Gen.Variant.Symmi.2478_46ce39df07
Trojan.Win32.Fsysna.dqti (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
| Requires JavaScript enabled! |
|---|
MD5: 46ce39df0750a3cd988ff97e045e4530
SHA1: 502a0d87c2e31af06b8537d5ab498c25e92459aa
SHA256: 07ba38d1f64985d9578d8ee53becddf5744561abada73688a69d1c59c80de0da
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 4959408 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: no certificate found
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit
Summary:
Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Payload
| Behaviour | Description |
|---|---|
| WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):
No processes have been created.
Mutexes
The following mutexes were created/opened:
No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 61703 bytes in size. The following strings are added to the hosts file listed below:
| 173.224.216.58 | viabcp.com |
| 173.224.216.58 | www.viabcp.com |
| 173.224.216.58 | ww2.viabcp.com |
| 173.224.216.58 | bcpzonasegura.viabcp.com |
| 173.224.216.58 | hotmail.com |
| 173.224.216.58 | www.hotmail.com |
| 39.107.158.73 | 13iii.com |
| 71.9.197.75 | 15660808.co.kr |
| 185.247.62.226 | 2-spyware.com |
| 56.243.7.134 | 247fixes.com |
| 76.63.33.123 | 360.cn |
| 109.221.72.193 | 360.com |
| 223.203.5.21 | 360safe.cn |
| 93.199.206.253 | 360safe.com |
| 45.19.164.242 | 45pounds.com |
| 78.177.16.244 | 51nb.com |
| 192.92.136.139 | 9down.com |
| 131.155.81.47 | a-2.org |
| 82.232.40.36 | a188.x.akamai.net |
| 115.133.147.106 | abuse.ch |
| 229.48.11.189 | acs.pandasoftware.com |
| 100.111.213.97 | ad-aware-se.uptodown.com |
| 120.188.239.86 | ad.fastclick.net |
| 152.90.22.156 | ads.fastclick.net |
| 10.4.143.51 | agfirewall.ru |
| 137.68.88.215 | agnitum.com |
| 89.144.114.204 | agnitum.de |
| 190.46.153.18 | agnitum.fr |
| 236.216.18.102 | agnitum.ru |
| 174.24.219.10 | ahn.com.cn |
| 126.100.245.255 | ahnlab.com |
| 159.2.29.69 | akamai.net |
| 17.173.217.220 | aknow.prevx.com |
| 212.236.94.128 | aladdin.com |
| 163.57.121.117 | alert.rising.com.cn |
| 196.214.228.187 | alerta-antivirus.inteco.es |
| 54.129.92.14 | alerta-antivirus.red.es |
| 181.192.38.178 | alladdin.ru |
| 201.13.252.167 | aluriasoftware.com |
| 233.103.103.237 | analysis.seclab.tuwien.ac.at |
| 23.85.224.64 | andymanchesta.com |
| 218.81.169.40 | anti-virus-software-review.com |
| 170.225.195.29 | anti-virus.by |
| 203.59.234.31 | anti-virus.com |
| 61.41.99.183 | antirootkit.com |
| 255.37.44.91 | antispam.sunbeltsoftware.com |
| 207.181.70.80 | antispy.ru |
| 240.15.110.150 | antispyware.sunbeltsoftware.com |
| 98.254.230.233 | antivir.es |
| 225.249.175.209 | antiviraldp.com |
| 244.70.202.198 | antivirus-online.de |
| 21.227.241.200 | antivirus-tools.com |
| 67.210.105.95 | antivirus.about.com |
| 6.205.51.3 | antivirus.cai.com |
| 214.26.77.248 | antivirus.comodo.com |
| 246.184.184.62 | antivirus.hispavista.com |
| 104.166.49.145 | antivirus.sunbeltsoftware.com |
| 43.162.250.53 | antiy.net |
| 251.238.208.42 | anubis.iseclab.org |
| 28.140.59.112 | apac.trendmicro.com |
| 142.122.180.8 | ar.answers.yahoo.com |
| 12.118.125.172 | ar.atwola.com |
| 32.195.83.161 | arcabit.com |
| 65.96.191.231 | arcabit.pl |
| 179.79.55.58 | archive.bitdefender.com |
| 50.74.0.222 | arswp.com |
| 1.151.27.211 | arwww.fortinet.cz |
| 34.52.66.25 | asap.authentium.com |
| 148.35.186.108 | ashampoo.com |
| 87.30.132.84 | atazita.blogspot.com |
| 39.107.158.73 | atdmt.com |
| 71.9.197.75 | attechnical.com |
| 185.247.62.226 | atwola.com |
| 56.243.7.134 | au.mcafee.com |
| 76.63.33.123 | auditmypc.com |
| 109.221.72.193 | authentium.com |
| 223.203.5.21 | auwww.ealaddin.nl |
| 93.199.206.253 | avast-home.uptodown.com |
| 45.19.164.242 | avast.com |
| 78.177.16.244 | avast.ru |
| 192.92.136.139 | avg-antivirus.net |
| 131.155.81.47 | avg.com |
| 82.232.40.36 | avg.vo.llnwd.net |
| 115.133.147.106 | avgate.net |
| 229.48.11.189 | avgfrance.com |
| 100.111.213.97 | avhide.com |
| 120.188.239.86 | avira.com |
| 152.90.22.156 | avp.ch |
| 10.4.143.51 | avp.com |
| 137.68.88.215 | avp.ru |
| 89.144.114.204 | avpclub.ddns.info |
| 190.46.153.18 | avu.zonelabs.com |
| 236.216.18.102 | avx.rob-have.net |
| 174.24.219.10 | awaps.net |
| 126.100.245.255 | b-have.orgbitdefender-ar.com |
| 159.2.29.69 | babooforum.com.br |
| 17.173.217.220 | backup.comodo.com |
| 212.236.94.128 | baike.360.cn |
| 163.57.121.117 | baike.360.com |
| 196.214.228.187 | bakunos.com |
| 54.129.92.14 | banner.fastclick.net |
| 181.192.38.178 | banners.fastclick.net |
| 201.13.252.167 | baristamagazine.com |
| 233.103.103.237 | basetendencies.com |
| 23.85.224.64 | bbs.360.cn |
| 218.81.169.40 | bbs.360safe.cn |
| 170.225.195.29 | bbs.360safe.com |
| 203.59.234.31 | bbs.cfan.com.cn |
| 61.41.99.183 | bbs.cpcw.com |
| 255.37.44.91 | bbs.dswlab.com |
| 207.181.70.80 | bbs.duba.net |
| 240.15.110.150 | bbs.ikaka.com |
| 98.254.230.233 | bbs.janmeng.com |
| 225.249.175.209 | bbs.kafan.cn |
| 244.70.202.198 | bbs.kafan.com |
| 21.227.241.200 | bbs.kaspersky.com.cn |
| 67.210.105.95 | bbs.kpfans.com |
| 6.205.51.3 | bbs.mcafeefans.com |
| 214.26.77.248 | bbs.s-sos.net |
| 246.184.184.62 | bbs.sucop.com |
| 104.166.49.145 | bbs.taisha.org |
| 43.162.250.53 | bbs.trendmicro.com.cn |
| 251.238.208.42 | bbs.winzheng.com |
| 28.140.59.112 | bestofewan.com |
| 142.122.180.8 | beta.anti-virus.by |
| 12.118.125.172 | bg.virusblokada.com |
| 32.195.83.161 | bhsbees.com |
| 65.96.191.231 | bitcity.info |
| 179.79.55.58 | bitcity.org |
| 50.74.0.222 | bitdefender.co.uk |
| 1.151.27.211 | bitdefender.com |
| 34.52.66.25 | bitdefender.com.ua |
| 148.35.186.108 | bitdefender.es |
| 87.30.132.84 | bitdefender.org |
| 39.107.158.73 | bitdefender.secyber.net |
| 71.9.197.75 | bitdefenderchina.com |
| 185.247.62.226 | bitdefenderguatemala.com |
| 56.243.7.134 | bitdefendermalaysia.com |
| 76.63.33.123 | bitdefendertaiwan.com |
| 109.221.72.193 | bitdefenderuruguay.com |
| 223.203.5.21 | bitdefenderusa.com |
| 77.183.190.237 | biz.nprotect.com |
| 29.4.148.226 | bkav.com.vn |
| 62.161.0.228 | blackice.iss.net |
| 176.76.120.123 | bleedingthreats.net |
| 115.139.65.31 | bleepingcomputer.com |
| 66.216.24.20 | blitzblank.com |
| 99.117.131.90 | blog.hispasec.com |
| 213.32.251.173 | blog.threatfire.com |
| 84.95.197.81 | blog.titanium-jewelry.com |
| 104.172.223.70 | blog.trendmicro.com |
| 136.74.6.140 | blogs.icerocket.com |
| 250.244.127.35 | blogs.protegerse.com |
| 121.52.72.199 | blogschapines.com |
| 73.128.98.188 | boardreader.com |
| 174.30.138.3 | bobbondart.com |
| 220.200.2.86 | br.mcafee.com |
| 158.8.203.250 | br.trendmicro.com |
| 110.85.229.239 | brazil.kaspersky.com |
| 143.242.13.53 | buddy.bitdefender.com |
| 1.157.201.204 | bugs.clamav.net |
| 196.220.78.112 | buscafacil.com |
| 147.41.105.101 | buscalo.in |
| 180.198.212.171 | busco.in |
| 38.113.76.254 | buy.bitdefender-es.com |
| 165.176.22.162 | buy.bitdefender.com |
| 185.253.236.151 | buy.bitdefender.de |
| 217.87.87.221 | buy.drweb.com |
| 7.69.208.48 | buy.rising.com.cn |
| 202.65.153.24 | ca.com |
| 154.209.179.13 | cacomvip.ca.com |
| 187.43.219.16 | cai.com |
| 45.25.83.167 | canada.karuna-shechen.org |
| 239.21.28.75 | castlecops.com |
| 191.166.54.64 | castlecrops.com |
| 224.255.94.134 | ccslaughterspdx.com |
| 82.238.214.217 | cddchiangmai.net |
| 209.233.159.193 | cdn.atwola.com |
| 228.54.186.182 | center.rising.com.cn |
| 5.211.225.184 | centralcommand.com |
| 51.194.89.79 | cert.org |
| 246.189.35.243 | cfan.com.cn |
| 198.10.61.232 | cgi.clamav.net |
| 231.168.168.46 | changedetection.com |
| 88.150.33.129 | changelog.fr |
| 27.146.234.21 | channelpartner.trendmicro.com |
| 219.206.176.11 | chickensroamfree.com |
| 252.108.28.81 | chkrootkit.org |
| 110.90.148.232 | chollian.nprotect.co.kr |
| 236.86.93.140 | cisrt.org |
| 0.163.52.129 | cit.kookmin.ac.kr |
| 33.64.159.199 | clamav.net |
| 147.47.23.26 | clamwin.com |
| 18.42.224.190 | click.atdmt.com |
| 225.119.251.179 | clicks.atdmt.com |
| 2.20.34.249 | cloudprotection.pandasecurity.com |
| 116.3.154.76 | clubic.com |
| 55.255.100.52 | cmmings.cn |
| 7.75.126.41 | cn.mcafee.com |
| 40.233.165.43 | cn.sophos.com |
| 153.215.30.194 | cn.trendmicro.com |
| 24.211.231.102 | codehard.wordpress.com |
| 44.31.1.91 | cohartuk.com |
| 77.189.41.162 | commentcamarche.net |
| 191.171.229.245 | community.thaiware.com |
| 61.167.174.221 | comodo.com |
| 13.244.133.210 | company.drweb.com |
| 46.145.240.212 | company.hauri.co.kr |
| 160.60.104.107 | company.hauri.net |
| 99.123.49.15 | computing.net |
| 50.200.8.4 | comunidad.wilkinsonpc.com.co |
| 83.101.115.74 | configurarequipos.com |
| 197.16.235.157 | coresecurity.com |
| 68.80.181.65 | cou85.com |
| 88.156.207.54 | cowsmo.com |
| 121.58.246.124 | cpsecure.com |
| 234.228.111.19 | csc.rising.com.cn |
| 105.36.56.183 | cureit.ru |
| 57.112.82.172 | customer.symantec.com |
| 158.14.122.243 | customers.drweb.com |
| 204.184.242.70 | cutlines.org |
| 142.248.187.234 | cwsandbox.org |
| 94.69.214.223 | cybercrime.pandasecurity.com |
| 127.226.253.37 | cyberdefender.com |
