HEUR:Trojan.Win32.Generic (Kaspersky), Gen:Variant.Symmi.1909 (B) (Emsisoft), Gen:Variant.Symmi.1909 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 171bfca68d9125d2a2dccebafcf69994
SHA1: 9e7f4f4294c7546255296160be3df7fee24e1394
SHA256: 3603dcc663ec42d6bd0190ecdef81e3087a7fb826a16d24ce34a470085fd3e0d
SSDeep: 3072:08dnQ4UQBBtcvivkCx2qGKDAy7VrqPI65X36UU:03eBt/ISA40IAq
Size: 637472 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2012-09-19 04:10:27
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
Behaviour | Description |
---|---|
WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses. The modified file is 61736 bytes in size. The following strings are added to the hosts file listed below:
173.224.217.72 | viabcp.com |
173.224.217.72 | www.viabcp.com |
173.224.217.72 | ww2.viabcp.com |
173.224.217.72 | bcpzonasegura.viabcp.com |
173.224.217.72 | hotmail.com |
173.224.217.72 | www.hotmail.com |
107.175.226.141 | 13iii.com |
139.76.9.143 | 15660808.co.kr |
253.59.129.38 | 2-spyware.com |
124.55.75.202 | 247fixes.com |
144.131.101.191 | 360.cn |
177.33.140.5 | 360.com |
34.15.73.88 | 360safe.cn |
161.11.18.65 | 360safe.com |
113.87.232.54 | 45pounds.com |
146.245.84.56 | 51nb.com |
4.160.204.207 | 9down.com |
198.223.149.115 | a-2.org |
150.44.108.104 | a188.x.akamai.net |
183.201.215.174 | abuse.ch |
41.116.79.1 | acs.pandasoftware.com |
168.179.25.165 | ad-aware-se.uptodown.com |
188.0.51.154 | ad.fastclick.net |
220.157.90.224 | ads.fastclick.net |
78.72.210.119 | agfirewall.ru |
205.136.156.27 | agnitum.com |
157.212.182.16 | agnitum.de |
2.114.221.86 | agnitum.fr |
47.28.86.169 | agnitum.ru |
242.92.31.78 | ahn.com.cn |
194.168.57.67 | ahnlab.com |
227.70.97.137 | akamai.net |
85.241.29.32 | aknow.prevx.com |
23.48.162.196 | aladdin.com |
231.125.189.185 | alert.rising.com.cn |
8.26.40.255 | alerta-antivirus.inteco.es |
122.197.160.82 | alerta-antivirus.red.es |
249.4.106.246 | alladdin.ru |
13.81.64.235 | aluriasoftware.com |
45.170.171.49 | analysis.seclab.tuwien.ac.at |
91.153.35.132 | andymanchesta.com |
30.149.237.108 | anti-virus-software-review.com |
238.37.7.97 | anti-virus.by |
15.127.46.99 | anti-virus.com |
128.109.167.250 | antirootkit.com |
67.105.112.159 | antispam.sunbeltsoftware.com |
19.249.138.148 | antispy.ru |
52.83.178.218 | antispyware.sunbeltsoftware.com |
166.66.42.45 | antivir.es |
37.61.243.21 | antiviraldp.com |
56.138.14.10 | antivirus-online.de |
89.39.53.12 | antivirus-tools.com |
135.22.173.163 | antivirus.about.com |
74.17.119.71 | antivirus.cai.com |
26.94.145.60 | antivirus.comodo.com |
58.251.252.130 | antivirus.hispavista.com |
172.234.116.213 | antivirus.sunbeltsoftware.com |
111.230.62.121 | antiy.net |
63.50.20.110 | anubis.iseclab.org |
96.208.127.180 | apac.trendmicro.com |
209.190.248.75 | ar.answers.yahoo.com |
80.186.193.240 | ar.atwola.com |
100.6.151.229 | arcabit.com |
133.164.3.43 | arcabit.pl |
247.147.123.126 | archive.bitdefender.com |
117.142.68.34 | arswp.com |
69.219.95.23 | arwww.fortinet.cz |
102.120.134.93 | asap.authentium.com |
216.103.254.176 | ashampoo.com |
155.98.200.152 | atazita.blogspot.com |
107.175.226.141 | atdmt.com |
139.76.9.143 | attechnical.com |
253.59.129.38 | atwola.com |
124.55.75.202 | au.mcafee.com |
144.131.101.191 | auditmypc.com |
177.33.140.5 | authentium.com |
34.15.73.88 | auwww.ealaddin.nl |
161.11.18.65 | avast-home.uptodown.com |
113.87.232.54 | avast.com |
146.245.84.56 | avast.ru |
4.160.204.207 | avg-antivirus.net |
198.223.149.115 | avg.com |
150.44.108.104 | avg.vo.llnwd.net |
183.201.215.174 | avgate.net |
41.116.79.1 | avgfrance.com |
168.179.25.165 | avhide.com |
188.0.51.154 | avira.com |
220.157.90.224 | avp.ch |
78.72.210.119 | avp.com |
205.136.156.27 | avp.ru |
157.212.182.16 | avpclub.ddns.info |
2.114.221.86 | avu.zonelabs.com |
47.28.86.169 | avx.rob-have.net |
242.92.31.78 | awaps.net |
194.168.57.67 | b-have.orgbitdefender-ar.com |
227.70.97.137 | babooforum.com.br |
85.241.29.32 | backup.comodo.com |
23.48.162.196 | baike.360.cn |
231.125.189.185 | baike.360.com |
8.26.40.255 | bakunos.com |
122.197.160.82 | banner.fastclick.net |
249.4.106.246 | banners.fastclick.net |
13.81.64.235 | baristamagazine.com |
45.170.171.49 | basetendencies.com |
91.153.35.132 | bbs.360.cn |
30.149.237.108 | bbs.360safe.cn |
238.37.7.97 | bbs.360safe.com |
15.127.46.99 | bbs.cfan.com.cn |
128.109.167.250 | bbs.cpcw.com |
67.105.112.159 | bbs.dswlab.com |
19.249.138.148 | bbs.duba.net |
52.83.178.218 | bbs.ikaka.com |
166.66.42.45 | bbs.janmeng.com |
37.61.243.21 | bbs.kafan.cn |
56.138.14.10 | bbs.kafan.com |
89.39.53.12 | bbs.kaspersky.com.cn |
135.22.173.163 | bbs.kpfans.com |
74.17.119.71 | bbs.mcafeefans.com |
26.94.145.60 | bbs.s-sos.net |
58.251.252.130 | bbs.sucop.com |
172.234.116.213 | bbs.taisha.org |
111.230.62.121 | bbs.trendmicro.com.cn |
63.50.20.110 | bbs.winzheng.com |
96.208.127.180 | bestofewan.com |
209.190.248.75 | beta.anti-virus.by |
80.186.193.240 | bg.virusblokada.com |
100.6.151.229 | bhsbees.com |
133.164.3.43 | bitcity.info |
247.147.123.126 | bitcity.org |
117.142.68.34 | bitdefender.co.uk |
69.219.95.23 | bitdefender.com |
102.120.134.93 | bitdefender.com.ua |
216.103.254.176 | bitdefender.es |
155.98.200.152 | bitdefender.org |
23.91.142.57 | bitdefender.secyber.net |
55.249.181.59 | bitdefenderchina.com |
169.231.46.210 | bitdefenderguatemala.com |
40.227.247.118 | bitdefendermalaysia.com |
60.47.17.107 | bitdefendertaiwan.com |
93.205.56.177 | bitdefenderuruguay.com |
206.187.245.5 | bitdefenderusa.com |
77.183.190.237 | biz.nprotect.com |
29.3.148.226 | bkav.com.vn |
62.161.0.228 | blackice.iss.net |
176.76.120.123 | bleedingthreats.net |
115.139.65.31 | bleepingcomputer.com |
66.216.24.20 | blitzblank.com |
99.117.131.90 | blog.hispasec.com |
213.32.251.173 | blog.threatfire.com |
84.95.197.81 | blog.titanium-jewelry.com |
104.172.223.70 | blog.trendmicro.com |
136.74.6.140 | blogs.icerocket.com |
250.244.127.35 | blogs.protegerse.com |
121.52.72.199 | blogschapines.com |
73.128.98.188 | boardreader.com |
174.30.137.2 | bobbondart.com |
219.200.2.86 | br.mcafee.com |
158.8.203.250 | br.trendmicro.com |
110.84.229.239 | brazil.kaspersky.com |
143.242.13.53 | buddy.bitdefender.com |
1.157.201.204 | bugs.clamav.net |
196.220.78.112 | buscafacil.com |
147.41.105.101 | buscalo.in |
180.198.212.171 | busco.in |
38.113.76.254 | buy.bitdefender-es.com |
165.176.22.162 | buy.bitdefender.com |
185.253.236.151 | buy.bitdefender.de |
217.87.87.221 | buy.drweb.com |
7.69.208.48 | buy.rising.com.cn |
202.65.153.24 | ca.com |
154.209.179.13 | cacomvip.ca.com |
187.43.218.15 | cai.com |
44.25.83.167 | canada.karuna-shechen.org |
239.21.28.75 | castlecops.com |
191.165.54.64 | castlecrops.com |
224.255.94.134 | ccslaughterspdx.com |
82.238.214.217 | cddchiangmai.net |
209.233.159.193 | cdn.atwola.com |
228.54.186.182 | center.rising.com.cn |
5.211.225.184 | centralcommand.com |
51.194.89.79 | cert.org |
246.189.35.243 | cfan.com.cn |
198.10.61.232 | cgi.clamav.net |
230.168.168.46 | changedetection.com |
88.150.33.129 | changelog.fr |
27.146.234.37 | channelpartner.trendmicro.com |
235.222.192.26 | chickensroamfree.com |
12.124.43.96 | chkrootkit.org |
125.106.164.248 | chollian.nprotect.co.kr |
252.102.109.156 | cisrt.org |
16.178.67.145 | cit.kookmin.ac.kr |
49.80.175.215 | clamav.net |
163.63.39.42 | clamwin.com |
34.58.240.206 | click.atdmt.com |
241.135.11.195 | clicks.atdmt.com |
18.36.50.9 | cloudprotection.pandasecurity.com |
132.19.170.92 | clubic.com |
71.14.116.68 | cmmings.cn |
23.91.142.57 | cn.mcafee.com |
55.249.181.59 | cn.sophos.com |
169.231.46.210 | cn.trendmicro.com |
40.227.247.118 | codesigning.ksoftware.net |
60.47.17.107 | codehard.wordpress.com |
93.205.56.177 | cohartuk.com |
206.187.245.5 | commentcamarche.net |
77.183.190.237 | community.thaiware.com |
29.3.148.226 | comodo.com |
62.161.0.228 | company.drweb.com |
176.76.120.123 | company.hauri.co.kr |
115.139.65.31 | company.hauri.net |
66.216.24.20 | computing.net |
99.117.131.90 | comunidad.wilkinsonpc.com.co |
213.32.251.173 | configurarequipos.com |
84.95.197.81 | coresecurity.com |
104.172.223.70 | cou85.com |
136.74.6.140 | cowsmo.com |
250.244.127.35 | cpsecure.com |
121.52.72.199 | csc.rising.com.cn |
73.128.98.188 | cureit.ru |
174.30.137.2 | customer.symantec.com |
219.200.2.86 | customers.drweb.com |
158.8.203.250 | cutlines.org |
110.84.229.239 | cwsandbox.org |
143.242.13.53 | cybercrime.pandasecurity.com |
1.157.201.204 | cyberdefender.com |
196.220.78.112 | cybertechhelp.com |
147.41.105.101 | daboweb.com |
180.198.212.171 | daniloff.net |
38.113.76.254 | daniweb.com |
165.176.22.162 | darkclockers.com |
185.253.236.151 | dazhizhu.cn |
217.87.87.221 | de.bitdefender.com |
7.69.208.48 | de.mcafee.com |
