.6.238.241 | antivir.es |
233.1.183.217 | antiviraldp.com |
252.78.210.206 | antivirus-online.de |
29.235.249.208 | antivirus-tools.com |
75.218.113.103 | antivirus.about.com |
14.214.59.11 | antivirus.cai.com |
222.34.85.0 | antivirus.comodo.com |
255.192.192.70 | antivirus.hispavista.com |
112.174.57.153 | antivirus.sunbeltsoftware.com |
51.170.2.61 | antiy.net |
3.246.216.50 | anubis.iseclab.org |
36.148.68.121 | apac.trendmicro.com |
150.130.188.16 | ar.answers.yahoo.com |
20.126.133.180 | ar.atwola.com |
40.203.92.169 | arcabit.com |
73.104.199.239 | arcabit.pl |
187.87.63.66 | archive.bitdefender.com |
58.82.8.230 | arswp.com |
9.159.35.219 | arwww.fortinet.cz |
42.60.74.33 | asap.authentium.com |
156.43.194.116 | ashampoo.com |
95.39.140.92 | atazita.blogspot.com |
47.115.166.81 | atdmt.com |
80.17.205.83 | attechnical.com |
193.255.70.234 | atwola.com |
64.251.15.142 | au.mcafee.com |
84.71.41.131 | auditmypc.com |
117.229.81.202 | authentium.com |
231.211.13.29 | auwww.ealaddin.nl |
101.207.214.5 | avast-home.uptodown.com |
53.28.172.250 | avast.com |
86.185.24.252 | avast.ru |
200.100.144.147 | avg-antivirus.net |
139.163.89.55 | avg.com |
90.240.48.44 | avg.vo.llnwd.net |
123.141.155.114 | avgate.net |
237.56.19.197 | avgfrance.com |
108.120.221.105 | avhide.com |
128.196.247.94 | avira.com |
161.98.30.164 | avp.ch |
18.12.151.59 | avp.com |
145.76.96.223 | avp.ru |
97.152.122.212 | avpclub.ddns.info |
198.54.162.27 | avu.zonelabs.com |
244.224.26.110 | avx.rob-have.net |
182.32.227.18 | awaps.net |
134.109.253.7 | b-have.orgbitdefender-ar.com |
167.10.37.77 | babooforum.com.br |
25.181.225.228 | backup.comodo.com |
220.244.102.136 | baike.360.cn |
171.65.129.125 | baike.360.com |
204.222.236.195 | bakunos.com |
62.137.100.22 | banner.fastclick.net |
189.201.46.186 | banners.fastclick.net |
209.21.4.175 | baristamagazine.com |
242.111.111.245 | basetendencies.com |
31.93.232.72 | bbs.360.cn |
226.89.177.48 | bbs.360safe.cn |
178.233.203.37 | bbs.360safe.com |
211.67.243.40 | bbs.cfan.com.cn |
69.49.107.191 | bbs.cpcw.com |
7.45.52.99 | bbs.dswlab.com |
215.190.78.88 | bbs.duba.net |
248.23.118.158 | bbs.ikaka.com |
106.6.238.241 | bbs.janmeng.com |
233.1.183.217 | bbs.kafan.cn |
252.78.210.206 | bbs.kafan.com |
29.235.249.208 | bbs.kaspersky.com.cn |
75.218.113.103 | bbs.kpfans.com |
14.214.59.11 | bbs.mcafeefans.com |
222.34.85.0 | bbs.s-sos.net |
255.192.192.70 | bbs.sucop.com |
112.174.57.153 | bbs.taisha.org |
51.170.2.61 | bbs.trendmicro.com.cn |
3.246.216.50 | bbs.winzheng.com |
36.148.68.121 | bestofewan.com |
150.130.188.16 | beta.anti-virus.by |
20.126.133.180 | bg.virusblokada.com |
40.203.92.169 | bhsbees.com |
73.104.199.239 | bitcity.info |
187.87.63.66 | bitcity.org |
58.82.8.230 | bitdefender.co.uk |
9.159.35.219 | bitdefender.com |
42.60.74.33 | bitdefender.com.ua |
156.43.194.116 | bitdefender.es |
95.39.140.92 | bitdefender.org |
47.115.166.81 | bitdefender.secyber.net |
80.17.205.83 | bitdefenderchina.com |
193.255.70.234 | bitdefenderguatemala.com |
64.251.15.142 | bitdefendermalaysia.com |
84.71.41.131 | bitdefendertaiwan.com |
117.229.81.202 | bitdefenderuruguay.com |
231.211.13.29 | bitdefenderusa.com |
101.207.214.5 | biz.nprotect.com |
53.28.172.250 | bkav.com.vn |
86.185.24.252 | blackice.iss.net |
200.100.144.147 | bleedingthreats.net |
139.163.89.55 | bleepingcomputer.com |
90.240.48.44 | blitzblank.com |
123.141.155.114 | blog.hispasec.com |
237.56.19.197 | blog.threatfire.com |
108.120.221.105 | blog.titanium-jewelry.com |
128.196.247.94 | blog.trendmicro.com |
161.98.30.164 | blogs.icerocket.com |
18.12.151.59 | blogs.protegerse.com |
145.76.96.223 | blogschapines.com |
97.152.122.212 | boardreader.com |
198.54.162.27 | bobbondart.com |
244.224.26.110 | br.mcafee.com |
182.32.227.18 | br.trendmicro.com |
134.109.253.7 | brazil.kaspersky.com |
167.10.37.77 | buddy.bitdefender.com |
25.181.225.228 | bugs.clamav.net |
220.244.102.136 | buscafacil.com |
171.65.129.125 | buscalo.in |
204.222.236.195 | busco.in |
62.137.100.22 | buy.bitdefender-es.com |
189.201.46.186 | buy.bitdefender.com |
209.21.4.175 | buy.bitdefender.de |
242.111.111.245 | buy.drweb.com |
31.93.232.72 | buy.rising.com.cn |
226.89.177.48 | ca.com |
178.233.203.37 | cacomvip.ca.com |
211.67.243.40 | cai.com |
69.49.107.191 | canada.karuna-shechen.org |
7.45.52.99 | castlecops.com |
215.190.78.88 | castlecrops.com |
248.23.118.158 | ccslaughterspdx.com |
106.6.238.241 | cddchiangmai.net |
233.1.183.217 | cdn.atwola.com |
252.78.210.206 | center.rising.com.cn |
29.235.249.208 | centralcommand.com |
75.218.113.103 | cert.org |
14.214.59.11 | cfan.com.cn |
222.34.85.0 | cgi.clamav.net |
255.192.192.70 | changedetection.com |
112.174.57.221 | changelog.fr |
119.238.70.129 | channelpartner.trendmicro.com |
71.58.28.118 | chickensroamfree.com |
104.216.136.189 | chkrootkit.org |
218.198.0.84 | chollian.nprotect.co.kr |
88.194.201.248 | cisrt.org |
108.15.159.237 | cit.kookmin.ac.kr |
141.172.11.51 | clamav.net |
255.155.131.134 | clamwin.com |
126.150.76.42 | click.atdmt.com |
77.227.103.31 | clicks.atdmt.com |
110.128.142.101 | cloudprotection.pandasecurity.com |
224.111.6.184 | clubic.com |
163.107.208.160 | cmmings.cn |
115.183.234.149 | cn.mcafee.com |
148.85.17.151 | cn.sophos.com |
5.67.138.46 | cn.trendmicro.com |
132.63.83.210 | codehard.wordpress.com |
152.139.109.199 | cohartuk.com |
185.41.149.14 | commentcamarche.net |
43.23.81.97 | community.thaiware.com |
169.19.26.73 | comodo.com |
121.96.240.62 | company.drweb.com |
154.253.92.64 | company.hauri.co.kr |
12.168.212.215 | company.hauri.net |
207.231.157.123 | computing.net |
158.52.116.112 | comunidad.wilkinsonpc.com.co |
191.209.223.182 | configurarequipos.com |
49.124.87.9 | coresecurity.com |
176.187.33.173 | cou85.com |
196.8.59.162 | cowsmo.com |
229.166.98.232 | cpsecure.com |
86.80.219.127 | csc.rising.com.cn |
213.144.164.35 | cureit.ru |
165.220.190.24 | customer.symantec.com |
10.122.230.95 | customers.drweb.com |
56.36.94.178 | cutlines.org |
250.100.39.86 | cwsandbox.org |
202.177.65.75 | cybercrime.pandasecurity.com |
235.78.105.145 | cyberdefender.com |
93.249.37.40 | cybertechhelp.com |
32.56.170.204 | daboweb.com |
239.133.197.193 | daniloff.net |
16.34.48.7 | daniweb.com |
130.205.168.90 | darkclockers.com |
1.12.114.254 | dazhizhu.cn |
21.89.72.243 | de.bitdefender.com |
54.179.179.57 | de.mcafee.com |
99.161.44.140 | de.trendmicro.com |
38.157.245.116 | deckard.geekstogo.com |
246.45.15.105 | deerfield.com |
23.135.55.108 | defalcos.com |
137.117.175.3 | definitions.symantec.com |
75.113.120.167 | dell.symantec.com |
27.2.146.156 | demos.eset.es |
60.91.186.226 | descargas.eset.es |
174.74.50.53 | dev.depeuter.org |
45.69.251.29 | developmentdrums.org |
64.146.22.18 | dialognauka.ru |
97.47.61.20 | diamondcs.com.au |
143.30.181.171 | dicasweb.com.br |
82.26.127.79 | discussions.virtualdr.com |
34.102.153.68 | disk-encryption.comodo.com |
67.4.4.138 | dl.360safe.com |
180.242.125.221 | dl1.antivir-pe.com |
119.238.70.129 | dl1.antivir-pe.de |
71.58.28.118 | dl1.antivir.de |
104.216.136.189 | dl1.avgate.net |
218.198.0.84 | dl10.freeav.net |
88.194.201.248 | dl2.antivir-pe.com |
108.15.159.237 | dl2.antivir-pe.de |
141.172.11.51 | dl2.antivir.de |
255.155.131.134 | dl2.avgate.net |
126.150.76.42 | dl3.antivir-pe.de |
77.227.103.31 | dl3.antivir.de |
110.128.142.101 | dl3.avgate.net |
224.111.6.184 | dl4.antivir-pe.com |
163.107.208.160 | dl4.antivir-pe.de |
115.183.234.149 | dl4.antivir.de |
148.85.17.151 | dl4.avgate.net |
5.67.138.46 | dl5.avgate.net |
132.63.83.210 | dl6.avgate.net |
152.139.109.199 | dl7.avgate.net |
185.41.149.14 | dl8.avgate.net |
43.23.81.97 | dl8.freeav.net |
169.19.26.73 | dl9.avgate.net |
121.96.240.62 | dl9.freeav.net |
154.253.92.64 | dnl-cd1.kaspersky-labs.com |
12.168.212.215 | dnl-cd10.kaspersky-labs.com |
207.231.157.123 | dnl-cd11.kaspersky-labs.com |
158.52.116.112 | dnl-cd12.kaspersky-labs.com |
191.209.223.182 | dnl-cd13.kaspersky-labs.com |
49.124.87.9 | dnl-cd2.kaspersky-labs.com |
176.187.33.173 | dnl-cd3.kaspersky-labs.com |
196.8.59.162 | dnl-cd4.kaspersky-labs.com |
229.166.98.232 | dnl-cd5.kaspersky-labs.com |
86.80.219.127 | dnl-cd6.kaspersky-labs.com |
