Gen.Variant.Symmi.2478_28b840e798

by malwarelabrobot on August 1st, 2016 in Malware Descriptions.

Trojan.Win32.Fsysna.dqtl (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, WormAutorun


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 28b840e7983b65a9933532f512a4480d
SHA1: e6622186f9e05f96171fe6ecd4ccb7a3463c12f9
SHA256: b64ed221860651ed9fbed9dfab0bc7bc83d02b6a78b36d3b585e51dce89bc41f
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 5117104 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: Cortado AG
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour Description
WormAutorun A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.


Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):
No processes have been created.

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

No files have been created.

Registry activity

Dropped PE files

MD5 File path
502b2f50da14512b237657c411a6f828 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif
aabe271ff61147d5cdd8da88c2f7e285 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif
e07f48cd1f5b11ff6afe88055b417a16 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif
3c999036703fb5a07e2cce0c716b03dc c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif
2f7058f099eee250e96d26af65ea4cfc c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2011-Single@320][TJ].mp3.pif

HOSTS file anomalies

The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 61650 bytes in size. The following strings are added to the hosts file listed below:

173.224.216.58 viabcp.com
173.224.216.58 www.viabcp.com
173.224.216.58 ww2.viabcp.com
173.224.216.58 bcpzonasegura.viabcp.com
173.224.216.58 hotmail.com
173.224.216.58 www.hotmail.com
47.115.166.81 13iii.com
80.17.205.83 15660808.co.kr
193.255.70.234 2-spyware.com
64.251.15.142 247fixes.com
84.71.41.131 360.cn
117.229.81.202 360.com
231.211.13.29 360safe.cn
101.207.214.5 360safe.com
53.28.172.250 45pounds.com
86.185.24.252 51nb.com
200.100.144.147 9down.com
139.163.89.55 a-2.org
90.240.48.44 a188.x.akamai.net
123.141.155.114 abuse.ch
237.56.19.197 acs.pandasoftware.com
108.120.221.105 ad-aware-se.uptodown.com
128.196.247.94 ad.fastclick.net
161.98.30.164 ads.fastclick.net
18.12.151.59 agfirewall.ru
145.76.96.223 agnitum.com
97.152.122.212 agnitum.de
198.54.162.27 agnitum.fr
244.224.26.110 agnitum.ru
182.32.227.18 ahn.com.cn
134.109.253.7 ahnlab.com
167.10.37.77 akamai.net
25.181.225.228 aknow.prevx.com
220.244.102.136 aladdin.com
171.65.129.125 alert.rising.com.cn
204.222.236.195 alerta-antivirus.inteco.es
62.137.100.22 alerta-antivirus.red.es
189.201.46.186 alladdin.ru
209.21.4.175 aluriasoftware.com
242.111.111.245 analysis.seclab.tuwien.ac.at
31.93.232.72 andymanchesta.com
226.89.177.48 anti-virus-software-review.com
178.233.203.37 anti-virus.by
211.67.243.40 anti-virus.com
69.49.107.191 antirootkit.com
7.45.52.99 antispam.sunbeltsoftware.com
215.190.78.88 antispy.ru
248.23.118.158 antispyware.sunbeltsoftware.com
106.6.238.241 antivir.es
233.1.183.217 antiviraldp.com
252.78.210.206 antivirus-online.de
29.235.249.208 antivirus-tools.com
75.218.113.103 antivirus.about.com
14.214.59.11 antivirus.cai.com
222.34.85.0 antivirus.comodo.com
255.192.192.70 antivirus.hispavista.com
112.174.57.153 antivirus.sunbeltsoftware.com
51.170.2.61 antiy.net
3.246.216.50 anubis.iseclab.org
36.148.68.121 apac.trendmicro.com
150.130.188.16 ar.answers.yahoo.com
20.126.133.180 ar.atwola.com
40.203.92.169 arcabit.com
73.104.199.239 arcabit.pl
187.87.63.66 archive.bitdefender.com
58.82.8.230 arswp.com
9.159.35.219 arwww.fortinet.cz
42.60.74.33 asap.authentium.com
156.43.194.116 ashampoo.com
95.39.140.92 atazita.blogspot.com
47.115.166.81 atdmt.com
80.17.205.83 attechnical.com
193.255.70.234 atwola.com
64.251.15.142 au.mcafee.com
84.71.41.131 auditmypc.com
117.229.81.202 authentium.com
231.211.13.29 auwww.ealaddin.nl
101.207.214.5 avast-home.uptodown.com
53.28.172.250 avast.com
86.185.24.252 avast.ru
200.100.144.147 avg-antivirus.net
139.163.89.55 avg.com
90.240.48.44 avg.vo.llnwd.net
123.141.155.114 avgate.net
237.56.19.197 avgfrance.com
108.120.221.105 avhide.com
128.196.247.94 avira.com
161.98.30.164 avp.ch
18.12.151.59 avp.com
145.76.96.223 avp.ru
97.152.122.212 avpclub.ddns.info
198.54.162.27 avu.zonelabs.com
244.224.26.110 avx.rob-have.net
182.32.227.18 awaps.net
134.109.253.7 b-have.orgbitdefender-ar.com
167.10.37.77 babooforum.com.br
25.181.225.228 backup.comodo.com
220.244.102.136 baike.360.cn
171.65.129.125 baike.360.com
204.222.236.195 bakunos.com
62.137.100.22 banner.fastclick.net
189.201.46.186 banners.fastclick.net
209.21.4.175 baristamagazine.com
242.111.111.245 basetendencies.com
31.93.232.72 bbs.360.cn
226.89.177.48 bbs.360safe.cn
178.233.203.37 bbs.360safe.com
211.67.243.40 bbs.cfan.com.cn
69.49.107.191 bbs.cpcw.com
7.45.52.99 bbs.dswlab.com
215.190.78.88 bbs.duba.net
248.23.118.158 bbs.ikaka.com
106.6.238.241 bbs.janmeng.com
233.1.183.217 bbs.kafan.cn
252.78.210.206 bbs.kafan.com
29.235.249.208 bbs.kaspersky.com.cn
75.218.113.103 bbs.kpfans.com
14.214.59.11 bbs.mcafeefans.com
222.34.85.0 bbs.s-sos.net
255.192.192.70 bbs.sucop.com
112.174.57.153 bbs.taisha.org
51.170.2.61 bbs.trendmicro.com.cn
3.246.216.50 bbs.winzheng.com
36.148.68.121 bestofewan.com
150.130.188.16 beta.anti-virus.by
20.126.133.180 bg.virusblokada.com
40.203.92.169 bhsbees.com
73.104.199.239 bitcity.info
187.87.63.66 bitcity.org
58.82.8.230 bitdefender.co.uk
9.159.35.219 bitdefender.com
42.60.74.33 bitdefender.com.ua
156.43.194.116 bitdefender.es
95.39.140.92 bitdefender.org
47.115.166.81 bitdefender.secyber.net
80.17.205.83 bitdefenderchina.com
193.255.70.234 bitdefenderguatemala.com
64.251.15.142 bitdefendermalaysia.com
84.71.41.131 bitdefendertaiwan.com
117.229.81.202 bitdefenderuruguay.com
231.211.13.29 bitdefenderusa.com
101.207.214.5 biz.nprotect.com
53.28.172.250 bkav.com.vn
86.185.24.252 blackice.iss.net
200.100.144.147 bleedingthreats.net
139.163.89.55 bleepingcomputer.com
90.240.48.44 blitzblank.com
123.141.155.114 blog.hispasec.com
237.56.19.197 blog.threatfire.com
108.120.221.105 blog.titanium-jewelry.com
128.196.247.94 blog.trendmicro.com
161.98.30.164 blogs.icerocket.com
18.12.151.59 blogs.protegerse.com
145.76.96.223 blogschapines.com
97.152.122.212 boardreader.com
198.54.162.27 bobbondart.com
244.224.26.110 br.mcafee.com
182.32.227.18 br.trendmicro.com
134.109.253.7 brazil.kaspersky.com
167.10.37.77 buddy.bitdefender.com
25.181.225.228 bugs.clamav.net
220.244.102.136 buscafacil.com
171.65.129.125 buscalo.in
204.222.236.195 busco.in
62.137.100.22 buy.bitdefender-es.com
189.201.46.186 buy.bitdefender.com
209.21.4.175 buy.bitdefender.de
242.111.111.245 buy.drweb.com
31.93.232.72 buy.rising.com.cn
226.89.177.48 ca.com
178.233.203.37 cacomvip.ca.com
211.67.243.40 cai.com
69.49.107.191 canada.karuna-shechen.org
7.45.52.99 castlecops.com
215.190.78.88 castlecrops.com
248.23.118.158 ccslaughterspdx.com
106.6.238.241 cddchiangmai.net
233.1.183.217 cdn.atwola.com
252.78.210.206 center.rising.com.cn
29.235.249.208 centralcommand.com
75.218.113.103 cert.org
14.214.59.11 cfan.com.cn
222.34.85.0 cgi.clamav.net
255.192.192.70 changedetection.com
112.174.57.221 changelog.fr
119.238.70.129 channelpartner.trendmicro.com
71.58.28.118 chickensroamfree.com
104.216.136.189 chkrootkit.org
218.198.0.84 chollian.nprotect.co.kr
88.194.201.248 cisrt.org
108.15.159.237 cit.kookmin.ac.kr
141.172.11.51 clamav.net
255.155.131.134 clamwin.com
126.150.76.42 click.atdmt.com
77.227.103.31 clicks.atdmt.com
110.128.142.101 cloudprotection.pandasecurity.com
224.111.6.184 clubic.com
163.107.208.160 cmmings.cn
115.183.234.149 cn.mcafee.com
148.85.17.151 cn.sophos.com
5.67.138.46 cn.trendmicro.com
132.63.83.210 codehard.wordpress.com
152.139.109.199 cohartuk.com
185.41.149.14 commentcamarche.net
43.23.81.97 community.thaiware.com
