HEUR:Trojan.Win32.Generic (Kaspersky), Gen:Variant.Symmi.1909 (B) (Emsisoft), Gen:Variant.Symmi.1909 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 171bfca68d9125d2a2dccebafcf69994
SHA1: 9e7f4f4294c7546255296160be3df7fee24e1394
SHA256: 3603dcc663ec42d6bd0190ecdef81e3087a7fb826a16d24ce34a470085fd3e0d
SSDeep: 3072:08dnQ4UQBBtcvivkCx2qGKDAy7VrqPI65X36UU:03eBt/ISA40IAq
Size: 637472 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2012-09-19 04:10:27
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
| Behaviour | Description |
|---|---|
| WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61736 bytes in size. The following strings are added to the hosts file listed below:
| 173.224.217.72 | viabcp.com |
| 173.224.217.72 | www.viabcp.com |
| 173.224.217.72 | ww2.viabcp.com |
| 173.224.217.72 | bcpzonasegura.viabcp.com |
| 173.224.217.72 | hotmail.com |
| 173.224.217.72 | www.hotmail.com |
| 107.175.226.141 | 13iii.com |
| 139.76.9.143 | 15660808.co.kr |
| 253.59.129.38 | 2-spyware.com |
| 124.55.75.202 | 247fixes.com |
| 144.131.101.191 | 360.cn |
| 177.33.140.5 | 360.com |
| 34.15.73.88 | 360safe.cn |
| 161.11.18.65 | 360safe.com |
| 113.87.232.54 | 45pounds.com |
| 146.245.84.56 | 51nb.com |
| 4.160.204.207 | 9down.com |
| 198.223.149.115 | a-2.org |
| 150.44.108.104 | a188.x.akamai.net |
| 183.201.215.174 | abuse.ch |
| 41.116.79.1 | acs.pandasoftware.com |
| 168.179.25.165 | ad-aware-se.uptodown.com |
| 188.0.51.154 | ad.fastclick.net |
| 220.157.90.224 | ads.fastclick.net |
| 78.72.210.119 | agfirewall.ru |
| 205.136.156.27 | agnitum.com |
| 157.212.182.16 | agnitum.de |
| 2.114.221.86 | agnitum.fr |
| 47.28.86.169 | agnitum.ru |
| 242.92.31.78 | ahn.com.cn |
| 194.168.57.67 | ahnlab.com |
| 227.70.97.137 | akamai.net |
| 85.241.29.32 | aknow.prevx.com |
| 23.48.162.196 | aladdin.com |
| 231.125.189.185 | alert.rising.com.cn |
| 8.26.40.255 | alerta-antivirus.inteco.es |
| 122.197.160.82 | alerta-antivirus.red.es |
| 249.4.106.246 | alladdin.ru |
| 13.81.64.235 | aluriasoftware.com |
| 45.170.171.49 | analysis.seclab.tuwien.ac.at |
| 91.153.35.132 | andymanchesta.com |
| 30.149.237.108 | anti-virus-software-review.com |
| 238.37.7.97 | anti-virus.by |
| 15.127.46.99 | anti-virus.com |
| 128.109.167.250 | antirootkit.com |
| 67.105.112.159 | antispam.sunbeltsoftware.com |
| 19.249.138.148 | antispy.ru |
| 52.83.178.218 | antispyware.sunbeltsoftware.com |
| 166.66.42.45 | antivir.es |
| 37.61.243.21 | antiviraldp.com |
| 56.138.14.10 | antivirus-online.de |
| 89.39.53.12 | antivirus-tools.com |
| 135.22.173.163 | antivirus.about.com |
| 74.17.119.71 | antivirus.cai.com |
| 26.94.145.60 | antivirus.comodo.com |
| 58.251.252.130 | antivirus.hispavista.com |
| 172.234.116.213 | antivirus.sunbeltsoftware.com |
| 111.230.62.121 | antiy.net |
| 63.50.20.110 | anubis.iseclab.org |
| 96.208.127.180 | apac.trendmicro.com |
| 209.190.248.75 | ar.answers.yahoo.com |
| 80.186.193.240 | ar.atwola.com |
| 100.6.151.229 | arcabit.com |
| 133.164.3.43 | arcabit.pl |
| 247.147.123.126 | archive.bitdefender.com |
| 117.142.68.34 | arswp.com |
| 69.219.95.23 | arwww.fortinet.cz |
| 102.120.134.93 | asap.authentium.com |
| 216.103.254.176 | ashampoo.com |
| 155.98.200.152 | atazita.blogspot.com |
| 107.175.226.141 | atdmt.com |
| 139.76.9.143 | attechnical.com |
| 253.59.129.38 | atwola.com |
| 124.55.75.202 | au.mcafee.com |
| 144.131.101.191 | auditmypc.com |
| 177.33.140.5 | authentium.com |
| 34.15.73.88 | auwww.ealaddin.nl |
| 161.11.18.65 | avast-home.uptodown.com |
| 113.87.232.54 | avast.com |
| 146.245.84.56 | avast.ru |
| 4.160.204.207 | avg-antivirus.net |
| 198.223.149.115 | avg.com |
| 150.44.108.104 | avg.vo.llnwd.net |
| 183.201.215.174 | avgate.net |
| 41.116.79.1 | avgfrance.com |
| 168.179.25.165 | avhide.com |
| 188.0.51.154 | avira.com |
| 220.157.90.224 | avp.ch |
| 78.72.210.119 | avp.com |
| 205.136.156.27 | avp.ru |
| 157.212.182.16 | avpclub.ddns.info |
| 2.114.221.86 | avu.zonelabs.com |
| 47.28.86.169 | avx.rob-have.net |
| 242.92.31.78 | awaps.net |
| 194.168.57.67 | b-have.orgbitdefender-ar.com |
| 227.70.97.137 | babooforum.com.br |
| 85.241.29.32 | backup.comodo.com |
| 23.48.162.196 | baike.360.cn |
| 231.125.189.185 | baike.360.com |
| 8.26.40.255 | bakunos.com |
| 122.197.160.82 | banner.fastclick.net |
| 249.4.106.246 | banners.fastclick.net |
| 13.81.64.235 | baristamagazine.com |
| 45.170.171.49 | basetendencies.com |
| 91.153.35.132 | bbs.360.cn |
| 30.149.237.108 | bbs.360safe.cn |
| 238.37.7.97 | bbs.360safe.com |
| 15.127.46.99 | bbs.cfan.com.cn |
| 128.109.167.250 | bbs.cpcw.com |
| 67.105.112.159 | bbs.dswlab.com |
| 19.249.138.148 | bbs.duba.net |
| 52.83.178.218 | bbs.ikaka.com |
| 166.66.42.45 | bbs.janmeng.com |
| 37.61.243.21 | bbs.kafan.cn |
| 56.138.14.10 | bbs.kafan.com |
| 89.39.53.12 | bbs.kaspersky.com.cn |
| 135.22.173.163 | bbs.kpfans.com |
| 74.17.119.71 | bbs.mcafeefans.com |
| 26.94.145.60 | bbs.s-sos.net |
| 58.251.252.130 | bbs.sucop.com |
| 172.234.116.213 | bbs.taisha.org |
| 111.230.62.121 | bbs.trendmicro.com.cn |
| 63.50.20.110 | bbs.winzheng.com |
| 96.208.127.180 | bestofewan.com |
| 209.190.248.75 | beta.anti-virus.by |
| 80.186.193.240 | bg.virusblokada.com |
| 100.6.151.229 | bhsbees.com |
| 133.164.3.43 | bitcity.info |
| 247.147.123.126 | bitcity.org |
| 117.142.68.34 | bitdefender.co.uk |
| 69.219.95.23 | bitdefender.com |
| 102.120.134.93 | bitdefender.com.ua |
| 216.103.254.176 | bitdefender.es |
| 155.98.200.152 | bitdefender.org |
| 23.91.142.57 | bitdefender.secyber.net |
| 55.249.181.59 | bitdefenderchina.com |
| 169.231.46.210 | bitdefenderguatemala.com |
| 40.227.247.118 | bitdefendermalaysia.com |
| 60.47.17.107 | bitdefendertaiwan.com |
| 93.205.56.177 | bitdefenderuruguay.com |
| 206.187.245.5 | bitdefenderusa.com |
| 77.183.190.237 | biz.nprotect.com |
| 29.3.148.226 | bkav.com.vn |
| 62.161.0.228 | blackice.iss.net |
| 176.76.120.123 | bleedingthreats.net |
| 115.139.65.31 | bleepingcomputer.com |
| 66.216.24.20 | blitzblank.com |
| 99.117.131.90 | blog.hispasec.com |
| 213.32.251.173 | blog.threatfire.com |
| 84.95.197.81 | blog.titanium-jewelry.com |
| 104.172.223.70 | blog.trendmicro.com |
| 136.74.6.140 | blogs.icerocket.com |
| 250.244.127.35 | blogs.protegerse.com |
| 121.52.72.199 | blogschapines.com |
| 73.128.98.188 | boardreader.com |
| 174.30.137.2 | bobbondart.com |
| 219.200.2.86 | br.mcafee.com |
| 158.8.203.250 | br.trendmicro.com |
| 110.84.229.239 | brazil.kaspersky.com |
| 143.242.13.53 | buddy.bitdefender.com |
| 1.157.201.204 | bugs.clamav.net |
| 196.220.78.112 | buscafacil.com |
| 147.41.105.101 | buscalo.in |
| 180.198.212.171 | busco.in |
| 38.113.76.254 | buy.bitdefender-es.com |
| 165.176.22.162 | buy.bitdefender.com |
| 185.253.236.151 | buy.bitdefender.de |
| 217.87.87.221 | buy.drweb.com |
| 7.69.208.48 | buy.rising.com.cn |
| 202.65.153.24 | ca.com |
| 154.209.179.13 | cacomvip.ca.com |
| 187.43.218.15 | cai.com |
| 44.25.83.167 | canada.karuna-shechen.org |
| 239.21.28.75 | castlecops.com |
| 191.165.54.64 | castlecrops.com |
| 224.255.94.134 | ccslaughterspdx.com |
| 82.238.214.217 | cddchiangmai.net |
| 209.233.159.193 | cdn.atwola.com |
| 228.54.186.182 | center.rising.com.cn |
| 5.211.225.184 | centralcommand.com |
| 51.194.89.79 | cert.org |
| 246.189.35.243 | cfan.com.cn |
| 198.10.61.232 | cgi.clamav.net |
| 230.168.168.46 | changedetection.com |
| 88.150.33.129 | changelog.fr |
| 27.146.234.37 | channelpartner.trendmicro.com |
| 235.222.192.26 | chickensroamfree.com |
| 12.124.43.96 | chkrootkit.org |
| 125.106.164.248 | chollian.nprotect.co.kr |
| 252.102.109.156 | cisrt.org |
| 16.178.67.145 | cit.kookmin.ac.kr |
| 49.80.175.215 | clamav.net |
| 163.63.39.42 | clamwin.com |
| 34.58.240.206 | click.atdmt.com |
| 241.135.11.195 | clicks.atdmt.com |
| 18.36.50.9 | cloudprotection.pandasecurity.com |
| 132.19.170.92 | clubic.com |
| 71.14.116.68 | cmmings.cn |
| 23.91.142.57 | cn.mcafee.com |
| 55.249.181.59 | cn.sophos.com |
| 169.231.46.210 | cn.trendmicro.com |
| 40.227.247.118 | codesigning.ksoftware.net |
| 60.47.17.107 | codehard.wordpress.com |
| 93.205.56.177 | cohartuk.com |
| 206.187.245.5 | commentcamarche.net |
| 77.183.190.237 | community.thaiware.com |
| 29.3.148.226 | comodo.com |
| 62.161.0.228 | company.drweb.com |
| 176.76.120.123 | company.hauri.co.kr |
| 115.139.65.31 | company.hauri.net |
| 66.216.24.20 | computing.net |
| 99.117.131.90 | comunidad.wilkinsonpc.com.co |
| 213.32.251.173 | configurarequipos.com |
| 84.95.197.81 | coresecurity.com |
| 104.172.223.70 | cou85.com |
| 136.74.6.140 | cowsmo.com |
| 250.244.127.35 | cpsecure.com |
| 121.52.72.199 | csc.rising.com.cn |
| 73.128.98.188 | cureit.ru |
| 174.30.137.2 | customer.symantec.com |
| 219.200.2.86 | customers.drweb.com |
| 158.8.203.250 | cutlines.org |
| 110.84.229.239 | cwsandbox.org |
| 143.242.13.53 | cybercrime.pandasecurity.com |
| 1.157.201.204 | cyberdefender.com |
| 196.220.78.112 | cybertechhelp.com |
| 147.41.105.101 | daboweb.com |
| 180.198.212.171 | daniloff.net |
| 38.113.76.254 | daniweb.com |
| 165.176.22.162 | darkclockers.com |
| 185.253.236.151 | dazhizhu.cn |
| 217.87.87.221 | de.bitdefender.com |
| 7.69.208.48 | de.mcafee.com |