213.144.164.35 | dnl-cd7.kaspersky-labs.com |
165.220.190.24 | dnl-cd8.kaspersky-labs.com |
10.122.230.95 | dnl-cd9.kaspersky-labs.com |
56.36.94.178 | dnl-cn1.kaspersky-labs.com |
250.100.39.86 | dnl-cn10.kaspersky-labs.com |
202.177.65.75 | dnl-cn11.kaspersky-labs.com |
235.78.105.145 | dnl-cn12.kaspersky-labs.com |
93.249.37.40 | dnl-cn13.kaspersky-labs.com |
32.56.170.204 | dnl-cn14.kaspersky-labs.com |
239.133.197.193 | dnl-cn15.kaspersky-labs.com |
16.34.48.7 | dnl-cn2.kaspersky-labs.com |
130.205.168.90 | dnl-cn3.kaspersky-labs.com |
1.12.114.254 | dnl-cn4.kaspersky-labs.com |
21.89.72.243 | dnl-cn5.kaspersky-labs.com |
54.179.179.57 | dnl-cn6.kaspersky-labs.com |
99.161.44.140 | dnl-cn7.kaspersky-labs.com |
38.157.245.116 | dnl-cn8.kaspersky-labs.com |
246.45.15.105 | dnl-cn9.kaspersky-labs.com |
23.135.55.108 | dnl-eu1.kaspersky-labs.com |
137.117.175.3 | dnl-eu10.kaspersky-labs.com |
75.113.120.167 | dnl-eu11.kaspersky-labs.com |
27.2.146.156 | dnl-eu12.kaspersky-labs.com |
60.91.186.226 | dnl-eu13.kaspersky-labs.com |
174.74.50.53 | dnl-eu14.kaspersky-labs.com |
45.69.251.29 | dnl-eu15.kaspersky-labs.com |
64.146.22.18 | dnl-eu2.kaspersky-labs.com |
97.47.61.20 | dnl-eu3.kaspersky-labs.com |
143.30.181.171 | dnl-eu4.kaspersky-labs.com |
82.26.127.79 | dnl-eu5.kaspersky-labs.com |
34.102.153.68 | dnl-eu6.kaspersky-labs.com |
67.4.4.138 | dnl-eu7.kaspersky-labs.com |
180.242.125.221 | dnl-eu8.kaspersky-labs.com |
119.238.70.129 | dnl-eu9.kaspersky-labs.com |
71.58.28.118 | dnl-jp1.kaspersky-labs.com |
104.216.136.189 | dnl-jp10.kaspersky-labs.com |
218.198.0.84 | dnl-jp11.kaspersky-labs.com |
88.194.201.248 | dnl-jp12.kaspersky-labs.com |
108.15.159.237 | dnl-jp13.kaspersky-labs.com |
141.172.11.51 | dnl-jp14.kaspersky-labs.com |
255.155.131.134 | dnl-jp15.kaspersky-labs.com |
126.150.76.42 | dnl-jp2.kaspersky-labs.com |
77.227.103.31 | dnl-jp3.kaspersky-labs.com |
110.128.142.101 | dnl-jp4.kaspersky-labs.com |
224.111.6.184 | dnl-jp5.kaspersky-labs.com |
163.107.208.160 | dnl-jp6.kaspersky-labs.com |
115.183.234.149 | dnl-jp7.kaspersky-labs.com |
148.85.17.151 | dnl-jp8.kaspersky-labs.com |
5.67.138.46 | dnl-jp9.kaspersky-labs.com |
132.63.83.210 | dnl-kr1.kaspersky-labs.com |
152.139.109.199 | dnl-kr10.kaspersky-labs.com |
185.41.149.14 | dnl-kr11.kaspersky-labs.com |
43.23.81.97 | dnl-kr12.kaspersky-labs.com |
169.19.26.73 | dnl-kr13.kaspersky-labs.com |
121.96.240.62 | dnl-kr15.kaspersky-labs.com |
154.253.92.64 | dnl-kr2.kaspersky-labs.com |
12.168.212.215 | dnl-kr3.kaspersky-labs.com |
207.231.157.123 | dnl-kr4.kaspersky-labs.com |
158.52.116.112 | dnl-kr5.kaspersky-labs.com |
191.209.223.182 | dnl-kr6.kaspersky-labs.com |
49.124.87.9 | dnl-kr7.kaspersky-labs.com |
176.187.33.173 | dnl-kr8.kaspersky-labs.com |
196.8.59.162 | dnl-kr9.kaspersky-labs.com |
229.166.98.232 | dnl-ru1.kaspersky-labs.com |
138.132.15.179 | dnl-ru10.kaspersky-labs.com |
9.196.216.87 | dnl-ru11.kaspersky-labs.com |
217.16.242.77 | dnl-ru12.kaspersky-labs.com |
62.174.26.147 | dnl-ru13.kaspersky-labs.com |
108.88.146.230 | dnl-ru14.kaspersky-labs.com |
46.152.91.138 | dnl-ru15.kaspersky-labs.com |
254.229.118.127 | dnl-ru2.kaspersky-labs.com |
31.130.157.197 | dnl-ru3.kaspersky-labs.com |
145.45.89.92 | dnl-ru4.kaspersky-labs.com |
84.108.222.0 | dnl-ru5.kaspersky-labs.com |
35.185.249.245 | dnl-ru6.kaspersky-labs.com |
68.86.100.59 | dnl-ru7.kaspersky-labs.com |
182.1.220.142 | dnl-ru8.kaspersky-labs.com |
53.65.166.50 | dnl-ru9.kaspersky-labs.com |
73.141.124.39 | dnl-us1.kaspersky-labs.com |
106.231.231.109 | dnl-us10.kaspersky-labs.com |
151.213.96.192 | dnl-us11.kaspersky-labs.com |
90.209.41.168 | dnl-us12.kaspersky-labs.com |
42.97.67.158 | dnl-us13.kaspersky-labs.com |
75.187.107.160 | dnl-us14.kaspersky-labs.com |
189.169.227.55 | dnl-us15.kaspersky-labs.com |
127.165.172.219 | dnl-us2.kaspersky-labs.com |
79.54.199.208 | dnl-us3.kaspersky-labs.com |
112.143.238.22 | dnl-us4.kaspersky-labs.com |
226.126.102.105 | dnl-us5.kaspersky-labs.com |
97.121.47.81 | dnl-us6.kaspersky-labs.com |
116.198.74.70 | dnl-us7.kaspersky-labs.com |
149.99.113.72 | dnl-us8.kaspersky-labs.com |
195.82.233.223 | dnl-us9.kaspersky-labs.com |
134.78.179.131 | dougknox.com |
86.154.205.120 | down.360safe.cn |
119.56.56.190 | down.360safe.com |
232.38.177.17 | download.avg.com |
171.34.122.181 | download.bleepingcomputer.com |
123.110.80.171 | download.com |
156.12.188.241 | download.com.vn |
14.250.52.136 | download.eset.com |
140.246.253.44 | download.f-secure.com |
160.67.212.33 | download.mcafee.com |
193.224.63.103 | download.microsoft.com |
51.207.183.186 | download.microsoft.comguru0.grisoft.cz |
178.202.128.94 | download.nai.com |
129.23.155.83 | download.norman.no |
162.180.194.153 | download.rising.com.cn |
20.163.58.236 | download.softpedia.com |
215.159.4.212 | download.sysinternals.com |
167.235.30.201 | download0.avast.com |
200.137.69.203 | download1.avast.com |
57.119.190.98 | download1.emsisoft.com |
184.115.135.6 | download1.quickheal.com |
204.191.161.252 | download10.quickheal.com |
237.93.201.66 | download100.avast.com |
95.75.133.149 | download1us.softpedia.com |
221.71.78.125 | download2.avast.com |
173.148.37.114 | download2.quickheal.com |
206.49.144.116 | download200.avast.com |
64.220.8.11 | download201.avast.com |
3.27.209.175 | download202.avast.com |
210.104.168.164 | download203.avast.com |
243.5.19.234 | download204.avast.com |
101.176.139.61 | download205.avast.com |
228.240.85.225 | download206.avast.com |
248.60.111.214 | download207.avast.com |
25.218.150.28 | download208.avast.com |
138.132.15.179 | download209.avast.com |
9.196.216.87 | download210.avast.com |
217.16.242.77 | download211.avast.com |
62.174.26.147 | download212.avast.com |
108.88.146.230 | download213.avast.com |
46.152.91.138 | download214.avast.com |
254.229.118.127 | download3.avast.com |
31.130.157.197 | download3.quickheal.com |
145.45.89.92 | download4.avast.com |
84.108.222.0 | download4.emsisoft.com |
35.185.249.245 | download4.quickheal.com |
68.86.100.59 | download5.avast.com |
182.1.220.142 | download5.emsisoft.com |
53.65.166.50 | download5.quickheal.com |
73.141.124.39 | download501.avast.com |
106.231.231.109 | download502.avast.com |
151.213.96.192 | download503.avast.com |
90.209.41.168 | download504.avast.com |
42.97.67.158 | download505.avast.com |
75.187.107.160 | download511.avast.com |
189.169.227.55 | download512.avast.com |
127.165.172.219 | download513.avast.com |
79.54.199.208 | download514.avast.com |
112.143.238.22 | download515.avast.com |
226.126.102.105 | download516.avast.com |
97.121.47.81 | download535.avast.com |
116.198.74.70 | download6.avast.com |
149.99.113.72 | download6.quickheal.com |
195.82.233.223 | download600.avast.com |
134.78.179.131 | download601.avast.com |
86.154.205.120 | download602.avast.com |
119.56.56.190 | download603.avast.com |
232.38.177.17 | download604.avast.com |
171.34.122.181 | download605.avast.com |
123.110.80.171 | download606.avast.com |
156.12.188.241 | download607.avast.com |
14.250.52.136 | download608.avast.com |
140.246.253.44 | download609.avast.com |
160.67.212.33 | download617.avast.com |
193.224.63.103 | download618.avast.com |
51.207.183.186 | download619.avast.com |
178.202.128.94 | download620.avast.com |
129.23.155.83 | download621.avast.com |
162.180.194.153 | download622.avast.com |
20.163.58.236 | download623.avast.com |
215.159.4.212 | download624.avast.com |
167.235.30.201 | download625.avast.com |
200.137.69.203 | download626.avast.com |
57.119.190.98 | download627.avast.com |
184.115.135.6 | download628.avast.com |
204.191.161.252 | download629.avast.com |
237.93.201.66 | download630.avast.com |
95.75.133.149 | download631.avast.com |
221.71.78.125 | download632.avast.com |
173.148.37.114 | download633.avast.com |
206.49.144.116 | download634.avast.com |
64.220.8.11 | download635.avast.com |
3.27.209.175 | download636.avast.com |
210.104.168.164 | download637.avast.com |
243.5.19.234 | download638.avast.com |
101.176.139.61 | download639.avast.com |
228.240.85.225 | download640.avast.com |
248.60.111.214 | download641.avast.com |
25.218.150.28 | download642.avast.com |
138.132.15.179 | download643.avast.com |
9.196.216.87 | download644.avast.com |