169.19.26.73 comodo.com
121.96.240.62 company.drweb.com
154.253.92.64 company.hauri.co.kr
12.168.212.215 company.hauri.net
207.231.157.123 computing.net
158.52.116.112 comunidad.wilkinsonpc.com.co
191.209.223.182 configurarequipos.com
49.124.87.9 coresecurity.com
176.187.33.173 cou85.com
196.8.59.162 cowsmo.com
229.166.98.232 cpsecure.com
86.80.219.127 csc.rising.com.cn
213.144.164.35 cureit.ru
165.220.190.24 customer.symantec.com
10.122.230.95 customers.drweb.com
56.36.94.178 cutlines.org
250.100.39.86 cwsandbox.org
202.177.65.75 cybercrime.pandasecurity.com
235.78.105.145 cyberdefender.com
93.249.37.40 cybertechhelp.com
32.56.170.204 daboweb.com
239.133.197.193 daniloff.net
16.34.48.7 daniweb.com
130.205.168.90 darkclockers.com
1.12.114.254 dazhizhu.cn
21.89.72.243 de.bitdefender.com
54.179.179.57 de.mcafee.com
99.161.44.140 de.trendmicro.com
38.157.245.116 deckard.geekstogo.com
246.45.15.105 deerfield.com
23.135.55.108 defalcos.com
137.117.175.3 definitions.symantec.com
75.113.120.167 dell.symantec.com
27.2.146.156 demos.eset.es
60.91.186.226 descargas.eset.es
174.74.50.53 dev.depeuter.org
45.69.251.29 developmentdrums.org
64.146.22.18 dialognauka.ru
97.47.61.20 diamondcs.com.au
143.30.181.171 dicasweb.com.br
82.26.127.79 discussions.virtualdr.com
34.102.153.68 disk-encryption.comodo.com
67.4.4.138 dl.360safe.com
180.242.125.221 dl1.antivir-pe.com
119.238.70.129 dl1.antivir-pe.de
71.58.28.118 dl1.antivir.de
104.216.136.189 dl1.avgate.net
218.198.0.84 dl10.freeav.net
88.194.201.248 dl2.antivir-pe.com
108.15.159.237 dl2.antivir-pe.de
141.172.11.51 dl2.antivir.de
255.155.131.134 dl2.avgate.net
126.150.76.42 dl3.antivir-pe.de
77.227.103.31 dl3.antivir.de
110.128.142.101 dl3.avgate.net
224.111.6.184 dl4.antivir-pe.com
163.107.208.160 dl4.antivir-pe.de
115.183.234.149 dl4.antivir.de
148.85.17.151 dl4.avgate.net
5.67.138.46 dl5.avgate.net
132.63.83.210 dl6.avgate.net
152.139.109.199 dl7.avgate.net
185.41.149.14 dl8.avgate.net
43.23.81.97 dl8.freeav.net
169.19.26.73 dl9.avgate.net
121.96.240.62 dl9.freeav.net
154.253.92.64 dnl-cd1.kaspersky-labs.com
12.168.212.215 dnl-cd10.kaspersky-labs.com
207.231.157.123 dnl-cd11.kaspersky-labs.com
158.52.116.112 dnl-cd12.kaspersky-labs.com
191.209.223.182 dnl-cd13.kaspersky-labs.com
49.124.87.9 dnl-cd2.kaspersky-labs.com
176.187.33.173 dnl-cd3.kaspersky-labs.com
196.8.59.162 dnl-cd4.kaspersky-labs.com
229.166.98.232 dnl-cd5.kaspersky-labs.com
86.80.219.127 dnl-cd6.kaspersky-labs.com
213.144.164.35 dnl-cd7.kaspersky-labs.com
165.220.190.24 dnl-cd8.kaspersky-labs.com
10.122.230.95 dnl-cd9.kaspersky-labs.com
56.36.94.178 dnl-cn1.kaspersky-labs.com
250.100.39.86 dnl-cn10.kaspersky-labs.com
202.177.65.75 dnl-cn11.kaspersky-labs.com
235.78.105.145 dnl-cn12.kaspersky-labs.com
93.249.37.40 dnl-cn13.kaspersky-labs.com
32.56.170.204 dnl-cn14.kaspersky-labs.com
239.133.197.193 dnl-cn15.kaspersky-labs.com
16.34.48.7 dnl-cn2.kaspersky-labs.com
130.205.168.90 dnl-cn3.kaspersky-labs.com
1.12.114.254 dnl-cn4.kaspersky-labs.com
21.89.72.243 dnl-cn5.kaspersky-labs.com
54.179.179.57 dnl-cn6.kaspersky-labs.com
99.161.44.140 dnl-cn7.kaspersky-labs.com
38.157.245.116 dnl-cn8.kaspersky-labs.com
246.45.15.105 dnl-cn9.kaspersky-labs.com
23.135.55.108 dnl-eu1.kaspersky-labs.com
137.117.175.3 dnl-eu10.kaspersky-labs.com
75.113.120.167 dnl-eu11.kaspersky-labs.com
27.2.146.156 dnl-eu12.kaspersky-labs.com
60.91.186.226 dnl-eu13.kaspersky-labs.com
174.74.50.53 dnl-eu14.kaspersky-labs.com
45.69.251.29 dnl-eu15.kaspersky-labs.com
64.146.22.18 dnl-eu2.kaspersky-labs.com
97.47.61.20 dnl-eu3.kaspersky-labs.com
143.30.181.171 dnl-eu4.kaspersky-labs.com
82.26.127.79 dnl-eu5.kaspersky-labs.com
34.102.153.68 dnl-eu6.kaspersky-labs.com
67.4.4.138 dnl-eu7.kaspersky-labs.com
180.242.125.221 dnl-eu8.kaspersky-labs.com
119.238.70.129 dnl-eu9.kaspersky-labs.com
71.58.28.118 dnl-jp1.kaspersky-labs.com
104.216.136.189 dnl-jp10.kaspersky-labs.com
218.198.0.84 dnl-jp11.kaspersky-labs.com
88.194.201.248 dnl-jp12.kaspersky-labs.com
108.15.159.237 dnl-jp13.kaspersky-labs.com
141.172.11.51 dnl-jp14.kaspersky-labs.com
255.155.131.134 dnl-jp15.kaspersky-labs.com
126.150.76.42 dnl-jp2.kaspersky-labs.com
77.227.103.31 dnl-jp3.kaspersky-labs.com
110.128.142.101 dnl-jp4.kaspersky-labs.com
224.111.6.184 dnl-jp5.kaspersky-labs.com
163.107.208.160 dnl-jp6.kaspersky-labs.com
115.183.234.149 dnl-jp7.kaspersky-labs.com
148.85.17.151 dnl-jp8.kaspersky-labs.com
5.67.138.46 dnl-jp9.kaspersky-labs.com
132.63.83.210 dnl-kr1.kaspersky-labs.com
152.139.109.199 dnl-kr10.kaspersky-labs.com
185.41.149.14 dnl-kr11.kaspersky-labs.com
43.23.81.97 dnl-kr12.kaspersky-labs.com
169.19.26.73 dnl-kr13.kaspersky-labs.com
121.96.240.62 dnl-kr15.kaspersky-labs.com
154.253.92.64 dnl-kr2.kaspersky-labs.com
12.168.212.215 dnl-kr3.kaspersky-labs.com
207.231.157.123 dnl-kr4.kaspersky-labs.com
158.52.116.112 dnl-kr5.kaspersky-labs.com
191.209.223.182 dnl-kr6.kaspersky-labs.com
49.124.87.9 dnl-kr7.kaspersky-labs.com
176.187.33.173 dnl-kr8.kaspersky-labs.com
196.8.59.162 dnl-kr9.kaspersky-labs.com
229.166.98.232 dnl-ru1.kaspersky-labs.com
138.132.15.179 dnl-ru10.kaspersky-labs.com
9.196.216.87 dnl-ru11.kaspersky-labs.com
217.16.242.77 dnl-ru12.kaspersky-labs.com
62.174.26.147 dnl-ru13.kaspersky-labs.com
108.88.146.230 dnl-ru14.kaspersky-labs.com
46.152.91.138 dnl-ru15.kaspersky-labs.com
254.229.118.127 dnl-ru2.kaspersky-labs.com
31.130.157.197 dnl-ru3.kaspersky-labs.com
145.45.89.92 dnl-ru4.kaspersky-labs.com
84.108.222.0 dnl-ru5.kaspersky-labs.com
35.185.249.245 dnl-ru6.kaspersky-labs.com
68.86.100.59 dnl-ru7.kaspersky-labs.com
182.1.220.142 dnl-ru8.kaspersky-labs.com
53.65.166.50 dnl-ru9.kaspersky-labs.com
73.141.124.39 dnl-us1.kaspersky-labs.com
106.231.231.109 dnl-us10.kaspersky-labs.com
151.213.96.192 dnl-us11.kaspersky-labs.com
90.209.41.168 dnl-us12.kaspersky-labs.com
42.97.67.158 dnl-us13.kaspersky-labs.com
75.187.107.160 dnl-us14.kaspersky-labs.com
189.169.227.55 dnl-us15.kaspersky-labs.com
127.165.172.219 dnl-us2.kaspersky-labs.com
79.54.199.208 dnl-us3.kaspersky-labs.com
112.143.238.22 dnl-us4.kaspersky-labs.com
226.126.102.105 dnl-us5.kaspersky-labs.com
97.121.47.81 dnl-us6.kaspersky-labs.com
116.198.74.70 dnl-us7.kaspersky-labs.com
149.99.113.72 dnl-us8.kaspersky-labs.com
195.82.233.223 dnl-us9.kaspersky-labs.com
134.78.179.131 dougknox.com
86.154.205.120 down.360safe.cn
119.56.56.190 down.360safe.com
232.38.177.17 download.avg.com
171.34.122.181 download.bleepingcomputer.com
123.110.80.171 download.com
156.12.188.241 download.com.vn
14.250.52.136 download.eset.com
140.246.253.44 download.f-secure.com
160.67.212.33 download.mcafee.com
193.224.63.103 download.microsoft.com
51.207.183.186 download.microsoft.comguru0.grisoft.cz
178.202.128.94 download.nai.com
129.23.155.83 download.norman.no
162.180.194.153 download.rising.com.cn
20.163.58.236 download.softpedia.com
215.159.4.212 download.sysinternals.com
167.235.30.201 download0.avast.com
200.137.69.203 download1.avast.com
57.119.190.98 download1.emsisoft.com
184.115.135.6 download1.quickheal.com
204.191.161.252 download10.quickheal.com
237.93.201.66 download100.avast.com
95.75.133.149 download1us.softpedia.com
221.71.78.125 download2.avast.com
173.148.37.114 download2.quickheal.com
206.49.144.116 download200.avast.com
64.220.8.11 download201.avast.com
3.27.209.175 download202.avast.com
210.104.168.164 download203.avast.com
243.5.19.234 download204.avast.com
101.176.139.61 download205.avast.com
228.240.85.225 download206.avast.com
248.60.111.214 download207.avast.com
25.218.150.28 download208.avast.com
138.132.15.179 download209.avast.com
9.196.216.87 download210.avast.com
217.16.242.77 download211.avast.com
62.174.26.147 download212.avast.com
108.88.146.230 download213.avast.com
46.152.91.138 download214.avast.com
254.229.118.127 download3.avast.com
