Trojan.Win32.Fsysna.dqhe (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: e9987a59bd6dbee965182e0a6b723c7c
SHA1: f181b9a09b69cb5277f5d56eace6d327f2ccbaf7
SHA256: 4becc8f605253abc11567ac253e17192089cb810e163e26c9c1dab5e81165194
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 5263536 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: no certificate found
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
MD5 | File path |
---|---|
6763e49fa8009adc77d1fff41c3139ad | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif |
abe3688fda6037a40835d38e7f9f2f5a | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Black Eyed Peas - The Beginning (Deluxe Edition) 2010-DOH.mp3.pif |
7eb47eb8cc230bf1a7b40eccaa93f7a3 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif |
ea12b1ea0a4fc2177271d81f0ea9ad2f | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif |
3343e1313c107df15904742f1e8ae1c6 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif |
951571574713c211f3db22eb2fa393e6 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2011-Single@320][TJ].mp3.pif |
ade4b5dde8f0990a1cd4edad4f766e87 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Mumford And Sons - Sigh No More (Album).mp3.pif |
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61717 bytes in size. The following strings are added to the hosts file listed below:
173.224.217.73 | viabcp.com |
173.224.217.73 | www.viabcp.com |
173.224.217.73 | ww2.viabcp.com |
173.224.217.73 | bcpzonasegura.viabcp.com |
173.224.217.73 | hotmail.com |
173.224.217.73 | www.hotmail.com |
138.207.2.173 | 13iii.com |
171.108.41.175 | 15660808.co.kr |
29.91.161.70 | 2-spyware.com |
156.86.107.234 | 247fixes.com |
176.163.133.223 | 360.cn |
208.64.172.37 | 360.com |
66.47.104.120 | 360safe.cn |
193.43.50.96 | 360safe.com |
145.119.8.85 | 45pounds.com |
178.21.115.87 | 51nb.com |
35.191.236.238 | 9down.com |
230.255.181.146 | a-2.org |
182.75.139.136 | a188.x.akamai.net |
215.233.247.206 | abuse.ch |
73.148.111.33 | acs.pandasoftware.com |
199.211.56.197 | ad-aware-se.uptodown.com |
219.32.83.186 | ad.fastclick.net |
252.189.122.0 | ads.fastclick.net |
110.104.242.151 | agfirewall.ru |
237.167.188.59 | agnitum.com |
189.244.214.48 | agnitum.de |
33.145.253.118 | agnitum.fr |
79.60.117.201 | agnitum.ru |
18.124.63.109 | ahn.com.cn |
226.200.89.98 | ahnlab.com |
3.102.128.168 | akamai.net |
116.16.61.63 | aknow.prevx.com |
55.80.194.227 | aladdin.com |
7.156.220.217 | alert.rising.com.cn |
40.58.72.31 | alerta-antivirus.inteco.es |
154.229.192.114 | alerta-antivirus.red.es |
24.36.137.22 | alladdin.ru |
44.113.96.11 | aluriasoftware.com |
77.202.203.81 | analysis.seclab.tuwien.ac.at |
123.185.67.164 | andymanchesta.com |
62.180.13.140 | anti-virus-software-review.com |
14.69.39.129 | anti-virus.by |
46.158.78.131 | anti-virus.com |
160.141.198.26 | antirootkit.com |
99.137.144.190 | antispam.sunbeltsoftware.com |
51.25.170.179 | antispy.ru |
84.115.209.249 | antispyware.sunbeltsoftware.com |
197.97.74.76 | antivir.es |
68.93.19.52 | antiviraldp.com |
88.169.45.42 | antivirus-online.de |
121.71.85.44 | antivirus-tools.com |
167.54.205.195 | antivirus.about.com |
105.49.150.103 | antivirus.cai.com |
57.126.177.92 | antivirus.comodo.com |
90.27.28.162 | antivirus.hispavista.com |
204.10.148.245 | antivirus.sunbeltsoftware.com |
143.5.94.153 | antiy.net |
95.82.52.142 | anubis.iseclab.org |
127.239.159.212 | apac.trendmicro.com |
241.222.23.107 | ar.answers.yahoo.com |
112.218.225.15 | ar.atwola.com |
132.38.183.4 | arcabit.com |
165.196.34.74 | arcabit.pl |
22.178.155.157 | archive.bitdefender.com |
149.174.100.66 | arswp.com |
101.250.126.55 | arwww.fortinet.cz |
134.152.166.125 | asap.authentium.com |
248.135.30.208 | ashampoo.com |
186.130.231.184 | atazita.blogspot.com |
138.207.2.173 | atdmt.com |
171.108.41.175 | attechnical.com |
29.91.161.70 | atwola.com |
156.86.107.234 | au.mcafee.com |
176.163.133.223 | auditmypc.com |
208.64.172.37 | authentium.com |
66.47.104.120 | auwww.ealaddin.nl |
193.43.50.96 | avast-home.uptodown.com |
161.135.24.101 | avast.com |
194.37.131.103 | avast.ru |
51.207.252.254 | avg-antivirus.net |
246.15.197.162 | avg.com |
198.91.155.152 | avg.vo.llnwd.net |
231.249.7.222 | avgate.net |
89.163.127.49 | avgfrance.com |
215.227.72.213 | avhide.com |
235.48.99.202 | avira.com |
12.205.138.16 | avp.ch |
126.120.2.167 | avp.com |
253.183.203.75 | avp.ru |
205.4.230.64 | avpclub.ddns.info |
49.161.13.134 | avu.zonelabs.com |
95.76.133.217 | avx.rob-have.net |
34.140.79.125 | awaps.net |
242.216.105.114 | b-have.orgbitdefender-ar.com |
19.118.144.184 | babooforum.com.br |
132.32.77.79 | backup.comodo.com |
71.96.210.243 | baike.360.cn |
23.172.236.233 | baike.360.com |
56.74.88.47 | bakunos.com |
170.244.208.130 | banner.fastclick.net |
40.52.153.38 | banners.fastclick.net |
60.129.112.27 | baristamagazine.com |
93.218.219.97 | basetendencies.com |
139.201.83.180 | bbs.360.cn |
78.196.28.156 | bbs.360safe.cn |
29.85.55.145 | bbs.360safe.com |
62.174.94.147 | bbs.cfan.com.cn |
176.157.214.42 | bbs.cpcw.com |
115.153.160.206 | bbs.dswlab.com |
67.41.186.195 | bbs.duba.net |
100.131.225.9 | bbs.ikaka.com |
213.113.90.92 | bbs.janmeng.com |
84.109.35.68 | bbs.kafan.cn |
104.185.61.58 | bbs.kafan.com |
137.87.101.60 | bbs.kaspersky.com.cn |
183.69.221.211 | bbs.kpfans.com |
121.65.166.119 | bbs.mcafeefans.com |
73.142.193.108 | bbs.s-sos.net |
106.43.44.178 | bbs.sucop.com |
220.26.164.5 | bbs.taisha.org |
159.21.109.169 | bbs.trendmicro.com.cn |
110.98.68.158 | bbs.winzheng.com |
143.255.175.228 | bestofewan.com |
1.238.39.123 | beta.anti-virus.by |
128.234.241.31 | bg.virusblokada.com |
148.54.199.20 | bhsbees.com |
181.212.50.90 | bitcity.info |
38.194.171.173 | bitcity.org |
165.190.116.81 | bitdefender.co.uk |
117.10.142.71 | bitdefender.com |
150.168.182.141 | bitdefender.com.ua |
8.150.46.224 | bitdefender.es |
202.146.247.200 | bitdefender.org |
154.223.18.189 | bitdefender.secyber.net |
187.124.57.191 | bitdefenderchina.com |
45.107.177.86 | bitdefenderguatemala.com |
172.102.122.250 | bitdefendermalaysia.com |
191.179.149.239 | bitdefendertaiwan.com |
224.80.188.53 | bitdefenderuruguay.com |
82.63.9.24 | bitdefenderusa.com |
97.203.210.1 | biz.nprotect.com |
49.23.168.246 | bkav.com.vn |
82.181.20.248 | blackice.iss.net |
196.96.140.143 | bleedingthreats.net |
135.159.85.51 | bleepingcomputer.com |
86.236.44.40 | blitzblank.com |
119.137.151.110 | blog.hispasec.com |
233.52.15.193 | blog.threatfire.com |
104.115.217.101 | blog.titanium-jewelry.com |
124.192.243.90 | blog.trendmicro.com |
156.93.26.160 | blogs.icerocket.com |
14.8.146.55 | blogs.protegerse.com |
141.72.92.219 | blogschapines.com |
93.148.118.208 | boardreader.com |
194.50.157.22 | bobbondart.com |
239.220.22.105 | br.mcafee.com |
178.28.223.14 | br.trendmicro.com |
130.104.249.3 | brazil.kaspersky.com |
163.6.33.73 | buddy.bitdefender.com |
21.177.221.224 | bugs.clamav.net |
216.240.98.132 | buscafacil.com |
167.61.125.121 | buscalo.in |
200.218.232.191 | busco.in |
58.133.96.18 | buy.bitdefender-es.com |
185.196.42.182 | buy.bitdefender.com |
205.17.0.171 | buy.bitdefender.de |
237.107.107.241 | buy.drweb.com |
27.89.227.68 | buy.rising.com.cn |
222.85.173.44 | ca.com |
174.229.199.33 | cacomvip.ca.com |
207.63.238.35 | cai.com |
64.45.103.186 | canada.karuna-shechen.org |
3.41.48.95 | castlecops.com |
211.185.74.84 | castlecrops.com |
244.19.114.154 | ccslaughterspdx.com |
102.2.234.237 | cddchiangmai.net |
229.253.179.213 | cdn.atwola.com |
248.74.206.202 | center.rising.com.cn |
25.231.245.204 | centralcommand.com |
71.214.109.99 | cert.org |
10.209.55.7 | cfan.com.cn |
218.30.81.252 | cgi.clamav.net |
250.187.188.66 | changedetection.com |
108.170.52.149 | changelog.fr |
47.166.254.57 | channelpartner.trendmicro.com |
255.242.212.46 | chickensroamfree.com |
32.144.63.116 | chkrootkit.org |
145.126.184.11 | chollian.nprotect.co.kr |
16.122.129.176 | cisrt.org |
36.198.87.165 | cit.kookmin.ac.kr |
69.100.195.235 | clamav.net |
183.83.59.62 | clamwin.com |
54.78.4.226 | click.atdmt.com |
5.155.31.215 | clicks.atdmt.com |
38.56.70.29 | cloudprotection.pandasecurity.com |
152.39.190.112 | clubic.com |
107.50.151.104 | cmmings.cn |
59.127.178.93 | cn.mcafee.com |
91.28.217.95 | cn.sophos.com |
205.11.81.246 | cn.trendmicro.com |
76.7.27.154 | codehard.wordpress.com |
96.83.53.143 | cohartuk.com |
129.241.92.213 | commentcamarche.net |
242.223.25.40 | community.thaiware.com |
113.219.226.16 | comodo.com |
65.39.184.6 | company.drweb.com |
98.197.36.8 | company.hauri.co.kr |
212.112.156.159 | company.hauri.net |
150.175.101.67 | computing.net |