217.16.242.77 | download645.avast.com |
62.174.26.147 | download646.avast.com |
108.88.146.230 | download647.avast.com |
46.152.91.138 | download648.avast.com |
254.229.118.127 | download649.avast.com |
31.130.157.197 | download650.avast.com |
145.45.89.92 | download651.avast.com |
84.108.222.0 | download652.avast.com |
35.185.249.245 | download653.avast.com |
68.86.100.59 | download654.avast.com |
182.1.220.142 | download655.avast.com |
53.65.166.50 | download656.avast.com |
73.141.124.39 | download658.avast.com |
106.231.231.109 | download659.avast.com |
151.213.96.192 | download660.avast.com |
90.209.41.168 | download661.avast.com |
42.97.67.158 | download662.avast.com |
75.187.107.160 | download663.avast.com |
189.169.227.55 | download664.avast.com |
127.165.172.219 | download665.avast.com |
79.54.199.208 | download666.avast.com |
112.143.238.22 | download667.avast.com |
226.126.102.105 | download668.avast.com |
97.121.47.81 | download669.avast.com |
116.198.74.70 | download670.avast.com |
149.99.113.72 | download671.avast.com |
195.82.233.223 | download672.avast.com |
202.146.247.199 | download673.avast.com |
154.222.17.188 | download674.avast.com |
187.124.124.2 | download675.avast.com |
44.106.245.85 | download676.avast.com |
239.102.190.249 | download677.avast.com |
191.178.148.238 | download678.avast.com |
224.80.0.53 | download679.avast.com |
82.62.120.204 | download680.avast.com |
208.58.65.112 | download681.avast.com |
228.135.24.101 | download682.avast.com |
5.36.131.171 | download683.avast.com |
119.19.251.254 | download684.avast.com |
246.14.196.162 | download685.avast.com |
197.91.223.151 | download686.avast.com |
230.248.6.221 | download687.avast.com |
88.231.126.48 | download688.avast.com |
27.227.72.24 | download689.avast.com |
235.47.98.13 | download690.avast.com |
12.205.137.15 | download691.avast.com |
125.187.2.166 | download692.avast.com |
252.183.203.74 | download693.avast.com |
16.3.229.63 | download694.avast.com |
49.161.13.134 | download695.avast.com |
163.143.201.217 | download696.avast.com |
33.139.146.193 | download697.avast.com |
241.216.105.182 | download698.avast.com |
18.117.212.184 | download699.avast.com |
132.32.76.79 | download7.avast.com |
71.95.21.243 | download7.quickheal.com |
22.172.236.232 | download700.avast.com |
55.73.87.46 | download701.avast.com |
169.244.207.129 | download702.avast.com |
40.52.153.37 | download703.avast.com |
60.128.179.26 | download704.avast.com |
93.30.218.96 | download705.avast.com |
206.200.83.247 | download706.avast.com |
77.8.28.155 | download707.avast.com |
29.84.54.144 | download708.avast.com |
130.242.94.215 | download709.avast.com |
176.156.214.42 | download72.avast.com |
114.220.159.206 | download73.avast.com |
66.41.186.195 | download74.avast.com |
99.198.225.9 | download75.avast.com |
213.113.157.160 | download76.avast.com |
152.176.34.68 | download77.avast.com |
103.253.61.57 | download78.avast.com |
136.154.168.127 | download79.avast.com |
250.69.32.210 | download8.quickheal.com |
121.133.234.118 | download80.avast.com |
141.209.192.107 | download81.avast.com |
174.43.43.177 | download82.avast.com |
219.25.164.4 | download83.avast.com |
158.21.109.236 | download84.avast.com |
110.165.135.225 | download85.avast.com |
143.255.175.228 | download9.quickheal.com |
1.237.39.123 | download900.avast.com |
195.233.240.31 | download901.avast.com |
147.122.11.20 | download902.avast.com |
180.211.50.90 | download903.avast.com |
38.194.170.173 | download904.avast.com |
165.189.115.149 | download905.avast.com |
184.10.142.138 | download906.avast.com |
217.167.181.140 | download907.avast.com |
7.150.45.35 | download908.avast.com |
202.146.247.199 | download909.avast.com |
154.222.17.188 | download91.avast.com |
187.124.124.2 | download910.avast.com |
44.106.245.85 | download911.avast.com |
239.102.190.249 | download912.avast.com |
191.178.148.238 | download913.avast.com |
224.80.0.53 | download914.avast.com |
82.62.120.204 | download915.avast.com |
208.58.65.112 | download916.avast.com |
228.135.24.101 | download917.avast.com |
5.36.131.171 | download918.avast.com |
119.19.251.254 | download919.avast.com |
246.14.196.162 | download92.avast.com |
197.91.223.151 | download920.avast.com |
230.248.6.221 | download921.avast.com |
88.231.126.48 | download922.avast.com |
27.227.72.24 | download923.avast.com |
235.47.98.13 | download924.avast.com |
12.205.137.15 | download925.avast.com |
125.187.2.166 | download926.avast.com |
252.183.203.74 | download927.avast.com |
16.3.229.63 | download928.avast.com |
49.161.13.134 | download929.avast.com |
163.143.201.217 | download93.avast.com |
33.139.146.193 | download930.avast.com |
241.44.188.10 | download931.avast.com |
102.201.40.12 | download932.avast.com |
216.116.160.163 | download933.avast.com |
155.179.105.71 | download934.avast.com |
106.0.64.60 | download935.avast.com |
139.157.171.130 | download936.avast.com |
253.72.35.213 | download937.avast.com |
124.135.237.121 | download938.avast.com |
144.212.7.110 | download939.avast.com |
176.114.46.180 | download94.avast.com |
34.28.167.75 | download940.avast.com |
161.92.112.239 | download941.avast.com |
113.168.138.228 | download942.avast.com |
214.70.178.42 | download943.avast.com |
4.240.42.126 | download944.avast.com |
198.48.243.34 | download945.avast.com |
150.125.13.23 | download946.avast.com |
183.26.53.93 | download947.avast.com |
41.197.241.244 | download948.avast.com |
236.4.118.152 | download949.avast.com |
187.81.145.141 | download95.avast.com |
220.238.252.211 | download950.avast.com |
78.153.116.38 | download951.avast.com |
205.216.62.202 | download952.avast.com |
225.37.20.191 | download953.avast.com |
1.127.127.5 | download954.avast.com |
47.109.248.88 | download955.avast.com |
242.105.193.64 | download956.avast.com |
194.249.219.53 | download957.avast.com |
227.83.3.56 | download958.avast.com |
85.65.123.207 | download959.avast.com |
23.61.68.115 | download96.avast.com |
231.206.94.104 | download960.avast.com |
8.39.134.174 | download961.avast.com |
122.22.254.1 | download962.avast.com |
249.17.199.233 | download963.avast.com |
12.94.226.222 | download964.avast.com |
45.251.9.224 | download965.avast.com |
91.234.129.119 | download966.avast.com |
30.229.75.27 | download967.avast.com |
238.50.101.16 | download968.avast.com |
14.208.208.86 | download969.avast.com |
128.190.73.169 | download97.avast.com |
67.186.18.77 | download970.avast.com |
19.6.232.66 | download971.avast.com |
52.164.84.136 | download972.avast.com |
166.146.204.32 | download973.avast.com |
36.142.149.196 | download974.avast.com |
56.219.107.185 | download975.avast.com |
89.120.215.255 | download976.avast.com |
203.103.79.82 | download977.avast.com |
74.98.24.246 | download978.avast.com |
25.175.51.235 | download979.avast.com |
58.76.90.49 | download98.avast.com |
172.59.210.132 | download980.avast.com |
111.54.156.108 | download99.avast.com |
63.131.182.97 | downloads-eu1.kaspersky-labs.com |
95.33.221.99 | downloads-eu2.kaspersky-labs.com |
209.15.86.250 | downloads-eu3.kaspersky-labs.com |
80.11.31.158 | downloads-eu4.kaspersky-labs.com |
100.87.57.147 | downloads-us1.kaspersky-labs.com |
133.245.97.217 | downloads-us2.kaspersky-labs.com |
247.227.29.45 | downloads-us3.kaspersky-labs.com |
117.223.230.21 | downloads-us4.kaspersky-labs.com |
69.44.188.10 | downloads.andymanchesta.com |
102.201.40.12 | downloads.malwarebytes.org |
216.116.160.163 | downloads.microsoft.com |
155.179.105.71 | downloads.My-eTrust.com |
106.0.64.60 | downloads1.kaspersky-labs.com |
139.157.171.130 | downloads2.kaspersky-labs.com |
253.72.35.213 | downloads3.kaspersky-labs.com |
124.135.237.121 | downloads4.kaspersky-labs.com |
144.212.7.110 | downloads5.kaspersky-labs.com |
176.114.46.180 | dr-web-cureit.softonic.com |
34.28.167.75 | drsolomon.com |
161.92.112.239 | drweb-inside.com |
113.168.138.228 | drweb.com |
214.70.178.42 | drweb.com.es |
4.240.42.126 | drweb.net |
198.48.243.34 | drwebinside.com |
150.125.13.23 | dswlab.com |
183.26.53.93 | duba.net |
41.197.241.56 | ealaddin.net |
48.72.186.220 | ealaddin.orgeshop.aladdin.com |
255.149.213.209 | easy-vpn.comodo.com |
32.50.64.23 | edm.symantec.com |
146.221.184.106 | education.symantec.com |
17.28.130.14 | eeload.com |