31.130.157.197 download3.quickheal.com
145.45.89.92 download4.avast.com
84.108.222.0 download4.emsisoft.com
35.185.249.245 download4.quickheal.com
68.86.100.59 download5.avast.com
182.1.220.142 download5.emsisoft.com
53.65.166.50 download5.quickheal.com
73.141.124.39 download501.avast.com
106.231.231.109 download502.avast.com
151.213.96.192 download503.avast.com
90.209.41.168 download504.avast.com
42.97.67.158 download505.avast.com
75.187.107.160 download511.avast.com
189.169.227.55 download512.avast.com
127.165.172.219 download513.avast.com
79.54.199.208 download514.avast.com
112.143.238.22 download515.avast.com
226.126.102.105 download516.avast.com
97.121.47.81 download535.avast.com
116.198.74.70 download6.avast.com
149.99.113.72 download6.quickheal.com
195.82.233.223 download600.avast.com
134.78.179.131 download601.avast.com
86.154.205.120 download602.avast.com
119.56.56.190 download603.avast.com
232.38.177.17 download604.avast.com
171.34.122.181 download605.avast.com
123.110.80.171 download606.avast.com
156.12.188.241 download607.avast.com
14.250.52.136 download608.avast.com
140.246.253.44 download609.avast.com
160.67.212.33 download617.avast.com
193.224.63.103 download618.avast.com
51.207.183.186 download619.avast.com
178.202.128.94 download620.avast.com
129.23.155.83 download621.avast.com
162.180.194.153 download622.avast.com
20.163.58.236 download623.avast.com
215.159.4.212 download624.avast.com
167.235.30.201 download625.avast.com
200.137.69.203 download626.avast.com
57.119.190.98 download627.avast.com
184.115.135.6 download628.avast.com
204.191.161.252 download629.avast.com
237.93.201.66 download630.avast.com
95.75.133.149 download631.avast.com
221.71.78.125 download632.avast.com
173.148.37.114 download633.avast.com
206.49.144.116 download634.avast.com
64.220.8.11 download635.avast.com
3.27.209.175 download636.avast.com
210.104.168.164 download637.avast.com
243.5.19.234 download638.avast.com
101.176.139.61 download639.avast.com
228.240.85.225 download640.avast.com
248.60.111.214 download641.avast.com
25.218.150.28 download642.avast.com
138.132.15.179 download643.avast.com
9.196.216.87 download644.avast.com
217.16.242.77 download645.avast.com
62.174.26.147 download646.avast.com
108.88.146.230 download647.avast.com
46.152.91.138 download648.avast.com
254.229.118.127 download649.avast.com
31.130.157.197 download650.avast.com
145.45.89.92 download651.avast.com
84.108.222.0 download652.avast.com
35.185.249.245 download653.avast.com
68.86.100.59 download654.avast.com
182.1.220.142 download655.avast.com
53.65.166.50 download656.avast.com
73.141.124.39 download658.avast.com
106.231.231.109 download659.avast.com
151.213.96.192 download660.avast.com
90.209.41.168 download661.avast.com
42.97.67.158 download662.avast.com
75.187.107.160 download663.avast.com
189.169.227.55 download664.avast.com
127.165.172.219 download665.avast.com
79.54.199.208 download666.avast.com
112.143.238.22 download667.avast.com
226.126.102.105 download668.avast.com
97.121.47.81 download669.avast.com
116.198.74.70 download670.avast.com
149.99.113.72 download671.avast.com
195.82.233.223 download672.avast.com
202.146.247.199 download673.avast.com
154.222.17.188 download674.avast.com
187.124.124.2 download675.avast.com
44.106.245.85 download676.avast.com
239.102.190.249 download677.avast.com
191.178.148.238 download678.avast.com
224.80.0.53 download679.avast.com
82.62.120.204 download680.avast.com
208.58.65.112 download681.avast.com
228.135.24.101 download682.avast.com
5.36.131.171 download683.avast.com
119.19.251.254 download684.avast.com
246.14.196.162 download685.avast.com
197.91.223.151 download686.avast.com
230.248.6.221 download687.avast.com
88.231.126.48 download688.avast.com
27.227.72.24 download689.avast.com
235.47.98.13 download690.avast.com
12.205.137.15 download691.avast.com
125.187.2.166 download692.avast.com
252.183.203.74 download693.avast.com
16.3.229.63 download694.avast.com
49.161.13.134 download695.avast.com
163.143.201.217 download696.avast.com
33.139.146.193 download697.avast.com
241.216.105.182 download698.avast.com
18.117.212.184 download699.avast.com
132.32.76.79 download7.avast.com
71.95.21.243 download7.quickheal.com
22.172.236.232 download700.avast.com
55.73.87.46 download701.avast.com
169.244.207.129 download702.avast.com
40.52.153.37 download703.avast.com
60.128.179.26 download704.avast.com
93.30.218.96 download705.avast.com
206.200.83.247 download706.avast.com
77.8.28.155 download707.avast.com
29.84.54.144 download708.avast.com
130.242.94.215 download709.avast.com
176.156.214.42 download72.avast.com
114.220.159.206 download73.avast.com
66.41.186.195 download74.avast.com
99.198.225.9 download75.avast.com
213.113.157.160 download76.avast.com
152.176.34.68 download77.avast.com
103.253.61.57 download78.avast.com
136.154.168.127 download79.avast.com
250.69.32.210 download8.quickheal.com
121.133.234.118 download80.avast.com
141.209.192.107 download81.avast.com
174.43.43.177 download82.avast.com
219.25.164.4 download83.avast.com
158.21.109.236 download84.avast.com
110.165.135.225 download85.avast.com
143.255.175.228 download9.quickheal.com
1.237.39.123 download900.avast.com
195.233.240.31 download901.avast.com
147.122.11.20 download902.avast.com
180.211.50.90 download903.avast.com
38.194.170.173 download904.avast.com
165.189.115.149 download905.avast.com
184.10.142.138 download906.avast.com
217.167.181.140 download907.avast.com
7.150.45.35 download908.avast.com
202.146.247.199 download909.avast.com
154.222.17.188 download91.avast.com
187.124.124.2 download910.avast.com
44.106.245.85 download911.avast.com
239.102.190.249 download912.avast.com
191.178.148.238 download913.avast.com
224.80.0.53 download914.avast.com
82.62.120.204 download915.avast.com
208.58.65.112 download916.avast.com
228.135.24.101 download917.avast.com
5.36.131.171 download918.avast.com
119.19.251.254 download919.avast.com
246.14.196.162 download92.avast.com
197.91.223.151 download920.avast.com
230.248.6.221 download921.avast.com
88.231.126.48 download922.avast.com
27.227.72.24 download923.avast.com
235.47.98.13 download924.avast.com
12.205.137.15 download925.avast.com
125.187.2.166 download926.avast.com
252.183.203.74 download927.avast.com
16.3.229.63 download928.avast.com
49.161.13.134 download929.avast.com
163.143.201.217 download93.avast.com
33.139.146.193 download930.avast.com
241.44.188.10 download931.avast.com
102.201.40.12 download932.avast.com
216.116.160.163 download933.avast.com
155.179.105.71 download934.avast.com
106.0.64.60 download935.avast.com
139.157.171.130 download936.avast.com
253.72.35.213 download937.avast.com
124.135.237.121 download938.avast.com
144.212.7.110 download939.avast.com
176.114.46.180 download94.avast.com
34.28.167.75 download940.avast.com
161.92.112.239 download941.avast.com
113.168.138.228 download942.avast.com
214.70.178.42 download943.avast.com
4.240.42.126 download944.avast.com
198.48.243.34 download945.avast.com
150.125.13.23 download946.avast.com
183.26.53.93 download947.avast.com
41.197.241.244 download948.avast.com
236.4.118.152 download949.avast.com
187.81.145.141 download95.avast.com
220.238.252.211 download950.avast.com
78.153.116.38 download951.avast.com
205.216.62.202 download952.avast.com
225.37.20.191 download953.avast.com
1.127.127.5 download954.avast.com
47.109.248.88 download955.avast.com
242.105.193.64 download956.avast.com
194.249.219.53 download957.avast.com
227.83.3.56 download958.avast.com
85.65.123.207 download959.avast.com
23.61.68.115 download96.avast.com
231.206.94.104 download960.avast.com
8.39.134.174 download961.avast.com
122.22.254.1 download962.avast.com
249.17.199.233 download963.avast.com
12.94.226.222 download964.avast.com
45.251.9.224 download965.avast.com
91.234.129.119 download966.avast.com
30.229.75.27 download967.avast.com