102.252.60.56 | comunidad.wilkinsonpc.com.co |
135.153.167.126 | configurarequipos.com |
249.68.31.209 | coresecurity.com |
120.131.232.117 | cou85.com |
140.208.3.106 | cowsmo.com |
172.109.42.176 | cpsecure.com |
30.24.162.71 | csc.rising.com.cn |
157.88.108.235 | cureit.ru |
109.164.134.224 | customer.symantec.com |
210.66.173.38 | customers.drweb.com |
255.236.38.121 | cutlines.org |
194.44.239.29 | cwsandbox.org |
146.120.9.19 | cybercrime.pandasecurity.com |
179.22.49.89 | cyberdefender.com |
37.193.237.240 | cybertechhelp.com |
231.0.114.148 | daboweb.com |
183.77.141.137 | daniloff.net |
216.234.248.207 | daniweb.com |
74.149.112.34 | darkclockers.com |
201.212.57.198 | dazhizhu.cn |
221.33.16.187 | de.bitdefender.com |
253.122.123.1 | de.mcafee.com |
43.105.243.84 | de.trendmicro.com |
238.101.189.60 | deckard.geekstogo.com |
190.245.215.49 | deerfield.com |
223.79.254.51 | defalcos.com |
80.61.119.202 | definitions.symantec.com |
19.57.64.110 | dell.symantec.com |
227.201.90.100 | demos.eset.es |
4.35.130.170 | descargas.eset.es |
118.18.250.253 | dev.depeuter.org |
244.13.195.229 | developmentdrums.org |
8.90.222.234 | dialognauka.ru |
57.7.21.236 | diamondcs.com.au |
103.246.141.131 | dicasweb.com.br |
42.241.86.39 | discussions.virtualdr.com |
249.62.113.28 | disk-encryption.comodo.com |
26.219.220.98 | dl.360safe.com |
140.202.84.181 | dl1.antivir-pe.com |
79.198.30.89 | dl1.antivir-pe.de |
31.18.244.78 | dl1.antivir.de |
64.176.95.148 | dl1.avgate.net |
177.158.216.43 | dl10.freeav.net |
48.154.161.207 | dl2.antivir-pe.com |
68.230.119.196 | dl2.antivir-pe.de |
101.132.227.11 | dl2.antivir.de |
215.114.91.94 | dl2.avgate.net |
85.110.36.2 | dl3.antivir-pe.de |
37.187.63.247 | dl3.antivir.de |
70.88.102.61 | dl3.avgate.net |
184.71.222.144 | dl4.antivir-pe.com |
123.66.167.120 | dl4.antivir-pe.de |
74.143.194.109 | dl4.antivir.de |
107.44.233.111 | dl4.avgate.net |
221.27.97.6 | dl5.avgate.net |
92.23.43.170 | dl6.avgate.net |
112.99.69.159 | dl7.avgate.net |
145.1.108.229 | dl8.avgate.net |
2.239.41.56 | dl8.freeav.net |
129.235.242.32 | dl9.avgate.net |
81.55.200.21 | dl9.freeav.net |
114.213.52.24 | dnl-cd1.kaspersky-labs.com |
228.127.172.175 | dnl-cd10.kaspersky-labs.com |
166.191.117.83 | dnl-cd11.kaspersky-labs.com |
118.12.76.72 | dnl-cd12.kaspersky-labs.com |
151.169.183.142 | dnl-cd13.kaspersky-labs.com |
9.84.47.225 | dnl-cd2.kaspersky-labs.com |
136.147.248.133 | dnl-cd3.kaspersky-labs.com |
155.224.19.122 | dnl-cd4.kaspersky-labs.com |
188.141.74.208 | dnl-cd5.kaspersky-labs.com |
62.56.194.103 | dnl-cd6.kaspersky-labs.com |
189.119.140.11 | dnl-cd7.kaspersky-labs.com |
141.196.166.0 | dnl-cd8.kaspersky-labs.com |
241.98.205.70 | dnl-cd9.kaspersky-labs.com |
31.12.70.153 | dnl-cn1.kaspersky-labs.com |
226.76.15.61 | dnl-cn10.kaspersky-labs.com |
178.152.41.50 | dnl-cn11.kaspersky-labs.com |
211.54.81.121 | dnl-cn12.kaspersky-labs.com |
69.224.13.16 | dnl-cn13.kaspersky-labs.com |
7.32.146.180 | dnl-cn14.kaspersky-labs.com |
215.109.172.169 | dnl-cn15.kaspersky-labs.com |
248.10.24.239 | dnl-cn2.kaspersky-labs.com |
106.181.144.66 | dnl-cn3.kaspersky-labs.com |
233.244.89.230 | dnl-cn4.kaspersky-labs.com |
252.65.48.219 | dnl-cn5.kaspersky-labs.com |
29.154.155.33 | dnl-cn6.kaspersky-labs.com |
75.137.19.116 | dnl-cn7.kaspersky-labs.com |
14.132.221.92 | dnl-cn8.kaspersky-labs.com |
222.21.247.81 | dnl-cn9.kaspersky-labs.com |
255.111.30.83 | dnl-eu1.kaspersky-labs.com |
112.93.151.234 | dnl-eu10.kaspersky-labs.com |
51.89.96.142 | dnl-eu11.kaspersky-labs.com |
3.233.122.131 | dnl-eu12.kaspersky-labs.com |
36.67.162.202 | dnl-eu13.kaspersky-labs.com |
150.49.26.29 | dnl-eu14.kaspersky-labs.com |
20.45.227.5 | dnl-eu15.kaspersky-labs.com |
40.122.253.250 | dnl-eu2.kaspersky-labs.com |
73.23.37.252 | dnl-eu3.kaspersky-labs.com |
119.6.157.147 | dnl-eu4.kaspersky-labs.com |
58.1.102.55 | dnl-eu5.kaspersky-labs.com |
9.78.129.44 | dnl-eu6.kaspersky-labs.com |
42.235.236.114 | dnl-eu7.kaspersky-labs.com |
156.218.100.197 | dnl-eu8.kaspersky-labs.com |
95.213.46.105 | dnl-eu9.kaspersky-labs.com |
47.34.4.94 | dnl-jp1.kaspersky-labs.com |
79.192.111.164 | dnl-jp10.kaspersky-labs.com |
193.174.232.59 | dnl-jp11.kaspersky-labs.com |
64.170.177.223 | dnl-jp12.kaspersky-labs.com |
84.246.135.212 | dnl-jp13.kaspersky-labs.com |
117.148.243.27 | dnl-jp14.kaspersky-labs.com |
231.130.107.110 | dnl-jp15.kaspersky-labs.com |
101.126.52.18 | dnl-jp2.kaspersky-labs.com |
198.91.223.151 | dnl-jp3.kaspersky-labs.com |
230.248.6.221 | dnl-jp4.kaspersky-labs.com |
88.231.126.48 | dnl-jp5.kaspersky-labs.com |
27.227.72.24 | dnl-jp6.kaspersky-labs.com |
235.47.98.13 | dnl-jp7.kaspersky-labs.com |
12.205.137.15 | dnl-jp8.kaspersky-labs.com |
125.187.2.166 | dnl-jp9.kaspersky-labs.com |
252.183.203.74 | dnl-kr1.kaspersky-labs.com |
16.3.229.64 | dnl-kr10.kaspersky-labs.com |
49.161.13.134 | dnl-kr11.kaspersky-labs.com |
163.143.201.217 | dnl-kr12.kaspersky-labs.com |
33.139.146.193 | dnl-kr13.kaspersky-labs.com |
241.216.105.182 | dnl-kr15.kaspersky-labs.com |
18.117.212.184 | dnl-kr2.kaspersky-labs.com |
132.32.76.79 | dnl-kr3.kaspersky-labs.com |
71.95.21.243 | dnl-kr4.kaspersky-labs.com |
23.172.236.232 | dnl-kr5.kaspersky-labs.com |
55.73.87.46 | dnl-kr6.kaspersky-labs.com |
169.244.207.129 | dnl-kr7.kaspersky-labs.com |
40.52.153.37 | dnl-kr8.kaspersky-labs.com |
60.128.179.26 | dnl-kr9.kaspersky-labs.com |
93.30.218.96 | dnl-ru1.kaspersky-labs.com |
206.200.83.247 | dnl-ru10.kaspersky-labs.com |
77.8.28.155 | dnl-ru11.kaspersky-labs.com |
29.84.54.145 | dnl-ru12.kaspersky-labs.com |
130.242.94.215 | dnl-ru13.kaspersky-labs.com |
176.157.214.42 | dnl-ru14.kaspersky-labs.com |
114.220.159.206 | dnl-ru15.kaspersky-labs.com |
66.41.186.195 | dnl-ru2.kaspersky-labs.com |
99.198.225.9 | dnl-ru3.kaspersky-labs.com |
213.113.157.160 | dnl-ru4.kaspersky-labs.com |
152.176.34.68 | dnl-ru5.kaspersky-labs.com |
104.253.61.57 | dnl-ru6.kaspersky-labs.com |
136.154.168.127 | dnl-ru7.kaspersky-labs.com |
250.69.32.210 | dnl-ru8.kaspersky-labs.com |
121.133.234.118 | dnl-ru9.kaspersky-labs.com |
141.209.192.107 | dnl-us1.kaspersky-labs.com |
174.43.43.177 | dnl-us10.kaspersky-labs.com |
219.25.164.4 | dnl-us11.kaspersky-labs.com |
158.21.109.236 | dnl-us12.kaspersky-labs.com |
110.165.135.226 | dnl-us13.kaspersky-labs.com |
143.255.175.228 | dnl-us14.kaspersky-labs.com |
1.237.39.123 | dnl-us15.kaspersky-labs.com |
195.233.240.31 | dnl-us2.kaspersky-labs.com |
147.122.11.20 | dnl-us3.kaspersky-labs.com |
180.211.50.90 | dnl-us4.kaspersky-labs.com |
38.194.170.173 | dnl-us5.kaspersky-labs.com |
165.189.115.149 | dnl-us6.kaspersky-labs.com |
185.10.142.138 | dnl-us7.kaspersky-labs.com |
217.167.181.140 | dnl-us8.kaspersky-labs.com |
7.150.45.35 | dnl-us9.kaspersky-labs.com |
202.146.247.199 | dougknox.com |
154.222.17.188 | down.360safe.cn |
187.124.124.2 | down.360safe.com |
44.106.245.85 | download.avg.com |
239.102.190.249 | download.bleepingcomputer.com |
191.178.148.239 | download.com |
224.80.0.53 | download.com.vn |
82.62.120.204 | download.eset.com |
208.58.65.112 | download.f-secure.com |
228.135.24.101 | download.mcafee.com |
5.36.147.187 | download.microsoft.com |
135.35.11.14 | download.microsoft.comguru0.grisoft.cz |
6.30.212.178 | download.nai.com |
213.107.239.167 | download.norman.no |
246.8.22.237 | download.rising.com.cn |
104.247.142.64 | download.softpedia.com |
43.243.88.40 | download.sysinternals.com |
251.63.114.29 | download0.avast.com |
28.221.153.31 | download1.avast.com |
141.203.18.182 | download1.emsisoft.com |
12.199.219.90 | download1.quickheal.com |
32.19.245.79 | download10.quickheal.com |
65.177.29.150 | download100.avast.com |
179.159.217.233 | download1us.softpedia.com |
65.171.178.225 | download2.avast.com |
17.248.136.214 | download2.quickheal.com |
50.149.244.216 | download200.avast.com |
164.64.108.111 | download201.avast.com |
103.127.53.19 | download202.avast.com |
54.204.12.8 | download203.avast.com |
87.105.119.78 | download204.avast.com |
201.20.239.161 | download205.avast.com |
72.83.185.69 | download206.avast.com |
92.160.211.58 | download207.avast.com |
124.62.250.128 | download208.avast.com |
238.232.115.23 | download209.avast.com |
109.40.60.187 | download210.avast.com |
61.116.86.176 | download211.avast.com |
162.18.126.246 | download212.avast.com |
208.188.246.74 | download213.avast.com |
146.252.191.238 | download214.avast.com |
98.73.217.227 | download3.avast.com |
131.230.1.41 | download3.quickheal.com |
245.145.189.192 | download4.avast.com |
184.208.66.100 | download4.emsisoft.com |
135.29.93.89 | download4.quickheal.com |