37.105.88.3 | eeye.com |
69.195.195.73 | eicar.org |
115.177.60.156 | elblogdemanu.com |
54.173.5.132 | elitepvpers.de |
6.61.31.121 | emea.trendmicro.com |
39.151.71.123 | emsisoft.com |
153.133.191.19 | emsisoft.de |
91.129.136.183 | encarta.msn.com |
43.18.162.172 | engine.awaps.net |
76.107.202.242 | enterprisesecur.symantec.com |
190.90.66.69 | eos.eset.es |
61.85.11.45 | eradicatespyware.net |
80.162.38.34 | es.answers.yahoo.com |
113.63.77.36 | es.kioskea.net |
159.46.197.187 | es.mcafee.com |
98.41.143.95 | es.trendmicro.com |
50.118.169.84 | es.wasalive.com |
82.20.20.154 | esafe.com |
196.2.141.237 | esecurity.livecall.co.kr |
135.254.86.145 | eset-la.com |
87.74.44.134 | eset.com |
120.232.151.204 | eset.es |
234.214.16.100 | eset.sk |
104.210.217.8 | esp.sophos.com |
124.31.175.253 | espanol.answers.yahoo.com |
157.188.27.67 | espanol.dir.groups.yahoo.com |
15.171.147.150 | espanol.groups.yahoo.com |
142.166.92.58 | esupport.trendmicro.com |
93.243.119.47 | et.symantec.com |
126.144.158.117 | etrr.co.uk |
240.127.22.200 | eugrantsadvisor.cz |
179.122.224.176 | eugrantsadvisor.de |
131.199.250.165 | eval.symantec.com |
163.101.33.167 | ewido.net |
21.83.154.62 | exchangeyourcareer.net |
148.79.99.226 | experts-exchange.com |
168.155.125.215 | f-prot.com |
201.57.165.29 | f-secure.com |
59.39.97.113 | f-secure.frf-secure.hk |
185.35.42.89 | f-secure.nlfsecure.com |
137.112.0.78 | fastclick.net |
170.13.108.80 | feedage.com |
28.184.228.231 | feeds.sophos.com |
223.247.173.139 | feeds.trendmicro.com |
174.68.132.128 | file.ikaka.cn |
207.225.239.198 | file.ikaka.com |
65.140.103.25 | file.net |
192.203.49.189 | files.avast.com |
212.24.75.178 | files.filefont.com |
244.182.114.248 | files.trendmicro-europe.com |
102.96.235.143 | filseclab.com |
229.160.180.51 | final4ever.com |
181.236.206.40 | finjan.com |
26.138.246.110 | firewall.sunbeltsoftware.com |
72.52.110.194 | firewallguide.com |
10.116.55.102 | fixmyim.com |
218.193.81.91 | foro.ethek.com |
251.94.121.161 | foros.toxico-pc.com |
109.9.53.56 | foros.zonavirus.com |
48.72.186.220 | forospanish.com |
255.149.213.209 | forospyware.com |
32.50.64.23 | forospyware.es |
146.221.184.106 | fortiguardcenter.com |
17.28.130.14 | fortihero.com |
37.105.88.3 | fortilog.com |
69.195.195.73 | fortinet.co.at |
115.177.60.156 | fortinet.com |
54.173.5.132 | fortiprotect.com |
6.61.31.121 | fortiwifi.com |
39.203.123.176 | forum.clubedohardware.com.br |
205.185.243.71 | forum.emsisoft.com |
143.181.188.235 | forum.hardware.fr |
95.70.214.224 | forum.hijackthis.de |
128.159.254.38 | forum.ikaka.com |
242.142.118.121 | forum.jiangmin.com |
113.137.63.97 | forum.kaspersky.com |
132.214.90.86 | forum.malekal.com |
165.115.129.88 | forum.piriform.com |
211.98.249.239 | forum.securitycadets.com |
150.93.195.147 | forum.sysinternals.com |
102.170.221.136 | forum.telecharger.01net.com |
135.72.72.206 | forum.tweaks.com |
248.54.193.33 | forum.zazana.com |
187.50.138.197 | forums.cnet.com |
139.126.96.186 | forums.comodo.com |
172.28.204.1 | forums.devshed.com |
30.10.68.152 | forums.maddoktor2.com |
156.6.13.60 | forums.majorgeeks.com |
176.83.227.49 | forums.techguy.org |
209.240.79.119 | forums.whatthetech.com |
67.223.199.202 | fr.bitdefender.com |
194.218.144.110 | fr.drweb.com |
145.39.171.99 | fr.mcafee.com |
178.196.210.169 | fr.trendmicro.com |
36.179.74.252 | fr1.drweb.com |
231.174.20.228 | fr2.drweb.com |
183.251.46.217 | fr3.drweb.com |
216.153.85.219 | fr4.drweb.com |
73.135.206.114 | fr5.drweb.com |
200.131.151.22 | fr6.drweb.com |
220.207.177.11 | fr7.drweb.com |
253.109.217.82 | fractus.mat.uson.mx |
111.91.149.165 | free-av.com |
237.87.94.141 | free-av.net |
189.164.52.130 | free.antivirus.com |
222.65.160.132 | free.avg.com |
80.236.24.27 | free.drweb.com |
19.43.225.191 | free.grisoft.com |
226.120.184.180 | free.grisoft.cz |
3.21.35.250 | free.pandasecurity.com |
117.192.155.77 | free.prevx.com |
244.255.101.241 | free.tinypicbox.com |
8.76.127.230 | freeav.com |
41.234.166.44 | freeav.net |
154.148.31.195 | freespywareremoval.info |
25.212.232.103 | frisk-software.com |
233.32.2.92 | fsc.norman.com |
78.190.42.163 | fsecure.nlwebyard.com |
124.104.162.246 | ftp.avp.com |
62.168.107.154 | ftp.bitdefender.com |
14.245.133.143 | ftp.ca.co |
47.146.173.213 | ftp.ca.com |
161.61.105.108 | ftp.customer.symantec.com |
100.124.238.16 | ftp.dispatch.mcafee.com |
51.201.9.5 | ftp.download.mcafee.com |
84.102.116.75 | ftp.downloads-eu1.kaspersky-labs.com |
198.17.236.158 | ftp.downloads-eu2.kaspersky-labs.com |
69.80.182.66 | ftp.downloads-eu3.kaspersky-labs.com |
89.157.140.55 | ftp.downloads-eu4.kaspersky-labs.com |
122.247.247.125 | ftp.downloads-us1.kaspersky-labs.com |
235.41.180.20 | ftp.downloads-us2.kaspersky-labs.com |
174.37.125.252 | ftp.downloads-us3.kaspersky-labs.com |
126.181.151.241 | ftp.downloads-us4.kaspersky-labs.com |
159.15.191.244 | ftp.downloads1.kaspersky-labs.com |
17.253.55.139 | ftp.downloads2.kaspersky-labs.com |
211.249.0.47 | ftp.downloads3.kaspersky-labs.com |
163.138.26.36 | ftp.downloads4.kaspersky-labs.com |
196.227.66.106 | ftp.drweb.com |
54.210.186.189 | ftp.esafe.com |
181.205.131.165 | ftp.europe.f-secure.com |
200.26.158.154 | ftp.f-prot.com |
233.183.197.156 | ftp.f-secure.com |
23.166.61.51 | ftp.grisoft.com |
218.161.7.215 | ftp.kaspersky-labs.com |
170.238.33.204 | ftp.kaspersky.com |
202.140.140.18 | ftp.kasperskylab.ru |
60.122.5.101 | ftp.liveupdate.symantec.com |
255.118.206.9 | ftp.liveupdate.symantecliveupdate.com |
207.194.164.254 | ftp.mast.mcafee.com |
240.96.16.69 | ftp.mcafee.com |
98.78.136.220 | ftp.microworldsystems.com |
224.74.81.128 | ftp.my-etrust.com |
244.151.39.117 | ftp.nai.com |
21.52.147.187 | ftp.networkassociates.com |
135.35.11.14 | ftp.norton.com |
6.30.212.178 | ftp.rads.mcafee.com |
213.107.239.167 | ftp.sandbox.norman.com |
246.8.22.237 | ftp.secure.nai.com |
104.247.142.64 | ftp.securityresponse.symantec.com |
43.242.88.40 | ftp.sophos.com |
251.63.114.29 | ftp.symantec.com |
27.221.153.31 | ftp.symantecliveupdate.com |
141.203.18.182 | ftp.symatec.com |
12.199.219.90 | ftp.trendmicro.com |
32.19.245.79 | ftp.uk.trendmicro-europe.com |
65.177.29.150 | ftp.update.symantec.com |
179.159.217.233 | ftp.updates.symantec.com |
49.155.162.209 | ftp.updates1.kaspersky-labs.com |
1.232.120.198 | ftp.updates2.kaspersky-labs.com |
34.133.228.200 | ftp.updates3.kaspersky-labs.com |
148.48.92.95 | ftp.updates4.kaspersky-labs.com |
87.111.37.3 | ftp.us.mcafee.com |
38.188.252.248 | ftp.viruslist.com |
71.89.103.62 | funkytoad.com |
185.4.223.145 | futurenow.bitdefender.com |
56.67.169.53 | fw.rising.com.cn |
76.144.195.42 | fx.dk |
192.130.62.196 | gangbang.mytijn.org |
50.44.183.91 | gdata.de |
177.108.128.255 | gdata.es |
129.184.154.244 | gecadsoftware.com |
230.86.193.58 | geekstogo.com |
20.0.58.142 | global.ahnlab.com |
214.64.3.50 | global.jiangmin.com |
166.140.29.39 | global.nprotect.com |
199.42.69.109 | go.mcafee.com |
57.213.1.4 | go.microsoft.com |
252.20.134.168 | go.rising.com.cn |
203.97.161.157 | go.sunbeltsoftware.com |
236.254.12.227 | go.symantec.com |
94.169.132.54 | go.trendmicro.com |
221.232.78.218 | greatis.com |
241.53.36.207 | grisoft.com |
17.143.143.21 | grisoft.cz |
63.125.8.104 | grv.microsoft.com |
2.121.209.80 | guiadohardware.net |
210.9.235.69 | guru.avg.com |
243.99.18.71 | guru1.grisoft.cz |
100.81.139.223 | guru2.grisoft.cz |
39.77.84.131 | guru3.grisoft.cz |
247.221.110.120 | guru4.grisoft.cz |
24.55.150.190 | guru5.grisoft.cz |
138.38.14.17 | gwava.nl |
9.33.215.249 | hacksoft.com.pe |
28.110.242.238 | hacksoft.pe |
61.11.25.240 | halmapr.com |
107.250.145.135 | hauri.co.kr |
46.245.91.43 | hauri.net |
254.66.117.32 | haurijapan.com |
30.224.224.102 | help.rising.com.cn |
144.206.89.185 | hi.baidu.com |
83.202.34.93 | hijackthis.de |
35.22.248.82 | hijackthis.download3000.com |
68.180.99.152 | hishomeforchildren.com |
181.162.220.48 | hjt-data.trend-braintree.com |
52.158.165.212 | hjt.networktechs.com |
72.234.123.201 | home.mcafee.com |
105.136.231.15 | hostedmailsecur.symantec.com |
219.119.95.98 | hotshare.net |
90.114.40.6 | housecall.com |
41.191.67.251 | housecall.trendmicro.com |
74.92.106.65 | housecall60.trendmicro.com |