| 202.65.153.24 | de.trendmicro.com |
| 154.209.179.13 | deckard.geekstogo.com |
| 187.43.218.15 | deerfield.com |
| 44.25.83.167 | defalcos.com |
| 239.21.28.75 | definitions.symantec.com |
| 191.165.54.64 | dell.symantec.com |
| 224.255.94.134 | demos.eset.es |
| 82.238.214.217 | descargas.eset.es |
| 209.233.159.193 | dev.depeuter.org |
| 228.54.186.182 | developmentdrums.org |
| 5.211.225.184 | dialognauka.ru |
| 51.194.89.79 | diamondcs.com.au |
| 246.189.35.243 | dicasweb.com.br |
| 198.10.61.232 | discussions.virtualdr.com |
| 230.168.168.46 | disk-encryption.comodo.com |
| 88.150.33.129 | dl.360safe.com |
| 27.146.234.37 | dl1.antivir-pe.com |
| 235.222.192.26 | dl1.antivir-pe.de |
| 12.124.43.96 | dl1.antivir.de |
| 125.106.164.248 | dl1.avgate.net |
| 252.102.109.156 | dl10.freeav.net |
| 16.178.67.145 | dl2.antivir-pe.com |
| 49.80.175.215 | dl2.antivir-pe.de |
| 163.63.39.42 | dl2.antivir.de |
| 34.58.240.206 | dl2.avgate.net |
| 241.135.11.195 | dl3.antivir-pe.de |
| 18.36.50.9 | dl3.antivir.de |
| 132.19.170.92 | dl3.avgate.net |
| 71.14.116.68 | dl4.antivir-pe.com |
| 23.91.142.57 | dl4.antivir-pe.de |
| 55.249.181.59 | dl4.antivir.de |
| 169.231.46.210 | dl4.avgate.net |
| 40.227.247.118 | dl5.avgate.net |
| 60.47.205.39 | dl6.avgate.net |
| 25.137.244.109 | dl7.avgate.net |
| 138.119.177.193 | dl8.avgate.net |
| 9.115.122.169 | dl8.freeav.net |
| 217.191.80.158 | dl9.avgate.net |
| 250.93.188.160 | dl9.freeav.net |
| 108.8.52.55 | dnl-cd1.kaspersky-labs.com |
| 47.71.253.219 | dnl-cd10.kaspersky-labs.com |
| 254.148.212.208 | dnl-cd11.kaspersky-labs.com |
| 31.49.63.22 | dnl-cd12.kaspersky-labs.com |
| 145.220.183.105 | dnl-cd13.kaspersky-labs.com |
| 16.27.129.13 | dnl-cd2.kaspersky-labs.com |
| 36.104.155.2 | dnl-cd3.kaspersky-labs.com |
| 68.6.194.72 | dnl-cd4.kaspersky-labs.com |
| 182.176.59.223 | dnl-cd5.kaspersky-labs.com |
| 53.240.4.131 | dnl-cd6.kaspersky-labs.com |
| 5.60.30.120 | dnl-cd7.kaspersky-labs.com |
| 106.218.69.190 | dnl-cd8.kaspersky-labs.com |
| 152.132.190.18 | dnl-cd9.kaspersky-labs.com |
| 90.196.135.182 | dnl-cn1.kaspersky-labs.com |
| 42.16.161.171 | dnl-cn10.kaspersky-labs.com |
| 75.174.201.241 | dnl-cn11.kaspersky-labs.com |
| 189.89.133.136 | dnl-cn12.kaspersky-labs.com |
| 128.152.10.44 | dnl-cn13.kaspersky-labs.com |
| 79.229.37.33 | dnl-cn14.kaspersky-labs.com |
| 112.130.144.103 | dnl-cn15.kaspersky-labs.com |
| 226.45.8.186 | dnl-cn2.kaspersky-labs.com |
| 97.108.210.94 | dnl-cn3.kaspersky-labs.com |
| 117.185.168.83 | dnl-cn4.kaspersky-labs.com |
| 149.19.19.153 | dnl-cn5.kaspersky-labs.com |
| 195.1.140.236 | dnl-cn6.kaspersky-labs.com |
| 134.253.85.212 | dnl-cn7.kaspersky-labs.com |
| 86.141.111.201 | dnl-cn8.kaspersky-labs.com |
| 119.231.150.203 | dnl-cn9.kaspersky-labs.com |
| 233.213.15.99 | dnl-eu1.kaspersky-labs.com |
| 171.209.216.7 | dnl-eu10.kaspersky-labs.com |
| 123.97.242.252 | dnl-eu11.kaspersky-labs.com |
| 156.187.26.66 | dnl-eu12.kaspersky-labs.com |
| 14.170.146.149 | dnl-eu13.kaspersky-labs.com |
| 141.165.91.125 | dnl-eu14.kaspersky-labs.com |
| 160.242.118.114 | dnl-eu15.kaspersky-labs.com |
| 193.143.157.116 | dnl-eu2.kaspersky-labs.com |
| 239.126.21.11 | dnl-eu3.kaspersky-labs.com |
| 178.121.223.175 | dnl-eu4.kaspersky-labs.com |
| 130.198.249.164 | dnl-eu5.kaspersky-labs.com |
| 162.100.100.234 | dnl-eu6.kaspersky-labs.com |
| 20.82.221.61 | dnl-eu7.kaspersky-labs.com |
| 215.78.166.225 | dnl-eu8.kaspersky-labs.com |
| 167.154.124.214 | dnl-eu9.kaspersky-labs.com |
| 200.56.231.28 | dnl-jp1.kaspersky-labs.com |
| 58.38.96.180 | dnl-jp10.kaspersky-labs.com |
| 184.34.41.88 | dnl-jp11.kaspersky-labs.com |
| 204.110.255.77 | dnl-jp12.kaspersky-labs.com |
| 237.12.107.147 | dnl-jp13.kaspersky-labs.com |
| 95.251.227.230 | dnl-jp14.kaspersky-labs.com |
| 222.246.172.138 | dnl-jp15.kaspersky-labs.com |
| 173.67.199.127 | dnl-jp2.kaspersky-labs.com |
| 206.224.238.197 | dnl-jp3.kaspersky-labs.com |
| 64.207.102.24 | dnl-jp4.kaspersky-labs.com |
| 3.202.48.0 | dnl-jp5.kaspersky-labs.com |
| 211.23.74.245 | dnl-jp6.kaspersky-labs.com |
| 243.181.113.247 | dnl-jp7.kaspersky-labs.com |
| 101.163.234.142 | dnl-jp8.kaspersky-labs.com |
| 228.159.179.50 | dnl-jp9.kaspersky-labs.com |
| 248.235.205.39 | dnl-kr1.kaspersky-labs.com |
| 25.137.244.109 | dnl-kr10.kaspersky-labs.com |
| 138.119.177.193 | dnl-kr11.kaspersky-labs.com |
| 9.115.122.169 | dnl-kr12.kaspersky-labs.com |
| 217.191.80.158 | dnl-kr13.kaspersky-labs.com |
| 250.93.188.160 | dnl-kr15.kaspersky-labs.com |
| 108.8.52.55 | dnl-kr2.kaspersky-labs.com |
| 47.71.253.219 | dnl-kr3.kaspersky-labs.com |
| 254.148.212.208 | dnl-kr4.kaspersky-labs.com |
| 31.49.63.22 | dnl-kr5.kaspersky-labs.com |
| 145.220.183.105 | dnl-kr6.kaspersky-labs.com |
| 16.27.129.13 | dnl-kr7.kaspersky-labs.com |
| 36.104.155.2 | dnl-kr8.kaspersky-labs.com |
| 68.6.194.72 | dnl-kr9.kaspersky-labs.com |
| 182.176.59.223 | dnl-ru1.kaspersky-labs.com |
| 53.240.4.131 | dnl-ru10.kaspersky-labs.com |
| 5.60.30.120 | dnl-ru11.kaspersky-labs.com |
| 106.218.69.190 | dnl-ru12.kaspersky-labs.com |
| 152.132.190.18 | dnl-ru13.kaspersky-labs.com |
| 90.196.135.182 | dnl-ru14.kaspersky-labs.com |
| 42.16.161.171 | dnl-ru15.kaspersky-labs.com |
| 75.174.201.241 | dnl-ru2.kaspersky-labs.com |
| 189.89.133.84 | dnl-ru3.kaspersky-labs.com |
| 76.100.214.248 | dnl-ru4.kaspersky-labs.com |
| 27.177.241.237 | dnl-ru5.kaspersky-labs.com |
| 60.78.92.51 | dnl-ru6.kaspersky-labs.com |
| 174.249.212.134 | dnl-ru7.kaspersky-labs.com |
| 45.56.158.42 | dnl-ru8.kaspersky-labs.com |
| 65.133.116.31 | dnl-ru9.kaspersky-labs.com |
| 97.223.223.101 | dnl-us1.kaspersky-labs.com |
| 143.205.88.184 | dnl-us10.kaspersky-labs.com |
| 82.201.33.160 | dnl-us11.kaspersky-labs.com |
| 34.89.59.149 | dnl-us12.kaspersky-labs.com |
| 67.179.98.151 | dnl-us13.kaspersky-labs.com |
| 180.161.219.46 | dnl-us14.kaspersky-labs.com |
| 119.157.164.211 | dnl-us15.kaspersky-labs.com |
| 71.45.190.200 | dnl-us2.kaspersky-labs.com |
| 104.135.230.14 | dnl-us3.kaspersky-labs.com |
| 218.118.94.97 | dnl-us4.kaspersky-labs.com |
| 89.113.39.73 | dnl-us5.kaspersky-labs.com |
| 108.190.66.62 | dnl-us6.kaspersky-labs.com |
| 141.91.105.64 | dnl-us7.kaspersky-labs.com |
| 187.74.225.215 | dnl-us8.kaspersky-labs.com |
| 126.69.171.123 | dnl-us9.kaspersky-labs.com |
| 78.146.197.112 | dougknox.com |
| 110.48.48.182 | down.360safe.cn |
| 224.30.168.9 | down.360safe.com |
| 163.26.114.173 | download.avg.com |
| 115.102.72.162 | download.bleepingcomputer.com |
| 148.4.179.232 | download.com |
| 5.242.44.127 | download.com.vn |
| 132.238.245.36 | download.eset.com |
| 152.58.203.25 | download.f-secure.com |
| 185.216.55.95 | download.mcafee.com |
| 43.199.175.178 | download.microsoft.com |
| 170.194.120.86 | download.microsoft.comguru0.grisoft.cz |
| 121.15.147.75 | download.nai.com |
| 154.172.186.145 | download.norman.no |
| 12.155.50.228 | download.rising.com.cn |
| 207.150.252.204 | download.softpedia.com |
| 159.227.22.193 | download.sysinternals.com |
| 191.129.61.195 | download0.avast.com |
| 49.111.182.90 | download1.avast.com |
| 176.107.127.254 | download1.emsisoft.com |
| 196.183.153.243 | download1.quickheal.com |
| 229.85.192.57 | download10.quickheal.com |
| 86.67.125.140 | download100.avast.com |
| 213.63.70.117 | download1us.softpedia.com |
| 165.139.28.106 | download2.avast.com |
| 198.41.136.108 | download2.quickheal.com |
| 56.212.0.3 | download200.avast.com |
| 251.19.201.167 | download201.avast.com |
| 202.96.160.156 | download202.avast.com |
| 235.253.11.226 | download203.avast.com |
| 93.168.131.53 | download204.avast.com |
| 220.231.77.217 | download205.avast.com |
| 240.52.103.206 | download206.avast.com |
| 16.210.142.20 | download207.avast.com |
| 130.124.7.171 | download208.avast.com |
| 1.188.208.79 | download209.avast.com |
| 209.8.234.68 | download210.avast.com |
| 54.166.17.138 | download211.avast.com |
| 99.80.138.221 | download212.avast.com |
| 38.144.83.130 | download213.avast.com |
| 246.220.109.119 | download214.avast.com |
| 23.122.149.121 | download3.avast.com |
| 69.225.13.16 | download3.quickheal.com |
| 8.32.146.180 | download4.avast.com |
| 215.109.173.169 | download4.emsisoft.com |
| 248.10.24.239 | download4.quickheal.com |
| 106.181.144.66 | download5.avast.com |
| 233.244.90.230 | download5.emsisoft.com |
| 253.65.48.219 | download5.quickheal.com |
| 29.155.155.33 | download501.avast.com |
| 75.137.20.116 | download502.avast.com |
| 14.133.221.92 | download503.avast.com |
| 222.21.247.81 | download504.avast.com |
| 255.111.30.83 | download505.avast.com |
| 112.93.151.234 | download511.avast.com |
| 51.89.96.143 | download512.avast.com |
| 3.233.122.132 | download513.avast.com |
| 36.67.162.202 | download514.avast.com |
| 150.50.26.29 | download515.avast.com |
| 21.45.227.5 | download516.avast.com |
| 40.122.254.250 | download535.avast.com |
| 73.23.37.252 | download6.avast.com |
| 119.6.157.147 | download6.quickheal.com |
| 58.1.103.55 | download600.avast.com |
| 10.78.129.44 | download601.avast.com |
| 42.236.236.114 | download602.avast.com |
| 156.218.101.197 | download603.avast.com |
| 95.214.46.105 | download604.avast.com |