168.186.200.159 | download5.avast.com |
26.101.64.242 | download5.emsisoft.com |
153.164.10.150 | download5.quickheal.com |
173.241.224.139 | download501.avast.com |
205.75.75.209 | download502.avast.com |
251.57.196.36 | download503.avast.com |
190.53.141.12 | download504.avast.com |
142.197.167.1 | download505.avast.com |
175.31.207.4 | download511.avast.com |
33.13.71.155 | download512.avast.com |
227.9.16.63 | download513.avast.com |
179.154.42.52 | download514.avast.com |
212.243.82.122 | download515.avast.com |
70.226.202.205 | download516.avast.com |
197.221.147.181 | download535.avast.com |
216.42.174.170 | download6.avast.com |
249.199.213.172 | download6.quickheal.com |
39.182.77.67 | download600.avast.com |
234.177.23.231 | download601.avast.com |
186.254.49.220 | download602.avast.com |
218.156.156.34 | download603.avast.com |
76.138.21.117 | download604.avast.com |
15.134.222.25 | download605.avast.com |
223.210.180.14 | download606.avast.com |
0.112.32.84 | download607.avast.com |
114.94.152.236 | download608.avast.com |
240.90.97.144 | download609.avast.com |
4.167.55.133 | download617.avast.com |
37.68.163.203 | download618.avast.com |
151.51.27.30 | download619.avast.com |
22.46.228.194 | download620.avast.com |
229.123.255.199 | download621.avast.com |
22.40.54.13 | download622.avast.com |
136.23.174.96 | download623.avast.com |
75.18.120.72 | download624.avast.com |
27.95.146.61 | download625.avast.com |
59.253.185.63 | download626.avast.com |
173.235.50.214 | download627.avast.com |
44.231.251.122 | download628.avast.com |
64.51.21.111 | download629.avast.com |
97.209.60.181 | download630.avast.com |
210.191.249.9 | download631.avast.com |
81.187.194.241 | download632.avast.com |
33.7.152.230 | download633.avast.com |
66.165.4.232 | download634.avast.com |
180.80.124.127 | download635.avast.com |
119.143.69.35 | download636.avast.com |
70.220.28.24 | download637.avast.com |
103.121.135.94 | download638.avast.com |
217.36.255.177 | download639.avast.com |
88.99.201.85 | download640.avast.com |
108.176.227.74 | download641.avast.com |
140.78.10.144 | download642.avast.com |
254.248.131.39 | download643.avast.com |
125.56.76.203 | download644.avast.com |
77.132.102.192 | download645.avast.com |
178.34.141.6 | download646.avast.com |
224.204.6.90 | download647.avast.com |
162.12.207.254 | download648.avast.com |
114.88.233.243 | download649.avast.com |
147.246.17.57 | download650.avast.com |
5.161.205.208 | download651.avast.com |
88.112.227.4 | download652.avast.com |
40.189.253.249 | download653.avast.com |
73.91.104.63 | download654.avast.com |
186.5.225.146 | download655.avast.com |
57.69.170.54 | download656.avast.com |
77.145.128.43 | download658.avast.com |
110.235.236.114 | download659.avast.com |
156.217.100.197 | download660.avast.com |
94.213.45.173 | download661.avast.com |
46.102.71.162 | download662.avast.com |
79.191.111.164 | download663.avast.com |
193.174.231.59 | download664.avast.com |
132.169.176.223 | download665.avast.com |
83.58.203.212 | download666.avast.com |
116.147.242.26 | download667.avast.com |
230.130.106.109 | download668.avast.com |
101.126.52.85 | download669.avast.com |
121.202.78.74 | download670.avast.com |
154.104.117.76 | download671.avast.com |
199.86.238.227 | download672.avast.com |
138.82.183.135 | download673.avast.com |
90.158.209.124 | download674.avast.com |
123.60.61.195 | download675.avast.com |
237.42.181.22 | download676.avast.com |
175.38.126.186 | download677.avast.com |
127.115.84.175 | download678.avast.com |
160.16.192.245 | download679.avast.com |
18.255.56.140 | download680.avast.com |
145.250.1.48 | download681.avast.com |
164.71.216.37 | download682.avast.com |
197.228.67.107 | download683.avast.com |
55.211.187.190 | download684.avast.com |
182.206.133.98 | download685.avast.com |
134.27.159.87 | download686.avast.com |
167.185.198.157 | download687.avast.com |
24.167.63.240 | download688.avast.com |
219.163.8.216 | download689.avast.com |
171.239.34.205 | download690.avast.com |
204.141.74.208 | download691.avast.com |
62.123.194.103 | download692.avast.com |
188.119.139.27 | download693.avast.com |
224.212.181.16 | download694.avast.com |
1.113.221.86 | download695.avast.com |
115.96.153.169 | download696.avast.com |
242.91.98.145 | download697.avast.com |
193.168.57.134 | download698.avast.com |
226.69.164.136 | download699.avast.com |
84.240.28.31 | download7.avast.com |
23.47.230.195 | download7.quickheal.com |
231.124.188.184 | download700.avast.com |
7.26.39.254 | download701.avast.com |
121.196.160.81 | download702.avast.com |
248.4.105.245 | download703.avast.com |
12.80.131.234 | download704.avast.com |
45.238.170.48 | download705.avast.com |
159.152.35.200 | download706.avast.com |
29.216.236.108 | download707.avast.com |
237.37.6.97 | download708.avast.com |
82.194.46.167 | download709.avast.com |
128.109.166.250 | download72.avast.com |
67.172.111.158 | download73.avast.com |
18.249.138.147 | download74.avast.com |
51.150.177.217 | download75.avast.com |
165.65.109.112 | download76.avast.com |
104.128.243.20 | download77.avast.com |
56.205.13.9 | download78.avast.com |
88.107.120.79 | download79.avast.com |
202.21.241.162 | download8.quickheal.com |
73.85.186.70 | download80.avast.com |
93.161.144.59 | download81.avast.com |
126.251.251.129 | download82.avast.com |
172.233.116.213 | download83.avast.com |
110.229.61.189 | download84.avast.com |
62.118.87.178 | download85.avast.com |
95.207.127.180 | download9.quickheal.com |
209.190.247.75 | download900.avast.com |
164.201.208.255 | download901.avast.com |
115.90.235.244 | download902.avast.com |
148.179.18.58 | download903.avast.com |
6.162.138.141 | download904.avast.com |
133.157.84.117 | download905.avast.com |
153.234.110.106 | download906.avast.com |
185.136.149.108 | download907.avast.com |
231.118.14.3 | download908.avast.com |
170.114.215.167 | download909.avast.com |
122.190.241.156 | download91.avast.com |
155.92.92.226 | download910.avast.com |
12.74.213.53 | download911.avast.com |
207.70.158.218 | download912.avast.com |
159.146.116.207 | download913.avast.com |
192.48.224.21 | download914.avast.com |
50.31.88.172 | download915.avast.com |
177.26.33.80 | download916.avast.com |
196.103.248.69 | download917.avast.com |
229.4.99.139 | download918.avast.com |
87.243.219.222 | download919.avast.com |
214.238.165.130 | download92.avast.com |
166.59.191.119 | download920.avast.com |
198.217.230.189 | download921.avast.com |
56.199.95.16 | download922.avast.com |
251.195.40.248 | download923.avast.com |
203.15.66.237 | download924.avast.com |
236.173.105.239 | download925.avast.com |
93.155.226.134 | download926.avast.com |
220.151.171.43 | download927.avast.com |
240.227.197.32 | download928.avast.com |
17.129.237.102 | download929.avast.com |
131.112.169.185 | download93.avast.com |
2.107.114.161 | download930.avast.com |
209.184.73.150 | download931.avast.com |
242.85.180.152 | download932.avast.com |
100.0.44.47 | download933.avast.com |
39.63.246.211 | download934.avast.com |
247.140.204.200 | download935.avast.com |
23.42.55.14 | download936.avast.com |
137.212.176.97 | download937.avast.com |
8.20.121.5 | download938.avast.com |
28.96.147.250 | download939.avast.com |
61.254.186.64 | download94.avast.com |
174.168.51.215 | download940.avast.com |
45.232.252.124 | download941.avast.com |
253.52.22.113 | download942.avast.com |
98.210.62.199 | download943.avast.com |
160.141.198.26 | download944.avast.com |
98.204.143.190 | download945.avast.com |
50.25.170.179 | download946.avast.com |
83.182.209.249 | download947.avast.com |
197.97.141.144 | download948.avast.com |
136.160.19.52 | download949.avast.com |
88.237.45.41 | download95.avast.com |
120.138.152.111 | download950.avast.com |
234.53.16.194 | download951.avast.com |
105.117.218.102 | download952.avast.com |
125.193.176.91 | download953.avast.com |
158.27.27.161 | download954.avast.com |
203.9.148.244 | download955.avast.com |
142.5.233.104 | download956.avast.com |
234.33.3.93 | download957.avast.com |
11.123.42.95 | download958.avast.com |
125.105.163.247 | download959.avast.com |
63.101.108.155 | download96.avast.com |
15.245.134.144 | download960.avast.com |
48.79.174.214 | download961.avast.com |
162.62.38.41 | download962.avast.com |
33.57.239.17 | download963.avast.com |
52.134.10.6 | download964.avast.com |
85.35.49.8 | download965.avast.com |
131.18.169.159 | download966.avast.com |
70.13.115.67 | download967.avast.com |
22.90.141.56 | download968.avast.com |
54.248.248.126 | download969.avast.com |
168.230.113.209 | download97.avast.com |