188.75.226.148 | housecall65.trendmicro.com |
127.70.172.124 | howsafeismypc.com |
79.147.198.113 | huaifai.go.th |
111.49.237.115 | i-vault.comodo.com |
225.31.102.10 | iavs.cz |
96.27.47.174 | ibusca.me |
116.103.73.231 | idauthority.com |
217.73.180.45 | ids.kaspersky-labs.com |
74.55.113.129 | ieupdate.gdata.de |
201.51.58.105 | ieupdate1.gdata.de |
153.127.16.94 | ieupdate2.gdata.de |
186.29.124.96 | ieupdate3.gdata.de |
44.200.244.247 | ieupdate4.gdata.de |
239.7.189.155 | ieupdate5.gdata.de |
190.84.148.144 | ieupdate6.gdata.de |
223.241.255.214 | ikaka.cn |
81.156.119.41 | ikaka.com |
208.219.65.205 | ikarus.at |
228.40.91.194 | ikarus.net |
4.198.130.8 | ilove.tigolbittys.info |
118.112.251.159 | images.kaspersky.com |
245.176.196.67 | in.answers.yahoo.com |
197.252.222.56 | incodesolutions.com |
42.154.5.126 | info.drweb.com |
87.68.126.210 | info.prevx.com |
26.132.71.118 | infos-du-net.com |
234.208.97.107 | infosecpodcast.com |
11.110.137.177 | infospyware.com |
125.25.69.72 | inicioid.com |
64.88.202.236 | iniciorapido.info |
15.165.229.225 | inline-software.de |
48.66.80.39 | internetsecurity.comodo.com |
162.237.200.122 | intranet.cidiroax.ipn.mx |
33.44.146.30 | investor.symantec.com |
53.121.104.19 | irc.bigshitsandwich.org |
85.211.211.89 | irc.metraiciono.com |
131.193.76.172 | iseclab.org |
70.189.21.148 | isotopecomics.com |
22.77.47.137 | iss.net |
55.167.86.139 | it.answers.yahoo.com |
168.149.207.34 | it.bitdefender.com |
107.145.152.199 | it.mcafee.com |
59.33.178.188 | it.trendmicro.com |
92.123.218.2 | itw.trendmicro.com |
206.106.82.85 | ixomodels.com |
77.101.27.61 | ixostore.ixomodels.com |
96.178.54.50 | javacoolsoftware.com |
129.79.93.52 | jetico.com |
175.62.213.203 | jiangmin.com |
114.57.159.111 | jiangmin.com.cn |
66.134.185.100 | jobs.bitdefender.com |
98.36.36.170 | jotti.org |
212.18.157.253 | jp.mcafee.com |
151.14.102.161 | jp.trendmicro.com |
103.90.60.150 | justfacebook.net |
136.248.167.220 | k-otik.com |
249.230.32.115 | k7computing.com |
120.226.29.76 | kaba.360.cn |
192.99.243.65 | kaba.360.com |
225.0.95.135 | karuna-shechen.org |
83.239.215.218 | kaspersky-fr.com |
210.234.160.126 | kaspersky-labs.com |
161.55.187.115 | kaspersky.co.jp |
194.212.226.185 | kaspersky.co.uk |
52.195.90.12 | kaspersky.com |
247.190.36.244 | kaspersky.com.cn |
199.11.62.233 | kaspersky.dk |
231.169.101.235 | kaspersky.es |
89.151.222.130 | kaspersky.gr |
216.147.167.38 | kaspersky.pl |
236.223.193.27 | kaspersky.ru |
13.125.232.97 | kaspersky.se |
127.107.165.181 | kasperskylab.co.kr |
253.103.110.157 | kasperskylab.nl |
205.180.68.146 | kav.ru |
238.81.176.148 | kav.zonelabs.com |
96.252.40.43 | kb.bitdefender.com |
35.59.241.207 | kb.bitdefender.de |
242.136.200.196 | kb.bitdefender.us |
19.37.51.10 | kerio.com |
133.208.171.93 | kimzimmer.net |
4.15.117.1 | kioskea.net |
24.92.143.246 | kpfans.com |
56.250.182.60 | kr.ahnlab.com |
170.164.47.211 | kr.sophos.com |
41.228.248.119 | krupunmai.com |
249.48.18.108 | kvup.jiangmin.com |
94.206.57.178 | kztechs.com |
140.120.178.6 | l33t.shadow-mods.net |
78.184.123.170 | la.trendmicro.com |
30.5.149.159 | ladooscuro.es |
63.162.189.229 | laneros.com |
177.77.121.124 | latam.kaspersky.com |
116.140.254.32 | latin.bitdefender.com |
67.217.25.21 | lavasoft.com |
100.118.132.91 | lavasoft.nu |
214.33.252.174 | lavasoftusa.com |
85.96.198.82 | lexikon.ikarus.at |
105.173.156.71 | license.drweb.com |
137.7.7.141 | linhadefensiva.org |
183.245.128.224 | linhadefensiva.uol.com.br |
122.241.73.200 | linux.bitdefender.com |
74.129.99.189 | lists.clamav.net |
107.219.138.191 | liutilities.com |
221.201.3.87 | live.sunbeltsoftware.com |
159.197.204.251 | liveprotect.net |
111.85.230.240 | liveupdate.symantec.com |
144.175.82.122 | liveupdate.symantec.d4p.net |
70.226.202.205 | liveupdate.symantecliveupdate.com |
197.221.147.181 | looknstop.com |
216.42.174.170 | lovings.technigoyous.net |
249.199.213.172 | lurker.clamav.net |
39.182.77.67 | mailcenter.rising.com |
234.177.23.231 | mailcenter.rising.com.cn |
186.254.49.220 | majorgeeks.com |
218.156.156.34 | mall.hauri.co.kr |
76.138.21.117 | malwarebytes.org |
15.134.222.25 | malwarecity.com |
223.210.180.14 | malwarecity.netmalwarecity.org |
0.112.31.84 | malwaredomainlist.com |
114.94.152.236 | malwarepedia.com |
240.90.97.144 | malwareremoval.com |
4.166.55.133 | malwarescan.emsisoft.com |
37.68.163.203 | malwarescan.emsisoft.de |
151.51.27.30 | malwarescan.emsisoft.es |
22.46.228.194 | mamutu.com |
229.123.255.183 | manuelruvalcaba.com |
6.24.38.253 | marian.symantec.com |
120.7.158.80 | mast.mcafee.com |
59.2.104.56 | mcafee-at-home.com |
11.79.130.45 | mcafee.com |
43.237.169.47 | mcafeeb2b.com |
157.219.34.198 | mcafeefans.com |
28.215.235.106 | mcafeeretail.com |
48.35.5.95 | mcaffee.com |
81.193.44.165 | me.kaspersky.com |
195.175.233.249 | media.fastclick.net |
65.171.178.225 | megasecurity.org |
17.247.136.214 | merijn.org |
50.149.244.216 | metascan-online.com |
164.64.108.111 | microsoft.com |
103.127.53.19 | microsoft.fr |
54.204.12.8 | midescargas.com |
87.105.119.78 | mirror02.gdata.de |
201.20.239.161 | misec.net |
72.83.185.69 | mmsk.cn |
92.160.211.58 | moneybookers.com |
124.62.250.128 | moosoft.com |
238.232.115.23 | mop.pandasecurity.com |
109.40.60.187 | mostz.com |
61.116.86.176 | mozilla-hispano.org |
162.18.125.246 | msdn.microsoft.com |
208.188.246.74 | msk.drweb.com |
146.208.147.194 | msk1.drweb.com |
54.29.174.183 | msk2.drweb.com |
87.186.213.253 | msk3.drweb.com |
201.101.145.148 | msk4.drweb.com |
140.164.23.56 | msk5.drweb.com |
92.241.49.45 | msk6.drweb.com |
125.143.156.115 | msk7.drweb.com |
238.57.21.198 | msncleaner.softonic.com |
109.121.222.106 | msnfix.changelog.fr |
129.197.180.95 | msnvirusremoval.com |
162.31.32.166 | msr.mcafee.com |
208.13.152.249 | mvps.org |
146.9.97.225 | mx.answers.yahoo.com |
98.154.123.214 | mx.mcafee.com |
131.243.163.216 | mxttchina.com |
245.226.27.111 | my-etrust.com |
184.221.228.19 | my.drweb.com |
135.110.255.8 | mygeekside.com |
168.199.38.78 | nabble.com |
26.182.158.161 | nai.com |
153.178.104.137 | natsko.com |
173.254.130.126 | naturesimages.net |
206.156.169.128 | net-security.org |
251.138.34.23 | network.drweb.com |
190.134.235.187 | networkassociates.com |
142.210.5.176 | networkassociates.nai.com |
175.112.113.247 | networkworld.com |
33.94.233.74 | neunet.orgnews.bitdefender.com |
227.90.178.238 | new-beta.drweb.com |
179.167.136.227 | new-company.drweb.com |
212.68.244.41 | new-estore.drweb.com |
70.51.108.192 | new-forum.drweb.com |
197.46.53.100 | new-partners.drweb.com |
216.123.12.89 | new-solutions.drweb.com |
249.24.119.159 | new-support.drweb.com |
107.7.239.242 | new-www.drweb.com |
234.2.185.150 | new.taringa.net |
186.79.211.139 | news.drweb.com |
219.237.250.209 | newsletters.trendmicro.com |
76.219.115.36 | niueight.norman.no |
15.215.60.12 | niufive.norman.no |
223.35.86.1 | niufour.norman.no |
0.193.126.4 | niunine.norman.no |
114.175.246.155 | niuone.norman.no |
240.171.191.63 | niuseven.norman.no |
4.248.217.52 | niusix.norman.no |
37.149.1.122 | niuthree.norman.no |
151.132.1.17 | niutwo.norman.no |
90.195.202.249 | nl.bitdefender.com |
41.16.161.238 | noadware.net |
74.173.12.240 | nod32.co.uk |
188.88.132.135 | nod32.com |
127.151.78.43 | nod32.datsec.de |
79.228.36.32 | nod32.lu |
112.130.143.102 | nod32.ru |
225.44.8.185 | norman.com |
96.108.209.93 | norton.com |
116.184.235.82 | notifier.antivir-pe.de |
149.86.19.153 | novirusthanks.org |
7.0.139.48 | nprobeta.norman.com |
133.64.84.212 | nprotect.com |
85.141.110.201 | nprotect.net |
186.42.150.15 | nprotect.seoul.go.kr |
232.213.14.98 | nsclean.com |
171.20.215.6 | ntfaq.co.kr |
122.97.242.251 | obscgi.mcafee.com |
155.254.25.65 | oem.sunbeltsoftware.com |
13.169.213.216 | offensivecomputing.net |
208.232.91.124 | office.microsoft.com |
160.53.117.113 | oldtimer.geekstogo.com |
192.211.224.183 | one.tinypicbox.com |
50.125.89.10 | onecare.live.com |
177.189.34.174 | online-backup.comodo.com |
197.9.248.163 | online.jiangmin.com |
230.99.100.234 | online.rising.com.cn |
20.81.220.61 | onlinecheck.emsisoft.com |
214.77.165.37 | onlinecheck.emsisoft.de |
166.222.191.26 | onlinecheck.emsisoft.net |
199.55.231.28 | onlinecheck.emsisoft.org |