| 241.141.185.188 | cybertechhelp.com |
| 180.204.62.96 | daboweb.com |
| 131.25.89.85 | daniloff.net |
| 164.182.196.155 | daniweb.com |
| 22.97.60.238 | darkclockers.com |
| 149.161.6.146 | dazhizhu.cn |
| 169.237.220.135 | de.bitdefender.com |
| 202.71.71.205 | de.mcafee.com |
| 247.53.192.32 | de.trendmicro.com |
| 170.33.121.248 | deckard.geekstogo.com |
| 122.177.147.238 | deerfield.com |
| 155.11.187.240 | defalcos.com |
| 13.250.51.135 | definitions.symantec.com |
| 207.245.252.43 | dell.symantec.com |
| 159.134.23.32 | demos.eset.es |
| 192.223.62.102 | descargas.eset.es |
| 50.206.182.185 | dev.depeuter.org |
| 177.201.127.161 | developmentdrums.org |
| 197.22.154.150 | dialognauka.ru |
| 229.179.193.152 | diamondcs.com.au |
| 19.162.57.47 | dicasweb.com.br |
| 214.158.3.211 | discussions.virtualdr.com |
| 166.234.29.200 | disk-encryption.comodo.com |
| 199.136.136.14 | dl.360safe.com |
| 56.118.1.97 | dl1.antivir-pe.com |
| 251.114.202.5 | dl1.antivir-pe.de |
| 203.190.160.251 | dl1.antivir.de |
| 236.92.12.65 | dl1.avgate.net |
| 94.75.132.216 | dl10.freeav.net |
| 220.70.77.124 | dl2.antivir-pe.com |
| 240.147.36.113 | dl2.antivir-pe.de |
| 17.48.143.183 | dl2.antivir.de |
| 131.31.7.10 | dl2.avgate.net |
| 2.26.208.174 | dl3.antivir-pe.de |
| 210.103.235.163 | dl3.antivir.de |
| 242.4.18.233 | dl3.avgate.net |
| 100.243.138.60 | dl4.antivir-pe.com |
| 39.239.84.36 | dl4.antivir-pe.de |
| 247.59.110.25 | dl4.antivir.de |
| 24.217.149.27 | dl4.avgate.net |
| 137.199.14.178 | dl5.avgate.net |
| 8.195.215.86 | dl6.avgate.net |
| 28.15.241.76 | dl7.avgate.net |
| 61.157.9.130 | dl8.avgate.net |
| 159.140.197.213 | dl8.freeav.net |
| 30.135.142.189 | dl9.avgate.net |
| 237.212.101.178 | dl9.freeav.net |
| 14.113.208.180 | dnl-cd1.kaspersky-labs.com |
| 128.28.72.75 | dnl-cd10.kaspersky-labs.com |
| 67.91.18.239 | dnl-cd11.kaspersky-labs.com |
| 19.168.232.228 | dnl-cd12.kaspersky-labs.com |
| 51.69.83.42 | dnl-cd13.kaspersky-labs.com |
| 165.240.203.125 | dnl-cd2.kaspersky-labs.com |
| 36.48.149.33 | dnl-cd3.kaspersky-labs.com |
| 56.124.175.22 | dnl-cd4.kaspersky-labs.com |
| 89.26.214.92 | dnl-cd5.kaspersky-labs.com |
| 202.196.79.243 | dnl-cd6.kaspersky-labs.com |
| 73.4.24.152 | dnl-cd7.kaspersky-labs.com |
| 25.80.50.141 | dnl-cd8.kaspersky-labs.com |
| 126.238.90.211 | dnl-cd9.kaspersky-labs.com |
| 172.153.210.38 | dnl-cn1.kaspersky-labs.com |
| 111.216.155.202 | dnl-cn10.kaspersky-labs.com |
| 62.37.182.191 | dnl-cn11.kaspersky-labs.com |
| 95.194.221.5 | dnl-cn12.kaspersky-labs.com |
| 193.93.137.140 | dnl-cn13.kaspersky-labs.com |
| 132.156.15.48 | dnl-cn14.kaspersky-labs.com |
| 84.233.41.37 | dnl-cn15.kaspersky-labs.com |
| 116.135.148.107 | dnl-cn2.kaspersky-labs.com |
| 230.49.13.190 | dnl-cn3.kaspersky-labs.com |
| 101.113.214.98 | dnl-cn4.kaspersky-labs.com |
| 121.189.172.87 | dnl-cn5.kaspersky-labs.com |
| 154.23.23.157 | dnl-cn6.kaspersky-labs.com |
| 200.5.144.241 | dnl-cn7.kaspersky-labs.com |
| 138.1.89.217 | dnl-cn8.kaspersky-labs.com |
| 90.145.115.206 | dnl-cn9.kaspersky-labs.com |
| 123.235.155.208 | dnl-eu1.kaspersky-labs.com |
| 237.218.19.103 | dnl-eu10.kaspersky-labs.com |
| 176.213.220.11 | dnl-eu11.kaspersky-labs.com |
| 127.102.247.0 | dnl-eu12.kaspersky-labs.com |
| 160.191.30.70 | dnl-eu13.kaspersky-labs.com |
| 18.174.150.153 | dnl-eu14.kaspersky-labs.com |
| 145.169.96.129 | dnl-eu15.kaspersky-labs.com |
| 165.246.122.118 | dnl-eu2.kaspersky-labs.com |
| 197.148.161.120 | dnl-eu3.kaspersky-labs.com |
| 243.130.26.15 | dnl-eu4.kaspersky-labs.com |
| 182.126.227.179 | dnl-eu5.kaspersky-labs.com |
| 134.202.253.168 | dnl-eu6.kaspersky-labs.com |
| 167.104.104.238 | dnl-eu7.kaspersky-labs.com |
| 24.86.225.66 | dnl-eu8.kaspersky-labs.com |
| 219.82.170.230 | dnl-eu9.kaspersky-labs.com |
| 171.158.128.219 | dnl-jp1.kaspersky-labs.com |
| 204.60.236.33 | dnl-jp10.kaspersky-labs.com |
| 62.43.100.184 | dnl-jp11.kaspersky-labs.com |
| 189.38.45.92 | dnl-jp12.kaspersky-labs.com |
| 208.115.4.81 | dnl-jp13.kaspersky-labs.com |
| 241.16.111.151 | dnl-jp14.kaspersky-labs.com |
| 99.255.231.234 | dnl-jp15.kaspersky-labs.com |
| 226.250.177.142 | dnl-jp2.kaspersky-labs.com |
| 178.71.203.131 | dnl-jp3.kaspersky-labs.com |
| 210.229.242.201 | dnl-jp4.kaspersky-labs.com |
| 68.211.107.28 | dnl-jp5.kaspersky-labs.com |
| 7.207.36.244 | dnl-jp6.kaspersky-labs.com |
| 199.11.62.233 | dnl-jp7.kaspersky-labs.com |
| 232.169.102.236 | dnl-jp8.kaspersky-labs.com |
| 90.151.222.131 | dnl-jp9.kaspersky-labs.com |
| 216.147.167.39 | dnl-kr1.kaspersky-labs.com |
| 236.224.193.28 | dnl-kr10.kaspersky-labs.com |
| 13.125.233.98 | dnl-kr11.kaspersky-labs.com |
| 127.108.165.181 | dnl-kr12.kaspersky-labs.com |
| 254.103.110.157 | dnl-kr13.kaspersky-labs.com |
| 205.180.69.146 | dnl-kr15.kaspersky-labs.com |
| 238.81.176.148 | dnl-kr2.kaspersky-labs.com |
| 96.252.40.43 | dnl-kr3.kaspersky-labs.com |
| 35.59.242.207 | dnl-kr4.kaspersky-labs.com |
| 243.136.200.196 | dnl-kr5.kaspersky-labs.com |
| 19.38.51.10 | dnl-kr6.kaspersky-labs.com |
| 133.208.172.93 | dnl-kr7.kaspersky-labs.com |
| 4.16.117.1 | dnl-kr8.kaspersky-labs.com |
| 24.92.143.246 | dnl-kr9.kaspersky-labs.com |
| 57.250.183.60 | dnl-ru1.kaspersky-labs.com |
| 171.164.47.212 | dnl-ru10.kaspersky-labs.com |
| 41.228.248.120 | dnl-ru11.kaspersky-labs.com |
| 249.49.18.109 | dnl-ru12.kaspersky-labs.com |
| 94.206.58.179 | dnl-ru13.kaspersky-labs.com |
| 140.121.178.6 | dnl-ru14.kaspersky-labs.com |
| 79.184.123.170 | dnl-ru15.kaspersky-labs.com |
| 30.5.150.159 | dnl-ru2.kaspersky-labs.com |
| 63.162.189.229 | dnl-ru3.kaspersky-labs.com |
| 177.77.121.124 | dnl-ru4.kaspersky-labs.com |
| 116.140.255.32 | dnl-ru5.kaspersky-labs.com |
| 68.217.25.21 | dnl-ru6.kaspersky-labs.com |
| 100.119.132.91 | dnl-ru7.kaspersky-labs.com |
| 214.33.253.174 | dnl-ru8.kaspersky-labs.com |
| 85.97.198.82 | dnl-ru9.kaspersky-labs.com |
| 105.173.156.71 | dnl-us1.kaspersky-labs.com |
| 138.7.8.141 | dnl-us10.kaspersky-labs.com |
| 184.245.128.225 | dnl-us11.kaspersky-labs.com |
| 122.241.73.201 | dnl-us12.kaspersky-labs.com |
| 74.130.99.190 | dnl-us13.kaspersky-labs.com |
| 107.219.139.192 | dnl-us14.kaspersky-labs.com |
| 221.202.3.87 | dnl-us15.kaspersky-labs.com |
| 160.197.204.251 | dnl-us2.kaspersky-labs.com |
| 111.86.215.224 | dnl-us3.kaspersky-labs.com |
| 128.159.254.38 | dnl-us4.kaspersky-labs.com |
| 242.142.118.121 | dnl-us5.kaspersky-labs.com |
| 113.138.64.97 | dnl-us6.kaspersky-labs.com |
| 133.214.90.86 | dnl-us7.kaspersky-labs.com |
| 166.116.129.88 | dnl-us8.kaspersky-labs.com |
| 211.98.250.239 | dnl-us9.kaspersky-labs.com |
| 150.94.195.147 | dougknox.com |
| 102.170.221.136 | down.360safe.cn |
| 135.72.73.207 | down.360safe.com |
| 249.54.193.34 | download.avg.com |
| 187.50.138.198 | download.bleepingcomputer.com |
| 139.127.97.187 | download.com |
| 172.28.204.1 | download.com.vn |
| 30.11.68.152 | download.eset.com |
| 157.6.13.60 | download.f-secure.com |
| 176.83.228.49 | download.mcafee.com |
| 209.240.79.119 | download.microsoft.com |
| 67.223.199.202 | download.microsoft.comguru0.grisoft.cz |
| 194.219.145.110 | download.nai.com |
| 146.39.171.99 | download.norman.no |
| 179.197.210.169 | download.rising.com.cn |
| 36.179.75.252 | download.softpedia.com |
| 231.175.20.228 | download.sysinternals.com |
| 183.251.46.217 | download0.avast.com |
| 216.153.86.220 | download1.avast.com |
| 74.135.206.115 | download1.emsisoft.com |
| 200.131.151.23 | download1.quickheal.com |
| 220.208.177.12 | download10.quickheal.com |
| 253.109.217.82 | download100.avast.com |
| 111.92.149.165 | download1us.softpedia.com |
| 238.87.94.141 | download2.avast.com |
| 189.164.53.130 | download2.quickheal.com |
| 222.65.160.132 | download200.avast.com |
| 80.236.24.27 | download201.avast.com |
| 19.44.226.175 | download202.avast.com |
| 211.104.168.164 | download203.avast.com |
| 244.6.19.234 | download204.avast.com |
| 101.176.140.61 | download205.avast.com |
| 228.240.85.225 | download206.avast.com |
| 248.60.111.215 | download207.avast.com |
| 25.218.151.29 | download208.avast.com |
| 139.133.15.180 | download209.avast.com |
| 9.196.216.88 | download210.avast.com |
| 217.17.243.77 | download211.avast.com |
| 62.174.26.147 | download212.avast.com |
| 108.89.146.230 | download213.avast.com |
| 47.152.91.138 | download214.avast.com |
| 255.229.118.127 | download3.avast.com |
| 31.130.157.197 | download3.quickheal.com |
| 145.45.89.92 | download4.avast.com |
| 84.109.223.0 | download4.emsisoft.com |
| 36.185.249.245 | download4.quickheal.com |
| 69.87.100.59 | download5.avast.com |
| 182.1.221.142 | download5.emsisoft.com |
| 53.65.166.50 | download5.quickheal.com |
| 73.141.124.40 | download501.avast.com |
| 106.231.232.110 | download502.avast.com |
| 152.213.96.193 | download503.avast.com |
| 90.209.41.169 | download504.avast.com |
| 42.98.68.158 | download505.avast.com |
| 75.187.107.160 | download511.avast.com |
| 189.170.227.55 | download512.avast.com |
| 128.165.172.219 | download513.avast.com |
| 80.54.199.208 | download514.avast.com |
| 112.143.238.22 | download515.avast.com |
| 226.126.102.105 | download516.avast.com |