238.50.101.16 download968.avast.com
14.208.208.86 download969.avast.com
128.190.73.169 download97.avast.com
67.186.18.77 download970.avast.com
19.6.232.66 download971.avast.com
52.164.84.136 download972.avast.com
166.146.204.32 download973.avast.com
36.142.149.196 download974.avast.com
56.219.107.185 download975.avast.com
89.120.215.255 download976.avast.com
203.103.79.82 download977.avast.com
74.98.24.246 download978.avast.com
25.175.51.235 download979.avast.com
58.76.90.49 download98.avast.com
172.59.210.132 download980.avast.com
111.54.156.108 download99.avast.com
63.131.182.97 downloads-eu1.kaspersky-labs.com
95.33.221.99 downloads-eu2.kaspersky-labs.com
209.15.86.250 downloads-eu3.kaspersky-labs.com
80.11.31.158 downloads-eu4.kaspersky-labs.com
100.87.57.147 downloads-us1.kaspersky-labs.com
133.245.97.217 downloads-us2.kaspersky-labs.com
247.227.29.45 downloads-us3.kaspersky-labs.com
117.223.230.21 downloads-us4.kaspersky-labs.com
69.44.188.10 downloads.andymanchesta.com
102.201.40.12 downloads.malwarebytes.org
216.116.160.163 downloads.microsoft.com
155.179.105.71 downloads.My-eTrust.com
106.0.64.60 downloads1.kaspersky-labs.com
139.157.171.130 downloads2.kaspersky-labs.com
253.72.35.213 downloads3.kaspersky-labs.com
124.135.237.121 downloads4.kaspersky-labs.com
144.212.7.110 downloads5.kaspersky-labs.com
176.114.46.180 dr-web-cureit.softonic.com
34.28.167.75 drsolomon.com
161.92.112.239 drweb-inside.com
113.168.138.228 drweb.com
214.70.178.42 drweb.com.es
4.240.42.126 drweb.net
198.48.243.34 drwebinside.com
150.125.13.23 dswlab.com
183.26.53.93 duba.net
41.197.241.56 ealaddin.net
48.72.186.220 ealaddin.orgeshop.aladdin.com
255.149.213.209 easy-vpn.comodo.com
32.50.64.23 edm.symantec.com
146.221.184.106 education.symantec.com
17.28.130.14 eeload.com
37.105.88.3 eeye.com
69.195.195.73 eicar.org
115.177.60.156 elblogdemanu.com
54.173.5.132 elitepvpers.de
6.61.31.121 emea.trendmicro.com
39.151.71.123 emsisoft.com
153.133.191.19 emsisoft.de
91.129.136.183 encarta.msn.com
43.18.162.172 engine.awaps.net
76.107.202.242 enterprisesecur.symantec.com
190.90.66.69 eos.eset.es
61.85.11.45 eradicatespyware.net
80.162.38.34 es.answers.yahoo.com
113.63.77.36 es.kioskea.net
159.46.197.187 es.mcafee.com
98.41.143.95 es.trendmicro.com
50.118.169.84 es.wasalive.com
82.20.20.154 esafe.com
196.2.141.237 esecurity.livecall.co.kr
135.254.86.145 eset-la.com
87.74.44.134 eset.com
120.232.151.204 eset.es
234.214.16.100 eset.sk
104.210.217.8 esp.sophos.com
124.31.175.253 espanol.answers.yahoo.com
157.188.27.67 espanol.dir.groups.yahoo.com
15.171.147.150 espanol.groups.yahoo.com
142.166.92.58 esupport.trendmicro.com
93.243.119.47 et.symantec.com
126.144.158.117 etrr.co.uk
240.127.22.200 eugrantsadvisor.cz
179.122.224.176 eugrantsadvisor.de
131.199.250.165 eval.symantec.com
163.101.33.167 ewido.net
21.83.154.62 exchangeyourcareer.net
148.79.99.226 experts-exchange.com
168.155.125.215 f-prot.com
201.57.165.29 f-secure.com
59.39.97.113 f-secure.frf-secure.hk
185.35.42.89 f-secure.nlfsecure.com
137.112.0.78 fastclick.net
170.13.108.80 feedage.com
28.184.228.231 feeds.sophos.com
223.247.173.139 feeds.trendmicro.com
174.68.132.128 file.ikaka.cn
207.225.239.198 file.ikaka.com
65.140.103.25 file.net
192.203.49.189 files.avast.com
212.24.75.178 files.filefont.com
244.182.114.248 files.trendmicro-europe.com
102.96.235.143 filseclab.com
229.160.180.51 final4ever.com
181.236.206.40 finjan.com
26.138.246.110 firewall.sunbeltsoftware.com
72.52.110.194 firewallguide.com
10.116.55.102 fixmyim.com
218.193.81.91 foro.ethek.com
251.94.121.161 foros.toxico-pc.com
109.9.53.56 foros.zonavirus.com
48.72.186.220 forospanish.com
255.149.213.209 forospyware.com
32.50.64.23 forospyware.es
146.221.184.106 fortiguardcenter.com
17.28.130.14 fortihero.com
37.105.88.3 fortilog.com
69.195.195.73 fortinet.co.at
115.177.60.156 fortinet.com
54.173.5.132 fortiprotect.com
6.61.31.121 fortiwifi.com
39.203.123.176 forum.clubedohardware.com.br
205.185.243.71 forum.emsisoft.com
143.181.188.235 forum.hardware.fr
95.70.214.224 forum.hijackthis.de
128.159.254.38 forum.ikaka.com
242.142.118.121 forum.jiangmin.com
113.137.63.97 forum.kaspersky.com
132.214.90.86 forum.malekal.com
165.115.129.88 forum.piriform.com
211.98.249.239 forum.securitycadets.com
150.93.195.147 forum.sysinternals.com
102.170.221.136 forum.telecharger.01net.com
135.72.72.206 forum.tweaks.com
248.54.193.33 forum.zazana.com
187.50.138.197 forums.cnet.com
139.126.96.186 forums.comodo.com
172.28.204.1 forums.devshed.com
30.10.68.152 forums.maddoktor2.com
156.6.13.60 forums.majorgeeks.com
176.83.227.49 forums.techguy.org
209.240.79.119 forums.whatthetech.com
67.223.199.202 fr.bitdefender.com
194.218.144.110 fr.drweb.com
145.39.171.99 fr.mcafee.com
178.196.210.169 fr.trendmicro.com
36.179.74.252 fr1.drweb.com
231.174.20.228 fr2.drweb.com
183.251.46.217 fr3.drweb.com
216.153.85.219 fr4.drweb.com
73.135.206.114 fr5.drweb.com
200.131.151.22 fr6.drweb.com
220.207.177.11 fr7.drweb.com
253.109.217.82 fractus.mat.uson.mx
111.91.149.165 free-av.com
237.87.94.141 free-av.net
189.164.52.130 free.antivirus.com
222.65.160.132 free.avg.com
80.236.24.27 free.drweb.com
19.43.225.191 free.grisoft.com
226.120.184.180 free.grisoft.cz
3.21.35.250 free.pandasecurity.com
117.192.155.77 free.prevx.com
244.255.101.241 free.tinypicbox.com
8.76.127.230 freeav.com
41.234.166.44 freeav.net
154.148.31.195 freespywareremoval.info
25.212.232.103 frisk-software.com
233.32.2.92 fsc.norman.com
78.190.42.163 fsecure.nlwebyard.com
124.104.162.246 ftp.avp.com
62.168.107.154 ftp.bitdefender.com
14.245.133.143 ftp.ca.co
47.146.173.213 ftp.ca.com
161.61.105.108 ftp.customer.symantec.com
100.124.238.16 ftp.dispatch.mcafee.com
51.201.9.5 ftp.download.mcafee.com
84.102.116.75 ftp.downloads-eu1.kaspersky-labs.com
198.17.236.158 ftp.downloads-eu2.kaspersky-labs.com
69.80.182.66 ftp.downloads-eu3.kaspersky-labs.com
89.157.140.55 ftp.downloads-eu4.kaspersky-labs.com
122.247.247.125 ftp.downloads-us1.kaspersky-labs.com
235.41.180.20 ftp.downloads-us2.kaspersky-labs.com
174.37.125.252 ftp.downloads-us3.kaspersky-labs.com
126.181.151.241 ftp.downloads-us4.kaspersky-labs.com
159.15.191.244 ftp.downloads1.kaspersky-labs.com
17.253.55.139 ftp.downloads2.kaspersky-labs.com
211.249.0.47 ftp.downloads3.kaspersky-labs.com
163.138.26.36 ftp.downloads4.kaspersky-labs.com
196.227.66.106 ftp.drweb.com
54.210.186.189 ftp.esafe.com
181.205.131.165 ftp.europe.f-secure.com
200.26.158.154 ftp.f-prot.com
233.183.197.156 ftp.f-secure.com
23.166.61.51 ftp.grisoft.com
218.161.7.215 ftp.kaspersky-labs.com
170.238.33.204 ftp.kaspersky.com
202.140.140.18 ftp.kasperskylab.ru
60.122.5.101 ftp.liveupdate.symantec.com
255.118.206.9 ftp.liveupdate.symantecliveupdate.com
207.194.164.254 ftp.mast.mcafee.com
240.96.16.69 ftp.mcafee.com
98.78.136.220 ftp.microworldsystems.com
224.74.81.128 ftp.my-etrust.com
244.151.39.117 ftp.nai.com
21.52.147.187 ftp.networkassociates.com
135.35.11.14 ftp.norton.com
6.30.212.178 ftp.rads.mcafee.com
213.107.239.167 ftp.sandbox.norman.com
246.8.22.237 ftp.secure.nai.com
104.247.142.64 ftp.securityresponse.symantec.com
43.242.88.40 ftp.sophos.com
251.63.114.29 ftp.symantec.com
27.221.153.31 ftp.symantecliveupdate.com
141.203.18.182 ftp.symatec.com
12.199.219.90 ftp.trendmicro.com
32.19.245.79 ftp.uk.trendmicro-europe.com
65.177.29.150 ftp.update.symantec.com
179.159.217.233 ftp.updates.symantec.com
49.155.162.209 ftp.updates1.kaspersky-labs.com
1.232.120.198 ftp.updates2.kaspersky-labs.com
34.133.228.200 ftp.updates3.kaspersky-labs.com
148.48.92.95 ftp.updates4.kaspersky-labs.com
87.111.37.3 ftp.us.mcafee.com
38.188.252.248 ftp.viruslist.com
71.89.103.62 funkytoad.com
185.4.223.145 futurenow.bitdefender.com
56.67.169.53 fw.rising.com.cn
76.144.195.42 fx.dk
192.130.62.196 gangbang.mytijn.org