57.38.95.179 | onlinescan.avast.com |
252.33.40.87 | openantivirus.org |
203.178.67.76 | outpost.pl |
236.11.106.146 | ozzu.com |
94.250.226.229 | p3dev.taringa.net |
221.245.172.205 | pandalabs.pandasecurity.com |
241.66.198.194 | pandasecurity.com |
17.224.237.196 | pandasoftware.com |
63.206.102.91 | pandasoftware.es |
2.202.47.255 | pantip.com |
210.22.73.244 | pcav.cn |
243.180.181.59 | pccreg.antivirus.com |
101.162.45.142 | pccreg.trendmicro.com |
39.158.246.50 | pcentraide.com |
247.235.204.39 | pcguide.com |
24.136.56.109 | pchell.com |
138.119.176.4 | pcinternetpatrol.com |
9.114.121.168 | pcsupportadvisor.com |
28.191.80.157 | pctools.com |
61.92.187.227 | pda.drweb.com |
175.75.51.54 | pedidos.protegerse.com |
46.70.253.218 | personal.psu.edu |
254.147.23.207 | personalfirewall.comodo.com |
31.49.62.21 | pestpatrol.com |
144.31.183.104 | pg.hauri.net |
83.27.128.80 | phx.corporate-ir.net |
35.103.154.69 | pineleafboys.com |
68.5.194.72 | podcasts.sophos.com |
182.243.58.223 | pogonyuto.forospanish.com |
52.239.3.131 | precisesecurity.com |
72.60.29.120 | prevx.com |
105.217.69.190 | privacy.microsoft.com |
219.200.1.17 | products.drweb.com |
90.195.202.249 | promotions.drweb.com |
41.16.161.238 | psnw.com |
74.173.12.240 | pspl.com |
188.88.132.135 | pvtc.org |
127.151.78.43 | qqjkw.net |
79.228.36.32 | quickheal.co.in |
164.182.195.154 | quickheal.com |
21.96.60.237 | radius.turvamies.com |
148.160.5.145 | rads.mcafee.com |
168.236.31.134 | ravantivirus.com |
201.138.71.205 | raymond.cc |
59.52.191.100 | reg-int.nod32-es.com |
185.116.136.8 | reg.eset.es |
137.193.163.253 | reg.rising.com.cn |
238.94.202.67 | register.norman.com |
28.9.66.150 | removetrojanvirus.org |
223.72.11.58 | renewalcenter.symantec.com |
174.149.38.47 | renewals.bitdefender.com |
207.50.77.117 | research.microsoft.com |
65.221.9.12 | research.pandasecurity.com |
4.29.143.176 | research.sunbelt-software.com |
212.105.169.165 | resplendence.com |
245.7.20.235 | retail.sp.f-secure.com |
102.177.141.62 | retail01.sp.f-secure.com |
229.241.86.226 | retail02.sp.f-secure.com |
249.61.44.215 | ribbonwarehouse.com |
26.151.152.30 | rising-global.com |
72.133.16.113 | rising.com |
10.129.217.89 | rising.com.cn |
218.18.243.78 | rolandovera.com |
251.107.27.80 | rootkit.com |
109.90.147.231 | rootkit.nl |
48.85.92.139 | rover800.gaima.co.uk |
255.230.119.128 | roysephotos.com |
32.63.158.198 | ru.trendmicro.com |
146.46.22.25 | ruben.bzin.net |
17.42.224.1 | runscanner.net |
37.118.250.246 | safe.qq.com |
70.20.33.248 | safecomputing.umn.edu |
115.2.154.143 | safer-networking.org |
54.254.99.51 | safetynet.com |
6.74.125.40 | sales.bitdefender.com |
39.232.233.111 | samroeng.hi5.com |
153.214.97.194 | sandbox.norman.com |
91.210.42.102 | sandboxie.com |
43.31.1.91 | sapcupgrades.com |
76.188.108.161 | sarahmcconnellphotography.net |
190.171.228.56 | saverssite.com |
61.166.173.220 | scan.anti-trojan.net |
80.243.132.209 | scan.kingsoft.com |
113.144.239.23 | scan4you.net |
227.127.103.106 | scanner.novirusthanks.org |
98.123.49.14 | scanner.virus.org |
50.199.75.3 | scanner2.novirusthanks.or |
83.101.114.73 | schemas.microsoft.com |
196.83.235.156 | schemas.xmlsoap.org |
135.79.180.132 | sea.symantec.com |
87.155.206.121 | search.ca.com |
120.57.246.124 | search.mcafee.com |
234.39.110.19 | search.symantec.com |
104.35.55.183 | seasonsecurity.com |
124.112.82.172 | secdreg.org |
157.13.121.242 | secubox.aldria.com |
15.252.53.69 | secunia.com |
142.247.254.45 | secure-email.comodo.com |
93.68.213.34 | secure.av-desk.com |
126.225.64.36 | secure.nai.com |
240.140.184.187 | securecomputing.com |
179.204.130.95 | secureme.com |
131.24.88.84 | securitoo.com |
164.182.195.154 | security.symantec.com |
21.96.60.237 | securitycheck.symantec.com |
148.160.5.145 | securitynewsportal.com |
168.236.31.202 | securityrespons.symantec.com |
13.206.139.17 | securityresponse.symantec.com |
127.120.3.168 | securitywonks.net |
253.184.204.76 | secuser.com |
205.5.230.65 | secuser.model-fx.com |
50.162.14.135 | sergiwa.com |
96.77.134.218 | service.mcafee.com |
35.140.79.126 | service1.symantec.com |
242.217.106.115 | servicenews.symantec.com |
19.118.145.185 | sfdoccentral.symantec.com |
133.33.77.80 | shadow.grisoft.cz |
72.97.211.244 | shadu.baidu.com |
24.173.237.233 | shadu.duba.net |
57.75.88.47 | shield.prevx.com |
170.245.209.130 | shop.hauri.co.kr |
41.53.154.38 | shop.pandasecurity.com |
61.129.112.27 | shop.sunbeltsoftware.com |
94.219.220.98 | shop.symantec.com |
140.201.84.181 | shop.trendmicro.com |
78.197.29.157 | shudoo.com |
30.86.55.146 | simplysup.com |
63.175.95.148 | siren24.nprotect.com |
177.158.215.43 | siteadvisor.com |
116.153.160.207 | sitedirector.symantec.com |
67.42.187.196 | smallbiz.symantec.com |
100.131.226.10 | smbstore.trendmicro.com |
214.114.90.93 | smokey-services.eu |
85.110.36.69 | soccersuck.com |
105.186.62.58 | softfaq.com |
138.88.101.60 | softonic.com |
183.70.222.211 | software-files.download.com |
122.66.167.119 | solutions.drweb.com |
74.142.193.108 | sophos.com |
107.44.45.179 | sophos.fr |
221.26.165.6 | sophos1.ucd.ie |
159.22.110.170 | sophos10.ucd.ie |
111.99.68.159 | sophos2.ucd.ie |
144.0.176.229 | sophos5.ucd.ie |
2.239.40.124 | sophos6.ucd.ie |
129.234.241.32 | sophos7.ucd.ie |
148.55.200.21 | sophos8.ucd.ie |
181.212.51.91 | sophos9.ucd.ie |
39.195.171.174 | soporte.pandasecurity.com |
166.191.117.82 | sos.rising.com.cn |
118.11.143.71 | sosvirus.changelog.fr |
151.169.10.225 | spd.atdmt.com |
92.235.131.52 | specs.xmlsoap.org |
31.231.76.28 | speedtest.comodo.com |
239.51.102.17 | spftrl.digitalriver.com |
16.209.142.19 | spyany.com |
130.191.6.171 | spyblocker-software.com |
0.187.207.79 | spybot.info |
20.8.233.68 | spycheck.co.uk |
53.165.17.138 | spycheck.es |
167.148.205.221 | spychecker.com |
38.143.150.197 | spycop.com |
245.220.109.186 | spywaredb.com |
22.121.216.188 | spywaredlls.prevx.com |
136.36.80.83 | spywarefiles.prevx.com |
75.99.26.247 | spywareguide.com |
27.176.240.236 | spywareinfo.com |
59.78.91.50 | spywareterminator.com |
173.248.212.133 | square.bitdefender.com |
44.56.157.41 | static.yoreparo.com |
64.132.183.30 | stats.norton.com |
97.34.222.100 | stdio-labs.blogspot.com |
211.204.87.252 | stiller.com |
81.12.32.160 | store.bitdefender.com |
33.89.58.149 | store.de.bitdefender.com |
134.246.98.219 | store.drweb.com |
180.161.218.46 | store.trendmicro.com |
119.224.163.210 | subs.geekstogo.com |
70.45.190.199 | subwiz.trendmicro.com |
103.202.229.13 | sucop.com |
217.117.161.164 | sun.symantec.com |
156.180.39.72 | sunbelt-software.com |
108.1.65.61 | sunbeltsecurity.com |
140.159.172.131 | sunbeltsoftware.com |
254.73.37.214 | superboy2010.com.au |
125.137.238.122 | superdicas.com.br |
145.213.196.111 | superuser.co.kr |
178.47.47.181 | support.drweb.com |
224.29.168.9 | support.f-secure.com |
162.25.113.241 | support.kaspersky.co |
114.170.139.230 | support.mcafee.com |
147.3.179.232 | support.microsoft.com |
5.242.43.127 | support.pandasecurity.com |
200.237.244.35 | support.rising-global.com |
151.126.15.24 | sybari.com |
184.215.54.94 | sygate.com |
42.198.174.177 | symantec-ese.baynote.net |
169.193.120.221 | symantec.com |
1.82.214.210 | symantecliveupdate.com |
33.240.253.212 | symatec.com |
79.222.118.107 | sysinternals.com |
18.218.63.15 | system-cleaner.comodo.com |
226.38.89.4 | tallemu.com |
3.196.196.74 | taringa.net |
117.178.61.158 | tds.diamondcs.com.au |
55.174.6.66 | tech.pantip.com |
7.251.220.55 | techimo.com |
40.152.72.125 | techspot.com |
154.135.192.20 | techsupportforum.com |
25.130.137.184 | tecniservicioslys.com |
44.207.96.173 | tecno-soft.com |
77.108.203.243 | tempuri.org |
191.91.67.70 | thecomputerpitstop.com |
62.86.13.234 | thejokerx.blogspot.com |
14.163.39.223 | thetechguide.com |
46.65.78.37 | thinkpad.cn |
160.47.199.120 | threatexpert.com |
99.43.144.96 | threatinfo.trendmicro.com |
51.119.170.85 | timeforyourbusi.pandasecurity.com |
84.21.209.87 | timestamp.comodoca.com |
198.3.74.239 | timestamp.wosign.com |
68.255.19.147 | tinysoftware.com |
88.76.45.136 | tms.symantec.com |
121.233.85.206 | together.pctools.com |
235.216.17.33 | tool.ikaka.com |
106.211.218.9 | toonbox.de |
57.32.177.254 | tr.mcafee.com |