| 97.122.48.81 | download535.avast.com |
| 117.198.74.70 | download6.avast.com |
| 150.100.113.72 | download6.quickheal.com |
| 195.82.234.223 | download600.avast.com |
| 134.78.179.131 | download601.avast.com |
| 86.154.205.121 | download602.avast.com |
| 103.40.41.175 | download603.avast.com |
| 217.23.161.2 | download604.avast.com |
| 155.18.106.166 | download605.avast.com |
| 107.95.65.155 | download606.avast.com |
| 140.252.172.225 | download607.avast.com |
| 254.235.36.120 | download608.avast.com |
| 125.230.238.28 | download609.avast.com |
| 145.51.196.17 | download617.avast.com |
| 177.208.47.87 | download618.avast.com |
| 35.191.167.170 | download619.avast.com |
| 162.187.113.78 | download620.avast.com |
| 114.7.139.67 | download621.avast.com |
| 147.165.178.137 | download622.avast.com |
| 4.147.43.220 | download623.avast.com |
| 199.143.244.197 | download624.avast.com |
| 151.219.14.186 | download625.avast.com |
| 184.121.54.188 | download626.avast.com |
| 42.104.174.83 | download627.avast.com |
| 169.99.119.247 | download628.avast.com |
| 188.176.146.236 | download629.avast.com |
| 221.77.185.50 | download630.avast.com |
| 79.60.117.133 | download631.avast.com |
| 206.55.63.109 | download632.avast.com |
| 158.132.21.98 | download633.avast.com |
| 190.33.128.100 | download634.avast.com |
| 48.204.248.251 | download635.avast.com |
| 243.12.194.159 | download636.avast.com |
| 195.88.152.148 | download637.avast.com |
| 228.246.3.218 | download638.avast.com |
| 85.160.124.45 | download639.avast.com |
| 212.224.69.210 | download640.avast.com |
| 232.44.95.199 | download641.avast.com |
| 9.202.135.13 | download642.avast.com |
| 123.117.255.164 | download643.avast.com |
| 249.180.200.72 | download644.avast.com |
| 201.1.227.61 | download645.avast.com |
| 46.158.10.131 | download646.avast.com |
| 92.73.130.214 | download647.avast.com |
| 31.136.76.122 | download648.avast.com |
| 223.197.86.95 | download649.avast.com |
| 255.99.125.165 | download650.avast.com |
| 113.13.58.60 | download651.avast.com |
| 52.77.191.224 | download652.avast.com |
| 4.153.217.213 | download653.avast.com |
| 37.55.68.27 | download654.avast.com |
| 150.225.189.110 | download655.avast.com |
| 21.33.134.19 | download656.avast.com |
| 41.109.92.8 | download658.avast.com |
| 74.199.200.78 | download659.avast.com |
| 120.182.64.161 | download660.avast.com |
| 59.177.9.137 | download661.avast.com |
| 10.66.36.126 | download662.avast.com |
| 43.155.75.128 | download663.avast.com |
| 157.138.195.23 | download664.avast.com |
| 96.133.141.187 | download665.avast.com |
| 48.22.167.176 | download666.avast.com |
| 80.112.206.246 | download667.avast.com |
| 194.94.71.73 | download668.avast.com |
| 65.90.16.49 | download669.avast.com |
| 85.166.42.38 | download670.avast.com |
| 118.68.81.40 | download671.avast.com |
| 163.50.202.191 | download672.avast.com |
| 102.46.147.100 | download673.avast.com |
| 54.122.173.89 | download674.avast.com |
| 87.24.25.159 | download675.avast.com |
| 201.7.145.242 | download676.avast.com |
| 140.2.90.150 | download677.avast.com |
| 91.79.49.139 | download678.avast.com |
| 124.236.156.209 | download679.avast.com |
| 238.219.20.104 | download680.avast.com |
| 109.214.222.12 | download681.avast.com |
| 129.35.180.1 | download682.avast.com |
| 161.193.31.71 | download683.avast.com |
| 19.175.152.154 | download684.avast.com |
| 146.171.97.62 | download685.avast.com |
| 98.247.123.51 | download686.avast.com |
| 131.149.162.121 | download687.avast.com |
| 244.131.27.205 | download688.avast.com |
| 183.127.228.181 | download689.avast.com |
| 135.203.254.170 | download690.avast.com |
| 168.105.38.156 | download691.avast.com |
| 10.72.142.51 | download692.avast.com |
| 137.67.87.215 | download693.avast.com |
| 156.144.114.204 | download694.avast.com |
| 189.45.153.18 | download695.avast.com |
| 47.28.85.101 | download696.avast.com |
| 174.23.31.77 | download697.avast.com |
| 126.100.245.66 | download698.avast.com |
| 158.2.96.68 | download699.avast.com |
| 16.172.217.219 | download7.avast.com |
| 211.236.162.127 | download7.quickheal.com |
| 163.56.120.116 | download700.avast.com |
| 196.214.227.186 | download701.avast.com |
| 54.128.92.14 | download702.avast.com |
| 180.192.37.178 | download703.avast.com |
| 200.13.63.167 | download704.avast.com |
| 233.170.103.237 | download705.avast.com |
| 91.85.223.132 | download706.avast.com |
| 218.148.168.40 | download707.avast.com |
| 169.225.195.29 | download708.avast.com |
| 14.126.234.99 | download709.avast.com |
| 60.41.98.182 | download72.avast.com |
| 255.104.44.90 | download73.avast.com |
| 207.181.70.79 | download74.avast.com |
| 239.83.109.149 | download75.avast.com |
| 97.253.42.44 | download76.avast.com |
| 36.61.175.208 | download77.avast.com |
| 244.137.201.197 | download78.avast.com |
| 21.39.52.11 | download79.avast.com |
| 135.209.173.95 | download8.quickheal.com |
| 5.17.118.3 | download80.avast.com |
| 25.94.76.248 | download81.avast.com |
| 58.183.184.62 | download82.avast.com |
| 104.166.48.145 | download83.avast.com |
| 43.161.249.121 | download84.avast.com |
| 250.50.20.110 | download85.avast.com |
| 27.139.59.112 | download9.quickheal.com |
| 141.122.179.7 | download900.avast.com |
| 80.117.125.171 | download901.avast.com |
| 32.6.151.160 | download902.avast.com |
| 64.96.190.230 | download903.avast.com |
| 178.78.55.57 | download904.avast.com |
| 49.74.0.33 | download905.avast.com |
| 69.150.26.22 | download906.avast.com |
| 102.52.66.24 | download907.avast.com |
| 148.34.186.176 | download908.avast.com |
| 86.30.131.84 | download909.avast.com |
| 38.107.157.73 | download91.avast.com |
| 71.8.9.143 | download910.avast.com |
| 185.247.129.226 | download911.avast.com |
| 124.242.74.134 | download912.avast.com |
| 75.63.33.123 | download913.avast.com |
| 108.220.140.193 | download914.avast.com |
| 222.203.4.88 | download915.avast.com |
| 93.198.206.252 | download916.avast.com |
| 113.19.164.241 | download917.avast.com |
| 145.177.15.55 | download918.avast.com |
| 3.159.136.138 | download919.avast.com |
| 130.155.81.46 | download92.avast.com |
| 82.231.107.19 | download920.avast.com |
| 99.117.131.90 | download921.avast.com |
| 213.99.251.173 | download922.avast.com |
| 151.95.196.149 | download923.avast.com |
| 103.172.222.138 | download924.avast.com |
| 136.73.6.140 | download925.avast.com |
| 250.56.126.35 | download926.avast.com |
| 121.51.71.199 | download927.avast.com |
| 140.128.98.188 | download928.avast.com |
| 173.29.137.2 | download929.avast.com |
| 31.12.69.85 | download93.avast.com |
| 158.7.15.61 | download930.avast.com |
| 110.84.229.50 | download931.avast.com |
| 143.242.80.52 | download932.avast.com |
| 0.156.201.203 | download933.avast.com |
| 195.220.146.111 | download934.avast.com |
| 147.40.104.100 | download935.avast.com |
| 180.198.212.171 | download936.avast.com |
| 38.112.76.254 | download937.avast.com |
| 164.176.21.162 | download938.avast.com |
| 184.253.47.151 | download939.avast.com |
| 217.154.87.221 | download94.avast.com |
| 75.69.207.116 | download940.avast.com |
| 202.132.152.24 | download941.avast.com |
| 153.209.179.13 | download942.avast.com |
| 254.110.218.83 | download943.avast.com |
| 44.25.82.166 | download944.avast.com |
| 239.88.28.74 | download945.avast.com |
| 191.165.54.63 | download946.avast.com |
| 224.67.93.133 | download947.avast.com |
| 81.237.26.28 | download948.avast.com |
| 20.45.159.192 | download949.avast.com |
| 228.121.185.181 | download95.avast.com |
| 5.23.37.252 | download950.avast.com |
| 119.193.157.79 | download951.avast.com |
| 245.1.102.243 | download952.avast.com |
| 9.78.60.232 | download953.avast.com |
| 42.167.168.46 | download954.avast.com |
| 88.150.32.129 | download955.avast.com |
| 27.145.233.105 | download956.avast.com |
| 234.34.4.94 | download957.avast.com |
| 11.123.43.96 | download958.avast.com |
| 125.106.163.247 | download959.avast.com |
| 64.102.109.155 | download96.avast.com |
| 16.246.135.144 | download960.avast.com |
| 49.80.174.214 | download961.avast.com |
| 162.62.39.41 | download962.avast.com |
| 33.58.240.17 | download963.avast.com |
| 53.134.10.6 | download964.avast.com |
| 86.36.50.9 | download965.avast.com |
| 132.18.170.160 | download966.avast.com |
| 70.14.115.68 | download967.avast.com |
| 22.91.141.57 | download968.avast.com |
| 55.248.249.127 | download969.avast.com |
| 169.231.113.210 | download97.avast.com |
| 108.226.41.100 | download970.avast.com |
| 42.29.255.90 | download971.avast.com |
| 75.187.107.160 | download972.avast.com |
| 189.169.227.55 | download973.avast.com |
| 59.165.172.219 | download974.avast.com |
| 79.242.131.208 | download975.avast.com |
| 112.143.238.22 | download976.avast.com |
| 226.126.102.105 | download977.avast.com |
| 97.121.47.13 | download978.avast.com |
| 49.198.74.2 | download979.avast.com |
| 81.99.113.72 | download98.avast.com |
| 195.82.233.155 | download980.avast.com |
| 134.78.179.131 | download99.avast.com |
| 86.154.205.120 | downloads-eu1.kaspersky-labs.com |
| 119.56.244.122 | downloads-eu2.kaspersky-labs.com |
| 232.38.109.17 | downloads-eu3.kaspersky-labs.com |