50.44.183.91 gdata.de
177.108.128.255 gdata.es
129.184.154.244 gecadsoftware.com
230.86.193.58 geekstogo.com
20.0.58.142 global.ahnlab.com
214.64.3.50 global.jiangmin.com
166.140.29.39 global.nprotect.com
199.42.69.109 go.mcafee.com
57.213.1.4 go.microsoft.com
252.20.134.168 go.rising.com.cn
203.97.161.157 go.sunbeltsoftware.com
236.254.12.227 go.symantec.com
94.169.132.54 go.trendmicro.com
221.232.78.218 greatis.com
241.53.36.207 grisoft.com
17.143.143.21 grisoft.cz
63.125.8.104 grv.microsoft.com
2.121.209.80 guiadohardware.net
210.9.235.69 guru.avg.com
243.99.18.71 guru1.grisoft.cz
100.81.139.223 guru2.grisoft.cz
39.77.84.131 guru3.grisoft.cz
247.221.110.120 guru4.grisoft.cz
24.55.150.190 guru5.grisoft.cz
138.38.14.17 gwava.nl
9.33.215.249 hacksoft.com.pe
28.110.242.238 hacksoft.pe
61.11.25.240 halmapr.com
107.250.145.135 hauri.co.kr
46.245.91.43 hauri.net
254.66.117.32 haurijapan.com
30.224.224.102 help.rising.com.cn
144.206.89.185 hi.baidu.com
83.202.34.93 hijackthis.de
35.22.248.82 hijackthis.download3000.com
68.180.99.152 hishomeforchildren.com
181.162.220.48 hjt-data.trend-braintree.com
52.158.165.212 hjt.networktechs.com
72.234.123.201 home.mcafee.com
105.136.231.15 hostedmailsecur.symantec.com
219.119.95.98 hotshare.net
90.114.40.6 housecall.com
41.191.67.251 housecall.trendmicro.com
74.92.106.65 housecall60.trendmicro.com
188.75.226.148 housecall65.trendmicro.com
127.70.172.124 howsafeismypc.com
79.147.198.113 huaifai.go.th
111.49.237.115 i-vault.comodo.com
225.31.102.10 iavs.cz
96.27.47.174 ibusca.me
116.103.73.231 idauthority.com
217.73.180.45 ids.kaspersky-labs.com
74.55.113.129 ieupdate.gdata.de
201.51.58.105 ieupdate1.gdata.de
153.127.16.94 ieupdate2.gdata.de
186.29.124.96 ieupdate3.gdata.de
44.200.244.247 ieupdate4.gdata.de
239.7.189.155 ieupdate5.gdata.de
190.84.148.144 ieupdate6.gdata.de
223.241.255.214 ikaka.cn
81.156.119.41 ikaka.com
208.219.65.205 ikarus.at
228.40.91.194 ikarus.net
4.198.130.8 ilove.tigolbittys.info
118.112.251.159 images.kaspersky.com
245.176.196.67 in.answers.yahoo.com
197.252.222.56 incodesolutions.com
42.154.5.126 info.drweb.com
87.68.126.210 info.prevx.com
26.132.71.118 infos-du-net.com
234.208.97.107 infosecpodcast.com
11.110.137.177 infospyware.com
125.25.69.72 inicioid.com
64.88.202.236 iniciorapido.info
15.165.229.225 inline-software.de
48.66.80.39 internetsecurity.comodo.com
162.237.200.122 intranet.cidiroax.ipn.mx
33.44.146.30 investor.symantec.com
53.121.104.19 irc.bigshitsandwich.org
85.211.211.89 irc.metraiciono.com
131.193.76.172 iseclab.org
70.189.21.148 isotopecomics.com
22.77.47.137 iss.net
55.167.86.139 it.answers.yahoo.com
168.149.207.34 it.bitdefender.com
107.145.152.199 it.mcafee.com
59.33.178.188 it.trendmicro.com
92.123.218.2 itw.trendmicro.com
206.106.82.85 ixomodels.com
77.101.27.61 ixostore.ixomodels.com
96.178.54.50 javacoolsoftware.com
129.79.93.52 jetico.com
175.62.213.203 jiangmin.com
114.57.159.111 jiangmin.com.cn
66.134.185.100 jobs.bitdefender.com
98.36.36.170 jotti.org
212.18.157.253 jp.mcafee.com
151.14.102.161 jp.trendmicro.com
103.90.60.150 justfacebook.net
136.248.167.220 k-otik.com
249.230.32.115 k7computing.com
120.226.29.76 kaba.360.cn
192.99.243.65 kaba.360.com
225.0.95.135 karuna-shechen.org
83.239.215.218 kaspersky-fr.com
210.234.160.126 kaspersky-labs.com
161.55.187.115 kaspersky.co.jp
194.212.226.185 kaspersky.co.uk
52.195.90.12 kaspersky.com
247.190.36.244 kaspersky.com.cn
199.11.62.233 kaspersky.dk
231.169.101.235 kaspersky.es
89.151.222.130 kaspersky.gr
216.147.167.38 kaspersky.pl
236.223.193.27 kaspersky.ru
13.125.232.97 kaspersky.se
127.107.165.181 kasperskylab.co.kr
253.103.110.157 kasperskylab.nl
205.180.68.146 kav.ru
238.81.176.148 kav.zonelabs.com
96.252.40.43 kb.bitdefender.com
35.59.241.207 kb.bitdefender.de
242.136.200.196 kb.bitdefender.us
19.37.51.10 kerio.com
133.208.171.93 kimzimmer.net
4.15.117.1 kioskea.net
24.92.143.246 kpfans.com
56.250.182.60 kr.ahnlab.com
170.164.47.211 kr.sophos.com
41.228.248.119 krupunmai.com
249.48.18.108 kvup.jiangmin.com
94.206.57.178 kztechs.com
140.120.178.6 l33t.shadow-mods.net
78.184.123.170 la.trendmicro.com
30.5.149.159 ladooscuro.es
63.162.189.229 laneros.com
177.77.121.124 latam.kaspersky.com
116.140.254.32 latin.bitdefender.com
67.217.25.21 lavasoft.com
100.118.132.91 lavasoft.nu
214.33.252.174 lavasoftusa.com
85.96.198.82 lexikon.ikarus.at
105.173.156.71 license.drweb.com
137.7.7.141 linhadefensiva.org
183.245.128.224 linhadefensiva.uol.com.br
122.241.73.200 linux.bitdefender.com
74.129.99.189 lists.clamav.net
107.219.138.191 liutilities.com
221.201.3.87 live.sunbeltsoftware.com
159.197.204.251 liveprotect.net
111.85.230.240 liveupdate.symantec.com
144.175.82.122 liveupdate.symantec.d4p.net
70.226.202.205 liveupdate.symantecliveupdate.com
197.221.147.181 looknstop.com
216.42.174.170 lovings.technigoyous.net
249.199.213.172 lurker.clamav.net
39.182.77.67 mailcenter.rising.com
234.177.23.231 mailcenter.rising.com.cn
186.254.49.220 majorgeeks.com
218.156.156.34 mall.hauri.co.kr
76.138.21.117 malwarebytes.org
15.134.222.25 malwarecity.com
223.210.180.14 malwarecity.netmalwarecity.org
0.112.31.84 malwaredomainlist.com
114.94.152.236 malwarepedia.com
240.90.97.144 malwareremoval.com
4.166.55.133 malwarescan.emsisoft.com
37.68.163.203 malwarescan.emsisoft.de
151.51.27.30 malwarescan.emsisoft.es
22.46.228.194 mamutu.com
229.123.255.183 manuelruvalcaba.com
6.24.38.253 marian.symantec.com
120.7.158.80 mast.mcafee.com
59.2.104.56 mcafee-at-home.com
11.79.130.45 mcafee.com
43.237.169.47 mcafeeb2b.com
157.219.34.198 mcafeefans.com
28.215.235.106 mcafeeretail.com
48.35.5.95 mcaffee.com
81.193.44.165 me.kaspersky.com
195.175.233.249 media.fastclick.net
65.171.178.225 megasecurity.org
17.247.136.214 merijn.org
50.149.244.216 metascan-online.com
164.64.108.111 microsoft.com
103.127.53.19 microsoft.fr
54.204.12.8 midescargas.com
87.105.119.78 mirror02.gdata.de
201.20.239.161 misec.net
72.83.185.69 mmsk.cn
92.160.211.58 moneybookers.com
124.62.250.128 moosoft.com
238.232.115.23 mop.pandasecurity.com
109.40.60.187 mostz.com
61.116.86.176 mozilla-hispano.org
162.18.125.246 msdn.microsoft.com
208.188.246.74 msk.drweb.com
146.208.147.194 msk1.drweb.com
54.29.174.183 msk2.drweb.com
87.186.213.253 msk3.drweb.com
201.101.145.148 msk4.drweb.com
140.164.23.56 msk5.drweb.com
92.241.49.45 msk6.drweb.com
125.143.156.115 msk7.drweb.com
238.57.21.198 msncleaner.softonic.com
109.121.222.106 msnfix.changelog.fr
129.197.180.95 msnvirusremoval.com
162.31.32.166 msr.mcafee.com
208.13.152.249 mvps.org
146.9.97.225 mx.answers.yahoo.com
98.154.123.214 mx.mcafee.com
131.243.163.216 mxttchina.com
245.226.27.111 my-etrust.com
184.221.228.19 my.drweb.com
135.110.255.8 mygeekside.com
168.199.38.78 nabble.com
26.182.158.161 nai.com
153.178.104.137 natsko.com
173.254.130.126 naturesimages.net
206.156.169.128 net-security.org
251.138.34.23 network.drweb.com
190.134.235.187 networkassociates.com
142.210.5.176 networkassociates.nai.com
175.112.113.247 networkworld.com
33.94.233.74 neunet.orgnews.bitdefender.com
227.90.178.238 new-beta.drweb.com
179.167.136.227 new-company.drweb.com
212.68.244.41 new-estore.drweb.com
70.51.108.192 new-forum.drweb.com
197.46.53.100 new-partners.drweb.com
216.123.12.89 new-solutions.drweb.com
249.24.119.159 new-support.drweb.com
107.7.239.242 new-www.drweb.com
234.2.185.150 new.taringa.net
186.79.211.139 news.drweb.com
219.237.250.209 newsletters.trendmicro.com
76.219.115.36 niueight.norman.no
15.215.60.12 niufive.norman.no
223.35.86.1 niufour.norman.no
0.193.126.4 niunine.norman.no
114.175.246.155 niuone.norman.no
240.171.191.63 niuseven.norman.no
4.248.217.52 niusix.norman.no
37.149.1.122 niuthree.norman.no
151.132.1.17 niutwo.norman.no
90.195.202.249 nl.bitdefender.com
41.16.161.238 noadware.net
74.173.12.240 nod32.co.uk