107.226.58.117 | download970.avast.com |
59.46.16.106 | download971.avast.com |
92.204.123.176 | download972.avast.com |
206.186.244.72 | download973.avast.com |
76.182.189.236 | download974.avast.com |
96.3.147.225 | download975.avast.com |
129.160.255.39 | download976.avast.com |
243.143.119.122 | download977.avast.com |
114.138.64.30 | download978.avast.com |
65.215.91.19 | download979.avast.com |
98.116.130.89 | download98.avast.com |
212.99.250.172 | download980.avast.com |
151.94.196.148 | download99.avast.com |
103.171.238.153 | downloads-eu1.kaspersky-labs.com |
167.104.37.171 | downloads-eu2.kaspersky-labs.com |
25.87.157.66 | downloads-eu3.kaspersky-labs.com |
152.83.103.230 | downloads-eu4.kaspersky-labs.com |
172.159.129.219 | downloads-us1.kaspersky-labs.com |
205.61.168.33 | downloads-us2.kaspersky-labs.com |
62.43.101.116 | downloads-us3.kaspersky-labs.com |
189.39.46.92 | downloads-us4.kaspersky-labs.com |
141.115.4.82 | downloads.andymanchesta.com |
174.17.112.84 | downloads.malwarebytes.org |
32.188.232.235 | downloads.microsoft.com |
226.251.177.143 | downloads.My-eTrust.com |
178.72.136.132 | downloads1.kaspersky-labs.com |
211.229.243.202 | downloads2.kaspersky-labs.com |
69.144.107.29 | downloads3.kaspersky-labs.com |
196.207.53.193 | downloads4.kaspersky-labs.com |
216.28.79.182 | downloads5.kaspersky-labs.com |
248.185.118.252 | dr-web-cureit.softonic.com |
106.100.238.147 | drsolomon.com |
233.164.184.55 | drweb-inside.com |
185.240.210.44 | drweb.com |
30.142.249.114 | drweb.com.es |
75.56.114.197 | drweb.net |
14.120.59.106 | drwebinside.com |
222.196.85.95 | dswlab.com |
255.98.125.181 | duba.net |
129.28.73.76 | ealaddin.net |
67.92.206.240 | ealaddin.orgeshop.aladdin.com |
19.169.233.229 | easy-vpn.comodo.com |
52.70.84.43 | edm.symantec.com |
166.241.204.126 | education.symantec.com |
37.48.149.34 | eeload.com |
56.125.108.23 | eeye.com |
89.214.215.93 | eicar.org |
135.197.79.176 | elblogdemanu.com |
74.193.25.152 | elitepvpers.de |
26.81.51.141 | emea.trendmicro.com |
203.59.235.32 | emsisoft.com |
61.42.99.183 | emsisoft.de |
0.37.44.91 | encarta.msn.com |
207.182.71.80 | engine.awaps.net |
240.15.110.150 | enterprisesecur.symantec.com |
98.254.230.233 | eos.eset.es |
225.249.176.209 | eradicatespyware.net |
245.70.202.198 | es.answers.yahoo.com |
21.228.241.200 | es.kioskea.net |
67.210.105.95 | es.mcafee.com |
6.206.51.3 | es.trendmicro.com |
214.26.77.248 | es.wasalive.com |
247.184.184.62 | esafe.com |
104.166.49.145 | esecurity.livecall.co.kr |
43.162.250.54 | eset-la.com |
251.238.208.43 | eset.com |
28.140.60.113 | eset.es |
142.123.180.8 | eset.sk |
13.118.125.172 | esp.sophos.com |
32.195.84.161 | espanol.answers.yahoo.com |
65.96.191.231 | espanol.dir.groups.yahoo.com |
179.79.55.58 | espanol.groups.yahoo.com |
50.74.1.222 | esupport.trendmicro.com |
2.183.59.243 | et.symantec.com |
66.84.98.57 | etrr.co.uk |
180.67.218.140 | eugrantsadvisor.cz |
119.63.164.116 | eugrantsadvisor.de |
71.139.190.105 | eval.symantec.com |
104.41.229.107 | ewido.net |
217.23.94.2 | exchangeyourcareer.net |
88.19.39.166 | experts-exchange.com |
108.95.65.155 | f-prot.com |
141.253.105.226 | f-secure.com |
255.235.37.53 | f-secure.frf-secure.hk |
125.231.238.29 | f-secure.nlfsecure.com |
77.52.197.18 | fastclick.net |
110.209.48.20 | feedage.com |
224.124.168.171 | feeds.sophos.com |
163.187.113.79 | feeds.trendmicro.com |
114.8.72.68 | file.ikaka.cn |
147.165.179.138 | file.ikaka.com |
5.80.43.221 | file.net |
132.144.245.129 | files.avast.com |
152.220.15.118 | files.filefont.com |
185.122.70.204 | files.trendmicro-europe.com |
58.52.191.99 | filseclab.com |
185.116.136.7 | final4ever.com |
137.192.162.252 | finjan.com |
238.94.202.67 | firewall.sunbeltsoftware.com |
28.8.66.150 | firewallguide.com |
222.72.11.58 | fixmyim.com |
174.149.37.47 | foro.ethek.com |
207.50.77.117 | foros.toxico-pc.com |
65.221.9.12 | foros.zonavirus.com |
4.28.142.176 | forospanish.com |
211.105.169.165 | forospyware.com |
244.6.20.235 | forospyware.es |
102.177.140.62 | fortiguardcenter.com |
229.240.86.226 | fortihero.com |
249.61.44.215 | fortilog.com |
25.151.151.29 | fortinet.co.at |
71.133.16.112 | fortinet.com |
10.129.217.88 | fortiprotect.com |
218.17.243.77 | fortiwifi.com |
251.107.27.80 | forum.clubedohardware.com.br |
109.89.147.231 | forum.emsisoft.com |
192.229.236.27 | forum.hardware.fr |
144.118.7.16 | forum.hijackthis.de |
176.207.46.86 | forum.ikaka.com |
34.190.166.169 | forum.jiangmin.com |
161.186.112.145 | forum.kaspersky.com |
181.6.138.134 | forum.malekal.com |
214.164.177.136 | forum.piriform.com |
3.146.42.31 | forum.securitycadets.com |
198.142.243.211 | forum.sysinternals.com |
166.234.29.200 | forum.telecharger.01net.com |
199.136.137.15 | forum.tweaks.com |
57.118.1.98 | forum.zazana.com |
251.114.202.6 | forums.cnet.com |
203.191.161.251 | forums.comodo.com |
236.92.12.65 | forums.devshed.com |
94.75.132.216 | forums.maddoktor2.com |
221.70.77.124 | forums.majorgeeks.com |
240.147.36.113 | forums.techguy.org |
17.48.143.183 | forums.whatthetech.com |
131.31.7.10 | fr.bitdefender.com |
2.27.209.174 | fr.drweb.com |
210.103.235.163 | fr.mcafee.com |
243.5.18.233 | fr.trendmicro.com |
100.243.139.60 | fr1.drweb.com |
39.239.84.36 | fr2.drweb.com |
247.59.110.25 | fr3.drweb.com |
24.217.150.28 | fr4.drweb.com |
138.199.14.179 | fr5.drweb.com |
8.195.231.103 | fr6.drweb.com |
44.32.1.92 | fr7.drweb.com |
77.189.41.162 | fractus.mat.uson.mx |
191.172.229.245 | free-av.com |
62.167.174.221 | free-av.net |
13.244.133.210 | free.antivirus.com |
46.145.240.212 | free.avg.com |
160.60.104.107 | free.drweb.com |
99.123.50.15 | free.grisoft.com |
51.200.8.4 | free.grisoft.cz |
83.102.115.74 | free.pandasecurity.com |
197.16.236.157 | free.prevx.com |
68.80.181.65 | free.tinypicbox.com |
88.172.223.70 | freeav.com |
137.74.6.140 | freeav.net |
250.244.127.36 | freespywareremoval.info |
121.52.72.200 | frisk-software.com |
73.128.98.189 | fsc.norman.com |
174.30.138.3 | fsecure.nlwebyard.com |
220.201.2.86 | ftp.avp.com |
159.8.203.250 | ftp.bitdefender.com |
110.85.230.239 | ftp.ca.co |
143.242.13.53 | ftp.ca.com |
1.157.201.204 | ftp.customer.symantec.com |
196.220.79.112 | ftp.dispatch.mcafee.com |
148.41.105.101 | ftp.download.mcafee.com |
180.199.212.171 | ftp.downloads-eu1.kaspersky-labs.com |
38.113.77.254 | ftp.downloads-eu2.kaspersky-labs.com |
165.177.22.162 | ftp.downloads-eu3.kaspersky-labs.com |
185.253.236.151 | ftp.downloads-eu4.kaspersky-labs.com |
218.87.87.221 | ftp.downloads-us1.kaspersky-labs.com |
8.69.208.49 | ftp.downloads-us2.kaspersky-labs.com |
91.209.41.169 | ftp.downloads-us3.kaspersky-labs.com |
42.98.68.158 | ftp.downloads-us4.kaspersky-labs.com |
75.187.107.160 | ftp.downloads1.kaspersky-labs.com |
189.170.227.55 | ftp.downloads2.kaspersky-labs.com |
128.166.173.219 | ftp.downloads3.kaspersky-labs.com |
80.54.199.208 | ftp.downloads4.kaspersky-labs.com |
113.144.238.22 | ftp.drweb.com |
226.126.103.105 | ftp.esafe.com |
97.122.48.81 | ftp.europe.f-secure.com |
117.198.74.70 | ftp.f-prot.com |
150.100.114.73 | ftp.f-secure.com |
196.82.234.224 | ftp.grisoft.com |
134.78.179.132 | ftp.kaspersky-labs.com |
86.155.205.121 | ftp.kaspersky.com |
119.56.57.191 | ftp.kasperskylab.ru |
233.39.177.18 | ftp.liveupdate.symantec.com |
172.34.122.182 | ftp.liveupdate.symantecliveupdate.com |
123.111.81.187 | ftp.mast.mcafee.com |
172.28.204.1 | ftp.mcafee.com |
30.11.68.152 | ftp.microworldsystems.com |
157.6.14.60 | ftp.my-etrust.com |
177.83.228.49 | ftp.nai.com |
209.241.79.119 | ftp.networkassociates.com |
67.223.200.202 | ftp.norton.com |
194.219.145.110 | ftp.rads.mcafee.com |
146.39.171.99 | ftp.sandbox.norman.com |
179.197.210.169 | ftp.secure.nai.com |
37.179.75.253 | ftp.securityresponse.symantec.com |
231.175.36.245 | ftp.sophos.com |
199.11.62.234 | ftp.symantec.com |
232.169.102.236 | ftp.symantecliveupdate.com |
90.152.222.131 | ftp.symatec.com |
217.147.167.39 | ftp.trendmicro.com |
236.224.194.28 | ftp.uk.trendmicro-europe.com |
13.125.233.98 | ftp.update.symantec.com |
127.108.165.181 | ftp.updates.symantec.com |
254.103.111.157 | ftp.updates1.kaspersky-labs.com |
206.180.69.146 | ftp.updates2.kaspersky-labs.com |
238.82.176.148 | ftp.updates3.kaspersky-labs.com |
96.252.41.43 | ftp.updates4.kaspersky-labs.com |
35.60.242.207 | ftp.us.mcafee.com |
243.136.200.196 | ftp.viruslist.com |
20.38.51.10 | funkytoad.com |
133.208.172.94 | futurenow.bitdefender.com |
4.16.117.2 | fw.rising.com.cn |
24.108.159.7 | fx.dk |
73.10.199.77 | gangbang.mytijn.org |
187.181.63.228 | gdata.de |
57.244.8.136 | gdata.es |
9.65.35.125 | gecadsoftware.com |