| 103.34.54.181 | downloads-eu4.kaspersky-labs.com |
| 123.110.80.171 | downloads-us1.kaspersky-labs.com |
| 156.12.120.241 | downloads-us2.kaspersky-labs.com |
| 14.250.52.68 | downloads-us3.kaspersky-labs.com |
| 140.246.253.44 | downloads-us4.kaspersky-labs.com |
| 92.67.212.33 | downloads.andymanchesta.com |
| 125.224.63.35 | downloads.malwarebytes.org |
| 239.139.183.186 | downloads.microsoft.com |
| 178.202.128.94 | downloads.My-eTrust.com |
| 129.23.87.83 | downloads1.kaspersky-labs.com |
| 162.180.194.153 | downloads2.kaspersky-labs.com |
| 20.95.58.236 | downloads3.kaspersky-labs.com |
| 147.159.4.144 | downloads4.kaspersky-labs.com |
| 167.235.30.133 | downloads5.kaspersky-labs.com |
| 200.137.69.203 | dr-web-cureit.softonic.com |
| 57.35.174.82 | drsolomon.com |
| 168.99.119.246 | drweb-inside.com |
| 120.175.145.236 | drweb.com |
| 221.77.185.50 | drweb.com.es |
| 11.248.49.133 | drweb.net |
| 205.55.250.41 | drwebinside.com |
| 157.132.21.30 | dswlab.com |
| 190.33.60.100 | duba.net |
| 48.204.248.251 | ealaddin.net |
| 243.11.126.159 | ealaddin.orgeshop.aladdin.com |
| 195.88.152.148 | easy-vpn.comodo.com |
| 227.245.3.218 | edm.symantec.com |
| 85.160.123.45 | education.symantec.com |
| 212.224.69.209 | eeload.com |
| 232.44.27.198 | eeye.com |
| 9.134.134.12 | eicar.org |
| 54.116.255.95 | elblogdemanu.com |
| 249.112.200.71 | elitepvpers.de |
| 201.0.226.61 | emea.trendmicro.com |
| 234.90.10.63 | emsisoft.com |
| 92.73.130.214 | emsisoft.de |
| 30.68.75.122 | encarta.msn.com |
| 238.213.102.111 | engine.awaps.net |
| 15.46.141.181 | enterprisesecur.symantec.com |
| 129.29.5.8 | eos.eset.es |
| 0.24.207.240 | eradicatespyware.net |
| 20.101.233.229 | es.answers.yahoo.com |
| 52.2.16.231 | es.kioskea.net |
| 98.241.136.126 | es.mcafee.com |
| 37.237.82.34 | es.trendmicro.com |
| 245.57.108.23 | es.wasalive.com |
| 22.215.215.93 | esafe.com |
| 135.197.80.176 | esecurity.livecall.co.kr |
| 74.193.25.85 | eset-la.com |
| 26.13.239.74 | eset.com |
| 59.171.91.144 | eset.es |
| 173.154.211.39 | eset.sk |
| 43.149.156.203 | esp.sophos.com |
| 63.226.115.192 | espanol.answers.yahoo.com |
| 96.127.222.6 | espanol.dir.groups.yahoo.com |
| 210.110.86.73 | espanol.groups.yahoo.com |
| 65.89.16.237 | esupport.trendmicro.com |
| 17.166.42.226 | et.symantec.com |
| 49.68.81.40 | etrr.co.uk |
| 163.50.202.123 | eugrantsadvisor.cz |
| 102.46.147.99 | eugrantsadvisor.de |
| 54.122.173.88 | eval.symantec.com |
| 87.24.212.90 | ewido.net |
| 200.6.77.241 | exchangeyourcareer.net |
| 71.2.22.150 | experts-exchange.com |
| 91.78.48.139 | f-prot.com |
| 124.236.88.209 | f-secure.com |
| 238.219.20.36 | f-secure.frf-secure.hk |
| 109.214.221.12 | f-secure.nlfsecure.com |
| 60.35.180.1 | fastclick.net |
| 93.192.31.3 | feedage.com |
| 207.107.151.154 | feeds.sophos.com |
| 146.170.97.62 | feeds.trendmicro.com |
| 98.247.55.51 | file.ikaka.cn |
| 130.149.162.121 | file.ikaka.com |
| 244.63.26.204 | file.net |
| 115.127.228.112 | files.avast.com |
| 135.203.254.101 | files.filefont.com |
| 168.105.37.171 | files.trendmicro-europe.com |
| 25.19.158.66 | filseclab.com |
| 152.83.103.231 | final4ever.com |
| 104.159.129.220 | finjan.com |
| 205.61.169.34 | firewall.sunbeltsoftware.com |
| 251.232.33.117 | firewallguide.com |
| 190.39.234.25 | fixmyim.com |
| 141.116.5.14 | foro.ethek.com |
| 174.17.44.84 | foros.toxico-pc.com |
| 32.188.232.235 | foros.zonavirus.com |
| 227.251.110.143 | forospanish.com |
| 179.72.136.132 | forospyware.com |
| 211.230.243.202 | forospyware.es |
| 69.144.107.29 | fortiguardcenter.com |
| 196.208.53.193 | fortihero.com |
| 216.28.11.182 | fortilog.com |
| 249.118.118.252 | fortinet.co.at |
| 38.100.239.79 | fortinet.com |
| 217.80.168.40 | fortiprotect.com |
| 169.224.194.29 | fortiwifi.com |
| 202.58.234.31 | forum.clubedohardware.com.br |
| 60.41.98.182 | forum.emsisoft.com |
| 255.36.43.90 | forum.hardware.fr |
| 206.181.70.79 | forum.hijackthis.de |
| 239.14.109.149 | forum.ikaka.com |
| 97.253.229.232 | forum.jiangmin.com |
| 224.248.175.208 | forum.kaspersky.com |
| 244.69.201.197 | forum.malekal.com |
| 20.227.240.199 | forum.piriform.com |
| 66.209.105.94 | forum.securitycadets.com |
| 5.205.50.2 | forum.sysinternals.com |
| 213.25.76.247 | forum.telecharger.01net.com |
| 246.183.183.61 | forum.tweaks.com |
| 104.165.48.145 | forum.zazana.com |
| 42.161.249.53 | forums.cnet.com |
| 250.238.207.42 | forums.comodo.com |
| 27.139.59.112 | forums.devshed.com |
| 141.122.179.7 | forums.maddoktor2.com |
| 12.117.124.171 | forums.majorgeeks.com |
| 31.194.83.160 | forums.techguy.org |
| 64.95.190.230 | forums.whatthetech.com |
| 178.78.54.57 | fr.bitdefender.com |
| 49.73.0.221 | fr.drweb.com |
| 1.150.26.210 | fr.mcafee.com |
| 33.52.65.24 | fr.trendmicro.com |
| 147.34.186.107 | fr1.drweb.com |
| 86.30.131.83 | fr2.drweb.com |
| 38.106.157.72 | fr3.drweb.com |
| 55.248.181.59 | fr4.drweb.com |
| 169.230.45.210 | fr5.drweb.com |
| 39.226.246.118 | fr6.drweb.com |
| 59.47.16.107 | fr7.drweb.com |
| 92.204.56.177 | fractus.mat.uson.mx |
| 206.187.244.4 | free-av.com |
| 77.182.189.236 | free-av.net |
| 28.3.148.225 | free.antivirus.com |
| 61.160.255.227 | free.avg.com |
| 175.75.119.122 | free.drweb.com |
| 114.138.65.30 | free.grisoft.com |
| 66.215.23.19 | free.grisoft.cz |
| 98.117.130.89 | free.pandasecurity.com |
| 212.31.251.172 | free.prevx.com |
| 83.95.196.80 | free.tinypicbox.com |
| 103.171.222.69 | freeav.com |
| 136.73.6.140 | freeav.net |
| 250.243.126.35 | freespywareremoval.info |
| 120.51.71.199 | frisk-software.com |
| 72.128.97.188 | fsc.norman.com |
| 173.29.137.2 | fsecure.nlwebyard.com |
| 219.200.1.85 | ftp.avp.com |
| 158.7.202.249 | ftp.bitdefender.com |
| 109.84.229.238 | ftp.ca.co |
| 142.241.12.52 | ftp.ca.com |
| 0.156.200.203 | ftp.customer.symantec.com |
| 195.219.78.111 | ftp.dispatch.mcafee.com |
| 147.40.104.100 | ftp.download.mcafee.com |
| 179.198.211.170 | ftp.downloads-eu1.kaspersky-labs.com |
| 37.112.60.237 | ftp.downloads-eu2.kaspersky-labs.com |
| 148.160.5.145 | ftp.downloads-eu3.kaspersky-labs.com |
| 168.236.219.134 | ftp.downloads-eu4.kaspersky-labs.com |
| 201.70.71.205 | ftp.downloads-us1.kaspersky-labs.com |
| 247.52.191.32 | ftp.downloads-us2.kaspersky-labs.com |
| 185.48.136.8 | ftp.downloads-us3.kaspersky-labs.com |
| 137.193.163.253 | ftp.downloads-us4.kaspersky-labs.com |
| 170.26.202.255 | ftp.downloads1.kaspersky-labs.com |
| 28.9.66.150 | ftp.downloads2.kaspersky-labs.com |
| 223.4.11.58 | ftp.downloads3.kaspersky-labs.com |
| 174.149.38.47 | ftp.downloads4.kaspersky-labs.com |
| 207.238.77.117 | ftp.drweb.com |
| 65.221.197.200 | ftp.esafe.com |
| 192.217.143.176 | ftp.europe.f-secure.com |
| 212.37.169.165 | ftp.f-prot.com |
| 245.195.208.167 | ftp.f-secure.com |
| 34.177.73.62 | ftp.grisoft.com |
| 229.173.18.226 | ftp.kaspersky-labs.com |
| 181.249.44.215 | ftp.kaspersky.com |
| 214.151.152.30 | ftp.kasperskylab.ru |
| 72.133.16.113 | ftp.liveupdate.symantec.com |
| 10.129.217.21 | ftp.liveupdate.symantecliveupdate.com |
| 218.206.176.10 | ftp.mast.mcafee.com |
| 251.107.27.80 | ftp.mcafee.com |
| 109.90.147.231 | ftp.microworldsystems.com |
| 236.85.92.139 | ftp.my-etrust.com |
| 255.146.35.112 | ftp.nai.com |
| 16.47.142.182 | ftp.networkassociates.com |
| 130.30.6.9 | ftp.norton.com |
| 1.26.208.173 | ftp.rads.mcafee.com |
| 209.102.234.162 | ftp.sandbox.norman.com |
| 242.4.17.232 | ftp.secure.nai.com |
| 99.242.138.59 | ftp.securityresponse.symantec.com |
| 38.238.83.35 | ftp.sophos.com |
| 246.58.109.25 | ftp.symantec.com |
| 23.216.149.27 | ftp.symantecliveupdate.com |
| 137.199.13.178 | ftp.symatec.com |
| 7.194.214.86 | ftp.trendmicro.com |
| 27.15.241.75 | ftp.uk.trendmicro-europe.com |
| 60.172.24.145 | ftp.update.symantec.com |
| 174.155.212.228 | ftp.updates.symantec.com |
| 45.150.157.204 | ftp.updates1.kaspersky-labs.com |
| 253.227.116.193 | ftp.updates2.kaspersky-labs.com |
| 29.128.223.195 | ftp.updates3.kaspersky-labs.com |
| 143.43.87.90 | ftp.updates4.kaspersky-labs.com |
| 82.107.33.254 | ftp.us.mcafee.com |
| 34.183.247.243 | ftp.viruslist.com |
| 67.85.98.57 | funkytoad.com |
| 180.255.219.140 | futurenow.bitdefender.com |
| 51.63.164.48 | fw.rising.com.cn |
| 71.139.190.38 | fx.dk |
| 104.41.230.108 | gangbang.mytijn.org |
| 202.196.78.243 | gdata.de |
| 73.3.23.151 | gdata.es |
| 24.80.50.140 | gecadsoftware.com |
| 125.237.89.210 | geekstogo.com |
| 171.152.209.37 | global.ahnlab.com |
| 110.215.155.201 | global.jiangmin.com |
| 62.36.181.190 | global.nprotect.com |
| 94.193.220.4 | go.mcafee.com |
| 208.108.152.155 | go.microsoft.com |
| 147.172.30.63 | go.rising.com.cn |
| 99.248.56.52 | go.sunbeltsoftware.com |
| 132.150.163.122 | go.symantec.com |
| 245.64.28.205 | go.trendmicro.com |
| 116.128.229.114 | greatis.com |
| 136.204.187.103 | grisoft.com |
| 169.38.39.173 | grisoft.cz |
| 215.21.159.0 | grv.microsoft.com |
| 154.16.104.232 | guiadohardware.net |
| 105.161.131.221 | guru.avg.com |
| 138.250.170.223 | guru1.grisoft.cz |
| 252.233.34.118 | guru2.grisoft.cz |
| 191.228.236.26 | guru3.grisoft.cz |
| 143.117.6.15 | guru4.grisoft.cz |