202.65.153.24 | de.trendmicro.com |
154.209.179.13 | deckard.geekstogo.com |
187.43.218.15 | deerfield.com |
44.25.83.167 | defalcos.com |
239.21.28.75 | definitions.symantec.com |
191.165.54.64 | dell.symantec.com |
224.255.94.134 | demos.eset.es |
82.238.214.217 | descargas.eset.es |
209.233.159.193 | dev.depeuter.org |
228.54.186.182 | developmentdrums.org |
5.211.225.184 | dialognauka.ru |
51.194.89.79 | diamondcs.com.au |
246.189.35.243 | dicasweb.com.br |
198.10.61.232 | discussions.virtualdr.com |
230.168.168.46 | disk-encryption.comodo.com |
88.150.33.129 | dl.360safe.com |
27.146.234.37 | dl1.antivir-pe.com |
235.222.192.26 | dl1.antivir-pe.de |
12.124.43.96 | dl1.antivir.de |
125.106.164.248 | dl1.avgate.net |
252.102.109.156 | dl10.freeav.net |
16.178.67.145 | dl2.antivir-pe.com |
49.80.175.215 | dl2.antivir-pe.de |
163.63.39.42 | dl2.antivir.de |
34.58.240.206 | dl2.avgate.net |
241.135.11.195 | dl3.antivir-pe.de |
18.36.50.9 | dl3.antivir.de |
132.19.170.92 | dl3.avgate.net |
71.14.116.68 | dl4.antivir-pe.com |
23.91.142.57 | dl4.antivir-pe.de |
55.249.181.59 | dl4.antivir.de |
169.231.46.210 | dl4.avgate.net |
40.227.247.118 | dl5.avgate.net |
60.47.205.39 | dl6.avgate.net |
25.137.244.109 | dl7.avgate.net |
138.119.177.193 | dl8.avgate.net |
9.115.122.169 | dl8.freeav.net |
217.191.80.158 | dl9.avgate.net |
250.93.188.160 | dl9.freeav.net |
108.8.52.55 | dnl-cd1.kaspersky-labs.com |
47.71.253.219 | dnl-cd10.kaspersky-labs.com |
254.148.212.208 | dnl-cd11.kaspersky-labs.com |
31.49.63.22 | dnl-cd12.kaspersky-labs.com |
145.220.183.105 | dnl-cd13.kaspersky-labs.com |
16.27.129.13 | dnl-cd2.kaspersky-labs.com |
36.104.155.2 | dnl-cd3.kaspersky-labs.com |
68.6.194.72 | dnl-cd4.kaspersky-labs.com |
182.176.59.223 | dnl-cd5.kaspersky-labs.com |
53.240.4.131 | dnl-cd6.kaspersky-labs.com |
5.60.30.120 | dnl-cd7.kaspersky-labs.com |
106.218.69.190 | dnl-cd8.kaspersky-labs.com |
152.132.190.18 | dnl-cd9.kaspersky-labs.com |
90.196.135.182 | dnl-cn1.kaspersky-labs.com |
42.16.161.171 | dnl-cn10.kaspersky-labs.com |
75.174.201.241 | dnl-cn11.kaspersky-labs.com |
189.89.133.136 | dnl-cn12.kaspersky-labs.com |
128.152.10.44 | dnl-cn13.kaspersky-labs.com |
79.229.37.33 | dnl-cn14.kaspersky-labs.com |
112.130.144.103 | dnl-cn15.kaspersky-labs.com |
226.45.8.186 | dnl-cn2.kaspersky-labs.com |
97.108.210.94 | dnl-cn3.kaspersky-labs.com |
117.185.168.83 | dnl-cn4.kaspersky-labs.com |
149.19.19.153 | dnl-cn5.kaspersky-labs.com |
195.1.140.236 | dnl-cn6.kaspersky-labs.com |
134.253.85.212 | dnl-cn7.kaspersky-labs.com |
86.141.111.201 | dnl-cn8.kaspersky-labs.com |
119.231.150.203 | dnl-cn9.kaspersky-labs.com |
233.213.15.99 | dnl-eu1.kaspersky-labs.com |
171.209.216.7 | dnl-eu10.kaspersky-labs.com |
123.97.242.252 | dnl-eu11.kaspersky-labs.com |
156.187.26.66 | dnl-eu12.kaspersky-labs.com |
14.170.146.149 | dnl-eu13.kaspersky-labs.com |
141.165.91.125 | dnl-eu14.kaspersky-labs.com |
160.242.118.114 | dnl-eu15.kaspersky-labs.com |
193.143.157.116 | dnl-eu2.kaspersky-labs.com |
239.126.21.11 | dnl-eu3.kaspersky-labs.com |
178.121.223.175 | dnl-eu4.kaspersky-labs.com |
130.198.249.164 | dnl-eu5.kaspersky-labs.com |
162.100.100.234 | dnl-eu6.kaspersky-labs.com |
20.82.221.61 | dnl-eu7.kaspersky-labs.com |
215.78.166.225 | dnl-eu8.kaspersky-labs.com |
167.154.124.214 | dnl-eu9.kaspersky-labs.com |
200.56.231.28 | dnl-jp1.kaspersky-labs.com |
58.38.96.180 | dnl-jp10.kaspersky-labs.com |
184.34.41.88 | dnl-jp11.kaspersky-labs.com |
204.110.255.77 | dnl-jp12.kaspersky-labs.com |
237.12.107.147 | dnl-jp13.kaspersky-labs.com |
95.251.227.230 | dnl-jp14.kaspersky-labs.com |
222.246.172.138 | dnl-jp15.kaspersky-labs.com |
173.67.199.127 | dnl-jp2.kaspersky-labs.com |
206.224.238.197 | dnl-jp3.kaspersky-labs.com |
64.207.102.24 | dnl-jp4.kaspersky-labs.com |
3.202.48.0 | dnl-jp5.kaspersky-labs.com |
211.23.74.245 | dnl-jp6.kaspersky-labs.com |
243.181.113.247 | dnl-jp7.kaspersky-labs.com |
101.163.234.142 | dnl-jp8.kaspersky-labs.com |
228.159.179.50 | dnl-jp9.kaspersky-labs.com |
248.235.205.39 | dnl-kr1.kaspersky-labs.com |
25.137.244.109 | dnl-kr10.kaspersky-labs.com |
138.119.177.193 | dnl-kr11.kaspersky-labs.com |
9.115.122.169 | dnl-kr12.kaspersky-labs.com |
217.191.80.158 | dnl-kr13.kaspersky-labs.com |
250.93.188.160 | dnl-kr15.kaspersky-labs.com |
108.8.52.55 | dnl-kr2.kaspersky-labs.com |
47.71.253.219 | dnl-kr3.kaspersky-labs.com |
254.148.212.208 | dnl-kr4.kaspersky-labs.com |
31.49.63.22 | dnl-kr5.kaspersky-labs.com |
145.220.183.105 | dnl-kr6.kaspersky-labs.com |
16.27.129.13 | dnl-kr7.kaspersky-labs.com |
36.104.155.2 | dnl-kr8.kaspersky-labs.com |
68.6.194.72 | dnl-kr9.kaspersky-labs.com |
182.176.59.223 | dnl-ru1.kaspersky-labs.com |
53.240.4.131 | dnl-ru10.kaspersky-labs.com |
5.60.30.120 | dnl-ru11.kaspersky-labs.com |
106.218.69.190 | dnl-ru12.kaspersky-labs.com |
152.132.190.18 | dnl-ru13.kaspersky-labs.com |
90.196.135.182 | dnl-ru14.kaspersky-labs.com |
42.16.161.171 | dnl-ru15.kaspersky-labs.com |
75.174.201.241 | dnl-ru2.kaspersky-labs.com |
189.89.133.84 | dnl-ru3.kaspersky-labs.com |
76.100.214.248 | dnl-ru4.kaspersky-labs.com |
27.177.241.237 | dnl-ru5.kaspersky-labs.com |
60.78.92.51 | dnl-ru6.kaspersky-labs.com |
174.249.212.134 | dnl-ru7.kaspersky-labs.com |
45.56.158.42 | dnl-ru8.kaspersky-labs.com |
65.133.116.31 | dnl-ru9.kaspersky-labs.com |
97.223.223.101 | dnl-us1.kaspersky-labs.com |
143.205.88.184 | dnl-us10.kaspersky-labs.com |
82.201.33.160 | dnl-us11.kaspersky-labs.com |
34.89.59.149 | dnl-us12.kaspersky-labs.com |
67.179.98.151 | dnl-us13.kaspersky-labs.com |
180.161.219.46 | dnl-us14.kaspersky-labs.com |
119.157.164.211 | dnl-us15.kaspersky-labs.com |
71.45.190.200 | dnl-us2.kaspersky-labs.com |
104.135.230.14 | dnl-us3.kaspersky-labs.com |
218.118.94.97 | dnl-us4.kaspersky-labs.com |
89.113.39.73 | dnl-us5.kaspersky-labs.com |
108.190.66.62 | dnl-us6.kaspersky-labs.com |
141.91.105.64 | dnl-us7.kaspersky-labs.com |
187.74.225.215 | dnl-us8.kaspersky-labs.com |
126.69.171.123 | dnl-us9.kaspersky-labs.com |
78.146.197.112 | dougknox.com |
110.48.48.182 | down.360safe.cn |
224.30.168.9 | down.360safe.com |
163.26.114.173 | download.avg.com |
115.102.72.162 | download.bleepingcomputer.com |
148.4.179.232 | download.com |
5.242.44.127 | download.com.vn |
132.238.245.36 | download.eset.com |
152.58.203.25 | download.f-secure.com |
185.216.55.95 | download.mcafee.com |
43.199.175.178 | download.microsoft.com |
170.194.120.86 | download.microsoft.comguru0.grisoft.cz |
121.15.147.75 | download.nai.com |
154.172.186.145 | download.norman.no |
12.155.50.228 | download.rising.com.cn |
207.150.252.204 | download.softpedia.com |
159.227.22.193 | download.sysinternals.com |
191.129.61.195 | download0.avast.com |
49.111.182.90 | download1.avast.com |
176.107.127.254 | download1.emsisoft.com |
196.183.153.243 | download1.quickheal.com |
229.85.192.57 | download10.quickheal.com |
86.67.125.140 | download100.avast.com |
213.63.70.117 | download1us.softpedia.com |
165.139.28.106 | download2.avast.com |
198.41.136.108 | download2.quickheal.com |
56.212.0.3 | download200.avast.com |
251.19.201.167 | download201.avast.com |
202.96.160.156 | download202.avast.com |
235.253.11.226 | download203.avast.com |
93.168.131.53 | download204.avast.com |
220.231.77.217 | download205.avast.com |
240.52.103.206 | download206.avast.com |
16.210.142.20 | download207.avast.com |
130.124.7.171 | download208.avast.com |
1.188.208.79 | download209.avast.com |
209.8.234.68 | download210.avast.com |
54.166.17.138 | download211.avast.com |
99.80.138.221 | download212.avast.com |
38.144.83.130 | download213.avast.com |
246.220.109.119 | download214.avast.com |
23.122.149.121 | download3.avast.com |
69.225.13.16 | download3.quickheal.com |
8.32.146.180 | download4.avast.com |
215.109.173.169 | download4.emsisoft.com |
248.10.24.239 | download4.quickheal.com |
106.181.144.66 | download5.avast.com |
233.244.90.230 | download5.emsisoft.com |
253.65.48.219 | download5.quickheal.com |
29.155.155.33 | download501.avast.com |
75.137.20.116 | download502.avast.com |
14.133.221.92 | download503.avast.com |
222.21.247.81 | download504.avast.com |
255.111.30.83 | download505.avast.com |
112.93.151.234 | download511.avast.com |
51.89.96.143 | download512.avast.com |
3.233.122.132 | download513.avast.com |
36.67.162.202 | download514.avast.com |
150.50.26.29 | download515.avast.com |
21.45.227.5 | download516.avast.com |
40.122.254.250 | download535.avast.com |
73.23.37.252 | download6.avast.com |
119.6.157.147 | download6.quickheal.com |
58.1.103.55 | download600.avast.com |
10.78.129.44 | download601.avast.com |
42.236.236.114 | download602.avast.com |
156.218.101.197 | download603.avast.com |
95.214.46.105 | download604.avast.com |