90.189.28.0 | trackingtheworld.com |
204.104.148.151 | training.drweb.com |
143.167.94.59 | training.trendmicro.com |
95.244.52.48 | trapware.com |
127.146.159.118 | trendmicro.com |
241.60.24.201 | trendmicro.com.cn |
112.124.225.109 | trendmicro.fr |
132.200.251.98 | trendsecure.com |
165.102.34.168 | trial.trendmicro.com |
23.16.155.64 | trucoswindows.es |
149.80.100.228 | trucoswindows.net |
101.156.126.217 | tw.mcafee.com |
202.58.166.31 | tw.sophos.com |
248.229.30.114 | tw.trendmicro.com |
239.88.27.74 | tweaksforgeeks.com |
190.165.54.63 | u0.eset.com |
223.66.93.133 | u1.eset.com |
81.237.25.28 | u10.eset.com |
20.44.159.192 | u100.eset.com |
228.121.185.181 | u11.eset.com |
4.23.36.251 | u12.eset.com |
118.193.157.78 | u13.eset.com |
245.1.102.242 | u14.eset.com |
9.77.60.231 | u15.eset.com |
42.167.168.46 | u16.eset.com |
88.149.32.129 | u17.eset.com |
26.145.233.105 | u18.eset.com |
234.34.3.94 | u19.eset.com |
11.123.43.96 | u2.eset.com |
125.106.163.247 | u20.eset.com |
64.101.108.155 | u21.eset.com |
15.246.135.144 | u22.eset.com |
48.79.174.214 | u23.eset.com |
162.62.38.41 | u24.eset.com |
33.57.240.17 | u25.eset.com |
53.134.10.6 | u26.eset.com |
85.36.49.8 | u27.eset.com |
131.18.170.159 | u28.eset.com |
70.14.115.67 | u29.eset.com |
22.90.141.56 | u3.eset.com |
55.248.249.127 | u30.eset.com |
169.230.113.210 | u31.eset.com |
107.226.58.118 | u32.eset.com |
59.47.16.175 | u33.eset.com |
160.16.192.245 | u34.eset.com |
18.255.56.140 | u35.eset.com |
145.250.1.48 | u36.eset.com |
164.71.216.37 | u36eset.com |
197.228.67.107 | u37.eset.com |
55.211.187.190 | u37eset.com |
182.206.133.98 | u38.eset.com |
134.27.159.87 | u39.eset.com |
166.185.198.157 | u4.eset.com |
24.167.63.240 | u40.eset.com |
219.163.8.216 | u41.eset.com |
171.239.34.205 | u42.eset.com |
204.141.74.207 | u43.eset.com |
62.123.194.103 | u44.eset.com |
188.119.139.11 | u45.eset.com |
208.196.165.0 | u46.eset.com |
241.97.205.70 | u47.eset.com |
99.80.137.153 | u48.eset.com |
226.75.82.129 | u49.eset.com |
177.152.41.118 | u5.eset.com |
210.53.148.120 | u50.eset.com |
68.224.12.15 | u51.eset.com |
7.31.214.179 | u52.eset.com |
215.108.172.168 | u53.eset.com |
247.10.23.238 | u54.eset.com |
105.180.144.65 | u55.eset.com |
232.244.89.229 | u56.eset.com |
252.64.115.218 | u57.eset.com |
29.222.155.32 | u58.eset.com |
143.136.19.184 | u59.eset.com |
13.200.220.92 | u6.eset.com |
221.21.246.81 | u60.eset.com |
66.178.30.151 | u61.eset.com |
112.93.150.234 | u62.eset.com |
51.156.95.142 | u63.eset.com |
2.233.122.131 | u64.eset.com |
35.134.161.201 | u65.eset.com |
149.49.93.96 | u66.eset.com |
88.112.227.4 | u67.eset.com |
40.189.253.249 | u68.eset.com |
72.91.104.63 | u69.eset.com |
186.5.225.146 | u7.eset.com |
57.69.170.54 | u70.eset.com |
77.145.128.43 | u71.eset.com |
110.235.236.113 | u72.eset.com |
156.217.100.197 | u73.eset.com |
94.213.45.173 | u74.eset.com |
46.102.71.162 | u75.eset.com |
79.191.111.164 | u76.eset.com |
193.174.231.59 | u77.eset.com |
132.169.176.223 | u78.eset.com |
83.58.203.212 | u79.eset.com |
116.147.242.26 | u8.eset.com |
230.130.106.109 | u80.eset.com |
101.125.52.85 | u81.eset.com |
121.202.78.74 | u82.eset.com |
153.104.117.76 | u83.eset.com |
27.170.66.55 | u84.eset.com |
222.166.11.219 | u85.eset.com |
174.242.37.208 | u86.eset.com |
207.144.144.22 | u87.eset.com |
64.126.9.105 | u88.eset.com |
3.122.210.14 | u89.eset.com |
211.198.168.3 | u9.eset.com |
244.100.20.73 | u90.eset.com |
102.83.140.224 | u91.eset.com |
229.78.85.132 | u92.eset.com |
248.155.44.121 | u93.eset.com |
25.56.151.191 | u94.eset.com |
139.39.15.18 | u95.eset.com |
10.34.217.182 | u96.eset.com |
218.111.243.171 | u97.eset.com |
250.13.26.241 | u98.eset.com |
108.251.147.68 | u99.eset.com |
47.247.92.44 | uk.mcafee.com |
255.67.118.33 | uk.trendmicro-europe.com |
32.225.157.35 | uk.trendmicro.com |
145.207.22.186 | ulove.tigolbittys.info |
16.203.223.95 | up.duba.net |
36.23.249.84 | up.rising.com.cn |
69.181.33.154 | up1.nod123.cn |
183.164.221.237 | upd.zonelabs.com |
54.159.166.213 | update.360safe.cn |
5.236.125.202 | update.360safe.com |
38.137.232.204 | update.aladdin.com |
152.52.96.99 | update.authentium.com |
91.115.42.7 | update.avg.com |
43.192.0.252 | update.avgfrance.com |
75.94.107.66 | update.bitdefender.com |
189.8.228.149 | update.drweb.com |
60.72.173.57 | update.ewido.com |
80.148.199.46 | update.grisoft.com |
113.50.238.116 | update.grisoft.cz |
226.220.103.11 | update.hispasec.com |
97.28.48.176 | update.ikaka.com |
49.104.74.165 | update.ikarus-software.at |
150.6.114.235 | update.quickheal.com |
196.177.234.62 | update.rising.com.cn |
135.240.179.226 | update.sophos.com |
86.61.206.215 | update.symantec.com |
119.218.245.29 | update.trendmicro.com |
233.133.177.180 | update7.jiangmin.com |
172.196.55.88 | updatem.360safe.cn |
124.17.81.77 | updatem.360safe.com |
156.175.188.147 | updates.a-2.org |
14.89.53.230 | updates.drweb.com |
141.153.254.138 | updates.f-prot.com |
161.229.212.127 | updates.sald.com |
194.63.63.197 | updates.symantec.com |
239.45.184.25 | updates3.kaspersky-labs.com |
178.41.129.1 | updates4.kaspersky-labs.com |
130.185.155.246 | updates5.kaspersky-labs.com |
163.19.195.248 | upgrade.bitdefender.com |
21.2.59.143 | upgrade1.bitdefender.com |
216.253.4.51 | upgrade2.bitdefender.com |
167.142.31.40 | upgrade3.bitdefender.com |
200.231.70.110 | upgrade4.bitdefender.com |
58.214.190.193 | upload.changelog.fr |
185.209.136.169 | us.bitdefender.com |
205.30.162.158 | us.mcafee.com |
237.188.201.160 | us.trendmicro.com |
27.170.66.55 | usa.kaspersky.com |
222.166.11.219 | usbcleaner.cn |
174.242.37.208 | ushousecall02.trendmicro.com |
207.144.144.22 | utilidades-utiles.com |
64.126.9.105 | v.dreamwiz.com |
3.122.210.14 | v4.windowsupdate.microsoft.com |
211.198.168.3 | v5.windowsupdate.microsoft.com |
244.100.20.73 | vet.com.au |
102.83.140.224 | vicentevirtual.com |
229.78.85.132 | viguard.com |
248.155.44.121 | vil.nai.com |
25.56.151.191 | vil.nail.com |
139.39.15.18 | virobot.co.kr |
10.34.217.182 | virscan.org |
30.179.55.239 | virus.org |
62.81.94.53 | virusbuster.hu |
176.63.215.136 | viruschief.com |
115.59.160.112 | virusdoctor.jp |
67.135.186.101 | virusfreezone.info |
100.37.225.103 | virusinfo.prevx.com |
213.19.90.254 | viruslist.com |
84.15.35.163 | viruslist.ru |
104.91.61.152 | virusscan.jotti.org |
137.249.101.222 | virusscanonline.net |
251.232.33.49 | virusspy.com |
122.227.234.25 | virustotal.com |
73.48.193.14 | visualizesoftware.com |
106.205.44.16 | visualtracking.symantec.com |
220.120.164.167 | vivo-austin.com |
159.183.110.75 | vms.drweb.com |
111.4.68.64 | vncsvr.com |
143.162.175.134 | vos.symantec.com |
1.76.40.217 | vrv.com.cn |
128.140.241.125 | vsantivirus.com |
148.216.11.114 | webadmin.norman.no |
181.118.50.184 | webphand.com |
38.32.171.79 | webroot.com |
165.96.116.244 | wedoantivirus.com |
117.172.142.233 | welkam.co.jp |
218.74.182.47 | wexperts-exchange.com |
8.245.46.130 | whatthetech.com |
203.52.247.38 | wikio.es |
154.129.18.27 | wilderssecurity.com |
187.30.57.97 | wilderssecurity.net |
45.201.245.248 | wildlist.com |
240.8.123.156 | windowsupdate.microsoft.com |
192.85.149.145 | winpatrol.com |
224.243.0.215 | wmcafee.com |
82.157.120.42 | woottonfootball.com |
209.221.66.206 | wtc.trendmicro.com |
229.41.24.195 | ww.emsisoft.com |
6.131.131.9 | www.1stavenuelimousines.co.uk |
51.113.252.92 | www.2xlgames.com |
246.109.197.69 | www.ahnlab.com |
198.253.223.58 | www.aks.com |
231.87.7.60 | www.aladdin.com |
89.70.127.211 | www.anti-trojan-software.net |
28.65.72.119 | www.anti-trojan.net |
235.210.99.108 | www.anti-virus.by |
12.43.138.178 | www.antivir.es |
126.26.2.5 | www.antivirus-tools.com |
253.21.204.237 | www.antiy.net |
17.98.230.226 | www.apsecure.com |
49.0.13.228 | www.arpia.be |
95.238.134.123 | www.authentium.com |
34.234.79.31 | www.authentium.com.au |
242.54.105.20 | www.av-desk.com |
19.212.212.90 | www.avast.com |
132.194.77.173 | www.avg.com |
71.190.22.82 | www.avhide.com |
23.10.236.71 | www.avoncourt.com |
56.168.88.141 | www.avx.ro |
170.151.208.36 | www.barder.com |
41.146.153.200 | www.beautybar.com |
60.223.112.189 | www.bg.virusblokada.com |
93.124.219.3 | www.bit-defender.de |
207.107.83.86 | www.bitdefende.de |