188.88.132.135 nod32.com
127.151.78.43 nod32.datsec.de
79.228.36.32 nod32.lu
112.130.143.102 nod32.ru
225.44.8.185 norman.com
96.108.209.93 norton.com
116.184.235.82 notifier.antivir-pe.de
149.86.19.153 novirusthanks.org
7.0.139.48 nprobeta.norman.com
133.64.84.212 nprotect.com
85.141.110.201 nprotect.net
186.42.150.15 nprotect.seoul.go.kr
232.213.14.98 nsclean.com
171.20.215.6 ntfaq.co.kr
122.97.242.251 obscgi.mcafee.com
155.254.25.65 oem.sunbeltsoftware.com
13.169.213.216 offensivecomputing.net
208.232.91.124 office.microsoft.com
160.53.117.113 oldtimer.geekstogo.com
192.211.224.183 one.tinypicbox.com
50.125.89.10 onecare.live.com
177.189.34.174 online-backup.comodo.com
197.9.248.163 online.jiangmin.com
230.99.100.234 online.rising.com.cn
20.81.220.61 onlinecheck.emsisoft.com
214.77.165.37 onlinecheck.emsisoft.de
166.222.191.26 onlinecheck.emsisoft.net
199.55.231.28 onlinecheck.emsisoft.org
57.38.95.179 onlinescan.avast.com
252.33.40.87 openantivirus.org
203.178.67.76 outpost.pl
236.11.106.146 ozzu.com
94.250.226.229 p3dev.taringa.net
221.245.172.205 pandalabs.pandasecurity.com
241.66.198.194 pandasecurity.com
17.224.237.196 pandasoftware.com
63.206.102.91 pandasoftware.es
2.202.47.255 pantip.com
210.22.73.244 pcav.cn
243.180.181.59 pccreg.antivirus.com
101.162.45.142 pccreg.trendmicro.com
39.158.246.50 pcentraide.com
247.235.204.39 pcguide.com
24.136.56.109 pchell.com
138.119.176.4 pcinternetpatrol.com
9.114.121.168 pcsupportadvisor.com
28.191.80.157 pctools.com
61.92.187.227 pda.drweb.com
175.75.51.54 pedidos.protegerse.com
46.70.253.218 personal.psu.edu
254.147.23.207 personalfirewall.comodo.com
31.49.62.21 pestpatrol.com
144.31.183.104 pg.hauri.net
83.27.128.80 phx.corporate-ir.net
35.103.154.69 pineleafboys.com
68.5.194.72 podcasts.sophos.com
182.243.58.223 pogonyuto.forospanish.com
52.239.3.131 precisesecurity.com
72.60.29.120 prevx.com
105.217.69.190 privacy.microsoft.com
219.200.1.17 products.drweb.com
90.195.202.249 promotions.drweb.com
41.16.161.238 psnw.com
74.173.12.240 pspl.com
188.88.132.135 pvtc.org
127.151.78.43 qqjkw.net
79.228.36.32 quickheal.co.in
164.182.195.154 quickheal.com
21.96.60.237 radius.turvamies.com
148.160.5.145 rads.mcafee.com
168.236.31.134 ravantivirus.com
201.138.71.205 raymond.cc
59.52.191.100 reg-int.nod32-es.com
185.116.136.8 reg.eset.es
137.193.163.253 reg.rising.com.cn
238.94.202.67 register.norman.com
28.9.66.150 removetrojanvirus.org
223.72.11.58 renewalcenter.symantec.com
174.149.38.47 renewals.bitdefender.com
207.50.77.117 research.microsoft.com
65.221.9.12 research.pandasecurity.com
4.29.143.176 research.sunbelt-software.com
212.105.169.165 resplendence.com
245.7.20.235 retail.sp.f-secure.com
102.177.141.62 retail01.sp.f-secure.com
229.241.86.226 retail02.sp.f-secure.com
249.61.44.215 ribbonwarehouse.com
26.151.152.30 rising-global.com
72.133.16.113 rising.com
10.129.217.89 rising.com.cn
218.18.243.78 rolandovera.com
251.107.27.80 rootkit.com
109.90.147.231 rootkit.nl
48.85.92.139 rover800.gaima.co.uk
255.230.119.128 roysephotos.com
32.63.158.198 ru.trendmicro.com
146.46.22.25 ruben.bzin.net
17.42.224.1 runscanner.net
37.118.250.246 safe.qq.com
70.20.33.248 safecomputing.umn.edu
115.2.154.143 safer-networking.org
54.254.99.51 safetynet.com
6.74.125.40 sales.bitdefender.com
39.232.233.111 samroeng.hi5.com
153.214.97.194 sandbox.norman.com
91.210.42.102 sandboxie.com
43.31.1.91 sapcupgrades.com
76.188.108.161 sarahmcconnellphotography.net
190.171.228.56 saverssite.com
61.166.173.220 scan.anti-trojan.net
80.243.132.209 scan.kingsoft.com
113.144.239.23 scan4you.net
227.127.103.106 scanner.novirusthanks.org
98.123.49.14 scanner.virus.org
50.199.75.3 scanner2.novirusthanks.or
83.101.114.73 schemas.microsoft.com
196.83.235.156 schemas.xmlsoap.org
135.79.180.132 sea.symantec.com
87.155.206.121 search.ca.com
120.57.246.124 search.mcafee.com
234.39.110.19 search.symantec.com
104.35.55.183 seasonsecurity.com
124.112.82.172 secdreg.org
157.13.121.242 secubox.aldria.com
15.252.53.69 secunia.com
142.247.254.45 secure-email.comodo.com
93.68.213.34 secure.av-desk.com
126.225.64.36 secure.nai.com
240.140.184.187 securecomputing.com
179.204.130.95 secureme.com
131.24.88.84 securitoo.com
164.182.195.154 security.symantec.com
21.96.60.237 securitycheck.symantec.com
148.160.5.145 securitynewsportal.com
168.236.31.202 securityrespons.symantec.com
13.206.139.17 securityresponse.symantec.com
127.120.3.168 securitywonks.net
253.184.204.76 secuser.com
205.5.230.65 secuser.model-fx.com
50.162.14.135 sergiwa.com
96.77.134.218 service.mcafee.com
35.140.79.126 service1.symantec.com
242.217.106.115 servicenews.symantec.com
19.118.145.185 sfdoccentral.symantec.com
133.33.77.80 shadow.grisoft.cz
72.97.211.244 shadu.baidu.com
24.173.237.233 shadu.duba.net
57.75.88.47 shield.prevx.com
170.245.209.130 shop.hauri.co.kr
41.53.154.38 shop.pandasecurity.com
61.129.112.27 shop.sunbeltsoftware.com
94.219.220.98 shop.symantec.com
140.201.84.181 shop.trendmicro.com
78.197.29.157 shudoo.com
30.86.55.146 simplysup.com
63.175.95.148 siren24.nprotect.com
177.158.215.43 siteadvisor.com
116.153.160.207 sitedirector.symantec.com
67.42.187.196 smallbiz.symantec.com
100.131.226.10 smbstore.trendmicro.com
214.114.90.93 smokey-services.eu
85.110.36.69 soccersuck.com
105.186.62.58 softfaq.com
138.88.101.60 softonic.com
183.70.222.211 software-files.download.com
122.66.167.119 solutions.drweb.com
74.142.193.108 sophos.com
107.44.45.179 sophos.fr
221.26.165.6 sophos1.ucd.ie
159.22.110.170 sophos10.ucd.ie
111.99.68.159 sophos2.ucd.ie
144.0.176.229 sophos5.ucd.ie
2.239.40.124 sophos6.ucd.ie
129.234.241.32 sophos7.ucd.ie
148.55.200.21 sophos8.ucd.ie
181.212.51.91 sophos9.ucd.ie
39.195.171.174 soporte.pandasecurity.com
166.191.117.82 sos.rising.com.cn
118.11.143.71 sosvirus.changelog.fr
151.169.10.225 spd.atdmt.com
92.235.131.52 specs.xmlsoap.org
31.231.76.28 speedtest.comodo.com
239.51.102.17 spftrl.digitalriver.com
16.209.142.19 spyany.com
130.191.6.171 spyblocker-software.com
0.187.207.79 spybot.info
20.8.233.68 spycheck.co.uk
53.165.17.138 spycheck.es
167.148.205.221 spychecker.com
38.143.150.197 spycop.com
245.220.109.186 spywaredb.com
22.121.216.188 spywaredlls.prevx.com
136.36.80.83 spywarefiles.prevx.com
75.99.26.247 spywareguide.com
27.176.240.236 spywareinfo.com
59.78.91.50 spywareterminator.com
173.248.212.133 square.bitdefender.com
44.56.157.41 static.yoreparo.com
64.132.183.30 stats.norton.com
97.34.222.100 stdio-labs.blogspot.com
211.204.87.252 stiller.com
81.12.32.160 store.bitdefender.com
33.89.58.149 store.de.bitdefender.com
134.246.98.219 store.drweb.com
180.161.218.46 store.trendmicro.com
119.224.163.210 subs.geekstogo.com
70.45.190.199 subwiz.trendmicro.com
103.202.229.13 sucop.com
217.117.161.164 sun.symantec.com
156.180.39.72 sunbelt-software.com
108.1.65.61 sunbeltsecurity.com
140.159.172.131 sunbeltsoftware.com
254.73.37.214 superboy2010.com.au
125.137.238.122 superdicas.com.br
145.213.196.111 superuser.co.kr
178.47.47.181 support.drweb.com
224.29.168.9 support.f-secure.com
162.25.113.241 support.kaspersky.co
114.170.139.230 support.mcafee.com
147.3.179.232 support.microsoft.com
5.242.43.127 support.pandasecurity.com
200.237.244.35 support.rising-global.com
151.126.15.24 sybari.com
184.215.54.94 sygate.com
42.198.174.177 symantec-ese.baynote.net
169.193.120.221 symantec.com
1.82.214.210 symantecliveupdate.com
33.240.253.212 symatec.com
79.222.118.107 sysinternals.com
18.218.63.15 system-cleaner.comodo.com
226.38.89.4 tallemu.com
3.196.196.74 taringa.net
117.178.61.158 tds.diamondcs.com.au
55.174.6.66 tech.pantip.com
7.251.220.55 techimo.com
40.152.72.125 techspot.com
154.135.192.20 techsupportforum.com
25.130.137.184 tecniservicioslys.com
44.207.96.173 tecno-soft.com
77.108.203.243 tempuri.org
191.91.67.70 thecomputerpitstop.com
62.86.13.234 thejokerx.blogspot.com