47.34.4.94 | download605.avast.com |
80.192.111.164 | download606.avast.com |
193.174.232.59 | download607.avast.com |
64.170.177.224 | download608.avast.com |
84.246.135.213 | download609.avast.com |
117.148.243.27 | download617.avast.com |
231.131.107.110 | download618.avast.com |
102.126.52.18 | download619.avast.com |
53.203.79.7 | download620.avast.com |
86.104.118.77 | download621.avast.com |
200.87.238.160 | download622.avast.com |
139.82.184.136 | download623.avast.com |
91.159.210.125 | download624.avast.com |
123.61.249.127 | download625.avast.com |
237.43.114.22 | download626.avast.com |
108.39.59.186 | download627.avast.com |
128.115.85.175 | download628.avast.com |
161.17.124.245 | download629.avast.com |
18.255.57.73 | download630.avast.com |
145.251.2.49 | download631.avast.com |
97.71.216.38 | download632.avast.com |
130.229.68.40 | download633.avast.com |
244.144.188.191 | download634.avast.com |
183.207.133.99 | download635.avast.com |
134.28.92.88 | download636.avast.com |
167.185.115.74 | download637.avast.com |
197.16.235.157 | download638.avast.com |
68.79.181.65 | download639.avast.com |
88.156.207.54 | download640.avast.com |
120.58.246.124 | download641.avast.com |
234.228.111.19 | download642.avast.com |
105.36.56.183 | download643.avast.com |
57.112.82.172 | download644.avast.com |
158.14.122.242 | download645.avast.com |
204.184.242.70 | download646.avast.com |
142.248.187.234 | download647.avast.com |
94.69.213.223 | download648.avast.com |
127.226.253.37 | download649.avast.com |
241.141.185.188 | download650.avast.com |
180.204.62.96 | download651.avast.com |
131.25.89.85 | download652.avast.com |
164.182.196.155 | download653.avast.com |
22.97.60.238 | download654.avast.com |
149.160.6.146 | download655.avast.com |
169.237.220.135 | download656.avast.com |
201.71.71.205 | download658.avast.com |
247.53.192.32 | download659.avast.com |
186.49.137.8 | download660.avast.com |
138.193.163.253 | download661.avast.com |
171.27.203.255 | download662.avast.com |
29.9.67.151 | download663.avast.com |
223.5.12.59 | download664.avast.com |
175.150.38.48 | download665.avast.com |
208.239.78.118 | download666.avast.com |
66.222.198.201 | download667.avast.com |
193.217.143.177 | download668.avast.com |
212.38.170.166 | download669.avast.com |
245.195.209.168 | download670.avast.com |
35.178.73.63 | download671.avast.com |
230.173.19.227 | download672.avast.com |
182.250.45.216 | download673.avast.com |
214.152.152.30 | download674.avast.com |
72.134.17.113 | download675.avast.com |
11.130.218.21 | download676.avast.com |
219.206.176.10 | download677.avast.com |
184.40.216.13 | download678.avast.com |
42.22.80.164 | download679.avast.com |
168.18.25.72 | download680.avast.com |
188.95.239.61 | download681.avast.com |
221.252.91.131 | download682.avast.com |
79.235.211.214 | download683.avast.com |
206.230.156.122 | download684.avast.com |
157.51.183.111 | download685.avast.com |
190.208.222.181 | download686.avast.com |
48.191.86.8 | download687.avast.com |
243.186.32.240 | download688.avast.com |
195.7.58.229 | download689.avast.com |
227.165.97.231 | download690.avast.com |
85.147.218.126 | download691.avast.com |
212.143.163.34 | download692.avast.com |
232.219.189.23 | download693.avast.com |
9.121.229.94 | download694.avast.com |
123.103.161.177 | download695.avast.com |
249.99.106.153 | download696.avast.com |
201.176.64.142 | download697.avast.com |
234.77.172.144 | download698.avast.com |
92.248.36.39 | download699.avast.com |
31.55.237.203 | download7.avast.com |
238.132.196.192 | download7.quickheal.com |
15.33.47.6 | download700.avast.com |
129.204.167.89 | download701.avast.com |
0.11.113.253 | download702.avast.com |
20.88.139.242 | download703.avast.com |
52.246.178.56 | download704.avast.com |
166.160.43.207 | download705.avast.com |
37.224.244.115 | download706.avast.com |
245.44.14.104 | download707.avast.com |
90.202.54.175 | download708.avast.com |
136.116.174.2 | download709.avast.com |
74.180.119.166 | download72.avast.com |
26.1.145.155 | download73.avast.com |
59.158.185.225 | download74.avast.com |
173.73.117.120 | download75.avast.com |
112.136.250.28 | download76.avast.com |
63.213.21.17 | download77.avast.com |
96.114.128.87 | download78.avast.com |
210.29.248.170 | download79.avast.com |
81.92.194.78 | download8.quickheal.com |
101.169.152.67 | download80.avast.com |
133.3.3.137 | download81.avast.com |
179.241.124.220 | download82.avast.com |
118.237.69.196 | download83.avast.com |
70.125.95.185 | download84.avast.com |
103.215.135.188 | download85.avast.com |
217.197.255.83 | download9.quickheal.com |
155.193.200.247 | download900.avast.com |
107.82.226.236 | download901.avast.com |
140.171.10.50 | download902.avast.com |
254.154.130.133 | download903.avast.com |
125.149.75.109 | download904.avast.com |
144.226.102.98 | download905.avast.com |
177.127.141.100 | download906.avast.com |
223.110.5.251 | download907.avast.com |
162.105.207.159 | download908.avast.com |
114.182.233.148 | download909.avast.com |
146.84.84.218 | download91.avast.com |
208.14.153.249 | download910.avast.com |
147.10.98.157 | download911.avast.com |
99.86.56.146 | download912.avast.com |
132.244.163.216 | download913.avast.com |
246.226.28.112 | download914.avast.com |
116.222.229.20 | download915.avast.com |
136.43.187.9 | download916.avast.com |
169.200.39.79 | download917.avast.com |
27.183.159.162 | download918.avast.com |
154.178.104.70 | download919.avast.com |
105.255.131.59 | download92.avast.com |
138.156.170.129 | download920.avast.com |
252.139.34.212 | download921.avast.com |
191.134.236.188 | download922.avast.com |
143.211.6.177 | download923.avast.com |
175.113.45.179 | download924.avast.com |
33.95.166.74 | download925.avast.com |
160.91.111.238 | download926.avast.com |
180.167.137.227 | download927.avast.com |
213.69.176.41 | download928.avast.com |
71.51.109.125 | download929.avast.com |
197.47.54.101 | download93.avast.com |
149.124.12.90 | download930.avast.com |
182.25.120.92 | download931.avast.com |
40.196.240.243 | download932.avast.com |
235.3.185.151 | download933.avast.com |
186.80.144.140 | download934.avast.com |
219.237.251.210 | download935.avast.com |
77.152.115.37 | download936.avast.com |
204.215.61.201 | download937.avast.com |
224.36.87.190 | download938.avast.com |
0.194.126.4 | download939.avast.com |
114.108.247.155 | download94.avast.com |
241.172.192.63 | download940.avast.com |
193.248.218.52 | download941.avast.com |
38.150.1.122 | download942.avast.com |
84.64.122.206 | download943.avast.com |
22.128.67.114 | download944.avast.com |
230.204.93.103 | download945.avast.com |
7.106.133.173 | download946.avast.com |
121.21.65.68 | download947.avast.com |
60.84.198.232 | download948.avast.com |
11.161.225.221 | download949.avast.com |
44.62.76.35 | download95.avast.com |
158.233.196.118 | download950.avast.com |
29.40.142.26 | download951.avast.com |
49.117.100.15 | download952.avast.com |
81.207.207.85 | download953.avast.com |
127.189.72.168 | download954.avast.com |
66.185.17.144 | download955.avast.com |
18.73.43.133 | download956.avast.com |
51.163.82.135 | download957.avast.com |
165.145.203.31 | download958.avast.com |
103.141.148.195 | download959.avast.com |
55.29.174.184 | download96.avast.com |
88.119.214.254 | download960.avast.com |
202.102.78.81 | download961.avast.com |
73.97.23.57 | download962.avast.com |
92.174.50.46 | download963.avast.com |
125.75.89.48 | download964.avast.com |
171.58.209.199 | download965.avast.com |
110.53.155.107 | download966.avast.com |
62.130.181.96 | download967.avast.com |
94.32.32.166 | download968.avast.com |
208.14.153.249 | download969.avast.com |
147.10.98.157 | download97.avast.com |
99.86.56.146 | download970.avast.com |
132.244.163.216 | download971.avast.com |
246.226.28.112 | download972.avast.com |
48.154.161.208 | download973.avast.com |
68.231.119.197 | download974.avast.com |
101.132.227.11 | download975.avast.com |
215.115.91.94 | download976.avast.com |
86.110.36.2 | download977.avast.com |
37.187.63.247 | download978.avast.com |
70.88.102.61 | download979.avast.com |
184.71.222.144 | download98.avast.com |
123.66.168.120 | download980.avast.com |
75.143.194.109 | download99.avast.com |
107.45.233.111 | downloads-eu1.kaspersky-labs.com |
221.27.98.6 | downloads-eu2.kaspersky-labs.com |
92.23.43.170 | downloads-eu3.kaspersky-labs.com |
112.99.69.159 | downloads-eu4.kaspersky-labs.com |
145.1.109.229 | downloads-us1.kaspersky-labs.com |
3.239.41.57 | downloads-us2.kaspersky-labs.com |
129.235.242.33 | downloads-us3.kaspersky-labs.com |
81.56.200.22 | downloads-us4.kaspersky-labs.com |
114.213.52.24 | downloads.andymanchesta.com |
228.128.172.175 | downloads.malwarebytes.org |