110.222.74.195 | geekstogo.com |
156.137.194.22 | global.ahnlab.com |
95.200.140.186 | global.jiangmin.com |
189.164.53.62 | global.nprotect.com |
222.65.92.132 | go.mcafee.com |
80.236.24.27 | go.microsoft.com |
19.43.158.191 | go.rising.com.cn |
227.120.184.180 | go.sunbeltsoftware.com |
3.22.35.250 | go.symantec.com |
117.192.156.77 | go.trendmicro.com |
244.0.101.241 | greatis.com |
8.76.59.230 | grisoft.com |
41.166.166.44 | grisoft.cz |
87.148.31.128 | grv.microsoft.com |
25.144.232.104 | guiadohardware.net |
25.80.50.141 | guru.avg.com |
58.170.90.143 | guru1.grisoft.cz |
172.152.210.38 | guru2.grisoft.cz |
110.148.155.202 | guru3.grisoft.cz |
62.37.182.191 | guru4.grisoft.cz |
95.126.221.5 | guru5.grisoft.cz |
209.109.85.88 | gwava.nl |
80.104.30.64 | hacksoft.com.pe |
244.69.201.197 | hacksoft.pe |
21.227.240.199 | halmapr.com |
66.209.105.94 | hauri.co.kr |
5.205.50.3 | hauri.net |
213.25.76.248 | haurijapan.com |
246.183.184.62 | help.rising.com.cn |
104.166.48.145 | hi.baidu.com |
43.161.249.53 | hijackthis.de |
250.238.208.42 | hijackthis.download3000.com |
27.139.59.112 | hishomeforchildren.com |
141.122.179.7 | hjt-data.trend-braintree.com |
12.117.125.171 | hjt.networktechs.com |
32.194.83.160 | home.mcafee.com |
64.95.190.230 | hostedmailsecur.symantec.com |
178.78.54.57 | hotshare.net |
49.74.0.221 | housecall.com |
1.150.26.210 | housecall.trendmicro.com |
34.52.81.40 | housecall60.trendmicro.com |
163.50.202.123 | housecall65.trendmicro.com |
102.46.147.99 | howsafeismypc.com |
54.122.173.89 | huaifai.go.th |
87.24.213.91 | i-vault.comodo.com |
201.7.77.242 | iavs.cz |
71.2.22.150 | ibusca.me |
91.79.49.139 | idauthority.com |
124.236.88.209 | ids.kaspersky-labs.com |
238.219.20.36 | ieupdate.gdata.de |
109.214.221.12 | ieupdate1.gdata.de |
61.35.180.17 | ieupdate2.gdata.de |
109.208.47.19 | ieupdate3.gdata.de |
223.123.167.170 | ieupdate4.gdata.de |
162.187.113.78 | ieupdate5.gdata.de |
114.7.71.67 | ieupdate6.gdata.de |
147.165.178.137 | ikaka.cn |
4.79.43.220 | ikaka.com |
131.143.244.128 | ikarus.at |
151.219.14.118 | ikarus.net |
184.121.54.188 | ilove.tigolbittys.info |
42.35.174.83 | images.kaspersky.com |
168.99.119.247 | in.answers.yahoo.com |
120.176.146.236 | incodesolutions.com |
221.77.185.50 | info.drweb.com |
11.248.49.133 | info.prevx.com |
206.55.250.41 | infos-du-net.com |
157.132.21.30 | infosecpodcast.com |
190.33.60.100 | infospyware.com |
48.204.248.11 | inicioid.com |
3.27.142.175 | iniciorapido.info |
211.104.168.164 | inline-software.de |
243.6.19.234 | internetsecurity.comodo.com |
101.176.140.61 | intranet.cidiroax.ipn.mx |
228.240.85.225 | investor.symantec.com |
248.60.43.214 | irc.bigshitsandwich.org |
169.38.39.173 | irc.metraiciono.com |
215.21.159.0 | iseclab.org |
154.16.104.232 | isotopecomics.com |
106.161.131.221 | iss.net |
138.250.170.223 | it.answers.yahoo.com |
252.233.34.118 | it.bitdefender.com |
191.229.236.26 | it.mcafee.com |
143.117.6.15 | it.trendmicro.com |
176.207.45.85 | itw.trendmicro.com |
33.189.166.168 | ixomodels.com |
160.185.111.144 | ixostore.ixomodels.com |
180.5.137.134 | javacoolsoftware.com |
213.163.177.136 | jetico.com |
3.145.41.31 | jiangmin.com |
197.141.242.211 | jiangmin.com.cn |
165.234.28.200 | jobs.bitdefender.com |
198.135.136.14 | jotti.org |
56.118.0.97 | jp.mcafee.com |
251.113.201.5 | jp.trendmicro.com |
202.190.160.250 | justfacebook.net |
235.91.11.64 | k-otik.com |
93.74.131.215 | k7computing.com |
220.70.77.123 | kaba.360.cn |
240.146.35.112 | kaba.360.com |
17.48.142.182 | karuna-shechen.org |
130.30.7.9 | kaspersky-fr.com |
1.42.224.189 | kaspersky-labs.com |
225.118.250.178 | kaspersky.co.jp |
2.20.34.248 | kaspersky.co.uk |
116.2.154.76 | kaspersky.com |
54.254.99.52 | kaspersky.com.cn |
6.75.125.41 | kaspersky.dk |
39.232.165.43 | kaspersky.es |
153.215.29.194 | kaspersky.gr |
24.210.230.102 | kaspersky.pl |
43.31.1.91 | kaspersky.ru |
76.188.40.161 | kaspersky.se |
190.171.228.244 | kasperskylab.co.kr |
221.71.78.124 | kasperskylab.nl |
173.147.36.113 | kav.ru |
206.49.144.116 | kav.zonelabs.com |
64.219.8.11 | kb.bitdefender.com |
2.27.209.175 | kb.bitdefender.de |
210.104.167.164 | kb.bitdefender.us |
243.5.19.234 | kerio.com |
101.176.139.61 | kimzimmer.net |
228.239.84.225 | kioskea.net |
247.60.111.214 | kpfans.com |
24.217.150.28 | kr.ahnlab.com |
138.132.14.179 | kr.sophos.com |
9.195.216.87 | krupunmai.com |
217.16.242.76 | kvup.jiangmin.com |
62.174.25.146 | kztechs.com |
107.88.146.229 | l33t.shadow-mods.net |
46.168.107.153 | la.trendmicro.com |
14.244.133.142 | ladooscuro.es |
47.146.173.212 | laneros.com |
161.60.105.108 | latam.kaspersky.com |
99.124.238.16 | latin.bitdefender.com |
51.201.8.5 | lavasoft.com |
84.102.116.75 | lavasoft.nu |
198.17.236.158 | lavasoftusa.com |
69.80.181.66 | lexikon.ikarus.at |
88.157.140.55 | license.drweb.com |
137.6.7.141 | linhadefensiva.org |
183.245.127.224 | linhadefensiva.uol.com.br |
122.240.73.216 | linux.bitdefender.com |
90.145.115.205 | lists.clamav.net |
122.234.154.207 | liutilities.com |
236.217.18.102 | live.sunbeltsoftware.com |
175.213.220.10 | liveprotect.net |
127.101.246.255 | liveupdate.symantec.com |
160.191.29.69 | liveupdate.symantec.d4p.net |
17.173.150.152 | liveupdate.symantecliveupdate.com |
144.169.95.129 | looknstop.com |
164.245.121.118 | lovings.technigoyous.net |
197.147.161.120 | lurker.clamav.net |
243.130.25.15 | mailcenter.rising.com |
181.125.226.179 | mailcenter.rising.com.cn |
133.202.253.168 | majorgeeks.com |
166.249.250.128 | mall.hauri.co.kr |
170.232.114.211 | malwarebytes.org |
109.227.59.119 | malwarecity.com |
60.48.18.108 | malwarecity.netmalwarecity.org |
93.205.125.178 | malwaredomainlist.com |
207.188.245.73 | malwarepedia.com |
78.183.207.253 | malwareremoval.com |
114.20.165.242 | malwarescan.emsisoft.com |
146.178.16.56 | malwarescan.emsisoft.de |
4.160.136.139 | malwarescan.emsisoft.es |
131.156.82.47 | mamutu.com |
83.232.108.36 | manuelruvalcaba.com |
116.134.147.106 | marian.symantec.com |
229.116.12.189 | mast.mcafee.com |
168.112.213.166 | mcafee-at-home.com |
120.188.239.155 | mcafee.com |
153.90.23.157 | mcafeeb2b.com |
11.73.143.52 | mcafeefans.com |
138.68.88.216 | mcafeeretail.com |
157.145.115.205 | mcaffee.com |
190.46.154.19 | me.kaspersky.com |
48.29.102.118 | media.fastclick.net |
191.40.48.94 | megasecurity.org |
143.117.6.83 | merijn.org |
175.18.113.85 | metascan-online.com |
33.189.233.236 | microsoft.com |
228.253.179.144 | microsoft.fr |
180.73.137.133 | midescargas.com |
213.231.244.203 | mirror02.gdata.de |
70.145.109.30 | misec.net |
197.209.70.210 | mmsk.cn |
233.45.96.200 | moneybookers.com |
10.203.136.14 | moosoft.com |
124.117.0.165 | mop.pandasecurity.com |
250.181.201.73 | mostz.com |
202.2.228.62 | mozilla-hispano.org |
47.159.11.132 | msdn.microsoft.com |
93.74.131.215 | msk.drweb.com |
32.137.76.123 | msk1.drweb.com |
239.214.103.112 | msk2.drweb.com |
16.115.142.182 | msk3.drweb.com |
130.30.74.77 | msk4.drweb.com |
69.94.208.241 | msk5.drweb.com |
21.170.234.230 | msk6.drweb.com |
54.72.85.44 | msk7.drweb.com |
56.131.94.16 | msncleaner.softonic.com |
183.194.39.180 | msnfix.changelog.fr |
202.15.254.169 | msnvirusremoval.com |
235.104.105.239 | msr.mcafee.com |
25.87.225.66 | mvps.org |
220.82.171.42 | mx.answers.yahoo.com |
172.227.197.31 | mx.mcafee.com |
204.61.236.33 | mxttchina.com |
62.43.100.184 | my-etrust.com |
1.39.46.92 | my.drweb.com |
209.183.72.81 | mygeekside.com |
2.33.127.167 | nabble.com |
115.15.248.250 | nai.com |
242.11.193.226 | natsko.com |
6.87.219.216 | naturesimages.net |
39.245.3.218 | net-security.org |
85.228.123.113 | network.drweb.com |
23.223.68.21 | networkassociates.com |
231.44.95.10 | networkassociates.nai.com |
8.201.202.80 | networkworld.com |
122.184.66.163 | neunet.orgnews.bitdefender.com |
61.179.11.71 | new-beta.drweb.com |
13.0.226.60 | new-company.drweb.com |
45.157.77.130 | new-estore.drweb.com |
159.140.197.25 | new-forum.drweb.com |
30.136.159.205 | new-partners.drweb.com |
66.228.117.194 | new-solutions.drweb.com |
99.130.224.8 | new-support.drweb.com |
212.112.89.91 | new-www.drweb.com |
83.108.34.255 | new.taringa.net |
35.184.60.245 | news.drweb.com |
68.86.100.59 | newsletters.trendmicro.com |
198.84.236.158 | niueight.norman.no |
136.80.181.134 | niufive.norman.no |
88.157.207.123 | niufour.norman.no |
121.58.247.125 | niunine.norman.no |
235.41.111.20 | niuone.norman.no |
106.36.56.184 | niuseven.norman.no |
125.113.83.173 | niusix.norman.no |
158.14.122.243 | niuthree.norman.no |
16.253.54.70 | niutwo.norman.no |
143.248.0.46 | nl.bitdefender.com |
95.69.214.35 | noadware.net |