| 47.34.4.94 | download605.avast.com |
| 80.192.111.164 | download606.avast.com |
| 193.174.232.59 | download607.avast.com |
| 64.170.177.224 | download608.avast.com |
| 84.246.135.213 | download609.avast.com |
| 117.148.243.27 | download617.avast.com |
| 231.131.107.110 | download618.avast.com |
| 102.126.52.18 | download619.avast.com |
| 53.203.79.7 | download620.avast.com |
| 86.104.118.77 | download621.avast.com |
| 200.87.238.160 | download622.avast.com |
| 139.82.184.136 | download623.avast.com |
| 91.159.210.125 | download624.avast.com |
| 123.61.249.127 | download625.avast.com |
| 237.43.114.22 | download626.avast.com |
| 108.39.59.186 | download627.avast.com |
| 128.115.85.175 | download628.avast.com |
| 161.17.124.245 | download629.avast.com |
| 18.255.57.73 | download630.avast.com |
| 145.251.2.49 | download631.avast.com |
| 97.71.216.38 | download632.avast.com |
| 130.229.68.40 | download633.avast.com |
| 244.144.188.191 | download634.avast.com |
| 183.207.133.99 | download635.avast.com |
| 134.28.92.88 | download636.avast.com |
| 167.185.115.74 | download637.avast.com |
| 197.16.235.157 | download638.avast.com |
| 68.79.181.65 | download639.avast.com |
| 88.156.207.54 | download640.avast.com |
| 120.58.246.124 | download641.avast.com |
| 234.228.111.19 | download642.avast.com |
| 105.36.56.183 | download643.avast.com |
| 57.112.82.172 | download644.avast.com |
| 158.14.122.242 | download645.avast.com |
| 204.184.242.70 | download646.avast.com |
| 142.248.187.234 | download647.avast.com |
| 94.69.213.223 | download648.avast.com |
| 127.226.253.37 | download649.avast.com |
| 241.141.185.188 | download650.avast.com |
| 180.204.62.96 | download651.avast.com |
| 131.25.89.85 | download652.avast.com |
| 164.182.196.155 | download653.avast.com |
| 22.97.60.238 | download654.avast.com |
| 149.160.6.146 | download655.avast.com |
| 169.237.220.135 | download656.avast.com |
| 201.71.71.205 | download658.avast.com |
| 247.53.192.32 | download659.avast.com |
| 186.49.137.8 | download660.avast.com |
| 138.193.163.253 | download661.avast.com |
| 171.27.203.255 | download662.avast.com |
| 29.9.67.151 | download663.avast.com |
| 223.5.12.59 | download664.avast.com |
| 175.150.38.48 | download665.avast.com |
| 208.239.78.118 | download666.avast.com |
| 66.222.198.201 | download667.avast.com |
| 193.217.143.177 | download668.avast.com |
| 212.38.170.166 | download669.avast.com |
| 245.195.209.168 | download670.avast.com |
| 35.178.73.63 | download671.avast.com |
| 230.173.19.227 | download672.avast.com |
| 182.250.45.216 | download673.avast.com |
| 214.152.152.30 | download674.avast.com |
| 72.134.17.113 | download675.avast.com |
| 11.130.218.21 | download676.avast.com |
| 219.206.176.10 | download677.avast.com |
| 184.40.216.13 | download678.avast.com |
| 42.22.80.164 | download679.avast.com |
| 168.18.25.72 | download680.avast.com |
| 188.95.239.61 | download681.avast.com |
| 221.252.91.131 | download682.avast.com |
| 79.235.211.214 | download683.avast.com |
| 206.230.156.122 | download684.avast.com |
| 157.51.183.111 | download685.avast.com |
| 190.208.222.181 | download686.avast.com |
| 48.191.86.8 | download687.avast.com |
| 243.186.32.240 | download688.avast.com |
| 195.7.58.229 | download689.avast.com |
| 227.165.97.231 | download690.avast.com |
| 85.147.218.126 | download691.avast.com |
| 212.143.163.34 | download692.avast.com |
| 232.219.189.23 | download693.avast.com |
| 9.121.229.94 | download694.avast.com |
| 123.103.161.177 | download695.avast.com |
| 249.99.106.153 | download696.avast.com |
| 201.176.64.142 | download697.avast.com |
| 234.77.172.144 | download698.avast.com |
| 92.248.36.39 | download699.avast.com |
| 31.55.237.203 | download7.avast.com |
| 238.132.196.192 | download7.quickheal.com |
| 15.33.47.6 | download700.avast.com |
| 129.204.167.89 | download701.avast.com |
| 0.11.113.253 | download702.avast.com |
| 20.88.139.242 | download703.avast.com |
| 52.246.178.56 | download704.avast.com |
| 166.160.43.207 | download705.avast.com |
| 37.224.244.115 | download706.avast.com |
| 245.44.14.104 | download707.avast.com |
| 90.202.54.175 | download708.avast.com |
| 136.116.174.2 | download709.avast.com |
| 74.180.119.166 | download72.avast.com |
| 26.1.145.155 | download73.avast.com |
| 59.158.185.225 | download74.avast.com |
| 173.73.117.120 | download75.avast.com |
| 112.136.250.28 | download76.avast.com |
| 63.213.21.17 | download77.avast.com |
| 96.114.128.87 | download78.avast.com |
| 210.29.248.170 | download79.avast.com |
| 81.92.194.78 | download8.quickheal.com |
| 101.169.152.67 | download80.avast.com |
| 133.3.3.137 | download81.avast.com |
| 179.241.124.220 | download82.avast.com |
| 118.237.69.196 | download83.avast.com |
| 70.125.95.185 | download84.avast.com |
| 103.215.135.188 | download85.avast.com |
| 217.197.255.83 | download9.quickheal.com |
| 155.193.200.247 | download900.avast.com |
| 107.82.226.236 | download901.avast.com |
| 140.171.10.50 | download902.avast.com |
| 254.154.130.133 | download903.avast.com |
| 125.149.75.109 | download904.avast.com |
| 144.226.102.98 | download905.avast.com |
| 177.127.141.100 | download906.avast.com |
| 223.110.5.251 | download907.avast.com |
| 162.105.207.159 | download908.avast.com |
| 114.182.233.148 | download909.avast.com |
| 146.84.84.218 | download91.avast.com |
| 208.14.153.249 | download910.avast.com |
| 147.10.98.157 | download911.avast.com |
| 99.86.56.146 | download912.avast.com |
| 132.244.163.216 | download913.avast.com |
| 246.226.28.112 | download914.avast.com |
| 116.222.229.20 | download915.avast.com |
| 136.43.187.9 | download916.avast.com |
| 169.200.39.79 | download917.avast.com |
| 27.183.159.162 | download918.avast.com |
| 154.178.104.70 | download919.avast.com |
| 105.255.131.59 | download92.avast.com |
| 138.156.170.129 | download920.avast.com |
| 252.139.34.212 | download921.avast.com |
| 191.134.236.188 | download922.avast.com |
| 143.211.6.177 | download923.avast.com |
| 175.113.45.179 | download924.avast.com |
| 33.95.166.74 | download925.avast.com |
| 160.91.111.238 | download926.avast.com |
| 180.167.137.227 | download927.avast.com |
| 213.69.176.41 | download928.avast.com |
| 71.51.109.125 | download929.avast.com |
| 197.47.54.101 | download93.avast.com |
| 149.124.12.90 | download930.avast.com |
| 182.25.120.92 | download931.avast.com |
| 40.196.240.243 | download932.avast.com |
| 235.3.185.151 | download933.avast.com |
| 186.80.144.140 | download934.avast.com |
| 219.237.251.210 | download935.avast.com |
| 77.152.115.37 | download936.avast.com |
| 204.215.61.201 | download937.avast.com |
| 224.36.87.190 | download938.avast.com |
| 0.194.126.4 | download939.avast.com |
| 114.108.247.155 | download94.avast.com |
| 241.172.192.63 | download940.avast.com |
| 193.248.218.52 | download941.avast.com |
| 38.150.1.122 | download942.avast.com |
| 84.64.122.206 | download943.avast.com |
| 22.128.67.114 | download944.avast.com |
| 230.204.93.103 | download945.avast.com |
| 7.106.133.173 | download946.avast.com |
| 121.21.65.68 | download947.avast.com |
| 60.84.198.232 | download948.avast.com |
| 11.161.225.221 | download949.avast.com |
| 44.62.76.35 | download95.avast.com |
| 158.233.196.118 | download950.avast.com |
| 29.40.142.26 | download951.avast.com |
| 49.117.100.15 | download952.avast.com |
| 81.207.207.85 | download953.avast.com |
| 127.189.72.168 | download954.avast.com |
| 66.185.17.144 | download955.avast.com |
| 18.73.43.133 | download956.avast.com |
| 51.163.82.135 | download957.avast.com |
| 165.145.203.31 | download958.avast.com |
| 103.141.148.195 | download959.avast.com |
| 55.29.174.184 | download96.avast.com |
| 88.119.214.254 | download960.avast.com |
| 202.102.78.81 | download961.avast.com |
| 73.97.23.57 | download962.avast.com |
| 92.174.50.46 | download963.avast.com |
| 125.75.89.48 | download964.avast.com |
| 171.58.209.199 | download965.avast.com |
| 110.53.155.107 | download966.avast.com |
| 62.130.181.96 | download967.avast.com |
| 94.32.32.166 | download968.avast.com |
| 208.14.153.249 | download969.avast.com |
| 147.10.98.157 | download97.avast.com |
| 99.86.56.146 | download970.avast.com |
| 132.244.163.216 | download971.avast.com |
| 246.226.28.112 | download972.avast.com |
| 48.154.161.208 | download973.avast.com |
| 68.231.119.197 | download974.avast.com |
| 101.132.227.11 | download975.avast.com |
| 215.115.91.94 | download976.avast.com |
| 86.110.36.2 | download977.avast.com |
| 37.187.63.247 | download978.avast.com |
| 70.88.102.61 | download979.avast.com |
| 184.71.222.144 | download98.avast.com |
| 123.66.168.120 | download980.avast.com |
| 75.143.194.109 | download99.avast.com |
| 107.45.233.111 | downloads-eu1.kaspersky-labs.com |
| 221.27.98.6 | downloads-eu2.kaspersky-labs.com |
| 92.23.43.170 | downloads-eu3.kaspersky-labs.com |
| 112.99.69.159 | downloads-eu4.kaspersky-labs.com |
| 145.1.109.229 | downloads-us1.kaspersky-labs.com |
| 3.239.41.57 | downloads-us2.kaspersky-labs.com |
| 129.235.242.33 | downloads-us3.kaspersky-labs.com |
| 81.56.200.22 | downloads-us4.kaspersky-labs.com |
| 114.213.52.24 | downloads.andymanchesta.com |
| 228.128.172.175 | downloads.malwarebytes.org |
| 167.191.117.83 | downloads.microsoft.com |