167.191.117.83 | downloads.microsoft.com |
118.12.76.72 | downloads.My-eTrust.com |
151.169.183.142 | downloads1.kaspersky-labs.com |
9.84.47.225 | downloads2.kaspersky-labs.com |
136.147.249.133 | downloads3.kaspersky-labs.com |
156.224.19.122 | downloads4.kaspersky-labs.com |
188.126.58.192 | downloads5.kaspersky-labs.com |
46.40.179.87 | dr-web-cureit.softonic.com |
173.104.124.251 | drsolomon.com |
125.180.150.240 | drweb-inside.com |
226.82.189.54 | drweb.com |
16.252.54.138 | drweb.com.es |
210.60.255.46 | drweb.net |
162.137.25.35 | drwebinside.com |
195.38.65.105 | dswlab.com |
53.209.253.0 | duba.net |
248.16.130.164 | ealaddin.net |
199.93.157.153 | ealaddin.orgeshop.aladdin.com |
232.250.8.223 | easy-vpn.comodo.com |
90.165.128.50 | edm.symantec.com |
217.228.74.214 | education.symantec.com |
237.49.32.203 | eeload.com |
13.139.139.17 | eeye.com |
59.121.4.100 | eicar.org |
254.117.205.76 | elblogdemanu.com |
206.5.231.65 | elitepvpers.de |
239.95.14.67 | emea.trendmicro.com |
97.77.135.219 | emsisoft.com |
35.73.80.127 | emsisoft.de |
159.134.22.32 | encarta.msn.com |
192.223.62.102 | engine.awaps.net |
50.206.182.185 | enterprisesecur.symantec.com |
177.201.127.161 | eos.eset.es |
196.22.154.150 | eradicatespyware.net |
229.179.193.152 | es.answers.yahoo.com |
19.162.57.47 | es.kioskea.net |
214.158.3.211 | es.mcafee.com |
166.234.29.200 | es.trendmicro.com |
199.136.136.14 | es.wasalive.com |
56.118.1.97 | esafe.com |
251.114.202.5 | esecurity.livecall.co.kr |
203.190.160.250 | eset-la.com |
236.92.12.65 | eset.com |
94.74.132.216 | eset.es |
220.70.77.124 | eset.sk |
240.147.35.113 | esp.sophos.com |
17.48.143.183 | espanol.answers.yahoo.com |
131.31.7.10 | espanol.dir.groups.yahoo.com |
2.26.208.174 | espanol.groups.yahoo.com |
209.103.235.163 | esupport.trendmicro.com |
242.4.18.233 | et.symantec.com |
100.243.138.60 | etrr.co.uk |
39.239.84.36 | eugrantsadvisor.cz |
247.59.110.25 | eugrantsadvisor.de |
24.217.149.27 | eval.symantec.com |
137.199.14.178 | ewido.net |
8.195.215.86 | exchangeyourcareer.net |
28.15.241.75 | experts-exchange.com |
61.173.25.146 | f-prot.com |
175.155.213.229 | f-secure.com |
45.151.158.205 | f-secure.frf-secure.hk |
253.228.116.194 | f-secure.nlfsecure.com |
30.129.224.196 | fastclick.net |
144.44.88.91 | feedage.com |
83.107.33.255 | feeds.sophos.com |
34.184.248.244 | feeds.trendmicro.com |
67.85.99.58 | file.ikaka.cn |
181.0.219.141 | file.ikaka.com |
52.64.165.49 | file.net |
72.140.191.38 | files.avast.com |
105.42.230.108 | files.filefont.com |
218.212.95.3 | files.trendmicro-europe.com |
89.20.40.167 | filseclab.com |
41.96.66.156 | final4ever.com |
142.254.106.227 | finjan.com |
188.168.226.54 | firewall.sunbeltsoftware.com |
126.232.171.218 | firewallguide.com |
78.53.197.207 | fixmyim.com |
111.210.237.21 | foro.ethek.com |
225.125.169.172 | foros.toxico-pc.com |
164.188.46.80 | foros.zonavirus.com |
115.9.73.69 | forospanish.com |
148.166.180.139 | forospyware.com |
6.81.44.222 | forospyware.es |
133.145.246.130 | fortiguardcenter.com |
153.221.204.119 | fortihero.com |
186.55.55.189 | fortilog.com |
231.37.176.16 | fortinet.co.at |
170.33.121.248 | fortinet.com |
122.177.147.237 | fortiprotect.com |
155.11.187.240 | fortiwifi.com |
13.249.51.135 | forum.clubedohardware.com.br |
207.245.252.43 | forum.emsisoft.com |
159.134.22.32 | forum.hardware.fr |
192.223.62.102 | forum.hijackthis.de |
50.206.182.185 | forum.ikaka.com |
177.201.127.161 | forum.jiangmin.com |
196.22.154.150 | forum.kaspersky.com |
229.179.193.152 | forum.malekal.com |
207.94.245.235 | forum.piriform.com |
146.90.191.143 | forum.securitycadets.com |
98.166.217.132 | forum.sysinternals.com |
131.68.68.202 | forum.telecharger.01net.com |
244.50.189.29 | forum.tweaks.com |
183.46.134.193 | forum.zazana.com |
135.122.92.182 | forums.cnet.com |
168.24.200.253 | forums.comodo.com |
26.6.64.148 | forums.devshed.com |
152.2.9.56 | forums.maddoktor2.com |
172.79.224.45 | forums.majorgeeks.com |
205.236.75.115 | forums.techguy.org |
63.219.195.198 | forums.whatthetech.com |
190.214.140.106 | fr.bitdefender.com |
141.35.167.95 | fr.drweb.com |
174.192.206.165 | fr.mcafee.com |
32.175.70.248 | fr.trendmicro.com |
227.171.16.224 | fr1.drweb.com |
179.247.42.213 | fr2.drweb.com |
212.149.81.215 | fr3.drweb.com |
69.131.202.110 | fr4.drweb.com |
196.127.147.18 | fr5.drweb.com |
216.203.173.7 | fr6.drweb.com |
249.105.213.78 | fr7.drweb.com |
107.87.145.161 | fractus.mat.uson.mx |
233.83.90.137 | free-av.com |
185.160.49.126 | free-av.net |
218.61.156.128 | free.antivirus.com |
76.232.20.23 | free.avg.com |
15.39.221.187 | free.drweb.com |
222.116.180.176 | free.grisoft.com |
255.17.31.246 | free.grisoft.cz |
113.188.151.73 | free.pandasecurity.com |
240.252.97.237 | free.prevx.com |
4.72.123.226 | free.tinypicbox.com |
37.230.162.40 | freeav.com |
150.144.27.191 | freeav.net |
21.208.228.99 | freespywareremoval.info |
229.28.254.88 | frisk-software.com |
74.186.38.159 | fsc.norman.com |
120.100.158.242 | fsecure.nlwebyard.com |
58.164.103.150 | ftp.avp.com |
10.241.130.139 | ftp.bitdefender.com |
43.142.169.209 | ftp.ca.co |
157.57.101.104 | ftp.ca.com |
96.120.234.12 | ftp.customer.symantec.com |
47.197.5.1 | ftp.dispatch.mcafee.com |
80.98.112.71 | ftp.download.mcafee.com |
194.13.232.154 | ftp.downloads-eu1.kaspersky-labs.com |
65.77.178.62 | ftp.downloads-eu2.kaspersky-labs.com |
85.153.136.51 | ftp.downloads-eu3.kaspersky-labs.com |
118.243.243.121 | ftp.downloads-eu4.kaspersky-labs.com |
163.225.108.204 | ftp.downloads-us1.kaspersky-labs.com |
102.221.53.180 | ftp.downloads-us2.kaspersky-labs.com |
54.109.79.169 | ftp.downloads-us3.kaspersky-labs.com |
87.199.119.172 | ftp.downloads-us4.kaspersky-labs.com |
201.181.239.67 | ftp.downloads1.kaspersky-labs.com |
139.177.184.231 | ftp.downloads2.kaspersky-labs.com |
91.66.211.220 | ftp.downloads3.kaspersky-labs.com |
124.155.250.34 | ftp.downloads4.kaspersky-labs.com |
238.138.114.117 | ftp.drweb.com |
109.133.59.93 | ftp.esafe.com |
128.210.86.82 | ftp.europe.f-secure.com |
161.111.125.84 | ftp.f-prot.com |
207.94.245.235 | ftp.f-secure.com |
146.90.191.143 | ftp.grisoft.com |
98.166.217.132 | ftp.kaspersky-labs.com |
131.68.68.202 | ftp.kaspersky.com |
244.50.189.29 | ftp.kasperskylab.ru |
183.46.134.193 | ftp.liveupdate.symantec.com |
135.122.92.182 | ftp.liveupdate.symantecliveupdate.com |
168.24.200.253 | ftp.mast.mcafee.com |
26.6.64.148 | ftp.mcafee.com |
152.2.9.56 | ftp.microworldsystems.com |
172.79.224.45 | ftp.my-etrust.com |
205.236.75.115 | ftp.nai.com |
63.219.195.198 | ftp.networkassociates.com |
190.214.88.54 | ftp.norton.com |
89.239.115.43 | ftp.rads.mcafee.com |
122.140.154.113 | ftp.sandbox.norman.com |
236.123.18.196 | ftp.secure.nai.com |
175.118.220.172 | ftp.securityresponse.symantec.com |
127.195.246.161 | ftp.sophos.com |
160.97.29.163 | ftp.symantec.com |
17.79.150.58 | ftp.symantecliveupdate.com |
144.75.95.222 | ftp.symatec.com |
164.151.121.211 | ftp.trendmicro.com |
197.53.161.26 | ftp.uk.trendmicro-europe.com |
55.35.93.109 | ftp.update.symantec.com |
181.31.38.85 | ftp.updates.symantec.com |
133.108.252.74 | ftp.updates1.kaspersky-labs.com |
166.9.104.76 | ftp.updates2.kaspersky-labs.com |
24.180.224.227 | ftp.updates3.kaspersky-labs.com |
219.243.169.135 | ftp.updates4.kaspersky-labs.com |
170.64.128.124 | ftp.us.mcafee.com |
203.221.235.194 | ftp.viruslist.com |
61.136.99.21 | funkytoad.com |
188.199.45.185 | futurenow.bitdefender.com |
208.20.71.174 | fw.rising.com.cn |
240.178.110.244 | fx.dk |
98.92.231.139 | gangbang.mytijn.org |
225.156.176.47 | gdata.de |
177.232.202.36 | gdata.es |
22.134.242.107 | gecadsoftware.com |
68.48.106.190 | geekstogo.com |
6.112.51.98 | global.ahnlab.com |
214.189.77.87 | global.jiangmin.com |
247.90.117.157 | global.nprotect.com |
105.5.49.52 | go.mcafee.com |
44.68.182.216 | go.microsoft.com |
251.145.209.205 | go.rising.com.cn |
28.46.60.19 | go.sunbeltsoftware.com |
142.217.180.102 | go.symantec.com |
13.24.126.10 | go.trendmicro.com |
33.101.84.255 | greatis.com |
65.191.191.69 | grisoft.com |
111.173.56.152 | grisoft.cz |
50.169.1.128 | grv.microsoft.com |
2.57.27.117 | guiadohardware.net |
35.147.67.120 | guru.avg.com |
149.129.187.15 | guru1.grisoft.cz |
87.125.132.179 | guru2.grisoft.cz |
39.14.158.168 | guru3.grisoft.cz |
72.103.198.238 | guru4.grisoft.cz |
186.86.62.65 | guru5.grisoft.cz |
57.81.7.41 | gwava.nl |
76.158.34.30 | hacksoft.com.pe |
109.59.73.32 | hacksoft.pe |
155.42.193.183 | halmapr.com |
94.37.139.91 | hauri.co.kr |
46.114.165.80 | hauri.net |
79.16.16.150 | haurijapan.com |
192.254.137.233 | help.rising.com.cn |
131.250.82.141 | hi.baidu.com |
83.70.40.130 | hijackthis.de |
116.228.148.201 | hijackthis.download3000.com |
230.210.12.96 | hishomeforchildren.com |