128.227.65.37 | nod32.co.uk |
241.141.186.188 | nod32.com |
180.205.131.96 | nod32.datsec.de |
132.25.89.85 | nod32.lu |
53.71.85.44 | nod32.ru |
167.242.205.127 | norman.com |
38.49.150.35 | norton.com |
58.126.177.24 | notifier.antivir-pe.de |
90.27.216.94 | novirusthanks.org |
204.198.80.245 | nprobeta.norman.com |
75.6.26.153 | nprotect.com |
27.82.52.142 | nprotect.net |
144.0.107.228 | nprotect.seoul.go.kr |
189.170.228.55 | nsclean.com |
128.234.173.219 | ntfaq.co.kr |
80.54.199.208 | obscgi.mcafee.com |
113.212.239.23 | oem.sunbeltsoftware.com |
227.126.171.174 | offensivecomputing.net |
165.190.48.82 | office.microsoft.com |
117.11.74.71 | oldtimer.geekstogo.com |
150.168.182.141 | one.tinypicbox.com |
8.83.46.224 | onecare.live.com |
135.146.247.132 | online-backup.comodo.com |
154.223.206.121 | online.jiangmin.com |
187.56.57.191 | online.rising.com.cn |
249.55.193.34 | onlinecheck.emsisoft.com |
188.50.139.10 | onlinecheck.emsisoft.de |
140.195.165.255 | onlinecheck.emsisoft.net |
172.29.204.1 | onlinecheck.emsisoft.org |
30.11.69.152 | onlinescan.avast.com |
241.23.30.76 | openantivirus.org |
193.167.56.65 | outpost.pl |
226.1.95.135 | ozzu.com |
83.239.216.219 | p3dev.taringa.net |
210.235.161.195 | pandalabs.pandasecurity.com |
230.55.187.184 | pandasecurity.com |
7.213.227.186 | pandasoftware.com |
53.196.91.81 | pandasoftware.es |
248.191.36.245 | pantip.com |
199.12.63.234 | pcav.cn |
232.169.170.48 | pccreg.antivirus.com |
90.152.34.131 | pccreg.trendmicro.com |
29.147.236.39 | pcentraide.com |
237.224.82.172 | pcguide.com |
158.14.190.243 | pchell.com |
16.252.54.138 | pcinternetpatrol.com |
142.248.255.46 | pcsupportadvisor.com |
162.69.213.35 | pctools.com |
195.226.65.105 | pda.drweb.com |
53.209.185.188 | pedidos.protegerse.com |
180.204.130.96 | personal.psu.edu |
131.25.157.85 | personalfirewall.comodo.com |
164.182.196.155 | pestpatrol.com |
22.165.60.238 | pg.hauri.net |
233.176.22.230 | phx.corporate-ir.net |
185.253.48.219 | pineleafboys.com |
217.155.87.221 | podcasts.sophos.com |
75.137.208.116 | pogonyuto.forospanish.com |
202.133.153.24 | precisesecurity.com |
222.209.179.13 | prevx.com |
255.111.219.83 | privacy.microsoft.com |
113.93.151.167 | products.drweb.com |
239.89.96.143 | promotions.drweb.com |
191.166.54.132 | psnw.com |
240.83.178.150 | pspl.com |
98.254.42.45 | pvtc.org |
37.61.243.209 | qqjkw.net |
244.138.202.198 | quickheal.co.in |
21.39.53.12 | quickheal.com |
135.210.173.95 | radius.turvamies.com |
6.17.119.3 | rads.mcafee.com |
26.94.145.248 | ravantivirus.com |
58.252.184.62 | raymond.cc |
172.166.49.213 | reg-int.nod32-es.com |
43.230.250.121 | reg.eset.es |
11.66.36.126 | reg.rising.com.cn |
112.224.75.196 | register.norman.com |
157.138.196.23 | removetrojanvirus.org |
96.202.141.188 | renewalcenter.symantec.com |
48.22.167.177 | renewals.bitdefender.com |
81.180.207.247 | research.microsoft.com |
195.95.139.142 | research.pandasecurity.com |
133.158.16.50 | research.sunbelt-software.com |
85.235.43.39 | resplendence.com |
118.136.150.109 | retail.sp.f-secure.com |
232.51.14.192 | retail01.sp.f-secure.com |
103.114.216.100 | retail02.sp.f-secure.com |
123.191.174.89 | ribbonwarehouse.com |
155.24.25.159 | rising-global.com |
201.7.145.242 | rising.com |
140.3.91.218 | rising.com.cn |
92.147.117.207 | rolandovera.com |
125.237.156.209 | rootkit.com |
238.219.21.104 | rootkit.nl |
177.215.222.13 | rover800.gaima.co.uk |
129.103.248.2 | roysephotos.com |
162.193.32.214 | ru.trendmicro.com |
163.62.39.42 | ruben.bzin.net |
33.58.240.18 | runscanner.net |
53.135.10.7 | safe.qq.com |
86.36.50.9 | safecomputing.umn.edu |
132.19.170.160 | safer-networking.org |
71.14.115.68 | safetynet.com |
22.91.142.57 | sales.bitdefender.com |
55.248.249.127 | samroeng.hi5.com |
169.231.113.210 | sandbox.norman.com |
108.226.59.118 | sandboxie.com |
60.47.17.107 | sapcupgrades.com |
92.205.124.177 | sarahmcconnellphotography.net |
206.187.245.72 | saverssite.com |
77.183.190.236 | scan.anti-trojan.net |
97.3.148.225 | scan.kingsoft.com |
130.161.255.39 | scan4you.net |
244.143.120.123 | scanner.novirusthanks.org |
114.139.65.31 | scanner.virus.org |
66.215.91.20 | scanner2.novirusthanks.or |
99.117.131.90 | schemas.microsoft.com |
229.116.11.189 | schemas.xmlsoap.org |
168.111.212.165 | sea.symantec.com |
119.188.239.154 | search.ca.com |
152.89.22.156 | search.mcafee.com |
10.72.142.51 | search.symantec.com |
137.67.88.215 | seasonsecurity.com |
157.144.114.204 | secdreg.org |
189.46.153.18 | secubox.aldria.com |
47.28.85.101 | secunia.com |
174.24.31.77 | secure-email.comodo.com |
126.100.245.66 | secure.av-desk.com |
159.2.96.68 | secure.nai.com |
16.172.217.219 | securecomputing.com |
211.236.162.128 | secureme.com |
163.56.120.117 | securitoo.com |
212.230.244.203 | security.symantec.com |
70.145.108.30 | securitycheck.symantec.com |
196.208.53.194 | securitynewsportal.com |
216.29.80.183 | securityrespons.symantec.com |
249.186.119.253 | securityresponse.symantec.com |
107.101.239.148 | securitywonks.net |
234.164.185.56 | secuser.com |
186.241.211.45 | secuser.model-fx.com |
30.142.250.115 | sergiwa.com |
76.57.114.198 | service.mcafee.com |
15.121.60.106 | service1.symantec.com |
223.197.86.95 | servicenews.symantec.com |
0.99.125.165 | sfdoccentral.symantec.com |
113.29.74.76 | shadow.grisoft.cz |
68.93.207.240 | shadu.baidu.com |
20.169.233.230 | shadu.duba.net |
53.71.85.44 | shield.prevx.com |
167.241.205.127 | shop.hauri.co.kr |
37.49.150.35 | shop.pandasecurity.com |
57.126.109.24 | shop.sunbeltsoftware.com |
90.215.216.94 | shop.symantec.com |
136.198.80.177 | shop.trendmicro.com |
75.193.25.153 | shudoo.com |
26.82.52.142 | simplysup.com |
59.171.91.144 | siren24.nprotect.com |
173.154.100.183 | siteadvisor.com |
0.38.45.92 | sitedirector.symantec.com |
208.182.71.81 | smallbiz.symantec.com |
241.16.111.151 | smbstore.trendmicro.com |
99.255.231.234 | smokey-services.eu |
226.250.176.210 | soccersuck.com |
245.71.203.199 | softfaq.com |
22.228.242.201 | softonic.com |
68.211.106.96 | software-files.download.com |
7.206.52.36 | solutions.drweb.com |
246.59.110.25 | sophos.com |
23.216.217.95 | sophos.fr |
137.199.81.178 | sophos1.ucd.ie |
76.195.27.86 | sophos10.ucd.ie |
28.15.241.75 | sophos2.ucd.ie |
61.173.92.145 | sophos5.ucd.ie |
190.171.229.56 | sophos6.ucd.ie |
61.167.174.220 | sophos7.ucd.ie |
81.243.132.209 | sophos8.ucd.ie |
114.145.240.24 | sophos9.ucd.ie |
228.127.104.107 | soporte.pandasecurity.com |
98.123.49.15 | sos.rising.com.cn |
50.200.75.4 | sosvirus.changelog.fr |
83.101.115.74 | spd.atdmt.com |
197.84.235.157 | specs.xmlsoap.org |
136.79.180.133 | speedtest.comodo.com |
87.156.207.122 | spftrl.digitalriver.com |
120.57.246.124 | spyany.com |
234.40.110.19 | spyblocker-software.com |
105.35.56.71 | spybot.info |
13.0.226.61 | spycheck.co.uk |
46.158.10.131 | spycheck.es |
160.140.198.214 | spychecker.com |
30.136.143.190 | spycop.com |
238.213.102.179 | spywaredb.com |
15.114.209.181 | spywaredlls.prevx.com |
129.29.73.76 | spywarefiles.prevx.com |
68.92.18.240 | spywareguide.com |
20.169.233.229 | spywareinfo.com |
52.70.84.43 | spywareterminator.com |
166.241.204.126 | square.bitdefender.com |
37.49.150.34 | static.yoreparo.com |
57.125.176.23 | stats.norton.com |
106.43.231.109 | stdio-labs.blogspot.com |
219.213.96.4 | stiller.com |
90.21.41.168 | store.bitdefender.com |
42.97.67.157 | store.de.bitdefender.com |
143.255.107.228 | store.drweb.com |
189.169.227.55 | store.trendmicro.com |
127.233.172.219 | subs.geekstogo.com |
79.54.198.208 | subwiz.trendmicro.com |
112.211.238.22 | sucop.com |
226.126.170.173 | sun.symantec.com |
165.189.47.81 | sunbelt-software.com |
116.10.74.70 | sunbeltsecurity.com |
149.167.181.140 | sunbeltsoftware.com |
7.82.45.223 | superboy2010.com.au |
134.146.247.131 | superdicas.com.br |
154.222.205.120 | superuser.co.kr |
187.56.56.190 | support.drweb.com |
232.38.177.17 | support.f-secure.com |
171.34.138.9 | support.kaspersky.co |
139.194.164.254 | support.mcafee.com |
172.28.204.1 | support.microsoft.com |
30.10.68.152 | support.pandasecurity.com |
224.6.13.60 | support.rising-global.com |
176.151.39.49 | sybari.com |
209.240.79.119 | sygate.com |
67.223.199.202 | symantec-ese.baynote.net |
194.218.144.178 | symantec.com |
213.39.171.167 | symantecliveupdate.com |
246.196.210.169 | symatec.com |
36.179.74.64 | sysinternals.com |
231.174.20.228 | system-cleaner.comodo.com |
199.11.62.233 | tallemu.com |
231.169.169.47 | taringa.net |
89.151.34.130 | tds.diamondcs.com.au |
28.147.235.38 | tech.pantip.com |
236.223.193.27 | techimo.com |
13.125.44.97 | techspot.com |