| 118.12.76.72 | downloads.My-eTrust.com |
| 151.169.183.142 | downloads1.kaspersky-labs.com |
| 9.84.47.225 | downloads2.kaspersky-labs.com |
| 136.147.249.133 | downloads3.kaspersky-labs.com |
| 156.224.19.122 | downloads4.kaspersky-labs.com |
| 188.126.58.192 | downloads5.kaspersky-labs.com |
| 46.40.179.87 | dr-web-cureit.softonic.com |
| 173.104.124.251 | drsolomon.com |
| 125.180.150.240 | drweb-inside.com |
| 226.82.189.54 | drweb.com |
| 16.252.54.138 | drweb.com.es |
| 210.60.255.46 | drweb.net |
| 162.137.25.35 | drwebinside.com |
| 195.38.65.105 | dswlab.com |
| 53.209.253.0 | duba.net |
| 248.16.130.164 | ealaddin.net |
| 199.93.157.153 | ealaddin.orgeshop.aladdin.com |
| 232.250.8.223 | easy-vpn.comodo.com |
| 90.165.128.50 | edm.symantec.com |
| 217.228.74.214 | education.symantec.com |
| 237.49.32.203 | eeload.com |
| 13.139.139.17 | eeye.com |
| 59.121.4.100 | eicar.org |
| 254.117.205.76 | elblogdemanu.com |
| 206.5.231.65 | elitepvpers.de |
| 239.95.14.67 | emea.trendmicro.com |
| 97.77.135.219 | emsisoft.com |
| 35.73.80.127 | emsisoft.de |
| 159.134.22.32 | encarta.msn.com |
| 192.223.62.102 | engine.awaps.net |
| 50.206.182.185 | enterprisesecur.symantec.com |
| 177.201.127.161 | eos.eset.es |
| 196.22.154.150 | eradicatespyware.net |
| 229.179.193.152 | es.answers.yahoo.com |
| 19.162.57.47 | es.kioskea.net |
| 214.158.3.211 | es.mcafee.com |
| 166.234.29.200 | es.trendmicro.com |
| 199.136.136.14 | es.wasalive.com |
| 56.118.1.97 | esafe.com |
| 251.114.202.5 | esecurity.livecall.co.kr |
| 203.190.160.250 | eset-la.com |
| 236.92.12.65 | eset.com |
| 94.74.132.216 | eset.es |
| 220.70.77.124 | eset.sk |
| 240.147.35.113 | esp.sophos.com |
| 17.48.143.183 | espanol.answers.yahoo.com |
| 131.31.7.10 | espanol.dir.groups.yahoo.com |
| 2.26.208.174 | espanol.groups.yahoo.com |
| 209.103.235.163 | esupport.trendmicro.com |
| 242.4.18.233 | et.symantec.com |
| 100.243.138.60 | etrr.co.uk |
| 39.239.84.36 | eugrantsadvisor.cz |
| 247.59.110.25 | eugrantsadvisor.de |
| 24.217.149.27 | eval.symantec.com |
| 137.199.14.178 | ewido.net |
| 8.195.215.86 | exchangeyourcareer.net |
| 28.15.241.75 | experts-exchange.com |
| 61.173.25.146 | f-prot.com |
| 175.155.213.229 | f-secure.com |
| 45.151.158.205 | f-secure.frf-secure.hk |
| 253.228.116.194 | f-secure.nlfsecure.com |
| 30.129.224.196 | fastclick.net |
| 144.44.88.91 | feedage.com |
| 83.107.33.255 | feeds.sophos.com |
| 34.184.248.244 | feeds.trendmicro.com |
| 67.85.99.58 | file.ikaka.cn |
| 181.0.219.141 | file.ikaka.com |
| 52.64.165.49 | file.net |
| 72.140.191.38 | files.avast.com |
| 105.42.230.108 | files.filefont.com |
| 218.212.95.3 | files.trendmicro-europe.com |
| 89.20.40.167 | filseclab.com |
| 41.96.66.156 | final4ever.com |
| 142.254.106.227 | finjan.com |
| 188.168.226.54 | firewall.sunbeltsoftware.com |
| 126.232.171.218 | firewallguide.com |
| 78.53.197.207 | fixmyim.com |
| 111.210.237.21 | foro.ethek.com |
| 225.125.169.172 | foros.toxico-pc.com |
| 164.188.46.80 | foros.zonavirus.com |
| 115.9.73.69 | forospanish.com |
| 148.166.180.139 | forospyware.com |
| 6.81.44.222 | forospyware.es |
| 133.145.246.130 | fortiguardcenter.com |
| 153.221.204.119 | fortihero.com |
| 186.55.55.189 | fortilog.com |
| 231.37.176.16 | fortinet.co.at |
| 170.33.121.248 | fortinet.com |
| 122.177.147.237 | fortiprotect.com |
| 155.11.187.240 | fortiwifi.com |
| 13.249.51.135 | forum.clubedohardware.com.br |
| 207.245.252.43 | forum.emsisoft.com |
| 159.134.22.32 | forum.hardware.fr |
| 192.223.62.102 | forum.hijackthis.de |
| 50.206.182.185 | forum.ikaka.com |
| 177.201.127.161 | forum.jiangmin.com |
| 196.22.154.150 | forum.kaspersky.com |
| 229.179.193.152 | forum.malekal.com |
| 207.94.245.235 | forum.piriform.com |
| 146.90.191.143 | forum.securitycadets.com |
| 98.166.217.132 | forum.sysinternals.com |
| 131.68.68.202 | forum.telecharger.01net.com |
| 244.50.189.29 | forum.tweaks.com |
| 183.46.134.193 | forum.zazana.com |
| 135.122.92.182 | forums.cnet.com |
| 168.24.200.253 | forums.comodo.com |
| 26.6.64.148 | forums.devshed.com |
| 152.2.9.56 | forums.maddoktor2.com |
| 172.79.224.45 | forums.majorgeeks.com |
| 205.236.75.115 | forums.techguy.org |
| 63.219.195.198 | forums.whatthetech.com |
| 190.214.140.106 | fr.bitdefender.com |
| 141.35.167.95 | fr.drweb.com |
| 174.192.206.165 | fr.mcafee.com |
| 32.175.70.248 | fr.trendmicro.com |
| 227.171.16.224 | fr1.drweb.com |
| 179.247.42.213 | fr2.drweb.com |
| 212.149.81.215 | fr3.drweb.com |
| 69.131.202.110 | fr4.drweb.com |
| 196.127.147.18 | fr5.drweb.com |
| 216.203.173.7 | fr6.drweb.com |
| 249.105.213.78 | fr7.drweb.com |
| 107.87.145.161 | fractus.mat.uson.mx |
| 233.83.90.137 | free-av.com |
| 185.160.49.126 | free-av.net |
| 218.61.156.128 | free.antivirus.com |
| 76.232.20.23 | free.avg.com |
| 15.39.221.187 | free.drweb.com |
| 222.116.180.176 | free.grisoft.com |
| 255.17.31.246 | free.grisoft.cz |
| 113.188.151.73 | free.pandasecurity.com |
| 240.252.97.237 | free.prevx.com |
| 4.72.123.226 | free.tinypicbox.com |
| 37.230.162.40 | freeav.com |
| 150.144.27.191 | freeav.net |
| 21.208.228.99 | freespywareremoval.info |
| 229.28.254.88 | frisk-software.com |
| 74.186.38.159 | fsc.norman.com |
| 120.100.158.242 | fsecure.nlwebyard.com |
| 58.164.103.150 | ftp.avp.com |
| 10.241.130.139 | ftp.bitdefender.com |
| 43.142.169.209 | ftp.ca.co |
| 157.57.101.104 | ftp.ca.com |
| 96.120.234.12 | ftp.customer.symantec.com |
| 47.197.5.1 | ftp.dispatch.mcafee.com |
| 80.98.112.71 | ftp.download.mcafee.com |
| 194.13.232.154 | ftp.downloads-eu1.kaspersky-labs.com |
| 65.77.178.62 | ftp.downloads-eu2.kaspersky-labs.com |
| 85.153.136.51 | ftp.downloads-eu3.kaspersky-labs.com |
| 118.243.243.121 | ftp.downloads-eu4.kaspersky-labs.com |
| 163.225.108.204 | ftp.downloads-us1.kaspersky-labs.com |
| 102.221.53.180 | ftp.downloads-us2.kaspersky-labs.com |
| 54.109.79.169 | ftp.downloads-us3.kaspersky-labs.com |
| 87.199.119.172 | ftp.downloads-us4.kaspersky-labs.com |
| 201.181.239.67 | ftp.downloads1.kaspersky-labs.com |
| 139.177.184.231 | ftp.downloads2.kaspersky-labs.com |
| 91.66.211.220 | ftp.downloads3.kaspersky-labs.com |
| 124.155.250.34 | ftp.downloads4.kaspersky-labs.com |
| 238.138.114.117 | ftp.drweb.com |
| 109.133.59.93 | ftp.esafe.com |
| 128.210.86.82 | ftp.europe.f-secure.com |
| 161.111.125.84 | ftp.f-prot.com |
| 207.94.245.235 | ftp.f-secure.com |
| 146.90.191.143 | ftp.grisoft.com |
| 98.166.217.132 | ftp.kaspersky-labs.com |
| 131.68.68.202 | ftp.kaspersky.com |
| 244.50.189.29 | ftp.kasperskylab.ru |
| 183.46.134.193 | ftp.liveupdate.symantec.com |
| 135.122.92.182 | ftp.liveupdate.symantecliveupdate.com |
| 168.24.200.253 | ftp.mast.mcafee.com |
| 26.6.64.148 | ftp.mcafee.com |
| 152.2.9.56 | ftp.microworldsystems.com |
| 172.79.224.45 | ftp.my-etrust.com |
| 205.236.75.115 | ftp.nai.com |
| 63.219.195.198 | ftp.networkassociates.com |
| 190.214.88.54 | ftp.norton.com |
| 89.239.115.43 | ftp.rads.mcafee.com |
| 122.140.154.113 | ftp.sandbox.norman.com |
| 236.123.18.196 | ftp.secure.nai.com |
| 175.118.220.172 | ftp.securityresponse.symantec.com |
| 127.195.246.161 | ftp.sophos.com |
| 160.97.29.163 | ftp.symantec.com |
| 17.79.150.58 | ftp.symantecliveupdate.com |
| 144.75.95.222 | ftp.symatec.com |
| 164.151.121.211 | ftp.trendmicro.com |
| 197.53.161.26 | ftp.uk.trendmicro-europe.com |
| 55.35.93.109 | ftp.update.symantec.com |
| 181.31.38.85 | ftp.updates.symantec.com |
| 133.108.252.74 | ftp.updates1.kaspersky-labs.com |
| 166.9.104.76 | ftp.updates2.kaspersky-labs.com |
| 24.180.224.227 | ftp.updates3.kaspersky-labs.com |
| 219.243.169.135 | ftp.updates4.kaspersky-labs.com |
| 170.64.128.124 | ftp.us.mcafee.com |
| 203.221.235.194 | ftp.viruslist.com |
| 61.136.99.21 | funkytoad.com |
| 188.199.45.185 | futurenow.bitdefender.com |
| 208.20.71.174 | fw.rising.com.cn |
| 240.178.110.244 | fx.dk |
| 98.92.231.139 | gangbang.mytijn.org |
| 225.156.176.47 | gdata.de |
| 177.232.202.36 | gdata.es |
| 22.134.242.107 | gecadsoftware.com |
| 68.48.106.190 | geekstogo.com |
| 6.112.51.98 | global.ahnlab.com |
| 214.189.77.87 | global.jiangmin.com |
| 247.90.117.157 | global.nprotect.com |
| 105.5.49.52 | go.mcafee.com |
| 44.68.182.216 | go.microsoft.com |
| 251.145.209.205 | go.rising.com.cn |
| 28.46.60.19 | go.sunbeltsoftware.com |
| 142.217.180.102 | go.symantec.com |
| 13.24.126.10 | go.trendmicro.com |
| 33.101.84.255 | greatis.com |
| 65.191.191.69 | grisoft.com |
| 111.173.56.152 | grisoft.cz |
| 50.169.1.128 | grv.microsoft.com |
| 2.57.27.117 | guiadohardware.net |
| 35.147.67.120 | guru.avg.com |
| 149.129.187.15 | guru1.grisoft.cz |
| 87.125.132.179 | guru2.grisoft.cz |
| 39.14.158.168 | guru3.grisoft.cz |
| 72.103.198.238 | guru4.grisoft.cz |
| 186.86.62.65 | guru5.grisoft.cz |
| 57.81.7.41 | gwava.nl |
| 76.158.34.30 | hacksoft.com.pe |
| 109.59.73.32 | hacksoft.pe |
| 155.42.193.183 | halmapr.com |
| 94.37.139.91 | hauri.co.kr |
| 46.114.165.80 | hauri.net |
| 79.16.16.150 | haurijapan.com |
| 192.254.137.233 | help.rising.com.cn |
| 131.250.82.141 | hi.baidu.com |
| 83.70.40.130 | hijackthis.de |
| 116.228.148.201 | hijackthis.download3000.com |
| 230.210.12.96 | hishomeforchildren.com |