| 175.207.45.85 | guru5.grisoft.cz |
| 33.173.150.152 | gwava.nl |
| 144.169.95.128 | hacksoft.com.pe |
| 164.245.121.117 | hacksoft.pe |
| 197.147.160.119 | halmapr.com |
| 243.129.25.15 | hauri.co.kr |
| 181.125.226.179 | hauri.net |
| 133.201.252.168 | haurijapan.com |
| 166.103.104.238 | help.rising.com.cn |
| 24.86.224.65 | hi.baidu.com |
| 219.81.169.229 | hijackthis.de |
| 170.158.128.218 | hijackthis.download3000.com |
| 203.59.235.32 | hishomeforchildren.com |
| 61.42.99.183 | hjt-data.trend-braintree.com |
| 188.37.45.91 | hjt.networktechs.com |
| 208.114.3.80 | home.mcafee.com |
| 240.16.110.150 | hostedmailsecur.symantec.com |
| 98.254.231.233 | hotshare.net |
| 225.250.176.141 | housecall.com |
| 177.70.202.130 | housecall.trendmicro.com |
| 210.228.241.200 | housecall60.trendmicro.com |
| 67.210.106.28 | housecall65.trendmicro.com |
| 6.206.51.4 | howsafeismypc.com |
| 214.26.77.249 | huaifai.go.th |
| 247.184.117.251 | i-vault.comodo.com |
| 105.167.237.146 | iavs.cz |
| 232.162.182.54 | ibusca.me |
| 251.239.209.43 | idauthority.com |
| 12.124.232.97 | ids.kaspersky-labs.com |
| 126.107.164.180 | ieupdate.gdata.de |
| 253.102.110.156 | ieupdate1.gdata.de |
| 205.179.68.145 | ieupdate2.gdata.de |
| 237.81.175.147 | ieupdate3.gdata.de |
| 95.251.40.42 | ieupdate4.gdata.de |
| 34.59.241.206 | ieupdate5.gdata.de |
| 242.135.199.195 | ieupdate6.gdata.de |
| 19.37.51.9 | ikaka.cn |
| 133.207.171.93 | ikaka.com |
| 3.15.116.1 | ikarus.at |
| 23.92.142.246 | ikarus.net |
| 56.249.182.60 | ilove.tigolbittys.info |
| 170.164.46.211 | images.kaspersky.com |
| 41.227.247.119 | in.answers.yahoo.com |
| 248.48.18.108 | incodesolutions.com |
| 93.205.57.178 | info.drweb.com |
| 139.120.177.5 | info.prevx.com |
| 78.183.123.169 | infos-du-net.com |
| 30.4.149.158 | infosecpodcast.com |
| 62.162.188.228 | infospyware.com |
| 176.76.121.123 | inicioid.com |
| 115.140.254.31 | iniciorapido.info |
| 67.216.24.4 | inline-software.de |
| 84.102.116.75 | internetsecurity.comodo.com |
| 198.16.236.158 | intranet.cidiroax.ipn.mx |
| 68.80.181.66 | investor.symantec.com |
| 88.157.140.55 | irc.bigshitsandwich.org |
| 121.246.247.125 | irc.metraiciono.com |
| 167.229.111.208 | iseclab.org |
| 106.224.56.184 | isotopecomics.com |
| 57.113.83.173 | iss.net |
| 90.202.122.175 | it.answers.yahoo.com |
| 204.185.242.70 | it.bitdefender.com |
| 143.181.188.234 | it.mcafee.com |
| 95.69.214.223 | it.trendmicro.com |
| 128.159.253.37 | itw.trendmicro.com |
| 241.141.118.120 | ixomodels.com |
| 112.137.63.96 | ixostore.ixomodels.com |
| 132.213.89.85 | javacoolsoftware.com |
| 165.115.129.88 | jetico.com |
| 211.97.249.239 | jiangmin.com |
| 149.93.194.147 | jiangmin.com.cn |
| 101.170.220.136 | jobs.bitdefender.com |
| 134.71.72.206 | jotti.org |
| 248.54.192.33 | jp.mcafee.com |
| 187.49.137.197 | jp.trendmicro.com |
| 123.110.80.170 | justfacebook.net |
| 155.11.187.240 | k-otik.com |
| 13.250.51.135 | k7computing.com |
| 140.246.253.43 | kaba.360.cn |
| 160.66.211.32 | kaba.360.com |
| 193.224.62.102 | karuna-shechen.org |
| 50.206.183.185 | kaspersky-fr.com |
| 177.202.128.93 | kaspersky-labs.com |
| 129.22.154.83 | kaspersky.co.jp |
| 162.180.194.153 | kaspersky.co.uk |
| 20.162.58.236 | kaspersky.com |
| 214.158.3.212 | kaspersky.com.cn |
| 166.235.30.201 | kaspersky.dk |
| 199.136.69.203 | kaspersky.es |
| 57.119.189.98 | kaspersky.gr |
| 184.114.134.6 | kaspersky.pl |
| 204.191.161.251 | kaspersky.ru |
| 236.92.200.65 | kaspersky.se |
| 94.75.132.148 | kasperskylab.co.kr |
| 221.71.78.124 | kasperskylab.nl |
| 173.147.36.113 | kav.ru |
| 206.49.143.115 | kav.zonelabs.com |
| 63.203.248.250 | kb.bitdefender.com |
| 242.11.193.159 | kb.bitdefender.de |
| 194.87.151.148 | kb.bitdefender.us |
| 227.245.3.218 | kerio.com |
| 85.160.123.45 | kimzimmer.net |
| 212.223.68.209 | kioskea.net |
| 231.44.95.198 | kpfans.com |
| 8.201.134.12 | kr.ahnlab.com |
| 122.116.254.163 | kr.sophos.com |
| 249.179.200.71 | krupunmai.com |
| 201.0.226.60 | kvup.jiangmin.com |
| 45.157.9.130 | kztechs.com |
| 91.72.129.213 | l33t.shadow-mods.net |
| 30.136.75.121 | la.trendmicro.com |
| 238.212.101.110 | ladooscuro.es |
| 15.114.140.180 | laneros.com |
| 128.28.73.75 | latam.kaspersky.com |
| 67.92.206.240 | latin.bitdefender.com |
| 19.168.232.229 | lavasoft.com |
| 52.70.84.43 | lavasoft.nu |
| 166.241.204.126 | lavasoftusa.com |
| 36.48.149.34 | lexikon.ikarus.at |
| 56.125.108.23 | license.drweb.com |
| 89.214.215.93 | linhadefensiva.org |
| 135.181.63.160 | linhadefensiva.uol.com.br |
| 58.176.9.136 | linux.bitdefender.com |
| 10.65.35.125 | lists.clamav.net |
| 42.155.74.127 | liutilities.com |
| 156.137.195.22 | live.sunbeltsoftware.com |
| 95.133.140.186 | liveprotect.net |
| 47.21.166.175 | liveupdate.symantec.com |
| 80.111.205.245 | liveupdate.symantec.d4p.net |
| 193.93.70.73 | liveupdate.symantecliveupdate.com |
| 64.89.15.49 | looknstop.com |
| 84.165.41.38 | lovings.technigoyous.net |
| 117.67.81.40 | lurker.clamav.net |
| 163.50.201.191 | mailcenter.rising.com |
| 102.45.146.99 | mailcenter.rising.com.cn |
| 53.122.173.88 | majorgeeks.com |
| 86.23.24.158 | mall.hauri.co.kr |
| 200.6.144.241 | malwarebytes.org |
| 139.1.90.149 | malwarecity.com |
| 91.78.48.138 | malwarecity.netmalwarecity.org |
| 123.236.155.208 | malwaredomainlist.com |
| 221.202.4.87 | malwarepedia.com |
| 92.198.205.251 | malwareremoval.com |
| 112.18.163.240 | malwarescan.emsisoft.com |
| 145.176.14.54 | malwarescan.emsisoft.de |
| 3.158.135.138 | malwarescan.emsisoft.es |
| 129.154.80.46 | mamutu.com |
| 81.231.106.35 | manuelruvalcaba.com |
| 114.132.146.105 | marian.symantec.com |
| 228.115.10.188 | mast.mcafee.com |
| 167.110.211.164 | mcafee-at-home.com |
| 118.187.238.153 | mcafee.com |
| 151.88.21.155 | mcafeeb2b.com |
| 9.71.141.50 | mcafeefans.com |
| 136.66.87.214 | mcafeeretail.com |
| 156.143.113.203 | mcaffee.com |
| 188.45.152.17 | me.kaspersky.com |
| 46.27.85.100 | media.fastclick.net |
| 173.23.30.76 | megasecurity.org |
| 125.99.244.65 | merijn.org |
| 158.1.95.67 | metascan-online.com |
| 16.171.216.219 | microsoft.com |
| 210.235.161.127 | microsoft.fr |
| 162.40.103.100 | midescargas.com |
| 179.197.211.170 | mirror02.gdata.de |
| 37.112.75.253 | misec.net |
| 164.175.20.161 | mmsk.cn |
| 183.252.47.150 | moneybookers.com |
| 216.153.86.220 | moosoft.com |
| 74.68.206.115 | mop.pandasecurity.com |
| 201.131.152.23 | mostz.com |
| 153.208.178.12 | mozilla-hispano.org |
| 254.110.217.82 | msdn.microsoft.com |
| 43.24.82.165 | msk.drweb.com |
| 238.88.27.73 | msk1.drweb.com |
| 190.164.53.62 | msk2.drweb.com |
| 223.66.93.133 | msk3.drweb.com |
| 81.236.25.28 | msk4.drweb.com |
| 19.44.158.192 | msk5.drweb.com |
| 227.121.184.181 | msk6.drweb.com |
| 4.22.36.251 | msk7.drweb.com |
| 118.193.156.78 | msncleaner.softonic.com |
| 245.0.101.242 | msnfix.changelog.fr |
| 8.77.60.231 | msnvirusremoval.com |
| 41.166.167.45 | msr.mcafee.com |
| 73.134.17.114 | mvps.org |
| 11.130.218.90 | mx.answers.yahoo.com |
| 219.19.245.79 | mx.mcafee.com |
| 252.108.28.81 | mxttchina.com |
| 110.91.148.232 | my-etrust.com |
| 49.86.93.140 | my.drweb.com |
| 0.231.120.129 | mygeekside.com |
| 33.64.159.199 | nabble.com |
| 147.47.23.26 | nai.com |
| 18.43.225.2 | natsko.com |
| 38.119.251.247 | naturesimages.net |
| 71.21.34.249 | net-security.org |
| 116.3.155.144 | network.drweb.com |
| 55.255.100.52 | networkassociates.com |
| 7.75.126.42 | networkassociates.nai.com |
| 40.233.234.112 | networkworld.com |
| 154.215.98.195 | neunet.orgnews.bitdefender.com |
| 92.211.43.103 | new-beta.drweb.com |
| 44.32.2.92 | new-company.drweb.com |
| 77.189.109.162 | new-estore.drweb.com |
| 191.172.229.57 | new-forum.drweb.com |
| 62.167.159.205 | new-partners.drweb.com |
| 66.228.117.194 | new-solutions.drweb.com |
| 98.129.224.8 | new-support.drweb.com |
| 212.112.88.91 | new-www.drweb.com |
| 83.108.34.255 | new.taringa.net |
| 35.184.60.244 | news.drweb.com |
| 68.86.99.58 | newsletters.trendmicro.com |
| 181.68.220.141 | niueight.norman.no |
| 120.64.165.117 | niufive.norman.no |
| 72.140.191.107 | niufour.norman.no |
| 105.42.231.109 | niunine.norman.no |
| 219.25.95.4 | niuone.norman.no |
| 89.20.40.168 | niuseven.norman.no |
| 109.97.67.157 | niusix.norman.no |
| 142.254.106.227 | niuthree.norman.no |
| 0.237.38.54 | niutwo.norman.no |
| 127.232.240.30 | nl.bitdefender.com |
| 79.53.198.19 | noadware.net |
| 111.210.49.21 | nod32.co.uk |
| 225.125.153.156 | nod32.com |
| 148.173.99.64 | nod32.datsec.de |
| 100.249.57.53 | nod32.lu |
| 133.151.164.123 | nod32.ru |
| 246.65.29.206 | norman.com |
| 117.129.230.115 | norton.com |
| 137.205.0.104 | notifier.antivir-pe.de |
| 170.107.40.174 | novirusthanks.org |
| 28.22.160.69 | nprobeta.norman.com |
| 155.85.105.233 | nprotect.com |
| 106.162.132.222 | nprotect.net |
| 207.63.171.36 | nprotect.seoul.go.kr |
| 253.234.35.119 | nsclean.com |
| 192.41.237.27 | ntfaq.co.kr |
| 144.118.7.16 | obscgi.mcafee.com |
| 176.20.46.86 | oem.sunbeltsoftware.com |
| 34.190.234.237 | offensivecomputing.net |
| 229.254.112.145 | office.microsoft.com |
| 181.74.138.134 | oldtimer.geekstogo.com |