78.102.29.250 | www.bitdefender-es.com |
30.179.55.239 | www.bitdefender.be |
62.81.94.53 | www.bitdefender.cl |
176.63.215.136 | www.bitdefender.co.uk |
115.59.160.112 | www.bitdefender.com |
67.135.186.101 | www.bitdefender.com.au |
100.37.225.103 | www.bitdefender.com.sg |
213.19.90.254 | www.bitdefender.com.tw |
84.15.35.163 | www.bitdefender.com.vn |
104.91.61.152 | www.bitdefender.de |
189.45.153.18 | www.bitdefender.es |
47.28.85.101 | www.bitdefender.fr |
174.23.30.77 | www.bitdefender.hk |
125.100.245.66 | www.bitdefender.us |
158.1.96.68 | www.bitdefenderme.com |
16.172.216.219 | www.briarhurst.com |
211.235.162.127 | www.brightoctober.com |
163.56.120.116 | www.buraka.tv |
195.214.227.186 | www.buscafacil.com |
53.128.92.13 | www.buscalo.in |
180.192.37.177 | www.busco.in |
200.12.63.166 | www.ca.com |
233.170.102.236 | www.cambridge-steiner-school.co.uk |
91.84.223.132 | www.ccssforum.org |
217.148.168.40 | www.celticmerchant.com |
169.224.194.29 | www.clamav.net |
14.126.234.99 | www.collectedcurios.com |
60.41.98.182 | www.comodo.com |
255.104.43.90 | www.comodo.tv |
206.181.70.79 | www.comodoantispam.com |
239.82.109.149 | www.comodopartners.com |
97.253.41.44 | www.computing.net |
36.60.175.208 | www.configurarequipos.com |
244.137.201.197 | www.contentverification.com |
20.39.52.11 | www.deborahshelton.net |
134.209.173.94 | www.dr-bull.com |
5.17.118.2 | www.drweb.com |
25.93.76.247 | www.ealaddin.com |
58.183.183.61 | www.elvis-express.com |
104.165.48.145 | www.emeraldclassic.co.uk |
42.161.249.121 | www.emsisoft.at |
250.49.19.110 | www.emsisoft.com |
27.139.59.112 | www.emsisoft.de |
141.122.179.7 | www.emsisoft.es |
80.117.124.171 | www.emsisoft.fr |
31.6.151.160 | www.emsisoft.it |
64.95.190.230 | www.emsisoft.jp |
178.78.54.57 | www.emsisoft.net |
49.73.0.33 | www.emsisoft.nl |
69.150.26.22 | www.emsisoft.org |
101.52.65.24 | www.engyro.com |
147.34.186.175 | www.entercept.com |
86.30.131.83 | www.esafe.com |
38.106.157.72 | www.eset.es |
71.8.8.142 | www.eugrantsadvisor.com |
185.246.129.226 | www.eugrantsadvisor.de |
123.242.74.134 | www.eugrantsadvisor.ie |
75.62.32.123 | www.eugrantsadvisor.se |
108.220.140.193 | www.exchangeyourcareer.com |
222.203.4.88 | www.f-prot.com |
93.198.205.252 | www.f-secure.com |
112.19.164.241 | www.fimasys.com |
145.176.15.55 | www.flairweddings.co.uk |
3.159.135.138 | www.forospyware.com |
130.154.81.46 | www.fortifed.com |
82.231.107.35 | www.fortiid.com |
114.133.146.105 | www.fortimail.com |
228.115.11.188 | www.fortinet-apac.com |
167.111.212.164 | www.fortinet.ch |
119.187.238.153 | www.fortinet.co.il |
152.89.21.155 | www.fortinet.com |
10.71.142.51 | www.fortinet.net |
136.67.87.215 | www.fortinet.nl |
156.143.113.204 | www.fortinet.sg |
189.45.153.18 | www.fortinetuk.com |
47.28.85.101 | www.freeality.com |
174.23.30.77 | www.freedrweb.ru |
125.100.245.66 | www.freerav.com |
158.1.96.68 | www.frisk-software.com |
16.172.216.219 | www.frisk.is |
211.235.162.127 | www.fsecure.com |
163.56.120.116 | www.garryowen.com |
195.214.227.186 | www.gdata.es |
53.128.92.13 | www.globalhauri.com |
180.192.37.177 | www.gokidding.com |
200.12.63.166 | www.grisoft.com |
233.170.102.236 | www.hackshields.com |
91.84.223.132 | www.hacksoft.com.pe |
217.148.168.40 | www.hacksoft.pe |
169.224.194.29 | www.handwritingforkids.com |
14.126.234.99 | www.hasp.se |
60.41.98.182 | www.hauri.co.kr |
255.104.43.90 | www.hauri.net |
206.181.70.79 | www.hxproduction.com |
239.82.109.149 | www.ibusca.me |
97.253.41.44 | www.ikarus.at |
36.60.175.208 | www.imddomains.co.uk |
244.137.201.197 | www.indielisboa.com |
20.39.52.11 | www.inicioid.com |
134.209.173.94 | www.iniciorapido.info |
5.17.118.2 | www.internationalservicecheck.com |
25.93.76.247 | www.irangoals.com |
58.183.183.61 | www.iseclab.org |
171.233.116.213 | www.ixomodels.com |
110.229.61.189 | www.jiangmin.com |
62.117.87.178 | www.jiangmin.com.cn |
95.207.127.180 | www.jotti.org |
209.190.247.75 | www.kaspersky.com |
148.185.192.239 | www.kioskea.net |
99.74.219.228 | www.latin-mass-society.org |
132.163.2.42 | www.livepcsupport.com |
246.146.122.125 | www.malwarecity.com |
117.141.68.101 | www.malwarecity.fr |
137.218.94.90 | www.mamutu.com |
169.120.133.92 | www.mamutu.de |
215.102.254.243 | www.manchester-offices.co.uk |
154.98.199.151 | www.mcafee.at |
106.174.225.140 | www.mcafee.com |
139.76.76.210 | www.metascan-online.com |
252.58.197.38 | www.microsoft.com |
191.54.142.202 | www.midescargas.com |
143.130.100.191 | www.mountainlakeslodge.com |
176.32.208.5 | www.mtr-design.com |
34.15.72.156 | www.mygeekside.com |
161.10.17.64 | www.netegrity.com |
180.87.232.53 | www.norman.com |
213.244.83.123 | www.nottinghampoetryseries.com |
71.227.203.206 | www.novirusthanks.org |
198.222.149.114 | www.npin.co.kr |
150.43.175.103 | www.nprotect.co.kr |
182.201.214.173 | www.nprotect.com |
40.183.79.0 | www.nprotect.com.br |
235.179.24.232 | www.nsclean.com |
187.255.50.221 | www.owen.org |
220.157.89.223 | www.pandasecurity.com |
77.139.210.119 | www.pctools.com |
204.135.155.27 | www.peterhearnwaste.co.uk |
224.211.181.16 | www.phoenixtrikeworks.com |
1.113.221.86 | www.prdouglas.co.uk |
115.96.153.169 | www.prevx.com |
242.91.98.145 | www.prevx1.com |
193.168.57.134 | www.professorbeyer.com |
226.69.164.136 | www.quickheal.com |
84.240.28.31 | www.removetrojanvirus.org |
23.47.230.195 | www.renningers.com |
231.124.188.184 | www.residentphotography.com |
7.26.39.254 | www.retento.com |
121.196.160.81 | www.reviewsofbooks.com |
248.4.105.245 | www.rising-global.com |
12.80.131.234 | www.risingav.com.au |
45.238.170.48 | www.safenet-inc.com |
158.152.35.200 | www.scan4you.net |
29.216.236.108 | www.seasonsecurity.com |
237.36.6.97 | www.secondchanceboxer.com |
82.194.46.167 | www.secure-elements.com |
128.109.166.250 | www.sheffieldmind.co.uk |
67.172.111.158 | www.smf.org |
18.249.138.147 | www.softfaq.com |
51.150.177.217 | www.sophos.com |
165.65.109.112 | www.spycheck.co.uk |
104.128.243.20 | www.spycheck.es |
56.205.13.9 | www.stadiumpage.com |
88.107.120.79 | www.sunbeltsoftware.com |
202.21.241.162 | www.symantec.com |
73.85.186.70 | www.sysinternals.com |
93.161.144.59 | www.tecniservicioslys.com |
126.251.251.129 | www.testmypcsecurity.com |
171.233.116.213 | www.threatexpert.com |
110.229.61.189 | www.tomorrowsedge.net |
62.117.87.178 | www.trendmicro.com |
95.207.127.180 | www.trojaner.info |
209.190.247.75 | www.trustix.com |
148.185.192.239 | www.trustlogo.com |
99.74.219.228 | www.vba.com.by |
132.163.2.42 | www.virscan.org |
246.146.122.125 | www.virus.fi |
117.141.68.101 | www.virus.org |
137.218.94.90 | www.virusbuster.hu |
169.120.133.92 | www.viruschief.com |
215.102.254.243 | www.virusfreezone.info |
154.98.199.151 | www.virustotal.com |
106.174.225.140 | www.wellgousa.com |
139.76.76.210 | www.whichssl.com |
252.58.197.38 | www.willsee.com |
191.54.142.202 | www.xmlsoap.org |
143.130.100.191 | www.zarya.info |
176.32.208.5 | www1.my-etrust.com |
34.15.72.156 | www3.ca.com |
161.10.17.64 | www3.safenet-inc.com |
180.87.232.53 | www4.symantec.com |
213.244.83.123 | wwws.clamav.net |
71.227.203.206 | x-cleaner.com |
198.222.149.114 | x.360safe.com |
150.43.175.103 | yoreparo.com |
182.201.214.173 | z-oleg.com |
40.183.79.0 | zeustracker.abuse.ch |
235.179.24.232 | zeylstra.nl |
187.255.50.221 | zhidao.baidu.com |
220.157.89.223 | zhidao.ikaka.com |
77.139.210.119 | ziggamza.net |
204.135.155.27 | zonavirus.com |
224.211.181.16 | zonealarm.com |
1.113.221.86 | zonelabs.com |
115.96.153.169 | zonelabs.fr |
242.91.98.145 | zonelog.co.uk |
193.168.57.134 | zs.kingsoft.com |
226.69.164.136 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 12644 | 12800 | 3.76874 | 55d274f88e5ab59aa27a86516437f7d8 |
.data | 20480 | 64 | 512 | 0.164757 | 75fe664fdcd708925b7ca712ee127c19 |
.rdata | 24576 | 1328 | 1536 | 3.03097 | 2707a7526abdc69c43f37dd3b6665e30 |
.bss | 28672 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.idata | 32768 | 800 | 1024 | 2.18489 | 4e803ebabfbd6fe3233c57c1b6e762a8 |
.rsrc | 36864 | 87232 | 87552 | 5.54166 | 34b5a2a0306aa053bf792aa7f84ba6c7 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a
Network Activity
URLs
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):