126.107.165.249 | techsupportforum.com |
253.103.110.157 | tecniservicioslys.com |
17.179.68.146 | tecno-soft.com |
50.81.176.216 | tempuri.org |
164.64.40.43 | thecomputerpitstop.com |
35.59.241.207 | thejokerx.blogspot.com |
242.136.156.84 | thetechguide.com |
164.182.195.154 | thinkpad.cn |
21.164.60.237 | threatexpert.com |
216.160.5.213 | threatinfo.trendmicro.com |
168.236.31.202 | timeforyourbusi.pandasecurity.com |
201.138.71.205 | timestamp.comodoca.com |
59.120.191.100 | timestamp.wosign.com |
185.116.136.8 | tinysoftware.com |
205.193.162.253 | tms.symantec.com |
238.94.202.67 | together.pctools.com |
96.77.134.150 | tool.ikaka.com |
223.72.79.126 | toonbox.de |
174.149.54.131 | tr.mcafee.com |
223.66.161.133 | trackingtheworld.com |
81.237.25.28 | training.drweb.com |
20.44.227.192 | training.trendmicro.com |
228.121.185.181 | trapware.com |
4.23.36.251 | trendmicro.com |
118.193.157.78 | trendmicro.com.cn |
245.1.102.242 | trendmicro.fr |
9.77.128.231 | trendsecure.com |
42.235.167.45 | trial.trendmicro.com |
156.149.32.197 | trucoswindows.es |
26.213.233.105 | trucoswindows.net |
234.34.3.94 | tw.mcafee.com |
79.191.43.164 | tw.sophos.com |
125.106.163.247 | tw.trendmicro.com |
64.169.108.155 | tweaksforgeeks.com |
15.246.135.144 | u0.eset.com |
48.147.174.214 | u1.eset.com |
162.62.106.109 | u10.eset.com |
101.125.240.17 | u100.eset.com |
69.218.26.22 | u11.eset.com |
101.120.133.92 | u12.eset.com |
215.34.254.175 | u13.eset.com |
86.98.199.83 | u14.eset.com |
106.174.157.72 | u15.eset.com |
139.8.8.142 | u16.eset.com |
184.246.129.226 | u17.eset.com |
123.242.74.202 | u18.eset.com |
75.130.100.191 | u19.eset.com |
108.220.140.193 | u2.eset.com |
222.203.4.88 | u20.eset.com |
161.198.205.252 | u21.eset.com |
112.87.232.241 | u22.eset.com |
161.192.31.71 | u23.eset.com |
19.175.151.154 | u24.eset.com |
146.170.97.130 | u25.eset.com |
166.247.123.119 | u26.eset.com |
198.148.162.121 | u27.eset.com |
244.131.26.16 | u28.eset.com |
183.127.228.180 | u29.eset.com |
135.203.254.169 | u3.eset.com |
168.105.105.239 | u30.eset.com |
165.227.110.206 | u31.eset.com |
104.223.55.114 | u32.eset.com |
56.43.13.103 | u33.eset.com |
89.201.120.173 | u34.eset.com |
203.183.241.84 | u35.eset.com |
89.195.202.249 | u36.eset.com |
109.15.160.238 | u36eset.com |
158.189.28.68 | u37.eset.com |
16.172.148.151 | u37eset.com |
142.167.93.59 | u38.eset.com |
94.244.120.48 | u39.eset.com |
127.145.159.118 | u4.eset.com |
241.128.23.201 | u40.eset.com |
180.123.225.177 | u41.eset.com |
132.200.251.166 | u42.eset.com |
164.101.34.168 | u43.eset.com |
22.84.154.63 | u44.eset.com |
149.80.100.227 | u45.eset.com |
185.172.142.232 | u46.eset.com |
218.74.181.46 | u47.eset.com |
75.56.114.129 | u48.eset.com |
202.52.59.105 | u49.eset.com |
154.128.17.95 | u5.eset.com |
75.174.13.241 | u50.eset.com |
189.89.133.136 | u51.eset.com |
128.152.79.44 | u52.eset.com |
80.229.37.33 | u53.eset.com |
112.130.144.103 | u54.eset.com |
226.45.8.186 | u55.eset.com |
97.109.210.94 | u56.eset.com |
117.185.236.83 | u57.eset.com |
150.87.19.153 | u58.eset.com |
7.1.140.48 | u59.eset.com |
134.65.85.213 | u6.eset.com |
86.141.111.202 | u60.eset.com |
187.43.151.16 | u61.eset.com |
233.214.15.99 | u62.eset.com |
172.21.216.7 | u63.eset.com |
123.98.243.252 | u64.eset.com |
156.255.26.66 | u65.eset.com |
14.170.214.217 | u66.eset.com |
209.233.92.125 | u67.eset.com |
161.54.118.114 | u68.eset.com |
209.227.241.200 | u69.eset.com |
67.142.105.27 | u7.eset.com |
194.206.51.191 | u70.eset.com |
214.26.9.180 | u71.eset.com |
247.116.116.250 | u72.eset.com |
36.98.237.77 | u73.eset.com |
231.94.182.53 | u74.eset.com |
183.238.208.43 | u75.eset.com |
216.72.248.45 | u76.eset.com |
74.55.112.196 | u77.eset.com |
28.66.73.120 | u78.eset.com |
252.227.115.125 | u79.eset.com |
29.60.155.195 | u8.eset.com |
143.43.19.22 | u80.eset.com |
14.38.220.254 | u81.eset.com |
33.115.247.243 | u82.eset.com |
66.16.30.245 | u83.eset.com |
112.255.150.140 | u84.eset.com |
51.250.96.48 | u85.eset.com |
3.71.122.37 | u86.eset.com |
36.229.229.107 | u87.eset.com |
149.211.94.190 | u88.eset.com |
88.207.39.98 | u89.eset.com |
40.27.253.87 | u9.eset.com |
73.185.105.158 | u90.eset.com |
187.167.225.53 | u91.eset.com |
57.163.170.217 | u92.eset.com |
77.240.17.94 | u93.eset.com |
254.29.124.164 | u94.eset.com |
112.12.244.247 | u95.eset.com |
239.8.190.155 | u96.eset.com |
191.84.216.144 | u97.eset.com |
224.242.255.214 | u98.eset.com |
81.224.120.41 | u99.eset.com |
36.236.81.33 | uk.mcafee.com |
244.56.107.22 | uk.trendmicro-europe.com |
21.214.147.25 | uk.trendmicro.com |
135.196.11.176 | ulove.tigolbittys.info |
5.192.212.84 | up.duba.net |
25.13.238.73 | up.rising.com.cn |
58.170.22.143 | up1.nod123.cn |
172.153.210.226 | upd.zonelabs.com |
43.148.155.202 | update.360safe.cn |
250.225.114.191 | update.360safe.com |
43.142.237.209 | update.aladdin.com |
157.57.101.104 | update.authentium.com |
96.120.47.12 | update.avg.com |
64.213.21.17 | update.avgfrance.com |
96.115.128.87 | update.bitdefender.com |
210.29.249.170 | update.drweb.com |
81.93.194.78 | update.ewido.com |
101.169.220.67 | update.grisoft.com |
134.71.3.137 | update.grisoft.cz |
247.241.124.33 | update.hispasec.com |
118.49.69.197 | update.ikaka.com |
70.125.95.186 | update.ikarus-software.at |
171.27.135.0 | update.quickheal.com |
217.198.255.83 | update.rising.com.cn |
156.5.200.247 | update.sophos.com |
107.82.227.236 | update.symantec.com |
140.239.10.50 | update.trendmicro.com |
254.154.198.201 | update7.jiangmin.com |
193.217.76.109 | updatem.360safe.cn |
145.38.102.98 | updatem.360safe.com |
177.196.209.168 | updates.a-2.org |
35.110.74.251 | updates.drweb.com |
162.174.19.159 | updates.f-prot.com |
182.250.233.148 | updates.sald.com |
103.228.229.107 | updates.symantec.com |
149.211.93.190 | updates3.kaspersky-labs.com |
88.206.38.166 | updates4.kaspersky-labs.com |
39.95.65.155 | updates5.kaspersky-labs.com |
72.184.104.157 | upgrade.bitdefender.com |
186.167.224.52 | upgrade1.bitdefender.com |
125.163.170.216 | upgrade2.bitdefender.com |
77.51.196.205 | upgrade3.bitdefender.com |
110.141.235.19 | upgrade4.bitdefender.com |
223.123.100.102 | upload.changelog.fr |
94.119.45.78 | us.bitdefender.com |
114.195.71.67 | us.mcafee.com |
163.113.127.85 | us.trendmicro.com |
209.95.247.237 | usa.kaspersky.com |
147.91.192.145 | usbcleaner.cn |
99.168.218.134 | ushousecall02.trendmicro.com |
132.69.70.204 | utilidades-utiles.com |
246.52.190.31 | v.dreamwiz.com |
185.47.135.195 | v4.windowsupdate.microsoft.com |
136.124.94.184 | v5.windowsupdate.microsoft.com |
169.25.201.254 | vet.com.au |
27.8.65.149 | vicentevirtual.com |
154.3.11.57 | viguard.com |
174.80.225.46 | vil.nai.com |
206.238.76.116 | vil.nail.com |
64.220.197.199 | virobot.co.kr |
191.216.142.107 | virscan.org |
143.36.168.96 | virus.org |
176.194.207.166 | virusbuster.hu |
34.176.72.250 | viruschief.com |
228.172.17.226 | virusdoctor.jp |
180.249.43.215 | virusfreezone.info |
213.150.83.217 | virusinfo.prevx.com |
71.133.203.112 | viruslist.com |
198.128.148.20 | viruslist.ru |
217.205.175.9 | virusscan.jotti.org |
250.106.214.79 | virusscanonline.net |
108.89.146.162 | virusspy.com |
235.84.92.138 | virustotal.com |
203.177.66.143 | visualizesoftware.com |
235.79.173.145 | visualtracking.symantec.com |
93.249.38.40 | vivo-austin.com |
32.57.239.204 | vms.drweb.com |
240.133.197.193 | vncsvr.com |
17.35.48.7 | vos.symantec.com |
130.205.169.91 | vrv.com.cn |
1.13.114.255 | vsantivirus.com |
21.89.140.244 | webadmin.norman.no |
54.247.180.58 | webphand.com |
168.162.44.209 | webroot.com |
39.225.245.117 | wedoantivirus.com |
246.46.16.106 | welkam.co.jp |
91.203.55.176 | wexperts-exchange.com |
137.118.175.3 | whatthetech.com |
76.181.121.167 | wikio.es |
28.2.147.156 | wilderssecurity.com |
60.160.186.226 | wilderssecurity.net |
174.74.119.121 | wildlist.com |
113.138.252.29 | windowsupdate.microsoft.com |
65.214.22.18 | winpatrol.com |
98.116.129.88 | wmcafee.com |
211.30.250.171 | woottonfootball.com |
82.94.195.80 | wtc.trendmicro.com |
102.170.153.85 | ww.emsisoft.com |
151.20.21.155 | www.1stavenuelimousines.co.uk |
197.3.141.238 | www.2xlgames.com |
135.254.86.214 | www.ahnlab.com |
87.143.113.203 | www.aks.com |
120.232.152.205 | www.aladdin.com |
234.215.16.100 | www.anti-trojan-software.net |
173.210.218.8 | www.anti-trojan.net |
125.99.244.253 | www.anti-virus.by |
157.188.27.67 | www.antivir.es |
15.171.147.150 | www.antivirus-tools.com |
142.167.93.126 | www.antiy.net |
162.243.119.115 | www.apsecure.com |
195.145.158.117 | www.arpia.be |
240.127.23.12 | www.authentium.com |