| 214.232.245.204 | one.tinypicbox.com |
| 71.146.110.31 | onecare.live.com |
| 198.210.39.180 | online-backup.comodo.com |
| 202.14.253.169 | online.jiangmin.com |
| 235.104.105.239 | online.rising.com.cn |
| 25.87.225.66 | onlinecheck.emsisoft.com |
| 220.82.170.42 | onlinecheck.emsisoft.de |
| 171.227.197.31 | onlinecheck.emsisoft.net |
| 204.60.236.33 | onlinecheck.emsisoft.org |
| 62.43.100.184 | onlinescan.avast.com |
| 1.38.46.92 | openantivirus.org |
| 209.183.72.81 | outpost.pl |
| 241.17.111.151 | ozzu.com |
| 99.255.232.234 | p3dev.taringa.net |
| 226.251.177.210 | pandalabs.pandasecurity.com |
| 246.71.203.199 | pandasecurity.com |
| 23.229.242.201 | pandasoftware.com |
| 69.211.107.97 | pandasoftware.es |
| 7.207.52.5 | pantip.com |
| 215.28.78.250 | pcav.cn |
| 248.185.186.64 | pccreg.antivirus.com |
| 106.168.50.147 | pccreg.trendmicro.com |
| 29.147.235.39 | pcentraide.com |
| 236.224.194.28 | pcguide.com |
| 13.125.45.98 | pchell.com |
| 127.108.165.249 | pcinternetpatrol.com |
| 254.103.111.157 | pcsupportadvisor.com |
| 18.180.69.146 | pctools.com |
| 50.82.176.216 | pda.drweb.com |
| 164.64.41.43 | pedidos.protegerse.com |
| 35.60.242.207 | personal.psu.edu |
| 243.136.12.196 | personalfirewall.comodo.com |
| 20.38.52.11 | pestpatrol.com |
| 134.20.172.94 | pg.hauri.net |
| 72.16.117.70 | phx.corporate-ir.net |
| 24.93.143.59 | pineleafboys.com |
| 57.250.183.61 | podcasts.sophos.com |
| 171.233.47.212 | pogonyuto.forospanish.com |
| 42.228.248.120 | precisesecurity.com |
| 61.49.19.109 | prevx.com |
| 94.206.58.179 | privacy.microsoft.com |
| 208.189.246.6 | products.drweb.com |
| 79.184.192.238 | promotions.drweb.com |
| 15.245.134.211 | psnw.com |
| 48.147.241.213 | pspl.com |
| 161.61.106.108 | pvtc.org |
| 100.125.51.16 | qqjkw.net |
| 52.201.9.5 | quickheal.co.in |
| 85.103.117.76 | quickheal.com |
| 199.17.237.159 | radius.turvamies.com |
| 69.81.182.67 | rads.mcafee.com |
| 89.158.209.56 | ravantivirus.com |
| 122.59.248.126 | raymond.cc |
| 236.230.112.21 | reg-int.nod32-es.com |
| 107.37.57.185 | reg.eset.es |
| 58.114.84.174 | reg.rising.com.cn |
| 159.15.123.244 | register.norman.com |
| 205.186.243.71 | removetrojanvirus.org |
| 144.250.189.235 | renewalcenter.symantec.com |
| 96.70.215.224 | renewals.bitdefender.com |
| 129.228.254.38 | research.microsoft.com |
| 226.126.171.173 | research.pandasecurity.com |
| 165.190.48.81 | research.sunbelt-software.com |
| 117.10.74.71 | resplendence.com |
| 150.168.182.141 | retail.sp.f-secure.com |
| 8.83.46.224 | retail01.sp.f-secure.com |
| 134.146.247.132 | retail02.sp.f-secure.com |
| 154.223.206.121 | ribbonwarehouse.com |
| 187.56.57.191 | rising-global.com |
| 233.39.177.18 | rising.com |
| 172.34.122.250 | rising.com.cn |
| 124.179.149.239 | rolandovera.com |
| 156.12.188.241 | rootkit.com |
| 14.251.52.136 | rootkit.nl |
| 209.247.254.44 | rover800.gaima.co.uk |
| 161.135.24.33 | roysephotos.com |
| 194.225.63.103 | ru.trendmicro.com |
| 51.207.184.186 | ruben.bzin.net |
| 178.203.129.162 | runscanner.net |
| 198.23.155.152 | safe.qq.com |
| 215.165.179.138 | safecomputing.umn.edu |
| 5.148.43.33 | safer-networking.org |
| 200.143.244.197 | safetynet.com |
| 151.220.15.186 | sales.bitdefender.com |
| 184.121.122.0 | samroeng.hi5.com |
| 42.104.242.83 | sandbox.norman.com |
| 237.99.188.247 | sandboxie.com |
| 189.176.146.236 | sapcupgrades.com |
| 221.77.253.50 | sarahmcconnellphotography.net |
| 79.60.117.201 | saverssite.com |
| 206.56.63.109 | scan.anti-trojan.net |
| 226.132.21.98 | scan.kingsoft.com |
| 3.34.128.168 | scan4you.net |
| 116.16.249.251 | scanner.novirusthanks.org |
| 243.12.194.160 | scanner.virus.org |
| 195.88.220.149 | scanner2.novirusthanks.or |
| 228.246.4.219 | schemas.microsoft.com |
| 86.229.124.46 | schemas.xmlsoap.org |
| 25.224.69.22 | sea.symantec.com |
| 232.29.80.251 | search.ca.com |
| 249.186.119.253 | search.mcafee.com |
| 107.169.239.148 | search.symantec.com |
| 234.164.185.56 | seasonsecurity.com |
| 254.241.211.45 | secdreg.org |
| 30.143.250.115 | secubox.aldria.com |
| 144.125.183.198 | secunia.com |
| 15.121.128.174 | secure-email.comodo.com |
| 223.197.86.163 | secure.av-desk.com |
| 0.99.193.165 | secure.nai.com |
| 114.13.58.61 | securecomputing.com |
| 52.77.3.225 | secureme.com |
| 4.153.217.214 | securitoo.com |
| 37.55.69.28 | security.symantec.com |
| 151.226.189.111 | securitycheck.symantec.com |
| 22.33.134.19 | securitynewsportal.com |
| 41.110.161.8 | securityrespons.symantec.com |
| 74.11.200.78 | securityresponse.symantec.com |
| 188.182.64.229 | securitywonks.net |
| 43.229.250.121 | secuser.com |
| 251.50.20.110 | secuser.model-fx.com |
| 95.208.59.180 | sergiwa.com |
| 141.122.180.7 | service.mcafee.com |
| 80.186.125.171 | service1.symantec.com |
| 32.6.151.160 | servicenews.symantec.com |
| 65.164.191.230 | sfdoccentral.symantec.com |
| 179.78.123.126 | shadow.grisoft.cz |
| 117.142.0.34 | shadu.baidu.com |
| 69.219.26.23 | shadu.duba.net |
| 102.120.134.93 | shield.prevx.com |
| 216.35.254.176 | shop.hauri.co.kr |
| 87.98.199.84 | shop.pandasecurity.com |
| 106.175.158.73 | shop.sunbeltsoftware.com |
| 139.8.9.143 | shop.symantec.com |
| 185.247.129.226 | shop.trendmicro.com |
| 124.242.75.202 | shudoo.com |
| 76.131.101.191 | simplysup.com |
| 108.221.140.177 | siren24.nprotect.com |
| 206.187.245.72 | siteadvisor.com |
| 145.183.190.236 | sitedirector.symantec.com |
| 97.71.216.225 | smallbiz.symantec.com |
| 130.161.0.40 | smbstore.trendmicro.com |
| 244.143.120.123 | smokey-services.eu |
| 114.139.65.99 | soccersuck.com |
| 134.216.91.88 | softfaq.com |
| 167.117.131.90 | softonic.com |
| 213.100.251.241 | software-files.download.com |
| 152.95.196.149 | solutions.drweb.com |
| 103.172.223.138 | sophos.com |
| 136.73.74.208 | sophos.fr |
| 250.56.194.35 | sophos1.ucd.ie |
| 189.52.140.199 | sophos10.ucd.ie |
| 141.128.98.188 | sophos2.ucd.ie |
| 174.30.205.2 | sophos5.ucd.ie |
| 31.12.70.153 | sophos6.ucd.ie |
| 158.8.15.61 | sophos7.ucd.ie |
| 178.84.229.50 | sophos8.ucd.ie |
| 195.226.65.105 | sophos9.ucd.ie |
| 53.208.185.188 | soporte.pandasecurity.com |
| 179.204.130.96 | sos.rising.com.cn |
| 131.25.157.85 | sosvirus.changelog.fr |
| 164.182.196.155 | spd.atdmt.com |
| 22.165.60.238 | specs.xmlsoap.org |
| 217.160.5.214 | speedtest.comodo.com |
| 169.237.32.203 | spftrl.digitalriver.com |
| 201.138.71.205 | spyany.com |
| 59.121.191.100 | spyblocker-software.com |
| 186.117.137.8 | spybot.info |
| 206.193.163.253 | spycheck.co.uk |
| 239.95.202.67 | spycheck.es |
| 96.77.135.150 | spychecker.com |
| 223.73.80.126 | spycop.com |
| 175.149.38.116 | spywaredb.com |
| 208.51.146.118 | spywaredlls.prevx.com |
| 66.222.250.253 | spywarefiles.prevx.com |
| 244.13.195.161 | spywareguide.com |
| 196.90.154.150 | spywareinfo.com |
| 229.247.5.220 | spywareterminator.com |
| 87.162.125.47 | square.bitdefender.com |
| 214.225.71.211 | static.yoreparo.com |
| 234.46.97.200 | stats.norton.com |
| 10.203.136.14 | stdio-labs.blogspot.com |
| 124.118.0.165 | stiller.com |
| 251.182.202.73 | store.bitdefender.com |
| 203.2.228.62 | store.de.bitdefender.com |
| 48.160.11.132 | store.drweb.com |
| 93.74.132.215 | store.trendmicro.com |
| 32.138.77.124 | subs.geekstogo.com |
| 240.214.103.113 | subwiz.trendmicro.com |
| 17.116.143.183 | sucop.com |
| 131.31.75.78 | sun.symantec.com |
| 69.94.208.242 | sunbelt-software.com |
| 21.171.235.231 | sunbeltsecurity.com |
| 38.56.70.29 | sunbeltsoftware.com |
| 152.227.190.112 | superboy2010.com.au |
| 23.34.136.20 | superdicas.com.br |
| 43.111.94.9 | superuser.co.kr |
| 75.201.201.79 | support.drweb.com |
| 121.183.66.162 | support.f-secure.com |
| 60.179.11.138 | support.kaspersky.co |
| 12.67.37.127 | support.mcafee.com |
| 45.157.76.129 | support.microsoft.com |
| 158.139.197.24 | support.pandasecurity.com |
| 97.135.142.189 | support.rising-global.com |
| 49.23.168.178 | sybari.com |
| 82.113.208.248 | sygate.com |
| 196.96.72.75 | symantec-ese.baynote.net |
| 67.91.17.51 | symantec.com |
| 86.168.44.40 | symantecliveupdate.com |
| 119.69.83.26 | symatec.com |
| 149.36.187.177 | sysinternals.com |
| 88.31.133.85 | system-cleaner.comodo.com |
| 40.108.159.74 | tallemu.com |
| 72.10.10.144 | taringa.net |
| 186.248.131.227 | tds.diamondcs.com.au |
| 125.244.76.135 | tech.pantip.com |
| 77.64.34.124 | techimo.com |
| 110.222.141.194 | techspot.com |
| 224.204.6.90 | techsupportforum.com |
| 94.200.207.254 | tecniservicioslys.com |
| 114.21.165.243 | tecno-soft.com |
| 147.178.17.57 | tempuri.org |
| 5.161.137.140 | thecomputerpitstop.com |
| 132.156.82.48 | thejokerx.blogspot.com |
| 83.233.109.37 | thetechguide.com |
| 116.134.148.107 | thinkpad.cn |
| 230.117.12.190 | threatexpert.com |
| 169.112.198.150 | threatinfo.trendmicro.com |
| 105.173.224.139 | timeforyourbusi.pandasecurity.com |
| 138.75.7.141 | timestamp.comodoca.com |
| 251.57.128.36 | timestamp.wosign.com |
| 122.53.73.200 | tinysoftware.com |
| 142.129.99.189 | tms.symantec.com |
| 175.31.139.4 | together.pctools.com |
| 33.13.71.87 | tool.ikaka.com |
| 159.9.16.63 | toonbox.de |