100.206.213.4 | hjt-data.trend-braintree.com |
120.27.171.249 | hjt.networktechs.com |
153.184.23.63 | home.mcafee.com |
11.167.143.146 | hostedmailsecur.symantec.com |
138.162.88.54 | hotshare.net |
89.239.115.43 | housecall.com |
122.140.154.113 | housecall.trendmicro.com |
236.123.18.196 | housecall60.trendmicro.com |
175.118.220.172 | housecall65.trendmicro.com |
127.195.246.161 | howsafeismypc.com |
160.97.29.163 | huaifai.go.th |
17.79.150.58 | i-vault.comodo.com |
144.75.95.222 | iavs.cz |
164.151.121.211 | ibusca.me |
197.53.161.26 | idauthority.com |
55.35.93.109 | ids.kaspersky-labs.com |
181.31.38.85 | ieupdate.gdata.de |
133.108.252.74 | ieupdate1.gdata.de |
166.9.104.76 | ieupdate2.gdata.de |
24.180.224.227 | ieupdate3.gdata.de |
219.243.169.135 | ieupdate4.gdata.de |
170.64.128.124 | ieupdate5.gdata.de |
203.221.235.194 | ieupdate6.gdata.de |
61.136.99.21 | ikaka.cn |
188.199.45.185 | ikaka.com |
208.20.3.106 | ikarus.at |
173.110.42.176 | ikarus.net |
30.24.163.71 | ilove.tigolbittys.info |
157.88.108.235 | images.kaspersky.com |
109.164.134.224 | in.answers.yahoo.com |
210.66.174.39 | incodesolutions.com |
0.236.38.122 | info.drweb.com |
194.44.239.30 | info.prevx.com |
146.121.9.19 | infos-du-net.com |
179.22.49.89 | infosecpodcast.com |
37.193.237.240 | infospyware.com |
232.0.114.148 | inicioid.com |
183.77.141.137 | iniciorapido.info |
216.234.248.207 | inline-software.de |
74.149.112.34 | internetsecurity.comodo.com |
201.212.58.198 | intranet.cidiroax.ipn.mx |
221.33.16.187 | investor.symantec.com |
254.123.123.1 | irc.bigshitsandwich.org |
43.105.244.84 | irc.metraiciono.com |
238.101.189.60 | iseclab.org |
190.245.215.49 | isotopecomics.com |
223.79.255.52 | iss.net |
81.61.119.203 | it.answers.yahoo.com |
19.57.64.111 | it.bitdefender.com |
227.202.90.100 | it.mcafee.com |
4.35.130.170 | it.trendmicro.com |
118.18.250.253 | itw.trendmicro.com |
245.13.195.229 | ixomodels.com |
8.90.222.218 | ixostore.ixomodels.com |
41.247.5.220 | javacoolsoftware.com |
87.230.125.115 | jetico.com |
26.226.71.23 | jiangmin.com |
234.46.97.12 | jiangmin.com.cn |
11.204.204.82 | jobs.bitdefender.com |
124.186.69.165 | jotti.org |
63.182.14.73 | jp.mcafee.com |
15.2.228.62 | jp.trendmicro.com |
48.160.80.133 | justfacebook.net |
162.142.200.28 | k-otik.com |
32.138.145.192 | k7computing.com |
52.215.103.181 | kaba.360.cn |
85.116.211.251 | kaba.360.com |
199.99.75.78 | karuna-shechen.org |
70.94.20.242 | kaspersky-fr.com |
21.171.47.231 | kaspersky-labs.com |
54.72.86.45 | kaspersky.co.jp |
168.55.206.128 | kaspersky.co.uk |
107.50.152.104 | kaspersky.com |
59.127.178.93 | kaspersky.com.cn |
92.29.217.95 | kaspersky.dk |
205.11.82.246 | kaspersky.es |
76.7.27.154 | kaspersky.gr |
96.83.53.143 | kaspersky.pl |
129.241.93.214 | kaspersky.ru |
243.223.25.41 | kaspersky.se |
113.219.226.17 | kasperskylab.co.kr |
65.40.184.6 | kasperskylab.nl |
98.197.36.8 | kav.ru |
212.112.156.159 | kav.zonelabs.com |
151.175.101.67 | kb.bitdefender.com |
102.252.103.100 | kb.bitdefender.de |
179.197.211.170 | kb.bitdefender.us |
37.112.75.253 | kerio.com |
164.175.20.161 | kimzimmer.net |
183.252.47.150 | kioskea.net |
216.153.86.220 | kpfans.com |
74.68.206.115 | kr.ahnlab.com |
201.131.152.23 | kr.sophos.com |
153.208.178.12 | krupunmai.com |
253.110.217.82 | kvup.jiangmin.com |
43.24.82.165 | kztechs.com |
238.88.27.73 | l33t.shadow-mods.net |
190.164.53.62 | la.trendmicro.com |
223.66.92.132 | ladooscuro.es |
81.236.25.28 | laneros.com |
19.44.158.192 | latam.kaspersky.com |
227.120.184.181 | latin.bitdefender.com |
4.22.36.251 | lavasoft.com |
118.193.156.78 | lavasoft.nu |
245.0.101.242 | lavasoftusa.com |
8.77.60.231 | lexikon.ikarus.at |
41.166.167.45 | license.drweb.com |
87.149.31.128 | linhadefensiva.org |
26.144.233.104 | linhadefensiva.uol.com.br |
234.33.3.93 | linux.bitdefender.com |
10.123.42.95 | lists.clamav.net |
124.105.163.246 | liutilities.com |
63.101.108.154 | live.sunbeltsoftware.com |
15.245.134.143 | liveprotect.net |
48.79.173.213 | liveupdate.symantec.com |
162.61.38.41 | liveupdate.symantec.d4p.net |
32.57.239.17 | liveupdate.symantecliveupdate.com |
52.133.9.6 | looknstop.com |
85.35.49.8 | lovings.technigoyous.net |
131.18.169.159 | lurker.clamav.net |
70.13.114.67 | mailcenter.rising.com |
21.90.141.56 | mailcenter.rising.com.cn |
54.247.248.126 | majorgeeks.com |
168.230.112.209 | mall.hauri.co.kr |
107.225.58.117 | malwarebytes.org |
59.46.16.106 | malwarecity.com |
91.204.123.176 | malwarecity.netmalwarecity.org |
205.186.244.71 | malwaredomainlist.com |
76.182.189.235 | malwarepedia.com |
96.2.147.224 | malwareremoval.com |
129.160.254.38 | malwarescan.emsisoft.com |
243.142.119.122 | malwarescan.emsisoft.de |
113.138.64.30 | malwarescan.emsisoft.es |
65.214.90.19 | mamutu.com |
98.116.130.89 | manuelruvalcaba.com |
212.99.250.172 | marian.symantec.com |
151.94.195.148 | mast.mcafee.com |
102.171.222.137 | mcafee-at-home.com |
135.72.5.139 | mcafee.com |
249.55.125.34 | mcafeeb2b.com |
120.50.71.198 | mcafeefans.com |
140.127.97.187 | mcafeeretail.com |
172.29.136.1 | mcaffee.com |
30.11.69.84 | me.kaspersky.com |
157.7.14.60 | media.fastclick.net |
109.83.228.49 | megasecurity.org |
142.241.79.51 | merijn.org |
0.155.200.203 | metascan-online.com |
194.219.145.111 | microsoft.com |
146.39.103.100 | microsoft.fr |
179.197.211.170 | midescargas.com |
37.112.75.253 | mirror02.gdata.de |
164.175.20.161 | misec.net |
183.252.47.150 | mmsk.cn |
216.153.86.220 | moneybookers.com |
74.68.206.115 | moosoft.com |
201.131.152.23 | mop.pandasecurity.com |
153.208.178.12 | mostz.com |
253.110.217.82 | mozilla-hispano.org |
43.24.82.165 | msdn.microsoft.com |
238.88.27.73 | msk.drweb.com |
190.164.53.62 | msk1.drweb.com |
223.66.92.132 | msk2.drweb.com |
81.236.25.28 | msk3.drweb.com |
19.44.158.192 | msk4.drweb.com |
227.120.184.181 | msk5.drweb.com |
192.210.224.183 | msk6.drweb.com |
50.125.88.10 | msk7.drweb.com |
177.188.33.174 | msncleaner.softonic.com |
196.9.248.163 | msnfix.changelog.fr |
229.98.99.233 | msnvirusremoval.com |
19.81.219.60 | msr.mcafee.com |
214.76.165.36 | mvps.org |
166.221.191.25 | mx.answers.yahoo.com |
198.55.230.27 | mx.mcafee.com |
56.37.95.178 | mxttchina.com |
251.33.40.86 | my-etrust.com |
203.177.66.75 | my.drweb.com |
236.11.105.145 | mygeekside.com |
94.249.226.229 | nabble.com |
220.245.171.205 | nai.com |
240.66.197.194 | natsko.com |
17.223.237.196 | naturesimages.net |
63.206.101.91 | net-security.org |
2.201.46.255 | network.drweb.com |
209.22.73.244 | networkassociates.com |
242.179.180.58 | networkassociates.nai.com |
100.162.44.141 | networkworld.com |
39.157.246.49 | neunet.orgnews.bitdefender.com |
247.234.204.38 | new-beta.drweb.com |
23.136.55.108 | new-company.drweb.com |
137.118.176.3 | new-estore.drweb.com |
8.114.121.167 | new-forum.drweb.com |
28.190.79.156 | new-partners.drweb.com |
61.92.186.226 | new-solutions.drweb.com |
175.74.51.54 | new-support.drweb.com |
45.70.252.218 | new-www.drweb.com |
253.147.22.207 | new.taringa.net |
30.48.62.21 | news.drweb.com |
144.31.182.104 | newsletters.trendmicro.com |
83.26.127.80 | niueight.norman.no |
34.103.154.69 | niufive.norman.no |
67.4.193.71 | niufour.norman.no |
181.243.57.222 | niunine.norman.no |
52.238.3.130 | niuone.norman.no |
72.59.29.119 | niuseven.norman.no |
104.217.68.189 | niusix.norman.no |
218.199.1.16 | niuthree.norman.no |
89.195.202.248 | niutwo.norman.no |
41.15.160.237 | nl.bitdefender.com |
74.173.11.239 | noadware.net |
188.87.132.135 | nod32.co.uk |
126.151.77.43 | nod32.com |
78.228.35.32 | nod32.datsec.de |
111.129.143.102 | nod32.lu |
225.44.7.185 | nod32.ru |
96.107.208.93 | norman.com |
115.184.235.82 | norton.com |
148.85.18.152 | notifier.antivir-pe.de |
6.0.138.47 | novirusthanks.org |
133.63.84.211 | nprobeta.norman.com |
85.140.110.200 | nprotect.com |
185.42.149.14 | nprotect.net |
231.212.14.97 | nprotect.seoul.go.kr |
170.20.215.5 | nsclean.com |
122.96.241.250 | ntfaq.co.kr |
155.254.24.64 | obscgi.mcafee.com |
13.168.213.216 | oem.sunbeltsoftware.com |
207.232.90.124 | offensivecomputing.net |
159.53.116.113 | office.microsoft.com |
192.210.224.183 | oldtimer.geekstogo.com |
50.125.88.10 | one.tinypicbox.com |
177.188.33.174 | onecare.live.com |
196.9.248.163 | online-backup.comodo.com |
229.98.99.233 | online.jiangmin.com |
223.29.167.8 | online.rising.com.cn |
162.24.113.240 | onlinecheck.emsisoft.com |
114.169.139.229 | onlinecheck.emsisoft.de |
146.3.178.231 | onlinecheck.emsisoft.net |
4.241.43.126 | onlinecheck.emsisoft.org |
199.237.244.34 | onlinescan.avast.com |
151.125.14.23 | openantivirus.org |
184.215.53.93 | outpost.pl |
41.197.174.177 | ozzu.com |
168.193.119.153 | p3dev.taringa.net |
188.13.145.142 | pandalabs.pandasecurity.com |