179.123.224.177 | www.authentium.com.au |
131.199.250.166 | www.av-desk.com |
164.101.102.236 | www.avast.com |
22.84.222.63 | www.avg.com |
216.79.167.227 | www.avhide.com |
168.156.126.216 | www.avoncourt.com |
201.57.233.30 | www.avx.ro |
59.40.97.181 | www.barder.com |
186.35.43.89 | www.beautybar.com |
206.112.1.78 | www.bg.virusblokada.com |
238.13.108.148 | www.bit-defender.de |
96.252.228.231 | www.bitdefende.de |
223.248.174.139 | www.bitdefender-es.com |
175.68.200.128 | www.bitdefender.be |
208.226.239.198 | www.bitdefender.cl |
65.208.104.25 | www.bitdefender.co.uk |
4.204.49.2 | www.bitdefender.com |
99.167.218.133 | www.bitdefender.com.au |
132.69.1.135 | www.bitdefender.com.sg |
246.51.122.31 | www.bitdefender.com.tw |
116.47.67.195 | www.bitdefender.com.vn |
136.123.93.184 | www.bitdefender.de |
169.25.133.254 | www.bitdefender.es |
27.8.65.81 | www.bitdefender.fr |
154.3.10.57 | www.bitdefender.hk |
105.80.225.46 | www.bitdefender.us |
138.237.76.48 | www.bitdefenderme.com |
252.152.196.199 | www.briarhurst.com |
191.215.142.107 | www.brightoctober.com |
143.36.100.96 | www.buraka.tv |
175.194.207.166 | www.buscafacil.com |
33.108.72.249 | www.buscalo.in |
160.172.17.157 | www.busco.in |
180.248.43.146 | www.ca.com |
213.150.82.216 | www.cambridge-steiner-school.co.uk |
71.64.203.112 | www.ccssforum.org |
197.128.148.20 | www.celticmerchant.com |
149.204.174.9 | www.clamav.net |
250.106.214.79 | www.collectedcurios.com |
40.21.78.162 | www.comodo.com |
251.100.39.86 | www.comodo.tv |
202.177.66.75 | www.comodoantispam.com |
235.78.105.145 | www.comodopartners.com |
93.249.37.40 | www.computing.net |
32.56.171.204 | www.configurarequipos.com |
240.133.197.193 | www.contentverification.com |
16.35.48.7 | www.deborahshelton.net |
130.205.168.90 | www.dr-bull.com |
1.13.114.254 | www.drweb.com |
21.89.72.243 | www.ealaddin.com |
54.179.179.57 | www.elvis-express.com |
99.161.44.140 | www.emeraldclassic.co.uk |
38.157.245.117 | www.emsisoft.at |
246.45.15.106 | www.emsisoft.com |
23.135.55.108 | www.emsisoft.de |
137.118.175.3 | www.emsisoft.es |
76.113.120.167 | www.emsisoft.fr |
27.2.147.156 | www.emsisoft.it |
60.91.186.226 | www.emsisoft.jp |
174.74.50.53 | www.emsisoft.net |
45.69.252.29 | www.emsisoft.nl |
65.146.22.18 | www.emsisoft.org |
97.48.61.20 | www.engyro.com |
143.30.182.171 | www.entercept.com |
82.26.127.79 | www.esafe.com |
34.102.153.68 | www.eset.es |
67.4.4.138 | www.eugrantsadvisor.com |
180.242.125.221 | www.eugrantsadvisor.de |
119.238.70.130 | www.eugrantsadvisor.ie |
71.58.28.119 | www.eugrantsadvisor.se |
120.232.152.205 | www.exchangeyourcareer.com |
234.215.16.100 | www.f-prot.com |
104.210.217.8 | www.f-secure.com |
124.31.176.253 | www.fimasys.com |
157.188.27.67 | www.flairweddings.co.uk |
15.171.147.150 | www.forospyware.com |
142.166.93.58 | www.fortifed.com |
94.243.119.47 | www.fortiid.com |
126.144.158.117 | www.fortimail.com |
240.127.22.200 | www.fortinet-apac.com |
179.123.224.176 | www.fortinet.ch |
131.199.250.165 | www.fortinet.co.il |
164.101.33.167 | www.fortinet.com |
21.83.154.62 | www.fortinet.net |
148.79.99.226 | www.fortinet.nl |
168.171.141.232 | www.fortinet.sg |
217.73.181.46 | www.fortinetuk.com |
75.55.113.129 | www.freeality.com |
201.51.58.105 | www.freedrweb.ru |
153.128.17.94 | www.freerav.com |
186.29.124.96 | www.frisk-software.com |
44.200.244.247 | www.frisk.is |
239.7.189.155 | www.fsecure.com |
190.84.148.144 | www.garryowen.com |
223.241.255.214 | www.gdata.es |
81.156.119.41 | www.globalhauri.com |
208.220.65.205 | www.gokidding.com |
228.40.91.194 | www.grisoft.com |
5.198.130.8 | www.hackshields.com |
118.112.251.159 | www.hacksoft.com.pe |
245.176.196.67 | www.hacksoft.pe |
197.252.222.57 | www.handwritingforkids.com |
42.154.6.127 | www.hasp.se |
88.68.126.210 | www.hauri.co.kr |
26.132.71.118 | www.hauri.net |
234.209.98.107 | www.hxproduction.com |
11.110.137.177 | www.ibusca.me |
125.25.69.72 | www.ikarus.at |
64.88.202.236 | www.imddomains.co.uk |
15.165.229.225 | www.indielisboa.com |
48.66.80.39 | www.inicioid.com |
162.237.200.122 | www.iniciorapido.info |
33.45.146.30 | www.internationalservicecheck.com |
53.121.104.19 | www.irangoals.com |
86.211.211.89 | www.iseclab.org |
131.193.76.172 | www.ixomodels.com |
215.77.165.37 | www.jiangmin.com |
166.222.192.26 | www.jiangmin.com.cn |
199.55.231.28 | www.jotti.org |
57.38.95.179 | www.kaspersky.com |
252.33.41.87 | www.kioskea.net |
204.178.67.76 | www.latin-mass-society.org |
236.12.106.146 | www.livepcsupport.com |
94.250.226.229 | www.malwarecity.com |
221.246.172.205 | www.malwarecity.fr |
241.66.198.194 | www.mamutu.com |
18.224.237.196 | www.mamutu.de |
63.206.102.91 | www.manchester-offices.co.uk |
2.202.47.0 | www.mcafee.at |
210.22.73.245 | www.mcafee.com |
243.180.181.59 | www.metascan-online.com |
101.163.45.142 | www.microsoft.com |
40.158.246.50 | www.midescargas.com |
247.235.205.39 | www.mountainlakeslodge.com |
24.136.56.109 | www.mtr-design.com |
138.119.176.4 | www.mygeekside.com |
9.114.122.168 | www.netegrity.com |
29.191.80.157 | www.norman.com |
61.92.187.227 | www.nottinghampoetryseries.com |
175.75.51.54 | www.novirusthanks.org |
46.71.253.218 | www.npin.co.kr |
254.147.23.207 | www.nprotect.co.kr |
31.49.62.21 | www.nprotect.com |
160.47.199.120 | www.nprotect.com.br |
99.43.144.96 | www.nsclean.com |
51.119.170.86 | www.owen.org |
84.21.210.88 | www.pandasecurity.com |
198.4.74.239 | www.pctools.com |
68.255.19.147 | www.peterhearnwaste.co.uk |
88.76.46.136 | www.phoenixtrikeworks.com |
121.233.85.206 | www.prdouglas.co.uk |
235.216.17.33 | www.prevx.com |
106.211.218.9 | www.prevx1.com |
58.32.177.254 | www.professorbeyer.com |
90.189.28.0 | www.quickheal.com |
204.104.148.151 | www.removetrojanvirus.org |
143.168.94.59 | www.renningers.com |
95.244.52.48 | www.residentphotography.com |
128.146.159.118 | www.retento.com |
241.60.24.201 | www.reviewsofbooks.com |
112.124.225.109 | www.rising-global.com |
132.200.251.99 | www.risingav.com.au |
165.102.35.169 | www.safenet-inc.com |
23.17.155.64 | www.scan4you.net |
149.80.100.228 | www.seasonsecurity.com |
101.157.127.217 | www.secondchanceboxer.com |
202.58.166.31 | www.secure-elements.com |
248.229.30.114 | www.sheffieldmind.co.uk |
187.36.232.22 | www.smf.org |
139.113.2.11 | www.softfaq.com |
171.14.41.81 | www.sophos.com |
29.185.229.232 | www.spycheck.co.uk |
224.249.107.140 | www.spycheck.es |
176.69.133.129 | www.stadiumpage.com |
209.227.240.199 | www.sunbeltsoftware.com |
66.141.105.26 | www.symantec.com |
193.205.50.190 | www.sysinternals.com |
213.25.8.180 | www.tecniservicioslys.com |
246.115.116.250 | www.testmypcsecurity.com |
52.113.252.93 | www.threatexpert.com |
246.109.197.69 | www.tomorrowsedge.net |
198.254.224.58 | www.trendmicro.com |
231.87.7.60 | www.trojaner.info |
89.70.127.211 | www.trustix.com |
28.65.72.119 | www.trustlogo.com |
235.210.99.108 | www.vba.com.by |
12.43.138.178 | www.virscan.org |
126.26.2.5 | www.virus.fi |
253.22.204.237 | www.virus.org |
17.98.230.226 | www.virusbuster.hu |
50.0.13.228 | www.viruschief.com |
95.238.134.123 | www.virusfreezone.info |
34.234.79.31 | www.virustotal.com |
242.54.105.20 | www.wellgousa.com |
19.212.213.91 | www.whichssl.com |
133.194.77.174 | www.willsee.com |
71.190.22.82 | www.xmlsoap.org |
23.11.237.71 | www.zarya.info |
56.168.88.141 | www1.my-etrust.com |
170.151.208.36 | www3.ca.com |
57.162.169.216 | www3.safenet-inc.com |
76.239.128.205 | www4.symantec.com |
109.140.235.19 | wwws.clamav.net |
223.123.99.102 | x-cleaner.com |
94.118.45.10 | x.360safe.com |
46.195.71.255 | yoreparo.com |
79.97.110.69 | z-oleg.com |
192.79.231.152 | zeustracker.abuse.ch |
131.75.176.128 | zeylstra.nl |
83.151.202.117 | zhidao.baidu.com |
116.53.242.120 | zhidao.ikaka.com |
230.35.106.15 | ziggamza.net |
100.31.51.179 | zonavirus.com |
120.108.77.168 | zonealarm.com |
153.9.117.238 | zonelabs.com |
11.248.49.65 | zonelabs.fr |
138.243.250.41 | zonelog.co.uk |
89.64.209.30 | zs.kingsoft.com |
122.221.60.32 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 12644 | 12800 | 3.76874 | 55d274f88e5ab59aa27a86516437f7d8 |
.data | 20480 | 64 | 512 | 0.164757 | 75fe664fdcd708925b7ca712ee127c19 |
.rdata | 24576 | 1328 | 1536 | 3.03097 | 2707a7526abdc69c43f37dd3b6665e30 |
.bss | 28672 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.idata | 32768 | 800 | 1024 | 2.18489 | 4e803ebabfbd6fe3233c57c1b6e762a8 |
.rsrc | 36864 | 87232 | 87552 | 5.54166 | 34b5a2a0306aa053bf792aa7f84ba6c7 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a
Network Activity
URLs
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):