14.163.39.223 thetechguide.com
46.65.78.37 thinkpad.cn
160.47.199.120 threatexpert.com
99.43.144.96 threatinfo.trendmicro.com
51.119.170.85 timeforyourbusi.pandasecurity.com
84.21.209.87 timestamp.comodoca.com
198.3.74.239 timestamp.wosign.com
68.255.19.147 tinysoftware.com
88.76.45.136 tms.symantec.com
121.233.85.206 together.pctools.com
235.216.17.33 tool.ikaka.com
106.211.218.9 toonbox.de
57.32.177.254 tr.mcafee.com
90.189.28.0 trackingtheworld.com
204.104.148.151 training.drweb.com
143.167.94.59 training.trendmicro.com
95.244.52.48 trapware.com
127.146.159.118 trendmicro.com
241.60.24.201 trendmicro.com.cn
112.124.225.109 trendmicro.fr
132.200.251.98 trendsecure.com
165.102.34.168 trial.trendmicro.com
23.16.155.64 trucoswindows.es
149.80.100.228 trucoswindows.net
101.156.126.217 tw.mcafee.com
202.58.166.31 tw.sophos.com
248.229.30.114 tw.trendmicro.com
239.88.27.74 tweaksforgeeks.com
190.165.54.63 u0.eset.com
223.66.93.133 u1.eset.com
81.237.25.28 u10.eset.com
20.44.159.192 u100.eset.com
228.121.185.181 u11.eset.com
4.23.36.251 u12.eset.com
118.193.157.78 u13.eset.com
245.1.102.242 u14.eset.com
9.77.60.231 u15.eset.com
42.167.168.46 u16.eset.com
88.149.32.129 u17.eset.com
26.145.233.105 u18.eset.com
234.34.3.94 u19.eset.com
11.123.43.96 u2.eset.com
125.106.163.247 u20.eset.com
64.101.108.155 u21.eset.com
15.246.135.144 u22.eset.com
48.79.174.214 u23.eset.com
162.62.38.41 u24.eset.com
33.57.240.17 u25.eset.com
53.134.10.6 u26.eset.com
85.36.49.8 u27.eset.com
131.18.170.159 u28.eset.com
70.14.115.67 u29.eset.com
22.90.141.56 u3.eset.com
55.248.249.127 u30.eset.com
169.230.113.210 u31.eset.com
107.226.58.118 u32.eset.com
59.47.16.175 u33.eset.com
160.16.192.245 u34.eset.com
18.255.56.140 u35.eset.com
145.250.1.48 u36.eset.com
164.71.216.37 u36eset.com
197.228.67.107 u37.eset.com
55.211.187.190 u37eset.com
182.206.133.98 u38.eset.com
134.27.159.87 u39.eset.com
166.185.198.157 u4.eset.com
24.167.63.240 u40.eset.com
219.163.8.216 u41.eset.com
171.239.34.205 u42.eset.com
204.141.74.207 u43.eset.com
62.123.194.103 u44.eset.com
188.119.139.11 u45.eset.com
208.196.165.0 u46.eset.com
241.97.205.70 u47.eset.com
99.80.137.153 u48.eset.com
226.75.82.129 u49.eset.com
177.152.41.118 u5.eset.com
210.53.148.120 u50.eset.com
68.224.12.15 u51.eset.com
7.31.214.179 u52.eset.com
215.108.172.168 u53.eset.com
247.10.23.238 u54.eset.com
105.180.144.65 u55.eset.com
232.244.89.229 u56.eset.com
252.64.115.218 u57.eset.com
29.222.155.32 u58.eset.com
143.136.19.184 u59.eset.com
13.200.220.92 u6.eset.com
221.21.246.81 u60.eset.com
66.178.30.151 u61.eset.com
112.93.150.234 u62.eset.com
51.156.95.142 u63.eset.com
2.233.122.131 u64.eset.com
35.134.161.201 u65.eset.com
149.49.93.96 u66.eset.com
88.112.227.4 u67.eset.com
40.189.253.249 u68.eset.com
72.91.104.63 u69.eset.com
186.5.225.146 u7.eset.com
57.69.170.54 u70.eset.com
77.145.128.43 u71.eset.com
110.235.236.113 u72.eset.com
156.217.100.197 u73.eset.com
94.213.45.173 u74.eset.com
46.102.71.162 u75.eset.com
79.191.111.164 u76.eset.com
193.174.231.59 u77.eset.com
132.169.176.223 u78.eset.com
83.58.203.212 u79.eset.com
116.147.242.26 u8.eset.com
230.130.106.109 u80.eset.com
101.125.52.85 u81.eset.com
121.202.78.74 u82.eset.com
153.104.117.76 u83.eset.com
27.170.66.55 u84.eset.com
222.166.11.219 u85.eset.com
174.242.37.208 u86.eset.com
207.144.144.22 u87.eset.com
64.126.9.105 u88.eset.com
3.122.210.14 u89.eset.com
211.198.168.3 u9.eset.com
244.100.20.73 u90.eset.com
102.83.140.224 u91.eset.com
229.78.85.132 u92.eset.com
248.155.44.121 u93.eset.com
25.56.151.191 u94.eset.com
139.39.15.18 u95.eset.com
10.34.217.182 u96.eset.com
218.111.243.171 u97.eset.com
250.13.26.241 u98.eset.com
108.251.147.68 u99.eset.com
47.247.92.44 uk.mcafee.com
255.67.118.33 uk.trendmicro-europe.com
32.225.157.35 uk.trendmicro.com
145.207.22.186 ulove.tigolbittys.info
16.203.223.95 up.duba.net
36.23.249.84 up.rising.com.cn
69.181.33.154 up1.nod123.cn
183.164.221.237 upd.zonelabs.com
54.159.166.213 update.360safe.cn
5.236.125.202 update.360safe.com
38.137.232.204 update.aladdin.com
152.52.96.99 update.authentium.com
91.115.42.7 update.avg.com
43.192.0.252 update.avgfrance.com
75.94.107.66 update.bitdefender.com
189.8.228.149 update.drweb.com
60.72.173.57 update.ewido.com
80.148.199.46 update.grisoft.com
113.50.238.116 update.grisoft.cz
226.220.103.11 update.hispasec.com
97.28.48.176 update.ikaka.com
49.104.74.165 update.ikarus-software.at
150.6.114.235 update.quickheal.com
196.177.234.62 update.rising.com.cn
135.240.179.226 update.sophos.com
86.61.206.215 update.symantec.com
119.218.245.29 update.trendmicro.com
233.133.177.180 update7.jiangmin.com
172.196.55.88 updatem.360safe.cn
124.17.81.77 updatem.360safe.com
156.175.188.147 updates.a-2.org
14.89.53.230 updates.drweb.com
141.153.254.138 updates.f-prot.com
161.229.212.127 updates.sald.com
194.63.63.197 updates.symantec.com
239.45.184.25 updates3.kaspersky-labs.com
178.41.129.1 updates4.kaspersky-labs.com
130.185.155.246 updates5.kaspersky-labs.com
163.19.195.248 upgrade.bitdefender.com
21.2.59.143 upgrade1.bitdefender.com
216.253.4.51 upgrade2.bitdefender.com
167.142.31.40 upgrade3.bitdefender.com
200.231.70.110 upgrade4.bitdefender.com
58.214.190.193 upload.changelog.fr
185.209.136.169 us.bitdefender.com
205.30.162.158 us.mcafee.com
237.188.201.160 us.trendmicro.com
27.170.66.55 usa.kaspersky.com
222.166.11.219 usbcleaner.cn
174.242.37.208 ushousecall02.trendmicro.com
207.144.144.22 utilidades-utiles.com
64.126.9.105 v.dreamwiz.com
3.122.210.14 v4.windowsupdate.microsoft.com
211.198.168.3 v5.windowsupdate.microsoft.com
244.100.20.73 vet.com.au
102.83.140.224 vicentevirtual.com
229.78.85.132 viguard.com
248.155.44.121 vil.nai.com
25.56.151.191 vil.nail.com
139.39.15.18 virobot.co.kr
10.34.217.182 virscan.org
30.179.55.239 virus.org
62.81.94.53 virusbuster.hu
176.63.215.136 viruschief.com
115.59.160.112 virusdoctor.jp
67.135.186.101 virusfreezone.info
100.37.225.103 virusinfo.prevx.com
213.19.90.254 viruslist.com
84.15.35.163 viruslist.ru
104.91.61.152 virusscan.jotti.org
137.249.101.222 virusscanonline.net
251.232.33.49 virusspy.com
122.227.234.25 virustotal.com
73.48.193.14 visualizesoftware.com
106.205.44.16 visualtracking.symantec.com
220.120.164.167 vivo-austin.com
159.183.110.75 vms.drweb.com
111.4.68.64 vncsvr.com
143.162.175.134 vos.symantec.com
1.76.40.217 vrv.com.cn
128.140.241.125 vsantivirus.com
148.216.11.114 webadmin.norman.no
181.118.50.184 webphand.com
38.32.171.79 webroot.com
165.96.116.244 wedoantivirus.com
117.172.142.233 welkam.co.jp
218.74.182.47 wexperts-exchange.com
8.245.46.130 whatthetech.com
203.52.247.38 wikio.es
154.129.18.27 wilderssecurity.com
187.30.57.97 wilderssecurity.net
45.201.245.248 wildlist.com
240.8.123.156 windowsupdate.microsoft.com
192.85.149.145 winpatrol.com
224.243.0.215 wmcafee.com
82.157.120.42 woottonfootball.com
209.221.66.206 wtc.trendmicro.com
229.41.24.195 ww.emsisoft.com
6.131.131.9 www.1stavenuelimousines.co.uk
51.113.252.92 www.2xlgames.com
246.109.197.69 www.ahnlab.com
198.253.223.58 www.aks.com
231.87.7.60 www.aladdin.com
89.70.127.211 www.anti-trojan-software.net
28.65.72.119 www.anti-trojan.net
235.210.99.108 www.anti-virus.by
12.43.138.178 www.antivir.es
126.26.2.5 www.antivirus-tools.com
253.21.204.237 www.antiy.net
17.98.230.226 www.apsecure.com
49.0.13.228 www.arpia.be
95.238.134.123 www.authentium.com
34.234.79.31 www.authentium.com.au
242.54.105.20 www.av-desk.com
19.212.212.90 www.avast.com
132.194.77.173 www.avg.com
71.190.22.82 www.avhide.com
23.10.236.71 www.avoncourt.com
56.168.88.141 www.avx.ro
170.151.208.36 www.barder.com
41.146.153.200 www.beautybar.com
60.223.112.189 www.bg.virusblokada.com
93.124.219.3 www.bit-defender.de
207.107.83.86 www.bitdefende.de
78.102.29.250 www.bitdefender-es.com
30.179.55.239 www.bitdefender.be