221.171.185.144 | pandasecurity.com |
11.154.49.39 | pandasoftware.com |
206.149.250.203 | pandasoftware.es |
157.226.21.192 | pantip.com |
190.127.128.6 | pcav.cn |
48.110.248.89 | pccreg.antivirus.com |
243.105.194.253 | pccreg.trendmicro.com |
195.182.152.242 | pcentraide.com |
227.84.3.56 | pcguide.com |
85.66.124.207 | pchell.com |
212.62.69.115 | pcinternetpatrol.com |
232.138.27.104 | pcsupportadvisor.com |
9.40.134.174 | pctools.com |
122.22.255.2 | pda.drweb.com |
249.18.200.166 | pedidos.protegerse.com |
201.94.226.155 | personal.psu.edu |
234.252.10.225 | personalfirewall.comodo.com |
92.235.130.52 | pestpatrol.com |
31.230.75.28 | pg.hauri.net |
238.51.102.17 | phx.corporate-ir.net |
15.208.141.19 | pineleafboys.com |
129.191.5.170 | podcasts.sophos.com |
0.186.207.78 | pogonyuto.forospanish.com |
20.7.233.67 | precisesecurity.com |
52.165.16.137 | prevx.com |
166.147.205.220 | privacy.microsoft.com |
37.143.150.196 | products.drweb.com |
245.219.108.185 | promotions.drweb.com |
22.121.215.187 | psnw.com |
135.35.80.82 | pspl.com |
74.99.25.247 | pvtc.org |
26.175.239.236 | qqjkw.net |
59.77.91.50 | quickheal.co.in |
173.248.211.133 | quickheal.com |
44.55.156.41 | radius.turvamies.com |
63.132.183.30 | rads.mcafee.com |
96.33.222.100 | ravantivirus.com |
210.204.86.251 | raymond.cc |
81.11.32.159 | reg-int.nod32-es.com |
33.88.58.148 | reg.eset.es |
133.246.97.218 | reg.rising.com.cn |
179.160.218.45 | register.norman.com |
118.224.163.209 | removetrojanvirus.org |
70.44.189.198 | renewalcenter.symantec.com |
103.202.228.12 | renewals.bitdefender.com |
216.116.161.163 | research.microsoft.com |
155.180.38.72 | research.pandasecurity.com |
107.0.64.61 | research.sunbelt-software.com |
140.158.172.131 | resplendence.com |
254.73.36.214 | retail.sp.f-secure.com |
125.136.237.122 | retail01.sp.f-secure.com |
144.213.196.111 | retail02.sp.f-secure.com |
109.234.235.113 | ribbonwarehouse.com |
155.217.99.196 | rising-global.com |
94.212.45.172 | rising.com |
46.101.71.161 | rising.com.cn |
78.191.110.163 | rolandovera.com |
192.173.231.58 | rootkit.com |
131.169.176.222 | rootkit.nl |
83.57.202.211 | rover800.gaima.co.uk |
116.147.241.25 | roysephotos.com |
229.129.106.109 | ru.trendmicro.com |
100.125.51.85 | ruben.bzin.net |
120.201.77.74 | runscanner.net |
153.103.117.76 | safe.qq.com |
199.86.237.227 | safecomputing.umn.edu |
138.81.182.135 | safer-networking.org |
89.158.209.124 | safetynet.com |
122.59.60.194 | sales.bitdefender.com |
236.42.180.21 | samroeng.hi5.com |
175.37.126.185 | sandbox.norman.com |
127.114.84.174 | sandboxie.com |
159.16.191.244 | sapcupgrades.com |
17.254.56.139 | sarahmcconnellphotography.net |
144.250.1.47 | saverssite.com |
164.70.215.36 | scan.anti-trojan.net |
197.228.66.106 | scan.kingsoft.com |
54.210.187.190 | scan4you.net |
181.206.132.98 | scanner.novirusthanks.org |
133.26.158.87 | scanner.virus.org |
166.184.198.157 | scanner2.novirusthanks.or |
24.167.62.240 | schemas.microsoft.com |
219.162.7.216 | schemas.xmlsoap.org |
170.239.34.205 | sea.symantec.com |
203.140.73.207 | search.ca.com |
61.123.193.102 | search.mcafee.com |
188.118.139.10 | search.symantec.com |
208.195.165.255 | seasonsecurity.com |
240.97.204.69 | secdreg.org |
98.79.137.152 | secubox.aldria.com |
225.75.82.128 | secunia.com |
177.151.40.117 | secure-email.comodo.com |
210.53.147.119 | secure.av-desk.com |
68.223.12.15 | secure.nai.com |
6.31.213.179 | securecomputing.com |
214.107.171.168 | secureme.com |
247.9.23.238 | securitoo.com |
105.180.143.65 | security.symantec.com |
232.243.88.229 | securitycheck.symantec.com |
251.64.115.218 | securitynewsportal.com |
28.221.154.32 | securityrespons.symantec.com |
142.136.18.183 | securityresponse.symantec.com |
13.199.220.91 | securitywonks.net |
221.20.246.80 | secuser.com |
65.178.29.150 | secuser.model-fx.com |
111.92.150.233 | sergiwa.com |
50.156.95.141 | service.mcafee.com |
2.232.121.130 | service1.symantec.com |
207.50.77.117 | servicenews.symantec.com |
65.220.9.12 | sfdoccentral.symantec.com |
3.28.142.176 | shadow.grisoft.cz |
211.105.168.165 | shadu.baidu.com |
244.6.20.235 | shadu.duba.net |
102.177.140.62 | shield.prevx.com |
229.240.85.226 | shop.hauri.co.kr |
248.61.44.215 | shop.pandasecurity.com |
25.150.151.29 | shop.sunbeltsoftware.com |
71.133.15.112 | shop.symantec.com |
10.128.217.88 | shop.trendmicro.com |
218.17.243.77 | shudoo.com |
250.107.26.79 | simplysup.com |
108.89.147.230 | siren24.nprotect.com |
47.85.92.138 | siteadvisor.com |
255.229.118.127 | sitedirector.symantec.com |
32.63.158.198 | smallbiz.symantec.com |
146.45.22.25 | smbstore.trendmicro.com |
16.41.223.1 | smokey-services.eu |
36.118.249.246 | soccersuck.com |
69.19.33.248 | softfaq.com |
115.2.153.143 | softonic.com |
54.253.98.51 | software-files.download.com |
5.74.125.40 | solutions.drweb.com |
38.231.232.110 | sophos.com |
152.214.96.193 | sophos.fr |
91.209.42.101 | sophos1.ucd.ie |
43.30.0.90 | sophos10.ucd.ie |
75.188.107.160 | sophos2.ucd.ie |
189.170.228.55 | sophos5.ucd.ie |
60.166.173.219 | sophos6.ucd.ie |
80.242.131.208 | sophos7.ucd.ie |
113.144.239.23 | sophos8.ucd.ie |
227.126.103.106 | sophos9.ucd.ie |
97.122.48.14 | soporte.pandasecurity.com |
49.199.74.3 | sos.rising.com.cn |
82.100.114.73 | sosvirus.changelog.fr |
196.83.234.156 | spd.atdmt.com |
135.78.179.132 | specs.xmlsoap.org |
86.155.206.121 | speedtest.comodo.com |
119.56.245.123 | spftrl.digitalriver.com |
233.39.109.18 | spyany.com |
104.34.55.182 | spyblocker-software.com |
124.111.81.171 | spybot.info |
156.13.120.241 | spycheck.co.uk |
14.251.53.68 | spycheck.es |
141.247.254.44 | spychecker.com |
93.67.212.33 | spycop.com |
126.225.64.36 | spywaredb.com |
240.139.184.187 | spywaredlls.prevx.com |
178.203.129.95 | spywarefiles.prevx.com |
130.24.87.16 | spywareguide.com |
95.113.127.86 | spywareinfo.com |
209.28.247.169 | spywareterminator.com |
80.91.192.77 | square.bitdefender.com |
99.168.219.66 | static.yoreparo.com |
132.69.2.136 | stats.norton.com |
246.240.122.31 | stdio-labs.blogspot.com |
117.47.68.195 | stiller.com |
69.124.94.184 | store.bitdefender.com |
169.26.133.254 | store.de.bitdefender.com |
215.196.254.81 | store.drweb.com |
154.4.199.245 | store.trendmicro.com |
106.80.225.234 | subs.geekstogo.com |
139.238.9.49 | subwiz.trendmicro.com |
253.152.197.200 | sucop.com |
191.216.74.108 | sun.symantec.com |
143.37.100.97 | sunbelt-software.com |
176.194.208.167 | sunbeltsecurity.com |
34.109.72.250 | sunbeltsoftware.com |
161.172.17.158 | superboy2010.com.au |
180.249.232.147 | superdicas.com.br |
213.82.83.217 | superuser.co.kr |
3.65.203.44 | support.drweb.com |
198.60.149.20 | support.f-secure.com |
150.205.175.9 | support.kaspersky.co |
183.39.214.11 | support.mcafee.com |
40.21.79.162 | support.microsoft.com |
235.17.24.70 | support.pandasecurity.com |
187.161.50.59 | support.rising-global.com |
220.251.90.130 | sybari.com |
78.233.210.213 | sygate.com |
204.229.155.189 | symantec-ese.baynote.net |
224.50.181.178 | symantec.com |
1.207.221.180 | symantecliveupdate.com |
47.190.85.75 | symatec.com |
242.185.30.239 | sysinternals.com |
193.6.57.228 | system-cleaner.comodo.com |
226.163.164.42 | tallemu.com |
84.146.28.125 | taringa.net |
23.141.230.33 | tds.diamondcs.com.au |
231.218.188.22 | tech.pantip.com |
8.120.39.92 | techimo.com |
121.102.160.243 | techspot.com |
248.98.105.151 | techsupportforum.com |
12.174.63.140 | tecniservicioslys.com |
45.76.171.211 | tecno-soft.com |
159.58.35.38 | tempuri.org |
29.54.236.202 | thecomputerpitstop.com |
237.131.6.191 | thejokerx.blogspot.com |
14.32.46.5 | thetechguide.com |
128.15.166.88 | thinkpad.cn |
15.214.59.12 | threatexpert.com |
222.35.86.1 | threatinfo.trendmicro.com |
255.192.125.3 | timeforyourbusi.pandasecurity.com |
113.175.245.154 | timestamp.comodoca.com |
240.170.191.62 | timestamp.wosign.com |
4.247.217.51 | tinysoftware.com |
36.149.0.121 | tms.symantec.com |
150.131.189.204 | together.pctools.com |
21.127.134.180 | tool.ikaka.com |
229.203.92.169 | toonbox.de |
6.105.199.171 | tr.mcafee.com |
120.19.64.67 | trackingtheworld.com |
58.83.9.231 | training.drweb.com |
10.160.223.220 | training.trendmicro.com |
43.61.75.34 | trapware.com |
157.232.195.117 | trendmicro.com |
28.39.140.25 | trendmicro.com.cn |
47.116.167.14 | trendmicro.fr |
80.17.206.84 | trendsecure.com |
194.188.70.235 | trial.trendmicro.com |
65.251.16.143 | trucoswindows.es |
17.72.42.132 | trucoswindows.net |
117.230.81.202 | tw.mcafee.com |
163.144.202.29 | tw.sophos.com |
102.208.147.193 | tw.trendmicro.com |
54.28.173.182 | tweaksforgeeks.com |
87.186.213.252 | u0.eset.com |
201.100.145.148 | u1.eset.com |
139.164.22.56 | u10.eset.com |
91.241.48.45 | u100.eset.com |
124.142.156.115 | u11.eset.com |
238.57.20.198 | u12.eset.com |