| 100.206.213.4 | hjt-data.trend-braintree.com |
| 120.27.171.249 | hjt.networktechs.com |
| 153.184.23.63 | home.mcafee.com |
| 11.167.143.146 | hostedmailsecur.symantec.com |
| 138.162.88.54 | hotshare.net |
| 89.239.115.43 | housecall.com |
| 122.140.154.113 | housecall.trendmicro.com |
| 236.123.18.196 | housecall60.trendmicro.com |
| 175.118.220.172 | housecall65.trendmicro.com |
| 127.195.246.161 | howsafeismypc.com |
| 160.97.29.163 | huaifai.go.th |
| 17.79.150.58 | i-vault.comodo.com |
| 144.75.95.222 | iavs.cz |
| 164.151.121.211 | ibusca.me |
| 197.53.161.26 | idauthority.com |
| 55.35.93.109 | ids.kaspersky-labs.com |
| 181.31.38.85 | ieupdate.gdata.de |
| 133.108.252.74 | ieupdate1.gdata.de |
| 166.9.104.76 | ieupdate2.gdata.de |
| 24.180.224.227 | ieupdate3.gdata.de |
| 219.243.169.135 | ieupdate4.gdata.de |
| 170.64.128.124 | ieupdate5.gdata.de |
| 203.221.235.194 | ieupdate6.gdata.de |
| 61.136.99.21 | ikaka.cn |
| 188.199.45.185 | ikaka.com |
| 208.20.3.106 | ikarus.at |
| 173.110.42.176 | ikarus.net |
| 30.24.163.71 | ilove.tigolbittys.info |
| 157.88.108.235 | images.kaspersky.com |
| 109.164.134.224 | in.answers.yahoo.com |
| 210.66.174.39 | incodesolutions.com |
| 0.236.38.122 | info.drweb.com |
| 194.44.239.30 | info.prevx.com |
| 146.121.9.19 | infos-du-net.com |
| 179.22.49.89 | infosecpodcast.com |
| 37.193.237.240 | infospyware.com |
| 232.0.114.148 | inicioid.com |
| 183.77.141.137 | iniciorapido.info |
| 216.234.248.207 | inline-software.de |
| 74.149.112.34 | internetsecurity.comodo.com |
| 201.212.58.198 | intranet.cidiroax.ipn.mx |
| 221.33.16.187 | investor.symantec.com |
| 254.123.123.1 | irc.bigshitsandwich.org |
| 43.105.244.84 | irc.metraiciono.com |
| 238.101.189.60 | iseclab.org |
| 190.245.215.49 | isotopecomics.com |
| 223.79.255.52 | iss.net |
| 81.61.119.203 | it.answers.yahoo.com |
| 19.57.64.111 | it.bitdefender.com |
| 227.202.90.100 | it.mcafee.com |
| 4.35.130.170 | it.trendmicro.com |
| 118.18.250.253 | itw.trendmicro.com |
| 245.13.195.229 | ixomodels.com |
| 8.90.222.218 | ixostore.ixomodels.com |
| 41.247.5.220 | javacoolsoftware.com |
| 87.230.125.115 | jetico.com |
| 26.226.71.23 | jiangmin.com |
| 234.46.97.12 | jiangmin.com.cn |
| 11.204.204.82 | jobs.bitdefender.com |
| 124.186.69.165 | jotti.org |
| 63.182.14.73 | jp.mcafee.com |
| 15.2.228.62 | jp.trendmicro.com |
| 48.160.80.133 | justfacebook.net |
| 162.142.200.28 | k-otik.com |
| 32.138.145.192 | k7computing.com |
| 52.215.103.181 | kaba.360.cn |
| 85.116.211.251 | kaba.360.com |
| 199.99.75.78 | karuna-shechen.org |
| 70.94.20.242 | kaspersky-fr.com |
| 21.171.47.231 | kaspersky-labs.com |
| 54.72.86.45 | kaspersky.co.jp |
| 168.55.206.128 | kaspersky.co.uk |
| 107.50.152.104 | kaspersky.com |
| 59.127.178.93 | kaspersky.com.cn |
| 92.29.217.95 | kaspersky.dk |
| 205.11.82.246 | kaspersky.es |
| 76.7.27.154 | kaspersky.gr |
| 96.83.53.143 | kaspersky.pl |
| 129.241.93.214 | kaspersky.ru |
| 243.223.25.41 | kaspersky.se |
| 113.219.226.17 | kasperskylab.co.kr |
| 65.40.184.6 | kasperskylab.nl |
| 98.197.36.8 | kav.ru |
| 212.112.156.159 | kav.zonelabs.com |
| 151.175.101.67 | kb.bitdefender.com |
| 102.252.103.100 | kb.bitdefender.de |
| 179.197.211.170 | kb.bitdefender.us |
| 37.112.75.253 | kerio.com |
| 164.175.20.161 | kimzimmer.net |
| 183.252.47.150 | kioskea.net |
| 216.153.86.220 | kpfans.com |
| 74.68.206.115 | kr.ahnlab.com |
| 201.131.152.23 | kr.sophos.com |
| 153.208.178.12 | krupunmai.com |
| 253.110.217.82 | kvup.jiangmin.com |
| 43.24.82.165 | kztechs.com |
| 238.88.27.73 | l33t.shadow-mods.net |
| 190.164.53.62 | la.trendmicro.com |
| 223.66.92.132 | ladooscuro.es |
| 81.236.25.28 | laneros.com |
| 19.44.158.192 | latam.kaspersky.com |
| 227.120.184.181 | latin.bitdefender.com |
| 4.22.36.251 | lavasoft.com |
| 118.193.156.78 | lavasoft.nu |
| 245.0.101.242 | lavasoftusa.com |
| 8.77.60.231 | lexikon.ikarus.at |
| 41.166.167.45 | license.drweb.com |
| 87.149.31.128 | linhadefensiva.org |
| 26.144.233.104 | linhadefensiva.uol.com.br |
| 234.33.3.93 | linux.bitdefender.com |
| 10.123.42.95 | lists.clamav.net |
| 124.105.163.246 | liutilities.com |
| 63.101.108.154 | live.sunbeltsoftware.com |
| 15.245.134.143 | liveprotect.net |
| 48.79.173.213 | liveupdate.symantec.com |
| 162.61.38.41 | liveupdate.symantec.d4p.net |
| 32.57.239.17 | liveupdate.symantecliveupdate.com |
| 52.133.9.6 | looknstop.com |
| 85.35.49.8 | lovings.technigoyous.net |
| 131.18.169.159 | lurker.clamav.net |
| 70.13.114.67 | mailcenter.rising.com |
| 21.90.141.56 | mailcenter.rising.com.cn |
| 54.247.248.126 | majorgeeks.com |
| 168.230.112.209 | mall.hauri.co.kr |
| 107.225.58.117 | malwarebytes.org |
| 59.46.16.106 | malwarecity.com |
| 91.204.123.176 | malwarecity.netmalwarecity.org |
| 205.186.244.71 | malwaredomainlist.com |
| 76.182.189.235 | malwarepedia.com |
| 96.2.147.224 | malwareremoval.com |
| 129.160.254.38 | malwarescan.emsisoft.com |
| 243.142.119.122 | malwarescan.emsisoft.de |
| 113.138.64.30 | malwarescan.emsisoft.es |
| 65.214.90.19 | mamutu.com |
| 98.116.130.89 | manuelruvalcaba.com |
| 212.99.250.172 | marian.symantec.com |
| 151.94.195.148 | mast.mcafee.com |
| 102.171.222.137 | mcafee-at-home.com |
| 135.72.5.139 | mcafee.com |
| 249.55.125.34 | mcafeeb2b.com |
| 120.50.71.198 | mcafeefans.com |
| 140.127.97.187 | mcafeeretail.com |
| 172.29.136.1 | mcaffee.com |
| 30.11.69.84 | me.kaspersky.com |
| 157.7.14.60 | media.fastclick.net |
| 109.83.228.49 | megasecurity.org |
| 142.241.79.51 | merijn.org |
| 0.155.200.203 | metascan-online.com |
| 194.219.145.111 | microsoft.com |
| 146.39.103.100 | microsoft.fr |
| 179.197.211.170 | midescargas.com |
| 37.112.75.253 | mirror02.gdata.de |
| 164.175.20.161 | misec.net |
| 183.252.47.150 | mmsk.cn |
| 216.153.86.220 | moneybookers.com |
| 74.68.206.115 | moosoft.com |
| 201.131.152.23 | mop.pandasecurity.com |
| 153.208.178.12 | mostz.com |
| 253.110.217.82 | mozilla-hispano.org |
| 43.24.82.165 | msdn.microsoft.com |
| 238.88.27.73 | msk.drweb.com |
| 190.164.53.62 | msk1.drweb.com |
| 223.66.92.132 | msk2.drweb.com |
| 81.236.25.28 | msk3.drweb.com |
| 19.44.158.192 | msk4.drweb.com |
| 227.120.184.181 | msk5.drweb.com |
| 192.210.224.183 | msk6.drweb.com |
| 50.125.88.10 | msk7.drweb.com |
| 177.188.33.174 | msncleaner.softonic.com |
| 196.9.248.163 | msnfix.changelog.fr |
| 229.98.99.233 | msnvirusremoval.com |
| 19.81.219.60 | msr.mcafee.com |
| 214.76.165.36 | mvps.org |
| 166.221.191.25 | mx.answers.yahoo.com |
| 198.55.230.27 | mx.mcafee.com |
| 56.37.95.178 | mxttchina.com |
| 251.33.40.86 | my-etrust.com |
| 203.177.66.75 | my.drweb.com |
| 236.11.105.145 | mygeekside.com |
| 94.249.226.229 | nabble.com |
| 220.245.171.205 | nai.com |
| 240.66.197.194 | natsko.com |
| 17.223.237.196 | naturesimages.net |
| 63.206.101.91 | net-security.org |
| 2.201.46.255 | network.drweb.com |
| 209.22.73.244 | networkassociates.com |
| 242.179.180.58 | networkassociates.nai.com |
| 100.162.44.141 | networkworld.com |
| 39.157.246.49 | neunet.orgnews.bitdefender.com |
| 247.234.204.38 | new-beta.drweb.com |
| 23.136.55.108 | new-company.drweb.com |
| 137.118.176.3 | new-estore.drweb.com |
| 8.114.121.167 | new-forum.drweb.com |
| 28.190.79.156 | new-partners.drweb.com |
| 61.92.186.226 | new-solutions.drweb.com |
| 175.74.51.54 | new-support.drweb.com |
| 45.70.252.218 | new-www.drweb.com |
| 253.147.22.207 | new.taringa.net |
| 30.48.62.21 | news.drweb.com |
| 144.31.182.104 | newsletters.trendmicro.com |
| 83.26.127.80 | niueight.norman.no |
| 34.103.154.69 | niufive.norman.no |
| 67.4.193.71 | niufour.norman.no |
| 181.243.57.222 | niunine.norman.no |
| 52.238.3.130 | niuone.norman.no |
| 72.59.29.119 | niuseven.norman.no |
| 104.217.68.189 | niusix.norman.no |
| 218.199.1.16 | niuthree.norman.no |
| 89.195.202.248 | niutwo.norman.no |
| 41.15.160.237 | nl.bitdefender.com |
| 74.173.11.239 | noadware.net |
| 188.87.132.135 | nod32.co.uk |
| 126.151.77.43 | nod32.com |
| 78.228.35.32 | nod32.datsec.de |
| 111.129.143.102 | nod32.lu |
| 225.44.7.185 | nod32.ru |
| 96.107.208.93 | norman.com |
| 115.184.235.82 | norton.com |
| 148.85.18.152 | notifier.antivir-pe.de |
| 6.0.138.47 | novirusthanks.org |
| 133.63.84.211 | nprobeta.norman.com |
| 85.140.110.200 | nprotect.com |
| 185.42.149.14 | nprotect.net |
| 231.212.14.97 | nprotect.seoul.go.kr |
| 170.20.215.5 | nsclean.com |
| 122.96.241.250 | ntfaq.co.kr |
| 155.254.24.64 | obscgi.mcafee.com |
| 13.168.213.216 | oem.sunbeltsoftware.com |
| 207.232.90.124 | offensivecomputing.net |
| 159.53.116.113 | office.microsoft.com |
| 192.210.224.183 | oldtimer.geekstogo.com |
| 50.125.88.10 | one.tinypicbox.com |
| 177.188.33.174 | onecare.live.com |
| 196.9.248.163 | online-backup.comodo.com |
| 229.98.99.233 | online.jiangmin.com |
| 223.29.167.8 | online.rising.com.cn |
| 162.24.113.240 | onlinecheck.emsisoft.com |
| 114.169.139.229 | onlinecheck.emsisoft.de |
| 146.3.178.231 | onlinecheck.emsisoft.net |
| 4.241.43.126 | onlinecheck.emsisoft.org |
| 199.237.244.34 | onlinescan.avast.com |
| 151.125.14.23 | openantivirus.org |
| 184.215.53.93 | outpost.pl |
| 41.197.174.177 | ozzu.com |
| 168.193.119.153 | p3dev.taringa.net |