62.81.94.53 www.bitdefender.cl
176.63.215.136 www.bitdefender.co.uk
115.59.160.112 www.bitdefender.com
67.135.186.101 www.bitdefender.com.au
100.37.225.103 www.bitdefender.com.sg
213.19.90.254 www.bitdefender.com.tw
84.15.35.163 www.bitdefender.com.vn
104.91.61.152 www.bitdefender.de
189.45.153.18 www.bitdefender.es
47.28.85.101 www.bitdefender.fr
174.23.30.77 www.bitdefender.hk
125.100.245.66 www.bitdefender.us
158.1.96.68 www.bitdefenderme.com
16.172.216.219 www.briarhurst.com
211.235.162.127 www.brightoctober.com
163.56.120.116 www.buraka.tv
195.214.227.186 www.buscafacil.com
53.128.92.13 www.buscalo.in
180.192.37.177 www.busco.in
200.12.63.166 www.ca.com
233.170.102.236 www.cambridge-steiner-school.co.uk
91.84.223.132 www.ccssforum.org
217.148.168.40 www.celticmerchant.com
169.224.194.29 www.clamav.net
14.126.234.99 www.collectedcurios.com
60.41.98.182 www.comodo.com
255.104.43.90 www.comodo.tv
206.181.70.79 www.comodoantispam.com
239.82.109.149 www.comodopartners.com
97.253.41.44 www.computing.net
36.60.175.208 www.configurarequipos.com
244.137.201.197 www.contentverification.com
20.39.52.11 www.deborahshelton.net
134.209.173.94 www.dr-bull.com
5.17.118.2 www.drweb.com
25.93.76.247 www.ealaddin.com
58.183.183.61 www.elvis-express.com
104.165.48.145 www.emeraldclassic.co.uk
42.161.249.121 www.emsisoft.at
250.49.19.110 www.emsisoft.com
27.139.59.112 www.emsisoft.de
141.122.179.7 www.emsisoft.es
80.117.124.171 www.emsisoft.fr
31.6.151.160 www.emsisoft.it
64.95.190.230 www.emsisoft.jp
178.78.54.57 www.emsisoft.net
49.73.0.33 www.emsisoft.nl
69.150.26.22 www.emsisoft.org
101.52.65.24 www.engyro.com
147.34.186.175 www.entercept.com
86.30.131.83 www.esafe.com
38.106.157.72 www.eset.es
71.8.8.142 www.eugrantsadvisor.com
185.246.129.226 www.eugrantsadvisor.de
123.242.74.134 www.eugrantsadvisor.ie
75.62.32.123 www.eugrantsadvisor.se
108.220.140.193 www.exchangeyourcareer.com
222.203.4.88 www.f-prot.com
93.198.205.252 www.f-secure.com
112.19.164.241 www.fimasys.com
145.176.15.55 www.flairweddings.co.uk
3.159.135.138 www.forospyware.com
130.154.81.46 www.fortifed.com
82.231.107.35 www.fortiid.com
114.133.146.105 www.fortimail.com
228.115.11.188 www.fortinet-apac.com
167.111.212.164 www.fortinet.ch
119.187.238.153 www.fortinet.co.il
152.89.21.155 www.fortinet.com
10.71.142.51 www.fortinet.net
136.67.87.215 www.fortinet.nl
156.143.113.204 www.fortinet.sg
189.45.153.18 www.fortinetuk.com
47.28.85.101 www.freeality.com
174.23.30.77 www.freedrweb.ru
125.100.245.66 www.freerav.com
158.1.96.68 www.frisk-software.com
16.172.216.219 www.frisk.is
211.235.162.127 www.fsecure.com
163.56.120.116 www.garryowen.com
195.214.227.186 www.gdata.es
53.128.92.13 www.globalhauri.com
180.192.37.177 www.gokidding.com
200.12.63.166 www.grisoft.com
233.170.102.236 www.hackshields.com
91.84.223.132 www.hacksoft.com.pe
217.148.168.40 www.hacksoft.pe
169.224.194.29 www.handwritingforkids.com
14.126.234.99 www.hasp.se
60.41.98.182 www.hauri.co.kr
255.104.43.90 www.hauri.net
206.181.70.79 www.hxproduction.com
239.82.109.149 www.ibusca.me
97.253.41.44 www.ikarus.at
36.60.175.208 www.imddomains.co.uk
244.137.201.197 www.indielisboa.com
20.39.52.11 www.inicioid.com
134.209.173.94 www.iniciorapido.info
5.17.118.2 www.internationalservicecheck.com
25.93.76.247 www.irangoals.com
58.183.183.61 www.iseclab.org
171.233.116.213 www.ixomodels.com
110.229.61.189 www.jiangmin.com
62.117.87.178 www.jiangmin.com.cn
95.207.127.180 www.jotti.org
209.190.247.75 www.kaspersky.com
148.185.192.239 www.kioskea.net
99.74.219.228 www.latin-mass-society.org
132.163.2.42 www.livepcsupport.com
246.146.122.125 www.malwarecity.com
117.141.68.101 www.malwarecity.fr
137.218.94.90 www.mamutu.com
169.120.133.92 www.mamutu.de
215.102.254.243 www.manchester-offices.co.uk
154.98.199.151 www.mcafee.at
106.174.225.140 www.mcafee.com
139.76.76.210 www.metascan-online.com
252.58.197.38 www.microsoft.com
191.54.142.202 www.midescargas.com
143.130.100.191 www.mountainlakeslodge.com
176.32.208.5 www.mtr-design.com
34.15.72.156 www.mygeekside.com
161.10.17.64 www.netegrity.com
180.87.232.53 www.norman.com
213.244.83.123 www.nottinghampoetryseries.com
71.227.203.206 www.novirusthanks.org
198.222.149.114 www.npin.co.kr
150.43.175.103 www.nprotect.co.kr
182.201.214.173 www.nprotect.com
40.183.79.0 www.nprotect.com.br
235.179.24.232 www.nsclean.com
187.255.50.221 www.owen.org
220.157.89.223 www.pandasecurity.com
77.139.210.119 www.pctools.com
204.135.155.27 www.peterhearnwaste.co.uk
224.211.181.16 www.phoenixtrikeworks.com
1.113.221.86 www.prdouglas.co.uk
115.96.153.169 www.prevx.com
242.91.98.145 www.prevx1.com
193.168.57.134 www.professorbeyer.com
226.69.164.136 www.quickheal.com
84.240.28.31 www.removetrojanvirus.org
23.47.230.195 www.renningers.com
231.124.188.184 www.residentphotography.com
7.26.39.254 www.retento.com
121.196.160.81 www.reviewsofbooks.com
248.4.105.245 www.rising-global.com
12.80.131.234 www.risingav.com.au
45.238.170.48 www.safenet-inc.com
158.152.35.200 www.scan4you.net
29.216.236.108 www.seasonsecurity.com
237.36.6.97 www.secondchanceboxer.com
82.194.46.167 www.secure-elements.com
128.109.166.250 www.sheffieldmind.co.uk
67.172.111.158 www.smf.org
18.249.138.147 www.softfaq.com
51.150.177.217 www.sophos.com
165.65.109.112 www.spycheck.co.uk
104.128.243.20 www.spycheck.es
56.205.13.9 www.stadiumpage.com
88.107.120.79 www.sunbeltsoftware.com
202.21.241.162 www.symantec.com
73.85.186.70 www.sysinternals.com
93.161.144.59 www.tecniservicioslys.com
126.251.251.129 www.testmypcsecurity.com
171.233.116.213 www.threatexpert.com
110.229.61.189 www.tomorrowsedge.net
62.117.87.178 www.trendmicro.com
95.207.127.180 www.trojaner.info
209.190.247.75 www.trustix.com
148.185.192.239 www.trustlogo.com
99.74.219.228 www.vba.com.by
132.163.2.42 www.virscan.org
246.146.122.125 www.virus.fi
117.141.68.101 www.virus.org
137.218.94.90 www.virusbuster.hu
169.120.133.92 www.viruschief.com
215.102.254.243 www.virusfreezone.info
154.98.199.151 www.virustotal.com
106.174.225.140 www.wellgousa.com
139.76.76.210 www.whichssl.com
252.58.197.38 www.willsee.com
191.54.142.202 www.xmlsoap.org
143.130.100.191 www.zarya.info
176.32.208.5 www1.my-etrust.com
34.15.72.156 www3.ca.com
161.10.17.64 www3.safenet-inc.com
180.87.232.53 www4.symantec.com
213.244.83.123 wwws.clamav.net
71.227.203.206 x-cleaner.com
198.222.149.114 x.360safe.com
150.43.175.103 yoreparo.com
182.201.214.173 z-oleg.com
40.183.79.0 zeustracker.abuse.ch
235.179.24.232 zeylstra.nl
187.255.50.221 zhidao.baidu.com
220.157.89.223 zhidao.ikaka.com
77.139.210.119 ziggamza.net
204.135.155.27 zonavirus.com
224.211.181.16 zonealarm.com
1.113.221.86 zonelabs.com
115.96.153.169 zonelabs.fr
242.91.98.145 zonelog.co.uk
193.168.57.134 zs.kingsoft.com
226.69.164.136 ztl.comodo.com


Rootkit activity

No anomalies have been detected.

Propagation

A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.

VersionInfo

No information is available.

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 12644 12800 3.76874 55d274f88e5ab59aa27a86516437f7d8
.data 20480 64 512 0.164757 75fe664fdcd708925b7ca712ee127c19
.rdata 24576 1328 1536 3.03097 2707a7526abdc69c43f37dd3b6665e30
.bss 28672 320 0 0 d41d8cd98f00b204e9800998ecf8427e
.idata 32768 800 1024 2.18489 4e803ebabfbd6fe3233c57c1b6e762a8
.rsrc 36864 87232 87552 5.54166 34b5a2a0306aa053bf792aa7f84ba6c7

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a

URLs

No activity has been detected.

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps were not found.


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Delete the original Trojan file.
  2. Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
    127.0.0.1 localhost
  3. Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
  4. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now