109.120.221.106 | u13.eset.com |
128.197.180.95 | u14.eset.com |
161.30.31.165 | u15.eset.com |
207.13.151.248 | u16.eset.com |
146.8.97.224 | u17.eset.com |
98.153.123.213 | u18.eset.com |
130.243.162.215 | u19.eset.com |
244.225.27.110 | u2.eset.com |
183.221.228.18 | u20.eset.com |
135.109.254.7 | u21.eset.com |
168.199.38.77 | u22.eset.com |
26.181.158.161 | u23.eset.com |
152.177.103.137 | u24.eset.com |
172.254.129.126 | u25.eset.com |
205.155.169.128 | u26.eset.com |
251.138.33.23 | u27.eset.com |
190.133.234.187 | u28.eset.com |
141.210.5.176 | u29.eset.com |
174.111.112.246 | u3.eset.com |
32.94.232.73 | u30.eset.com |
227.89.178.237 | u31.eset.com |
111.98.68.158 | u32.eset.com |
143.0.175.228 | u33.eset.com |
1.238.40.123 | u34.eset.com |
128.234.241.31 | u35.eset.com |
148.54.199.20 | u36.eset.com |
181.212.51.90 | u36eset.com |
39.194.171.174 | u37.eset.com |
165.190.116.82 | u37eset.com |
117.11.142.71 | u38.eset.com |
150.168.182.141 | u39.eset.com |
8.151.46.224 | u4.eset.com |
203.146.247.200 | u40.eset.com |
154.223.18.189 | u41.eset.com |
187.124.57.191 | u42.eset.com |
45.107.177.86 | u43.eset.com |
172.102.123.250 | u44.eset.com |
192.179.149.239 | u45.eset.com |
224.81.188.53 | u46.eset.com |
82.63.121.136 | u47.eset.com |
209.59.66.112 | u48.eset.com |
161.135.24.101 | u49.eset.com |
194.37.132.104 | u5.eset.com |
52.207.252.255 | u50.eset.com |
246.15.197.163 | u51.eset.com |
198.92.155.152 | u52.eset.com |
231.249.7.222 | u53.eset.com |
89.164.127.49 | u54.eset.com |
216.227.72.213 | u55.eset.com |
235.48.99.202 | u56.eset.com |
12.205.138.16 | u57.eset.com |
126.120.2.167 | u58.eset.com |
253.183.204.75 | u59.eset.com |
205.4.230.64 | u6.eset.com |
49.162.13.134 | u60.eset.com |
95.76.134.217 | u61.eset.com |
34.140.79.125 | u62.eset.com |
242.216.105.114 | u63.eset.com |
19.118.145.184 | u64.eset.com |
133.32.77.80 | u65.eset.com |
71.96.210.244 | u66.eset.com |
23.173.236.233 | u67.eset.com |
56.74.88.47 | u68.eset.com |
170.245.208.130 | u69.eset.com |
41.52.153.38 | u7.eset.com |
60.129.112.27 | u70.eset.com |
93.218.219.97 | u71.eset.com |
139.201.83.180 | u72.eset.com |
78.196.29.156 | u73.eset.com |
30.85.55.145 | u74.eset.com |
62.175.94.147 | u75.eset.com |
176.157.215.42 | u76.eset.com |
115.153.160.206 | u77.eset.com |
67.41.186.195 | u78.eset.com |
100.131.226.9 | u79.eset.com |
130.29.6.9 | u8.eset.com |
0.25.207.241 | u80.eset.com |
20.102.234.230 | u81.eset.com |
53.3.17.232 | u82.eset.com |
99.242.137.127 | u83.eset.com |
38.237.82.35 | u84.eset.com |
245.58.109.24 | u85.eset.com |
22.215.216.94 | u86.eset.com |
136.198.80.177 | u87.eset.com |
75.194.26.85 | u88.eset.com |
27.14.240.74 | u89.eset.com |
60.172.91.144 | u9.eset.com |
173.154.212.39 | u90.eset.com |
44.150.157.203 | u91.eset.com |
64.226.115.192 | u92.eset.com |
97.128.223.7 | u93.eset.com |
211.110.87.90 | u94.eset.com |
81.106.32.254 | u95.eset.com |
33.183.59.243 | u96.eset.com |
66.84.98.57 | u97.eset.com |
180.67.218.140 | u98.eset.com |
119.62.163.116 | u99.eset.com |
70.139.190.105 | uk.mcafee.com |
103.40.229.107 | uk.trendmicro-europe.com |
217.23.93.2 | uk.trendmicro.com |
88.19.39.166 | ulove.tigolbittys.info |
108.95.65.155 | up.duba.net |
141.253.104.225 | up.rising.com.cn |
254.235.37.52 | up1.nod123.cn |
125.231.238.28 | upd.zonelabs.com |
77.51.196.17 | update.360safe.cn |
110.209.48.20 | update.360safe.com |
224.123.168.171 | update.aladdin.com |
162.187.113.79 | update.authentium.com |
114.8.72.68 | update.avg.com |
147.165.179.138 | update.avgfrance.com |
5.80.43.221 | update.bitdefender.com |
132.143.244.129 | update.drweb.com |
151.220.15.118 | update.ewido.com |
184.121.54.188 | update.grisoft.com |
42.36.174.83 | update.grisoft.cz |
169.100.120.247 | update.hispasec.com |
121.176.146.236 | update.ikaka.com |
222.78.185.50 | update.ikarus-software.at |
11.248.50.133 | update.quickheal.com |
206.56.251.41 | update.rising.com.cn |
158.132.21.30 | update.sophos.com |
191.34.61.101 | update.symantec.com |
49.204.249.252 | update.trendmicro.com |
243.12.126.160 | update7.jiangmin.com |
195.89.153.149 | updatem.360safe.cn |
228.246.4.219 | updatem.360safe.com |
86.161.124.46 | updates.a-2.org |
213.224.69.210 | updates.drweb.com |
164.233.216.131 | updates.f-prot.com |
197.66.67.201 | updates.sald.com |
243.49.187.28 | updates.symantec.com |
182.45.133.4 | updates3.kaspersky-labs.com |
134.189.159.249 | updates4.kaspersky-labs.com |
167.23.198.251 | updates5.kaspersky-labs.com |
24.5.63.146 | upgrade.bitdefender.com |
219.1.8.54 | upgrade1.bitdefender.com |
171.145.34.44 | upgrade2.bitdefender.com |
204.235.74.114 | upgrade3.bitdefender.com |
62.217.194.197 | upgrade4.bitdefender.com |
188.213.139.173 | upload.changelog.fr |
208.34.166.162 | us.bitdefender.com |
241.191.205.164 | us.mcafee.com |
31.174.69.59 | us.trendmicro.com |
226.169.14.223 | usa.kaspersky.com |
177.246.41.212 | usbcleaner.cn |
210.147.148.26 | ushousecall02.trendmicro.com |
68.130.12.109 | utilidades-utiles.com |
7.126.214.17 | v.dreamwiz.com |
215.202.172.6 | v4.windowsupdate.microsoft.com |
248.104.23.76 | v5.windowsupdate.microsoft.com |
105.86.144.227 | vet.com.au |
232.82.89.135 | vicentevirtual.com |
252.158.47.125 | viguard.com |
29.60.155.195 | vil.nai.com |
143.42.19.22 | vil.nail.com |
13.38.220.186 | virobot.co.kr |
221.115.247.175 | virscan.org |
254.16.30.245 | virus.org |
112.255.150.72 | virusbuster.hu |
51.250.95.48 | viruschief.com |
2.71.122.37 | virusdoctor.jp |
35.228.161.39 | virusfreezone.info |
149.211.25.190 | virusinfo.prevx.com |
20.207.227.98 | viruslist.com |
40.27.253.87 | viruslist.ru |
73.185.36.157 | virusscan.jotti.org |
186.167.225.240 | virusscanonline.net |
57.163.170.216 | virusspy.com |
9.239.128.206 | virustotal.com |
42.141.236.208 | visualizesoftware.com |
156.55.100.103 | visualtracking.symantec.com |
94.119.45.11 | vivo-austin.com |
46.196.4.0 | vms.drweb.com |
79.97.111.70 | vncsvr.com |
193.12.231.153 | vos.symantec.com |
64.75.176.61 | vrv.com.cn |
83.152.203.50 | vsantivirus.com |
116.53.242.120 | webadmin.norman.no |
230.224.106.15 | webphand.com |
101.32.52.179 | webroot.com |
53.108.78.168 | wedoantivirus.com |
154.10.117.238 | welkam.co.jp |
199.180.238.65 | wexperts-exchange.com |
138.244.183.229 | whatthetech.com |
90.64.209.219 | wikio.es |
123.222.249.33 | wilderssecurity.com |
237.136.181.184 | wilderssecurity.net |
175.200.58.92 | wildlist.com |
127.21.85.81 | windowsupdate.microsoft.com |
160.178.192.151 | winpatrol.com |
18.93.56.234 | wmcafee.com |
145.156.1.142 | woottonfootball.com |
164.233.216.131 | wtc.trendmicro.com |
197.66.67.201 | ww.emsisoft.com |
243.49.187.28 | www.1stavenuelimousines.co.uk |
182.45.133.4 | www.2xlgames.com |
134.189.159.249 | www.ahnlab.com |
167.23.198.251 | www.aks.com |
24.5.63.146 | www.aladdin.com |
219.1.8.54 | www.anti-trojan-software.net |
171.145.34.44 | www.anti-trojan.net |
204.235.74.114 | www.anti-virus.by |
62.217.194.197 | www.antivir.es |
188.213.139.173 | www.antivirus-tools.com |
208.34.166.162 | www.antiy.net |
241.191.205.164 | www.apsecure.com |
31.174.69.59 | www.arpia.be |
226.169.14.223 | www.authentium.com |
177.246.41.212 | www.authentium.com.au |
158.95.96.230 | www.av-desk.com |
16.78.216.57 | www.avast.com |
211.74.162.221 | www.avg.com |
163.150.120.210 | www.avhide.com |
196.52.227.24 | www.avoncourt.com |
53.34.92.175 | www.avx.ro |
180.30.37.83 | www.barder.com |
200.106.251.72 | www.beautybar.com |
233.8.103.143 | www.bg.virusblokada.com |
91.246.223.226 | www.bit-defender.de |
217.242.168.134 | www.bitdefende.de |
169.63.194.123 | www.bitdefender-es.com |
202.220.234.193 | www.bitdefender.be |
60.203.98.20 | www.bitdefender.cl |
255.198.43.252 | www.bitdefender.co.uk |
206.19.70.241 | www.bitdefender.com |
239.176.109.243 | www.bitdefender.com.au |
97.159.229.138 | www.bitdefender.com.sg |
224.155.175.46 | www.bitdefender.com.tw |
244.231.201.35 | www.bitdefender.com.vn |
21.133.240.105 | www.bitdefender.de |
134.115.173.188 | www.bitdefender.es |
5.111.118.164 | www.bitdefender.fr |
213.187.76.153 | www.bitdefender.hk |
246.89.184.156 | www.bitdefender.us |
104.3.48.51 | www.bitdefenderme.com |
42.67.249.215 | www.briarhurst.com |
250.144.207.204 | www.brightoctober.com |
27.45.59.18 | www.buraka.tv |
141.216.179.101 | www.buscafacil.com |
12.23.124.9 | www.buscalo.in |
31.100.151.254 | www.busco.in |
64.1.190.68 | www.ca.com |
178.172.54.219 | www.cambridge-steiner-school.co.uk |
49.235.0.127 | www.ccssforum.org |
1.56.26.116 | www.celticmerchant.com |
102.214.65.186 | www.clamav.net |
147.128.186.13 | www.collectedcurios.com |
86.192.131.177 | www.comodo.com |
38.12.157.166 | www.comodo.tv |
71.170.197.237 | www.comodoantispam.com |
185.84.129.132 | www.comodopartners.com |