| 188.13.145.142 | pandalabs.pandasecurity.com |
| 221.171.185.144 | pandasecurity.com |
| 11.154.49.39 | pandasoftware.com |
| 206.149.250.203 | pandasoftware.es |
| 157.226.21.192 | pantip.com |
| 190.127.128.6 | pcav.cn |
| 48.110.248.89 | pccreg.antivirus.com |
| 243.105.194.253 | pccreg.trendmicro.com |
| 195.182.152.242 | pcentraide.com |
| 227.84.3.56 | pcguide.com |
| 85.66.124.207 | pchell.com |
| 212.62.69.115 | pcinternetpatrol.com |
| 232.138.27.104 | pcsupportadvisor.com |
| 9.40.134.174 | pctools.com |
| 122.22.255.2 | pda.drweb.com |
| 249.18.200.166 | pedidos.protegerse.com |
| 201.94.226.155 | personal.psu.edu |
| 234.252.10.225 | personalfirewall.comodo.com |
| 92.235.130.52 | pestpatrol.com |
| 31.230.75.28 | pg.hauri.net |
| 238.51.102.17 | phx.corporate-ir.net |
| 15.208.141.19 | pineleafboys.com |
| 129.191.5.170 | podcasts.sophos.com |
| 0.186.207.78 | pogonyuto.forospanish.com |
| 20.7.233.67 | precisesecurity.com |
| 52.165.16.137 | prevx.com |
| 166.147.205.220 | privacy.microsoft.com |
| 37.143.150.196 | products.drweb.com |
| 245.219.108.185 | promotions.drweb.com |
| 22.121.215.187 | psnw.com |
| 135.35.80.82 | pspl.com |
| 74.99.25.247 | pvtc.org |
| 26.175.239.236 | qqjkw.net |
| 59.77.91.50 | quickheal.co.in |
| 173.248.211.133 | quickheal.com |
| 44.55.156.41 | radius.turvamies.com |
| 63.132.183.30 | rads.mcafee.com |
| 96.33.222.100 | ravantivirus.com |
| 210.204.86.251 | raymond.cc |
| 81.11.32.159 | reg-int.nod32-es.com |
| 33.88.58.148 | reg.eset.es |
| 133.246.97.218 | reg.rising.com.cn |
| 179.160.218.45 | register.norman.com |
| 118.224.163.209 | removetrojanvirus.org |
| 70.44.189.198 | renewalcenter.symantec.com |
| 103.202.228.12 | renewals.bitdefender.com |
| 216.116.161.163 | research.microsoft.com |
| 155.180.38.72 | research.pandasecurity.com |
| 107.0.64.61 | research.sunbelt-software.com |
| 140.158.172.131 | resplendence.com |
| 254.73.36.214 | retail.sp.f-secure.com |
| 125.136.237.122 | retail01.sp.f-secure.com |
| 144.213.196.111 | retail02.sp.f-secure.com |
| 109.234.235.113 | ribbonwarehouse.com |
| 155.217.99.196 | rising-global.com |
| 94.212.45.172 | rising.com |
| 46.101.71.161 | rising.com.cn |
| 78.191.110.163 | rolandovera.com |
| 192.173.231.58 | rootkit.com |
| 131.169.176.222 | rootkit.nl |
| 83.57.202.211 | rover800.gaima.co.uk |
| 116.147.241.25 | roysephotos.com |
| 229.129.106.109 | ru.trendmicro.com |
| 100.125.51.85 | ruben.bzin.net |
| 120.201.77.74 | runscanner.net |
| 153.103.117.76 | safe.qq.com |
| 199.86.237.227 | safecomputing.umn.edu |
| 138.81.182.135 | safer-networking.org |
| 89.158.209.124 | safetynet.com |
| 122.59.60.194 | sales.bitdefender.com |
| 236.42.180.21 | samroeng.hi5.com |
| 175.37.126.185 | sandbox.norman.com |
| 127.114.84.174 | sandboxie.com |
| 159.16.191.244 | sapcupgrades.com |
| 17.254.56.139 | sarahmcconnellphotography.net |
| 144.250.1.47 | saverssite.com |
| 164.70.215.36 | scan.anti-trojan.net |
| 197.228.66.106 | scan.kingsoft.com |
| 54.210.187.190 | scan4you.net |
| 181.206.132.98 | scanner.novirusthanks.org |
| 133.26.158.87 | scanner.virus.org |
| 166.184.198.157 | scanner2.novirusthanks.or |
| 24.167.62.240 | schemas.microsoft.com |
| 219.162.7.216 | schemas.xmlsoap.org |
| 170.239.34.205 | sea.symantec.com |
| 203.140.73.207 | search.ca.com |
| 61.123.193.102 | search.mcafee.com |
| 188.118.139.10 | search.symantec.com |
| 208.195.165.255 | seasonsecurity.com |
| 240.97.204.69 | secdreg.org |
| 98.79.137.152 | secubox.aldria.com |
| 225.75.82.128 | secunia.com |
| 177.151.40.117 | secure-email.comodo.com |
| 210.53.147.119 | secure.av-desk.com |
| 68.223.12.15 | secure.nai.com |
| 6.31.213.179 | securecomputing.com |
| 214.107.171.168 | secureme.com |
| 247.9.23.238 | securitoo.com |
| 105.180.143.65 | security.symantec.com |
| 232.243.88.229 | securitycheck.symantec.com |
| 251.64.115.218 | securitynewsportal.com |
| 28.221.154.32 | securityrespons.symantec.com |
| 142.136.18.183 | securityresponse.symantec.com |
| 13.199.220.91 | securitywonks.net |
| 221.20.246.80 | secuser.com |
| 65.178.29.150 | secuser.model-fx.com |
| 111.92.150.233 | sergiwa.com |
| 50.156.95.141 | service.mcafee.com |
| 2.232.121.130 | service1.symantec.com |
| 207.50.77.117 | servicenews.symantec.com |
| 65.220.9.12 | sfdoccentral.symantec.com |
| 3.28.142.176 | shadow.grisoft.cz |
| 211.105.168.165 | shadu.baidu.com |
| 244.6.20.235 | shadu.duba.net |
| 102.177.140.62 | shield.prevx.com |
| 229.240.85.226 | shop.hauri.co.kr |
| 248.61.44.215 | shop.pandasecurity.com |
| 25.150.151.29 | shop.sunbeltsoftware.com |
| 71.133.15.112 | shop.symantec.com |
| 10.128.217.88 | shop.trendmicro.com |
| 218.17.243.77 | shudoo.com |
| 250.107.26.79 | simplysup.com |
| 108.89.147.230 | siren24.nprotect.com |
| 47.85.92.138 | siteadvisor.com |
| 255.229.118.127 | sitedirector.symantec.com |
| 32.63.158.198 | smallbiz.symantec.com |
| 146.45.22.25 | smbstore.trendmicro.com |
| 16.41.223.1 | smokey-services.eu |
| 36.118.249.246 | soccersuck.com |
| 69.19.33.248 | softfaq.com |
| 115.2.153.143 | softonic.com |
| 54.253.98.51 | software-files.download.com |
| 5.74.125.40 | solutions.drweb.com |
| 38.231.232.110 | sophos.com |
| 152.214.96.193 | sophos.fr |
| 91.209.42.101 | sophos1.ucd.ie |
| 43.30.0.90 | sophos10.ucd.ie |
| 75.188.107.160 | sophos2.ucd.ie |
| 189.170.228.55 | sophos5.ucd.ie |
| 60.166.173.219 | sophos6.ucd.ie |
| 80.242.131.208 | sophos7.ucd.ie |
| 113.144.239.23 | sophos8.ucd.ie |
| 227.126.103.106 | sophos9.ucd.ie |
| 97.122.48.14 | soporte.pandasecurity.com |
| 49.199.74.3 | sos.rising.com.cn |
| 82.100.114.73 | sosvirus.changelog.fr |
| 196.83.234.156 | spd.atdmt.com |
| 135.78.179.132 | specs.xmlsoap.org |
| 86.155.206.121 | speedtest.comodo.com |
| 119.56.245.123 | spftrl.digitalriver.com |
| 233.39.109.18 | spyany.com |
| 104.34.55.182 | spyblocker-software.com |
| 124.111.81.171 | spybot.info |
| 156.13.120.241 | spycheck.co.uk |
| 14.251.53.68 | spycheck.es |
| 141.247.254.44 | spychecker.com |
| 93.67.212.33 | spycop.com |
| 126.225.64.36 | spywaredb.com |
| 240.139.184.187 | spywaredlls.prevx.com |
| 178.203.129.95 | spywarefiles.prevx.com |
| 130.24.87.16 | spywareguide.com |
| 95.113.127.86 | spywareinfo.com |
| 209.28.247.169 | spywareterminator.com |
| 80.91.192.77 | square.bitdefender.com |
| 99.168.219.66 | static.yoreparo.com |
| 132.69.2.136 | stats.norton.com |
| 246.240.122.31 | stdio-labs.blogspot.com |
| 117.47.68.195 | stiller.com |
| 69.124.94.184 | store.bitdefender.com |
| 169.26.133.254 | store.de.bitdefender.com |
| 215.196.254.81 | store.drweb.com |
| 154.4.199.245 | store.trendmicro.com |
| 106.80.225.234 | subs.geekstogo.com |
| 139.238.9.49 | subwiz.trendmicro.com |
| 253.152.197.200 | sucop.com |
| 191.216.74.108 | sun.symantec.com |
| 143.37.100.97 | sunbelt-software.com |
| 176.194.208.167 | sunbeltsecurity.com |
| 34.109.72.250 | sunbeltsoftware.com |
| 161.172.17.158 | superboy2010.com.au |
| 180.249.232.147 | superdicas.com.br |
| 213.82.83.217 | superuser.co.kr |
| 3.65.203.44 | support.drweb.com |
| 198.60.149.20 | support.f-secure.com |
| 150.205.175.9 | support.kaspersky.co |
| 183.39.214.11 | support.mcafee.com |
| 40.21.79.162 | support.microsoft.com |
| 235.17.24.70 | support.pandasecurity.com |
| 187.161.50.59 | support.rising-global.com |
| 220.251.90.130 | sybari.com |
| 78.233.210.213 | sygate.com |
| 204.229.155.189 | symantec-ese.baynote.net |
| 224.50.181.178 | symantec.com |
| 1.207.221.180 | symantecliveupdate.com |
| 47.190.85.75 | symatec.com |
| 242.185.30.239 | sysinternals.com |
| 193.6.57.228 | system-cleaner.comodo.com |
| 226.163.164.42 | tallemu.com |
| 84.146.28.125 | taringa.net |
| 23.141.230.33 | tds.diamondcs.com.au |
| 231.218.188.22 | tech.pantip.com |
| 8.120.39.92 | techimo.com |
| 121.102.160.243 | techspot.com |
| 248.98.105.151 | techsupportforum.com |
| 12.174.63.140 | tecniservicioslys.com |
| 45.76.171.211 | tecno-soft.com |
| 159.58.35.38 | tempuri.org |
| 29.54.236.202 | thecomputerpitstop.com |
| 237.131.6.191 | thejokerx.blogspot.com |
| 14.32.46.5 | thetechguide.com |
| 128.15.166.88 | thinkpad.cn |
| 15.214.59.12 | threatexpert.com |
| 222.35.86.1 | threatinfo.trendmicro.com |
| 255.192.125.3 | timeforyourbusi.pandasecurity.com |
| 113.175.245.154 | timestamp.comodoca.com |
| 240.170.191.62 | timestamp.wosign.com |
| 4.247.217.51 | tinysoftware.com |
| 36.149.0.121 | tms.symantec.com |
| 150.131.189.204 | together.pctools.com |
| 21.127.134.180 | tool.ikaka.com |
| 229.203.92.169 | toonbox.de |
| 6.105.199.171 | tr.mcafee.com |
| 120.19.64.67 | trackingtheworld.com |
| 58.83.9.231 | training.drweb.com |
| 10.160.223.220 | training.trendmicro.com |
| 43.61.75.34 | trapware.com |
| 157.232.195.117 | trendmicro.com |
| 28.39.140.25 | trendmicro.com.cn |
| 47.116.167.14 | trendmicro.fr |
| 80.17.206.84 | trendsecure.com |
| 194.188.70.235 | trial.trendmicro.com |
| 65.251.16.143 | trucoswindows.es |
| 17.72.42.132 | trucoswindows.net |
| 117.230.81.202 | tw.mcafee.com |
| 163.144.202.29 | tw.sophos.com |
| 102.208.147.193 | tw.trendmicro.com |
| 54.28.173.182 | tweaksforgeeks.com |
| 87.186.213.252 | u0.eset.com |
| 201.100.145.148 | u1.eset.com |
| 139.164.22.56 | u10.eset.com |