| 111.86.230.52 | tr.mcafee.com |
| 144.243.82.54 | trackingtheworld.com |
| 2.158.202.205 | training.drweb.com |
| 197.221.147.113 | training.trendmicro.com |
| 148.42.106.102 | trapware.com |
| 181.199.213.172 | trendmicro.com |
| 39.114.77.255 | trendmicro.com.cn |
| 166.177.23.163 | trendmicro.fr |
| 186.254.49.152 | trendsecure.com |
| 219.156.88.222 | trial.trendmicro.com |
| 76.70.209.117 | trucoswindows.es |
| 203.134.154.25 | trucoswindows.net |
| 155.210.180.14 | tw.mcafee.com |
| 238.94.202.67 | tw.sophos.com |
| 28.9.66.150 | tw.trendmicro.com |
| 223.73.12.58 | tweaksforgeeks.com |
| 175.149.38.47 | u0.eset.com |
| 208.51.77.117 | u1.eset.com |
| 65.221.10.12 | u10.eset.com |
| 4.29.143.176 | u100.eset.com |
| 212.105.169.166 | u11.eset.com |
| 245.7.21.236 | u12.eset.com |
| 103.177.141.63 | u13.eset.com |
| 229.241.86.227 | u14.eset.com |
| 249.62.45.216 | u15.eset.com |
| 26.151.152.30 | u16.eset.com |
| 72.134.16.113 | u17.eset.com |
| 11.129.217.89 | u18.eset.com |
| 218.18.244.78 | u19.eset.com |
| 251.107.27.80 | u2.eset.com |
| 109.90.147.231 | u20.eset.com |
| 48.86.93.139 | u21.eset.com |
| 0.230.119.128 | u22.eset.com |
| 33.64.158.198 | u23.eset.com |
| 146.46.23.25 | u24.eset.com |
| 17.42.224.1 | u25.eset.com |
| 37.118.250.247 | u26.eset.com |
| 70.20.34.249 | u27.eset.com |
| 116.2.154.144 | u28.eset.com |
| 54.254.99.52 | u29.eset.com |
| 6.75.126.41 | u3.eset.com |
| 39.232.233.111 | u30.eset.com |
| 153.215.97.194 | u31.eset.com |
| 92.210.42.102 | u32.eset.com |
| 43.31.1.91 | u33.eset.com |
| 76.188.108.145 | u34.eset.com |
| 174.155.212.40 | u35.eset.com |
| 45.151.158.204 | u36.eset.com |
| 65.227.116.193 | u36eset.com |
| 98.129.223.7 | u37.eset.com |
| 211.111.88.90 | u37eset.com |
| 82.107.33.255 | u38.eset.com |
| 34.183.59.244 | u39.eset.com |
| 67.85.99.58 | u4.eset.com |
| 181.68.219.141 | u40.eset.com |
| 119.63.164.117 | u41.eset.com |
| 71.140.191.106 | u42.eset.com |
| 104.41.230.108 | u43.eset.com |
| 218.24.94.3 | u44.eset.com |
| 89.19.40.167 | u45.eset.com |
| 109.96.66.156 | u46.eset.com |
| 141.253.105.226 | u47.eset.com |
| 255.236.37.53 | u48.eset.com |
| 126.232.239.29 | u49.eset.com |
| 78.52.197.18 | u5.eset.com |
| 111.210.48.20 | u50.eset.com |
| 224.124.169.171 | u51.eset.com |
| 163.188.114.79 | u52.eset.com |
| 115.8.72.69 | u53.eset.com |
| 148.166.180.139 | u54.eset.com |
| 6.81.44.222 | u55.eset.com |
| 132.144.245.130 | u56.eset.com |
| 152.221.16.119 | u57.eset.com |
| 185.122.55.189 | u58.eset.com |
| 43.37.175.84 | u59.eset.com |
| 154.84.105.232 | u6.eset.com |
| 106.161.131.221 | u60.eset.com |
| 206.63.170.35 | u61.eset.com |
| 252.233.35.118 | u62.eset.com |
| 191.41.236.26 | u63.eset.com |
| 143.117.6.15 | u64.eset.com |
| 176.19.45.85 | u65.eset.com |
| 33.189.234.236 | u66.eset.com |
| 228.253.111.145 | u67.eset.com |
| 180.73.137.134 | u68.eset.com |
| 213.231.245.204 | u69.eset.com |
| 71.146.109.31 | u7.eset.com |
| 198.209.54.195 | u70.eset.com |
| 217.30.13.184 | u71.eset.com |
| 250.119.120.254 | u72.eset.com |
| 40.102.240.81 | u73.eset.com |
| 235.97.186.57 | u74.eset.com |
| 187.242.212.46 | u75.eset.com |
| 219.76.251.48 | u76.eset.com |
| 77.58.115.199 | u77.eset.com |
| 16.54.61.107 | u78.eset.com |
| 224.198.87.96 | u79.eset.com |
| 1.32.126.166 | u8.eset.com |
| 114.14.247.249 | u80.eset.com |
| 241.10.192.226 | u81.eset.com |
| 5.86.218.215 | u82.eset.com |
| 38.244.2.217 | u83.eset.com |
| 84.227.122.112 | u84.eset.com |
| 23.222.67.20 | u85.eset.com |
| 214.27.78.249 | u86.eset.com |
| 247.184.185.63 | u87.eset.com |
| 105.167.49.146 | u88.eset.com |
| 44.162.251.54 | u89.eset.com |
| 252.239.209.43 | u9.eset.com |
| 28.141.60.113 | u90.eset.com |
| 142.123.181.8 | u91.eset.com |
| 13.119.126.172 | u92.eset.com |
| 33.195.84.161 | u93.eset.com |
| 66.97.191.231 | u94.eset.com |
| 180.79.56.59 | u95.eset.com |
| 50.75.1.223 | u96.eset.com |
| 2.151.27.212 | u97.eset.com |
| 35.53.67.26 | u98.eset.com |
| 149.36.187.109 | u99.eset.com |
| 88.31.132.85 | uk.mcafee.com |
| 39.108.159.74 | uk.trendmicro-europe.com |
| 72.9.198.76 | uk.trendmicro.com |
| 186.248.62.227 | ulove.tigolbittys.info |
| 57.243.8.135 | up.duba.net |
| 77.64.34.124 | up.rising.com.cn |
| 109.222.73.194 | up1.nod123.cn |
| 223.204.6.21 | upd.zonelabs.com |
| 94.200.207.253 | update.360safe.cn |
| 46.20.165.242 | update.360safe.com |
| 79.178.16.244 | update.aladdin.com |
| 193.92.137.140 | update.authentium.com |
| 115.140.66.32 | update.avg.com |
| 67.217.24.21 | update.avgfrance.com |
| 100.118.132.91 | update.bitdefender.com |
| 214.33.252.174 | update.drweb.com |
| 85.96.197.82 | update.ewido.com |
| 104.173.224.71 | update.grisoft.com |
| 137.74.7.141 | update.grisoft.cz |
| 251.245.127.36 | update.hispasec.com |
| 122.52.73.200 | update.ikaka.com |
| 74.129.99.189 | update.ikarus-software.at |
| 174.31.138.3 | update.quickheal.com |
| 220.201.3.86 | update.rising.com.cn |
| 159.9.204.250 | update.sophos.com |
| 111.85.230.239 | update.symantec.com |
| 144.243.14.54 | update.trendmicro.com |
| 2.157.202.205 | update7.jiangmin.com |
| 196.221.79.113 | updatem.360safe.cn |
| 148.42.105.102 | updatem.360safe.com |
| 181.199.213.172 | updates.a-2.org |
| 39.114.77.255 | updates.drweb.com |
| 166.177.22.163 | updates.f-prot.com |
| 185.254.237.152 | updates.sald.com |
| 218.87.88.222 | updates.symantec.com |
| 8.70.208.49 | updates3.kaspersky-labs.com |
| 203.65.154.25 | updates4.kaspersky-labs.com |
| 155.210.180.14 | updates5.kaspersky-labs.com |
| 188.44.219.16 | upgrade.bitdefender.com |
| 45.26.84.167 | upgrade1.bitdefender.com |
| 240.22.29.59 | upgrade2.bitdefender.com |
| 176.150.39.48 | upgrade3.bitdefender.com |
| 209.240.79.119 | upgrade4.bitdefender.com |
| 67.222.199.202 | upload.changelog.fr |
| 193.218.144.178 | us.bitdefender.com |
| 213.39.171.167 | us.mcafee.com |
| 246.196.210.169 | us.trendmicro.com |
| 36.179.74.64 | usa.kaspersky.com |
| 231.174.19.228 | usbcleaner.cn |
| 182.251.46.217 | ushousecall02.trendmicro.com |
| 215.152.153.31 | utilidades-utiles.com |
| 73.135.17.114 | v.dreamwiz.com |
| 12.131.219.22 | v4.windowsupdate.microsoft.com |
| 220.207.177.11 | v5.windowsupdate.microsoft.com |
| 253.109.28.81 | vet.com.au |
| 110.91.149.232 | vicentevirtual.com |
| 237.87.94.140 | viguard.com |
| 1.163.52.129 | vil.nai.com |
| 34.65.160.200 | vil.nail.com |
| 148.47.24.27 | virobot.co.kr |
| 18.43.225.191 | virscan.org |
| 226.120.252.180 | virus.org |
| 3.21.35.250 | virusbuster.hu |
| 117.4.155.77 | viruschief.com |
| 56.255.100.53 | virusdoctor.jp |
| 7.76.127.42 | virusfreezone.info |
| 40.233.166.44 | virusinfo.prevx.com |
| 154.216.30.195 | viruslist.com |
| 25.212.232.103 | viruslist.ru |
| 45.32.2.92 | virusscan.jotti.org |
| 78.190.41.162 | virusscanonline.net |
| 191.172.230.245 | virusspy.com |
| 62.168.175.221 | virustotal.com |
| 14.244.133.210 | visualizesoftware.com |
| 47.146.241.213 | visualtracking.symantec.com |
| 161.60.105.108 | vivo-austin.com |
| 99.124.50.16 | vms.drweb.com |
| 51.201.9.5 | vncsvr.com |
| 84.102.116.75 | vos.symantec.com |
| 198.17.236.158 | vrv.com.cn |
| 69.80.181.66 | vsantivirus.com |
| 73.141.192.39 | webadmin.norman.no |
| 105.42.231.109 | webphand.com |
| 219.213.95.4 | webroot.com |
| 90.21.41.168 | wedoantivirus.com |
| 42.97.67.157 | welkam.co.jp |
| 143.255.106.227 | wexperts-exchange.com |
| 188.169.227.54 | whatthetech.com |
| 127.233.172.218 | wikio.es |
| 79.53.198.208 | wilderssecurity.com |
| 112.211.238.22 | wilderssecurity.net |
| 226.126.170.173 | wildlist.com |
| 164.189.47.81 | windowsupdate.microsoft.com |
| 116.10.74.70 | winpatrol.com |
| 149.167.181.140 | wmcafee.com |
| 7.82.45.223 | woottonfootball.com |
| 134.145.246.131 | wtc.trendmicro.com |
| 154.222.205.120 | ww.emsisoft.com |
| 186.55.56.190 | www.1stavenuelimousines.co.uk |
| 232.38.176.17 | www.2xlgames.com |
| 171.34.122.249 | www.ahnlab.com |
| 123.178.148.238 | www.aks.com |
| 156.12.187.240 | www.aladdin.com |
| 13.250.52.135 | www.anti-trojan-software.net |
| 208.246.253.43 | www.anti-trojan.net |
| 160.134.23.33 | www.anti-virus.by |
| 193.224.63.103 | www.antivir.es |
| 51.207.183.186 | www.antivirus-tools.com |
| 177.202.128.162 | www.antiy.net |
| 197.23.155.151 | www.apsecure.com |
| 230.180.194.153 | www.arpia.be |
| 20.163.58.48 | www.authentium.com |
| 215.158.4.212 | www.authentium.com.au |
| 167.235.30.201 | www.av-desk.com |
| 199.136.137.15 | www.avast.com |
| 57.119.1.98 | www.avg.com |
| 252.115.203.6 | www.avhide.com |
| 204.191.161.251 | www.avoncourt.com |
| 237.93.12.65 | www.avx.ro |
| 94.75.133.216 | www.barder.com |
| 221.71.78.124 | www.beautybar.com |
| 241.147.36.114 | www.bg.virusblokada.com |
| 18.49.144.184 | www.bit-defender.de |
| 132.32.8.11 | www.bitdefende.de |
| 2.27.209.175 | www.bitdefender-es.com |
| 210.104.236.164 | www.bitdefender.be |
| 243.5.19.234 | www.bitdefender.cl |
| 85.228.123.45 | www.bitdefender.co.uk |
| 24.223.69.21 | www.bitdefender.com |
| 232.44.95.10 | www.bitdefender.com.au |
| 8.201.134.12 | www.bitdefender.com.sg |
| 122.184.254.163 | www.bitdefender.com.tw |
| 249.180.200.71 | www.bitdefender.com.vn |