123.148.6.40 | www.computing.net |
75.225.32.29 | www.configurarequipos.com |
108.126.140.99 | www.contentverification.com |
222.41.4.182 | www.deborahshelton.net |
93.104.205.90 | www.dr-bull.com |
112.181.164.79 | www.drweb.com |
145.14.15.149 | www.ealaddin.com |
191.253.135.232 | www.elvis-express.com |
130.249.81.208 | www.emeraldclassic.co.uk |
82.137.107.197 | www.emsisoft.at |
115.227.146.199 | www.emsisoft.com |
228.209.11.94 | www.emsisoft.de |
167.205.212.2 | www.emsisoft.es |
119.93.238.247 | www.emsisoft.fr |
152.183.22.62 | www.emsisoft.it |
10.165.142.145 | www.emsisoft.jp |
136.161.87.121 | www.emsisoft.net |
156.238.113.110 | www.emsisoft.nl |
189.139.153.112 | www.emsisoft.org |
235.122.17.7 | www.engyro.com |
174.117.218.171 | www.entercept.com |
125.194.245.160 | www.esafe.com |
158.95.96.230 | www.eset.es |
16.78.216.57 | www.eugrantsadvisor.com |
211.74.162.221 | www.eugrantsadvisor.de |
163.150.120.210 | www.eugrantsadvisor.ie |
196.52.227.24 | www.eugrantsadvisor.se |
53.34.92.175 | www.exchangeyourcareer.com |
180.30.37.83 | www.f-prot.com |
200.106.251.72 | www.f-secure.com |
233.8.103.143 | www.fimasys.com |
91.246.223.226 | www.flairweddings.co.uk |
217.242.168.134 | www.forospyware.com |
169.63.194.123 | www.fortifed.com |
202.220.234.193 | www.fortiid.com |
60.203.98.20 | www.fortimail.com |
255.198.43.252 | www.fortinet-apac.com |
206.19.70.241 | www.fortinet.ch |
239.176.109.243 | www.fortinet.co.il |
97.159.229.138 | www.fortinet.com |
156.87.107.234 | www.fortinet.net |
176.163.133.223 | www.fortinet.nl |
209.65.172.37 | www.fortinet.sg |
66.47.105.120 | www.fortinetuk.com |
193.43.50.96 | www.freeality.com |
145.119.8.85 | www.freedrweb.ru |
178.21.116.88 | www.freerav.com |
36.191.236.239 | www.frisk-software.com |
230.255.181.147 | www.frisk.is |
182.76.140.136 | www.fsecure.com |
215.233.247.206 | www.garryowen.com |
73.148.111.33 | www.gdata.es |
200.211.56.197 | www.globalhauri.com |
219.32.83.186 | www.gokidding.com |
252.189.122.0 | www.grisoft.com |
110.104.242.151 | www.hackshields.com |
237.168.188.59 | www.hacksoft.com.pe |
189.244.214.48 | www.hacksoft.pe |
34.146.253.118 | www.handwritingforkids.com |
79.60.118.201 | www.hasp.se |
18.124.63.109 | www.hauri.co.kr |
226.200.89.98 | www.hauri.net |
3.102.129.169 | www.hxproduction.com |
117.16.61.64 | www.ibusca.me |
55.80.194.228 | www.ikarus.at |
7.157.220.217 | www.imddomains.co.uk |
40.58.72.31 | www.indielisboa.com |
154.229.192.114 | www.inicioid.com |
25.36.137.22 | www.iniciorapido.info |
44.113.96.11 | www.internationalservicecheck.com |
77.202.203.81 | www.irangoals.com |
123.185.67.164 | www.iseclab.org |
62.181.13.140 | www.ixomodels.com |
14.69.39.129 | www.jiangmin.com |
47.159.78.131 | www.jiangmin.com.cn |
160.141.199.26 | www.jotti.org |
99.137.144.190 | www.kaspersky.com |
51.25.170.179 | www.kioskea.net |
84.115.210.250 | www.latin-mass-society.org |
198.97.74.77 | www.livepcsupport.com |
68.93.19.53 | www.malwarecity.com |
88.170.45.42 | www.malwarecity.fr |
121.71.85.44 | www.mamutu.com |
167.54.205.195 | www.mamutu.de |
106.49.150.103 | www.manchester-offices.co.uk |
57.126.177.92 | www.mcafee.at |
90.27.28.162 | www.mcafee.com |
120.182.64.161 | www.metascan-online.com |
59.178.10.69 | www.microsoft.com |
11.254.224.58 | www.midescargas.com |
44.156.75.128 | www.mountainlakeslodge.com |
157.138.196.23 | www.mtr-design.com |
28.134.141.187 | www.mygeekside.com |
48.210.99.177 | www.netegrity.com |
81.112.207.247 | www.norman.com |
195.95.71.74 | www.nottinghampoetryseries.com |
65.90.16.238 | www.novirusthanks.org |
17.167.43.227 | www.npin.co.kr |
50.68.82.41 | www.nprotect.co.kr |
164.51.202.124 | www.nprotect.com |
103.46.147.100 | www.nprotect.com.br |
55.123.174.89 | www.nsclean.com |
87.24.213.91 | www.owen.org |
201.7.77.242 | www.pandasecurity.com |
72.3.23.150 | www.pctools.com |
92.79.49.139 | www.peterhearnwaste.co.uk |
125.237.88.209 | www.phoenixtrikeworks.com |
238.219.21.36 | www.prdouglas.co.uk |
109.215.222.12 | www.prevx.com |
61.35.180.2 | www.prevx1.com |
94.193.32.4 | www.professorbeyer.com |
208.108.152.155 | www.quickheal.com |
146.171.97.63 | www.removetrojanvirus.org |
98.248.56.52 | www.renningers.com |
131.149.163.122 | www.residentphotography.com |
245.64.27.205 | www.retento.com |
116.127.228.113 | www.reviewsofbooks.com |
136.204.255.102 | www.rising-global.com |
168.105.38.172 | www.risingav.com.au |
26.20.158.67 | www.safenet-inc.com |
153.84.104.231 | www.scan4you.net |
105.160.130.220 | www.seasonsecurity.com |
206.62.169.34 | www.secondchanceboxer.com |
251.232.34.117 | www.secure-elements.com |
190.40.235.25 | www.sheffieldmind.co.uk |
142.116.5.15 | www.smf.org |
175.18.45.85 | www.softfaq.com |
33.189.233.236 | www.sophos.com |
227.252.110.144 | www.spycheck.co.uk |
179.73.137.133 | www.spycheck.es |
212.230.244.203 | www.stadiumpage.com |
70.145.108.30 | www.sunbeltsoftware.com |
197.208.53.194 | www.symantec.com |
217.29.12.183 | www.sysinternals.com |
249.118.119.253 | www.tecniservicioslys.com |
39.101.239.80 | www.testmypcsecurity.com |
234.97.185.56 | www.threatexpert.com |
186.241.211.45 | www.tomorrowsedge.net |
219.75.250.47 | www.trendmicro.com |
76.57.115.198 | www.trojaner.info |
15.53.60.106 | www.trustix.com |
223.197.86.96 | www.trustlogo.com |
0.31.126.166 | www.vba.com.by |
114.14.246.249 | www.virscan.org |
240.9.191.225 | www.virus.fi |
4.86.218.214 | www.virus.org |
37.243.1.216 | www.virusbuster.hu |
15.158.53.43 | www.viruschief.com |
210.153.255.207 | www.virusfreezone.info |
162.230.25.196 | www.virustotal.com |
194.131.132.10 | www.wellgousa.com |
52.114.252.93 | www.whichssl.com |
247.110.198.1 | www.willsee.com |
199.186.156.246 | www.xmlsoap.org |
232.88.7.60 | www.zarya.info |
89.70.128.211 | www1.my-etrust.com |
216.66.73.119 | www3.ca.com |
236.142.31.109 | www3.safenet-inc.com |
13.44.139.179 | www4.symantec.com |
127.27.3.6 | wwws.clamav.net |
253.22.204.170 | x-cleaner.com |
205.99.231.159 | x.360safe.com |
238.0.14.229 | yoreparo.com |
96.239.134.56 | z-oleg.com |
35.234.80.32 | zeustracker.abuse.ch |
243.55.106.21 | zeylstra.nl |
19.212.145.23 | zhidao.baidu.com |
133.195.9.174 | zhidao.ikaka.com |
4.191.211.82 | ziggamza.net |
24.11.237.71 | zonavirus.com |
57.169.20.141 | zonealarm.com |
170.151.209.224 | zonelabs.com |
41.147.154.200 | zonelabs.fr |
249.223.112.190 | zonelog.co.uk |
26.125.220.192 | zs.kingsoft.com |
140.40.84.87 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts): 127.0.0.1 localhost
- Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 18820 | 18944 | 3.67348 | 1aa21003dc8301a2debeb24c39fa3928 |
.data | 24576 | 64 | 512 | 0.164757 | ae66b7a5737b95c371f0aa02bd0e8db7 |
.rdata | 28672 | 1344 | 1536 | 3.16025 | 900acb6d17b0068bce6ed4e19df6ad57 |
.bss | 32768 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
.idata | 36864 | 860 | 1024 | 2.60187 | 67cf174a5a8698001223af9bab64dd7c |
.rsrc | 40960 | 87232 | 87552 | 5.54136 | b1e9b27efb0a643504f786b878d79a63 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://widgets.amung.us/small/00/44.png | 173.192.200.70 |
hxxp://cdn3.iconfinder.com/static/cae879b830d3e826c649c3bac797a9ec/assets/fonts/Bariol/bariol_bold-webfont.eot? | 205.234.175.175 |
hxxp://cdn2.iconfinder.com/static/66214acbf85a96dcfe0dba9a8103f0e5/assets/fonts/Bariol/bariol_thin-webfont.eot? | 205.234.175.175 |
hxxp://www.buscaid.com/iconfinder.css | 212.250.160.240 |
hxxp://whos.amung.us/swidget/26n2qf7pnk0x | 67.202.94.93 |
hxxp://whos.amung.us/swidget/243dr2pd8x85 | 67.202.94.93 |
hxxp://cdn3.iconfinder.com/static/34e7d4088171083e80067fddb9546644/assets/fonts/Bariol/bariol_light-webfont.eot? | 205.234.175.175 |
hxxp://qc576vr961du5156h294o612y5e36j.ipcheker.com/ | 199.59.243.120 |
hxxp://4f2t6rh9p9310ec75jc1wf65tu526y.ipcheker.com/ | 199.59.243.120 |
hxxp://cdn0.iconfinder.com/static/8634111c430e96728cfc4b5479de93e2/assets/img/blog/flat-icons/4/message-top.png | 205.234.175.175 |
hxxp://cdn0.iconfinder.com/static/838c1ff91b646f8cdee529fd9f02c1dd/assets/fonts/Agenda/agendalight-webfont.eot? | 205.234.175.175 |
hxxp://www.buscaid.com/?adf | 212.250.160.240 |
hxxp://cdn0.iconfinder.com/static/4e9a074acfe29ddb22561e5ec0e8a755/assets/fonts/Bariol/bariol_regular-webfont.eot? | 205.234.175.175 |
hxxp://cdn1.iconfinder.com/static/a998a3cd06a9b50682dc582393c423a0/assets/fonts/Agenda/agendabold-webfont.eot? | 205.234.175.175 |
hxxp://www.buscaid.com/ojo_buscador_logo.jpg | 212.250.160.240 |
hxxp://widgets.amung.us/small/00/12.png | 173.192.200.70 |
hxxp://cdn1.iconfinder.com/static/1f64bd2a5a284b059e1b46d49b80d07d/assets/fonts/Agenda/agendamedium-webfont.eot? | 205.234.175.175 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Map
The Trojan connects to the servers at the folowing location(s):