| 91.241.48.45 | u100.eset.com |
| 124.142.156.115 | u11.eset.com |
| 238.57.20.198 | u12.eset.com |
| 109.120.221.106 | u13.eset.com |
| 128.197.180.95 | u14.eset.com |
| 161.30.31.165 | u15.eset.com |
| 207.13.151.248 | u16.eset.com |
| 146.8.97.224 | u17.eset.com |
| 98.153.123.213 | u18.eset.com |
| 130.243.162.215 | u19.eset.com |
| 244.225.27.110 | u2.eset.com |
| 183.221.228.18 | u20.eset.com |
| 135.109.254.7 | u21.eset.com |
| 168.199.38.77 | u22.eset.com |
| 26.181.158.161 | u23.eset.com |
| 152.177.103.137 | u24.eset.com |
| 172.254.129.126 | u25.eset.com |
| 205.155.169.128 | u26.eset.com |
| 251.138.33.23 | u27.eset.com |
| 190.133.234.187 | u28.eset.com |
| 141.210.5.176 | u29.eset.com |
| 174.111.112.246 | u3.eset.com |
| 32.94.232.73 | u30.eset.com |
| 227.89.178.237 | u31.eset.com |
| 111.98.68.158 | u32.eset.com |
| 143.0.175.228 | u33.eset.com |
| 1.238.40.123 | u34.eset.com |
| 128.234.241.31 | u35.eset.com |
| 148.54.199.20 | u36.eset.com |
| 181.212.51.90 | u36eset.com |
| 39.194.171.174 | u37.eset.com |
| 165.190.116.82 | u37eset.com |
| 117.11.142.71 | u38.eset.com |
| 150.168.182.141 | u39.eset.com |
| 8.151.46.224 | u4.eset.com |
| 203.146.247.200 | u40.eset.com |
| 154.223.18.189 | u41.eset.com |
| 187.124.57.191 | u42.eset.com |
| 45.107.177.86 | u43.eset.com |
| 172.102.123.250 | u44.eset.com |
| 192.179.149.239 | u45.eset.com |
| 224.81.188.53 | u46.eset.com |
| 82.63.121.136 | u47.eset.com |
| 209.59.66.112 | u48.eset.com |
| 161.135.24.101 | u49.eset.com |
| 194.37.132.104 | u5.eset.com |
| 52.207.252.255 | u50.eset.com |
| 246.15.197.163 | u51.eset.com |
| 198.92.155.152 | u52.eset.com |
| 231.249.7.222 | u53.eset.com |
| 89.164.127.49 | u54.eset.com |
| 216.227.72.213 | u55.eset.com |
| 235.48.99.202 | u56.eset.com |
| 12.205.138.16 | u57.eset.com |
| 126.120.2.167 | u58.eset.com |
| 253.183.204.75 | u59.eset.com |
| 205.4.230.64 | u6.eset.com |
| 49.162.13.134 | u60.eset.com |
| 95.76.134.217 | u61.eset.com |
| 34.140.79.125 | u62.eset.com |
| 242.216.105.114 | u63.eset.com |
| 19.118.145.184 | u64.eset.com |
| 133.32.77.80 | u65.eset.com |
| 71.96.210.244 | u66.eset.com |
| 23.173.236.233 | u67.eset.com |
| 56.74.88.47 | u68.eset.com |
| 170.245.208.130 | u69.eset.com |
| 41.52.153.38 | u7.eset.com |
| 60.129.112.27 | u70.eset.com |
| 93.218.219.97 | u71.eset.com |
| 139.201.83.180 | u72.eset.com |
| 78.196.29.156 | u73.eset.com |
| 30.85.55.145 | u74.eset.com |
| 62.175.94.147 | u75.eset.com |
| 176.157.215.42 | u76.eset.com |
| 115.153.160.206 | u77.eset.com |
| 67.41.186.195 | u78.eset.com |
| 100.131.226.9 | u79.eset.com |
| 130.29.6.9 | u8.eset.com |
| 0.25.207.241 | u80.eset.com |
| 20.102.234.230 | u81.eset.com |
| 53.3.17.232 | u82.eset.com |
| 99.242.137.127 | u83.eset.com |
| 38.237.82.35 | u84.eset.com |
| 245.58.109.24 | u85.eset.com |
| 22.215.216.94 | u86.eset.com |
| 136.198.80.177 | u87.eset.com |
| 75.194.26.85 | u88.eset.com |
| 27.14.240.74 | u89.eset.com |
| 60.172.91.144 | u9.eset.com |
| 173.154.212.39 | u90.eset.com |
| 44.150.157.203 | u91.eset.com |
| 64.226.115.192 | u92.eset.com |
| 97.128.223.7 | u93.eset.com |
| 211.110.87.90 | u94.eset.com |
| 81.106.32.254 | u95.eset.com |
| 33.183.59.243 | u96.eset.com |
| 66.84.98.57 | u97.eset.com |
| 180.67.218.140 | u98.eset.com |
| 119.62.163.116 | u99.eset.com |
| 70.139.190.105 | uk.mcafee.com |
| 103.40.229.107 | uk.trendmicro-europe.com |
| 217.23.93.2 | uk.trendmicro.com |
| 88.19.39.166 | ulove.tigolbittys.info |
| 108.95.65.155 | up.duba.net |
| 141.253.104.225 | up.rising.com.cn |
| 254.235.37.52 | up1.nod123.cn |
| 125.231.238.28 | upd.zonelabs.com |
| 77.51.196.17 | update.360safe.cn |
| 110.209.48.20 | update.360safe.com |
| 224.123.168.171 | update.aladdin.com |
| 162.187.113.79 | update.authentium.com |
| 114.8.72.68 | update.avg.com |
| 147.165.179.138 | update.avgfrance.com |
| 5.80.43.221 | update.bitdefender.com |
| 132.143.244.129 | update.drweb.com |
| 151.220.15.118 | update.ewido.com |
| 184.121.54.188 | update.grisoft.com |
| 42.36.174.83 | update.grisoft.cz |
| 169.100.120.247 | update.hispasec.com |
| 121.176.146.236 | update.ikaka.com |
| 222.78.185.50 | update.ikarus-software.at |
| 11.248.50.133 | update.quickheal.com |
| 206.56.251.41 | update.rising.com.cn |
| 158.132.21.30 | update.sophos.com |
| 191.34.61.101 | update.symantec.com |
| 49.204.249.252 | update.trendmicro.com |
| 243.12.126.160 | update7.jiangmin.com |
| 195.89.153.149 | updatem.360safe.cn |
| 228.246.4.219 | updatem.360safe.com |
| 86.161.124.46 | updates.a-2.org |
| 213.224.69.210 | updates.drweb.com |
| 164.233.216.131 | updates.f-prot.com |
| 197.66.67.201 | updates.sald.com |
| 243.49.187.28 | updates.symantec.com |
| 182.45.133.4 | updates3.kaspersky-labs.com |
| 134.189.159.249 | updates4.kaspersky-labs.com |
| 167.23.198.251 | updates5.kaspersky-labs.com |
| 24.5.63.146 | upgrade.bitdefender.com |
| 219.1.8.54 | upgrade1.bitdefender.com |
| 171.145.34.44 | upgrade2.bitdefender.com |
| 204.235.74.114 | upgrade3.bitdefender.com |
| 62.217.194.197 | upgrade4.bitdefender.com |
| 188.213.139.173 | upload.changelog.fr |
| 208.34.166.162 | us.bitdefender.com |
| 241.191.205.164 | us.mcafee.com |
| 31.174.69.59 | us.trendmicro.com |
| 226.169.14.223 | usa.kaspersky.com |
| 177.246.41.212 | usbcleaner.cn |
| 210.147.148.26 | ushousecall02.trendmicro.com |
| 68.130.12.109 | utilidades-utiles.com |
| 7.126.214.17 | v.dreamwiz.com |
| 215.202.172.6 | v4.windowsupdate.microsoft.com |
| 248.104.23.76 | v5.windowsupdate.microsoft.com |
| 105.86.144.227 | vet.com.au |
| 232.82.89.135 | vicentevirtual.com |
| 252.158.47.125 | viguard.com |
| 29.60.155.195 | vil.nai.com |
| 143.42.19.22 | vil.nail.com |
| 13.38.220.186 | virobot.co.kr |
| 221.115.247.175 | virscan.org |
| 254.16.30.245 | virus.org |
| 112.255.150.72 | virusbuster.hu |
| 51.250.95.48 | viruschief.com |
| 2.71.122.37 | virusdoctor.jp |
| 35.228.161.39 | virusfreezone.info |
| 149.211.25.190 | virusinfo.prevx.com |
| 20.207.227.98 | viruslist.com |
| 40.27.253.87 | viruslist.ru |
| 73.185.36.157 | virusscan.jotti.org |
| 186.167.225.240 | virusscanonline.net |
| 57.163.170.216 | virusspy.com |
| 9.239.128.206 | virustotal.com |
| 42.141.236.208 | visualizesoftware.com |
| 156.55.100.103 | visualtracking.symantec.com |
| 94.119.45.11 | vivo-austin.com |
| 46.196.4.0 | vms.drweb.com |
| 79.97.111.70 | vncsvr.com |
| 193.12.231.153 | vos.symantec.com |
| 64.75.176.61 | vrv.com.cn |
| 83.152.203.50 | vsantivirus.com |
| 116.53.242.120 | webadmin.norman.no |
| 230.224.106.15 | webphand.com |
| 101.32.52.179 | webroot.com |
| 53.108.78.168 | wedoantivirus.com |
| 154.10.117.238 | welkam.co.jp |
| 199.180.238.65 | wexperts-exchange.com |
| 138.244.183.229 | whatthetech.com |
| 90.64.209.219 | wikio.es |
| 123.222.249.33 | wilderssecurity.com |
| 237.136.181.184 | wilderssecurity.net |
| 175.200.58.92 | wildlist.com |
| 127.21.85.81 | windowsupdate.microsoft.com |
| 160.178.192.151 | winpatrol.com |
| 18.93.56.234 | wmcafee.com |
| 145.156.1.142 | woottonfootball.com |
| 164.233.216.131 | wtc.trendmicro.com |
| 197.66.67.201 | ww.emsisoft.com |
| 243.49.187.28 | www.1stavenuelimousines.co.uk |
| 182.45.133.4 | www.2xlgames.com |
| 134.189.159.249 | www.ahnlab.com |
| 167.23.198.251 | www.aks.com |
| 24.5.63.146 | www.aladdin.com |
| 219.1.8.54 | www.anti-trojan-software.net |
| 171.145.34.44 | www.anti-trojan.net |
| 204.235.74.114 | www.anti-virus.by |
| 62.217.194.197 | www.antivir.es |
| 188.213.139.173 | www.antivirus-tools.com |
| 208.34.166.162 | www.antiy.net |
| 241.191.205.164 | www.apsecure.com |
| 31.174.69.59 | www.arpia.be |
| 226.169.14.223 | www.authentium.com |
| 177.246.41.212 | www.authentium.com.au |
| 158.95.96.230 | www.av-desk.com |
| 16.78.216.57 | www.avast.com |
| 211.74.162.221 | www.avg.com |
| 163.150.120.210 | www.avhide.com |
| 196.52.227.24 | www.avoncourt.com |
| 53.34.92.175 | www.avx.ro |
| 180.30.37.83 | www.barder.com |
| 200.106.251.72 | www.beautybar.com |
| 233.8.103.143 | www.bg.virusblokada.com |
| 91.246.223.226 | www.bit-defender.de |
| 217.242.168.134 | www.bitdefende.de |
| 169.63.194.123 | www.bitdefender-es.com |
| 202.220.234.193 | www.bitdefender.be |
| 60.203.98.20 | www.bitdefender.cl |
| 255.198.43.252 | www.bitdefender.co.uk |
| 206.19.70.241 | www.bitdefender.com |
| 239.176.109.243 | www.bitdefender.com.au |
| 97.159.229.138 | www.bitdefender.com.sg |
| 224.155.175.46 | www.bitdefender.com.tw |
| 244.231.201.35 | www.bitdefender.com.vn |
| 21.133.240.105 | www.bitdefender.de |
| 134.115.173.188 | www.bitdefender.es |
| 5.111.118.164 | www.bitdefender.fr |
| 213.187.76.153 | www.bitdefender.hk |
| 246.89.184.156 | www.bitdefender.us |
| 104.3.48.51 | www.bitdefenderme.com |
| 42.67.249.215 | www.briarhurst.com |
| 250.144.207.204 | www.brightoctober.com |
| 27.45.59.18 | www.buraka.tv |
| 141.216.179.101 | www.buscafacil.com |
| 12.23.124.9 | www.buscalo.in |
| 31.100.151.254 | www.busco.in |
| 64.1.190.68 | www.ca.com |
| 178.172.54.219 | www.cambridge-steiner-school.co.uk |
| 49.235.0.127 | www.ccssforum.org |
| 1.56.26.116 | www.celticmerchant.com |
| 102.214.65.186 | www.clamav.net |
| 147.128.186.13 | www.collectedcurios.com |