| 13.0.226.60 | www.bitdefender.de |
| 46.158.9.130 | www.bitdefender.es |
| 159.140.198.213 | www.bitdefender.fr |
| 30.136.143.190 | www.bitdefender.hk |
| 238.212.101.179 | www.bitdefender.us |
| 15.114.209.181 | www.bitdefenderme.com |
| 129.29.73.76 | www.briarhurst.com |
| 68.92.18.240 | www.brightoctober.com |
| 19.169.233.229 | www.buraka.tv |
| 52.70.84.43 | www.buscafacil.com |
| 166.241.204.126 | www.buscalo.in |
| 37.48.150.34 | www.busco.in |
| 57.125.176.23 | www.ca.com |
| 89.26.215.93 | www.cambridge-steiner-school.co.uk |
| 203.197.79.244 | www.ccssforum.org |
| 74.5.25.152 | www.celticmerchant.com |
| 26.81.51.141 | www.clamav.net |
| 127.239.90.211 | www.collectedcurios.com |
| 172.153.211.38 | www.comodo.com |
| 111.217.156.203 | www.comodo.tv |
| 63.37.182.192 | www.comodoantispam.com |
| 96.195.222.6 | www.comodopartners.com |
| 210.110.154.157 | www.computing.net |
| 149.173.31.65 | www.configurarequipos.com |
| 100.250.58.38 | www.contentverification.com |
| 117.135.149.108 | www.deborahshelton.net |
| 231.50.13.191 | www.dr-bull.com |
| 102.113.215.99 | www.drweb.com |
| 122.190.173.88 | www.ealaddin.com |
| 154.24.24.158 | www.elvis-express.com |
| 200.6.145.241 | www.emeraldclassic.co.uk |
| 139.2.90.217 | www.emsisoft.at |
| 91.146.116.206 | www.emsisoft.com |
| 124.236.155.208 | www.emsisoft.de |
| 237.218.20.104 | www.emsisoft.es |
| 176.214.221.12 | www.emsisoft.fr |
| 128.102.247.1 | www.emsisoft.it |
| 161.192.31.71 | www.emsisoft.jp |
| 19.175.151.154 | www.emsisoft.net |
| 146.170.96.130 | www.emsisoft.nl |
| 165.247.123.119 | www.emsisoft.org |
| 198.148.162.121 | www.engyro.com |
| 244.131.26.16 | www.entercept.com |
| 183.126.228.180 | www.esafe.com |
| 135.203.254.169 | www.eset.es |
| 167.105.105.239 | www.eugrantsadvisor.com |
| 25.87.226.66 | www.eugrantsadvisor.de |
| 220.83.171.230 | www.eugrantsadvisor.ie |
| 172.159.129.219 | www.eugrantsadvisor.se |
| 205.61.236.33 | www.exchangeyourcareer.com |
| 62.43.101.185 | www.f-prot.com |
| 189.39.46.93 | www.f-secure.com |
| 209.115.4.82 | www.fimasys.com |
| 242.17.112.152 | www.flairweddings.co.uk |
| 100.0.232.235 | www.forospyware.com |
| 227.251.177.143 | www.fortifed.com |
| 178.72.204.132 | www.fortiid.com |
| 211.229.243.202 | www.fortimail.com |
| 69.212.107.29 | www.fortinet-apac.com |
| 8.207.53.5 | www.fortinet.ch |
| 216.28.79.250 | www.fortinet.co.il |
| 248.186.118.252 | www.fortinet.com |
| 106.168.239.147 | www.fortinet.net |
| 233.164.184.55 | www.fortinet.nl |
| 253.240.210.44 | www.fortinet.sg |
| 30.142.249.114 | www.fortinetuk.com |
| 143.124.182.198 | www.freeality.com |
| 14.120.127.174 | www.freedrweb.ru |
| 222.196.85.163 | www.freerav.com |
| 255.98.193.165 | www.frisk-software.com |
| 113.13.57.60 | www.frisk.is |
| 52.76.2.224 | www.fsecure.com |
| 3.153.217.213 | www.garryowen.com |
| 36.54.68.27 | www.gdata.es |
| 134.209.172.94 | www.globalhauri.com |
| 5.16.118.2 | www.gokidding.com |
| 25.93.144.247 | www.grisoft.com |
| 57.251.183.61 | www.hackshields.com |
| 171.165.48.212 | www.hacksoft.com.pe |
| 42.229.249.120 | www.hacksoft.pe |
| 250.49.19.109 | www.handwritingforkids.com |
| 95.207.59.179 | www.hasp.se |
| 141.121.179.7 | www.hauri.co.kr |
| 79.185.124.171 | www.hauri.net |
| 31.6.150.160 | www.hxproduction.com |
| 64.163.190.230 | www.ibusca.me |
| 178.78.122.125 | www.ikarus.at |
| 117.141.255.33 | www.imddomains.co.uk |
| 68.218.26.22 | www.indielisboa.com |
| 101.119.133.92 | www.inicioid.com |
| 215.34.253.175 | www.iniciorapido.info |
| 86.97.199.83 | www.internationalservicecheck.com |
| 106.174.157.72 | www.irangoals.com |
| 138.8.8.142 | www.iseclab.org |
| 184.246.129.225 | www.ixomodels.com |
| 123.242.74.201 | www.jiangmin.com |
| 75.130.100.190 | www.jiangmin.com.cn |
| 108.220.140.193 | www.jotti.org |
| 222.202.4.88 | www.kaspersky.com |
| 160.198.205.252 | www.kioskea.net |
| 112.87.231.241 | www.latin-mass-society.org |
| 145.176.15.55 | www.livepcsupport.com |
| 3.159.135.138 | www.malwarecity.com |
| 130.154.80.114 | www.malwarecity.fr |
| 149.231.107.103 | www.mamutu.com |
| 182.132.146.105 | www.mamutu.de |
| 228.115.10.0 | www.manchester-offices.co.uk |
| 167.110.212.164 | www.mcafee.at |
| 119.187.238.153 | www.mcafee.com |
| 151.89.89.223 | www.metascan-online.com |
| 9.71.210.50 | www.microsoft.com |
| 204.67.155.214 | www.midescargas.com |
| 156.143.113.203 | www.mountainlakeslodge.com |
| 189.45.221.17 | www.mtr-design.com |
| 47.27.85.169 | www.mygeekside.com |
| 173.23.30.77 | www.netegrity.com |
| 193.100.244.66 | www.norman.com |
| 210.241.80.120 | www.nottinghampoetryseries.com |
| 68.224.200.203 | www.novirusthanks.org |
| 195.219.145.111 | www.npin.co.kr |
| 146.40.172.100 | www.nprotect.co.kr |
| 179.197.211.170 | www.nprotect.com |
| 37.180.75.253 | www.nprotect.com.br |
| 232.176.21.229 | www.nsclean.com |
| 184.252.47.218 | www.owen.org |
| 217.154.86.220 | www.pandasecurity.com |
| 74.136.207.115 | www.pctools.com |
| 201.132.152.23 | www.peterhearnwaste.co.uk |
| 221.208.178.12 | www.phoenixtrikeworks.com |
| 254.110.218.83 | www.prdouglas.co.uk |
| 112.92.150.166 | www.prevx.com |
| 238.88.95.142 | www.prevx1.com |
| 190.165.53.131 | www.professorbeyer.com |
| 223.66.161.133 | www.quickheal.com |
| 81.237.25.28 | www.removetrojanvirus.org |
| 20.44.226.192 | www.renningers.com |
| 227.121.185.181 | www.residentphotography.com |
| 4.22.36.251 | www.retento.com |
| 118.193.156.78 | www.reviewsofbooks.com |
| 245.1.102.242 | www.rising-global.com |
| 9.77.128.231 | www.risingav.com.au |
| 42.235.167.45 | www.safenet-inc.com |
| 155.149.32.196 | www.scan4you.net |
| 26.213.233.104 | www.seasonsecurity.com |
| 234.33.3.93 | www.secondchanceboxer.com |
| 79.191.43.164 | www.secure-elements.com |
| 125.105.163.247 | www.sheffieldmind.co.uk |
| 63.169.108.155 | www.smf.org |
| 15.246.134.144 | www.softfaq.com |
| 48.147.174.214 | www.sophos.com |
| 162.62.106.109 | www.spycheck.co.uk |
| 101.125.239.17 | www.spycheck.es |
| 52.202.10.6 | www.stadiumpage.com |
| 85.103.117.76 | www.sunbeltsoftware.com |
| 199.18.237.159 | www.symantec.com |
| 70.82.183.51 | www.sysinternals.com |
| 74.142.125.40 | www.tecniservicioslys.com |
| 107.232.232.110 | www.testmypcsecurity.com |
| 152.214.97.193 | www.threatexpert.com |
| 91.210.42.169 | www.tomorrowsedge.net |
| 43.98.68.159 | www.trendmicro.com |
| 76.188.108.161 | www.trojaner.info |
| 190.170.228.56 | www.trustix.com |
| 128.166.173.220 | www.trustlogo.com |
| 80.55.200.209 | www.vba.com.by |
| 113.144.239.23 | www.virscan.org |
| 227.127.103.106 | www.virus.fi |
| 98.122.48.82 | www.virus.org |
| 118.199.75.71 | www.virusbuster.hu |
| 150.100.114.73 | www.viruschief.com |
| 196.83.234.224 | www.virusfreezone.info |
| 135.79.180.132 | www.virustotal.com |
| 87.155.206.121 | www.wellgousa.com |
| 120.57.57.191 | www.whichssl.com |
| 233.39.178.18 | www.willsee.com |
| 172.35.123.182 | www.xmlsoap.org |
| 124.111.81.172 | www.zarya.info |
| 157.13.189.242 | www1.my-etrust.com |
| 15.251.53.137 | www3.ca.com |
| 141.247.254.45 | www3.safenet-inc.com |
| 161.68.213.34 | www4.symantec.com |
| 194.225.64.104 | wwws.clamav.net |
| 52.208.184.187 | x-cleaner.com |
| 179.203.129.95 | x.360safe.com |
| 131.24.156.84 | yoreparo.com |
| 163.181.195.154 | z-oleg.com |
| 21.164.59.221 | zeustracker.abuse.ch |
| 200.144.245.197 | zeylstra.nl |
| 152.220.15.186 | zhidao.baidu.com |
| 185.122.54.188 | zhidao.ikaka.com |
| 42.104.175.83 | ziggamza.net |
| 169.100.120.248 | zonavirus.com |
| 189.176.146.237 | zonealarm.com |
| 222.78.186.51 | zonelabs.com |
| 80.61.118.134 | zonelabs.fr |
| 206.56.63.110 | zonelog.co.uk |
| 158.133.22.99 | zs.kingsoft.com |
| 191.34.129.101 | ztl.comodo.com |
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
VersionInfo
No information is available.
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 12644 | 12800 | 3.76874 | 55d274f88e5ab59aa27a86516437f7d8 |
| .data | 20480 | 64 | 512 | 0.164757 | 75fe664fdcd708925b7ca712ee127c19 |
| .rdata | 24576 | 1328 | 1536 | 3.03097 | 2707a7526abdc69c43f37dd3b6665e30 |
| .bss | 28672 | 320 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .idata | 32768 | 800 | 1024 | 2.18489 | 4e803ebabfbd6fe3233c57c1b6e762a8 |
| .rsrc | 36864 | 87232 | 87552 | 5.54166 | 34b5a2a0306aa053bf792aa7f84ba6c7 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a
URLs
| URL | IP |
|---|---|
| hxxp://whos.amung.us/swidget/243dr2pd8x85 |  67.202.94.94 |
| hxxp://widgets.amung.us/small/00/11.png | 173.192.200.70 |
| hxxp://widgets.amung.us/small/00/4.png | 173.192.200.70 |
| hxxp://v7e37u80u46i1w7xf2mc2bwj702xlq.ipcheker.com/ | 75.126.104.226 |
| hxxp://whos.amung.us/swidget/26n2qf7pnk0x | 67.202.94.94 |
| www.buscaid.com | 8.5.1.51 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Web Traffic was not found.
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps were not found.
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Delete the original Trojan file.
- Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
127.0.0.1 localhost - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.