| 86.192.131.177 | www.comodo.com |
| 38.12.157.166 | www.comodo.tv |
| 71.170.197.237 | www.comodoantispam.com |
| 185.84.129.132 | www.comodopartners.com |
| 123.148.6.40 | www.computing.net |
| 75.225.32.29 | www.configurarequipos.com |
| 108.126.140.99 | www.contentverification.com |
| 222.41.4.182 | www.deborahshelton.net |
| 93.104.205.90 | www.dr-bull.com |
| 112.181.164.79 | www.drweb.com |
| 145.14.15.149 | www.ealaddin.com |
| 191.253.135.232 | www.elvis-express.com |
| 130.249.81.208 | www.emeraldclassic.co.uk |
| 82.137.107.197 | www.emsisoft.at |
| 115.227.146.199 | www.emsisoft.com |
| 228.209.11.94 | www.emsisoft.de |
| 167.205.212.2 | www.emsisoft.es |
| 119.93.238.247 | www.emsisoft.fr |
| 152.183.22.62 | www.emsisoft.it |
| 10.165.142.145 | www.emsisoft.jp |
| 136.161.87.121 | www.emsisoft.net |
| 156.238.113.110 | www.emsisoft.nl |
| 189.139.153.112 | www.emsisoft.org |
| 235.122.17.7 | www.engyro.com |
| 174.117.218.171 | www.entercept.com |
| 125.194.245.160 | www.esafe.com |
| 158.95.96.230 | www.eset.es |
| 16.78.216.57 | www.eugrantsadvisor.com |
| 211.74.162.221 | www.eugrantsadvisor.de |
| 163.150.120.210 | www.eugrantsadvisor.ie |
| 196.52.227.24 | www.eugrantsadvisor.se |
| 53.34.92.175 | www.exchangeyourcareer.com |
| 180.30.37.83 | www.f-prot.com |
| 200.106.251.72 | www.f-secure.com |
| 233.8.103.143 | www.fimasys.com |
| 91.246.223.226 | www.flairweddings.co.uk |
| 217.242.168.134 | www.forospyware.com |
| 169.63.194.123 | www.fortifed.com |
| 202.220.234.193 | www.fortiid.com |
| 60.203.98.20 | www.fortimail.com |
| 255.198.43.252 | www.fortinet-apac.com |
| 206.19.70.241 | www.fortinet.ch |
| 239.176.109.243 | www.fortinet.co.il |
| 97.159.229.138 | www.fortinet.com |
| 156.87.107.234 | www.fortinet.net |
| 176.163.133.223 | www.fortinet.nl |
| 209.65.172.37 | www.fortinet.sg |
| 66.47.105.120 | www.fortinetuk.com |
| 193.43.50.96 | www.freeality.com |
| 145.119.8.85 | www.freedrweb.ru |
| 178.21.116.88 | www.freerav.com |
| 36.191.236.239 | www.frisk-software.com |
| 230.255.181.147 | www.frisk.is |
| 182.76.140.136 | www.fsecure.com |
| 215.233.247.206 | www.garryowen.com |
| 73.148.111.33 | www.gdata.es |
| 200.211.56.197 | www.globalhauri.com |
| 219.32.83.186 | www.gokidding.com |
| 252.189.122.0 | www.grisoft.com |
| 110.104.242.151 | www.hackshields.com |
| 237.168.188.59 | www.hacksoft.com.pe |
| 189.244.214.48 | www.hacksoft.pe |
| 34.146.253.118 | www.handwritingforkids.com |
| 79.60.118.201 | www.hasp.se |
| 18.124.63.109 | www.hauri.co.kr |
| 226.200.89.98 | www.hauri.net |
| 3.102.129.169 | www.hxproduction.com |
| 117.16.61.64 | www.ibusca.me |
| 55.80.194.228 | www.ikarus.at |
| 7.157.220.217 | www.imddomains.co.uk |
| 40.58.72.31 | www.indielisboa.com |
| 154.229.192.114 | www.inicioid.com |
| 25.36.137.22 | www.iniciorapido.info |
| 44.113.96.11 | www.internationalservicecheck.com |
| 77.202.203.81 | www.irangoals.com |
| 123.185.67.164 | www.iseclab.org |
| 62.181.13.140 | www.ixomodels.com |
| 14.69.39.129 | www.jiangmin.com |
| 47.159.78.131 | www.jiangmin.com.cn |
| 160.141.199.26 | www.jotti.org |
| 99.137.144.190 | www.kaspersky.com |
| 51.25.170.179 | www.kioskea.net |
| 84.115.210.250 | www.latin-mass-society.org |
| 198.97.74.77 | www.livepcsupport.com |
| 68.93.19.53 | www.malwarecity.com |
| 88.170.45.42 | www.malwarecity.fr |
| 121.71.85.44 | www.mamutu.com |
| 167.54.205.195 | www.mamutu.de |
| 106.49.150.103 | www.manchester-offices.co.uk |
| 57.126.177.92 | www.mcafee.at |
| 90.27.28.162 | www.mcafee.com |
| 120.182.64.161 | www.metascan-online.com |
| 59.178.10.69 | www.microsoft.com |
| 11.254.224.58 | www.midescargas.com |
| 44.156.75.128 | www.mountainlakeslodge.com |
| 157.138.196.23 | www.mtr-design.com |
| 28.134.141.187 | www.mygeekside.com |
| 48.210.99.177 | www.netegrity.com |
| 81.112.207.247 | www.norman.com |
| 195.95.71.74 | www.nottinghampoetryseries.com |
| 65.90.16.238 | www.novirusthanks.org |
| 17.167.43.227 | www.npin.co.kr |
| 50.68.82.41 | www.nprotect.co.kr |
| 164.51.202.124 | www.nprotect.com |
| 103.46.147.100 | www.nprotect.com.br |
| 55.123.174.89 | www.nsclean.com |
| 87.24.213.91 | www.owen.org |
| 201.7.77.242 | www.pandasecurity.com |
| 72.3.23.150 | www.pctools.com |
| 92.79.49.139 | www.peterhearnwaste.co.uk |
| 125.237.88.209 | www.phoenixtrikeworks.com |
| 238.219.21.36 | www.prdouglas.co.uk |
| 109.215.222.12 | www.prevx.com |
| 61.35.180.2 | www.prevx1.com |
| 94.193.32.4 | www.professorbeyer.com |
| 208.108.152.155 | www.quickheal.com |
| 146.171.97.63 | www.removetrojanvirus.org |
| 98.248.56.52 | www.renningers.com |
| 131.149.163.122 | www.residentphotography.com |
| 245.64.27.205 | www.retento.com |
| 116.127.228.113 | www.reviewsofbooks.com |
| 136.204.255.102 | www.rising-global.com |
| 168.105.38.172 | www.risingav.com.au |
| 26.20.158.67 | www.safenet-inc.com |
| 153.84.104.231 | www.scan4you.net |
| 105.160.130.220 | www.seasonsecurity.com |
| 206.62.169.34 | www.secondchanceboxer.com |
| 251.232.34.117 | www.secure-elements.com |
| 190.40.235.25 | www.sheffieldmind.co.uk |
| 142.116.5.15 | www.smf.org |
| 175.18.45.85 | www.softfaq.com |
| 33.189.233.236 | www.sophos.com |
| 227.252.110.144 | www.spycheck.co.uk |
| 179.73.137.133 | www.spycheck.es |
| 212.230.244.203 | www.stadiumpage.com |
| 70.145.108.30 | www.sunbeltsoftware.com |
| 197.208.53.194 | www.symantec.com |
| 217.29.12.183 | www.sysinternals.com |
| 249.118.119.253 | www.tecniservicioslys.com |
| 39.101.239.80 | www.testmypcsecurity.com |
| 234.97.185.56 | www.threatexpert.com |
| 186.241.211.45 | www.tomorrowsedge.net |
| 219.75.250.47 | www.trendmicro.com |
| 76.57.115.198 | www.trojaner.info |
| 15.53.60.106 | www.trustix.com |
| 223.197.86.96 | www.trustlogo.com |
| 0.31.126.166 | www.vba.com.by |
| 114.14.246.249 | www.virscan.org |
| 240.9.191.225 | www.virus.fi |
| 4.86.218.214 | www.virus.org |
| 37.243.1.216 | www.virusbuster.hu |
| 15.158.53.43 | www.viruschief.com |
| 210.153.255.207 | www.virusfreezone.info |
| 162.230.25.196 | www.virustotal.com |
| 194.131.132.10 | www.wellgousa.com |
| 52.114.252.93 | www.whichssl.com |
| 247.110.198.1 | www.willsee.com |
| 199.186.156.246 | www.xmlsoap.org |
| 232.88.7.60 | www.zarya.info |
| 89.70.128.211 | www1.my-etrust.com |
| 216.66.73.119 | www3.ca.com |
| 236.142.31.109 | www3.safenet-inc.com |
| 13.44.139.179 | www4.symantec.com |
| 127.27.3.6 | wwws.clamav.net |
| 253.22.204.170 | x-cleaner.com |
| 205.99.231.159 | x.360safe.com |
| 238.0.14.229 | yoreparo.com |
| 96.239.134.56 | z-oleg.com |
| 35.234.80.32 | zeustracker.abuse.ch |
| 243.55.106.21 | zeylstra.nl |
| 19.212.145.23 | zhidao.baidu.com |
| 133.195.9.174 | zhidao.ikaka.com |
| 4.191.211.82 | ziggamza.net |
| 24.11.237.71 | zonavirus.com |
| 57.169.20.141 | zonealarm.com |
| 170.151.209.224 | zonelabs.com |
| 41.147.154.200 | zonelabs.fr |
| 249.223.112.190 | zonelog.co.uk |
| 26.125.220.192 | zs.kingsoft.com |
| 140.40.84.87 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 18820 | 18944 | 3.67348 | 1aa21003dc8301a2debeb24c39fa3928 |
| .data | 24576 | 64 | 512 | 0.164757 | ae66b7a5737b95c371f0aa02bd0e8db7 |
| .rdata | 28672 | 1344 | 1536 | 3.16025 | 900acb6d17b0068bce6ed4e19df6ad57 |
| .bss | 32768 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .idata | 36864 | 860 | 1024 | 2.60187 | 67cf174a5a8698001223af9bab64dd7c |
| .rsrc | 40960 | 87232 | 87552 | 5.54136 | b1e9b27efb0a643504f786b878d79a63 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
| URL | IP |
|---|---|
| hxxp://widgets.amung.us/small/00/44.png | 173.192.200.70 |
| hxxp://cdn3.iconfinder.com/static/cae879b830d3e826c649c3bac797a9ec/assets/fonts/Bariol/bariol_bold-webfont.eot? | 205.234.175.175 |
| hxxp://cdn2.iconfinder.com/static/66214acbf85a96dcfe0dba9a8103f0e5/assets/fonts/Bariol/bariol_thin-webfont.eot? | 205.234.175.175 |
| hxxp://www.buscaid.com/iconfinder.css | 212.250.160.240 |
| hxxp://whos.amung.us/swidget/26n2qf7pnk0x | 67.202.94.93 |
| hxxp://whos.amung.us/swidget/243dr2pd8x85 | 67.202.94.93 |
| hxxp://cdn3.iconfinder.com/static/34e7d4088171083e80067fddb9546644/assets/fonts/Bariol/bariol_light-webfont.eot? | 205.234.175.175 |
| hxxp://qc576vr961du5156h294o612y5e36j.ipcheker.com/ | 199.59.243.120 |
| hxxp://4f2t6rh9p9310ec75jc1wf65tu526y.ipcheker.com/ | 199.59.243.120 |
| hxxp://cdn0.iconfinder.com/static/8634111c430e96728cfc4b5479de93e2/assets/img/blog/flat-icons/4/message-top.png | 205.234.175.175 |
| hxxp://cdn0.iconfinder.com/static/838c1ff91b646f8cdee529fd9f02c1dd/assets/fonts/Agenda/agendalight-webfont.eot? | 205.234.175.175 |
| hxxp://www.buscaid.com/?adf | 212.250.160.240 |
| hxxp://cdn0.iconfinder.com/static/4e9a074acfe29ddb22561e5ec0e8a755/assets/fonts/Bariol/bariol_regular-webfont.eot? | 205.234.175.175 |
| hxxp://cdn1.iconfinder.com/static/a998a3cd06a9b50682dc582393c423a0/assets/fonts/Agenda/agendabold-webfont.eot? | 205.234.175.175 |
| hxxp://www.buscaid.com/ojo_buscador_logo.jpg | 212.250.160.240 |
| hxxp://widgets.amung.us/small/00/12.png | 173.192.200.70 |
| hxxp://cdn1.iconfinder.com/static/1f64bd2a5a284b059e1b46d49b80d07d/assets/fonts/Agenda/agendamedium-webfont.eot? | 205.234.175.175 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):