Gen.Variant.Symmi.2478_54784d5167

Gen:Variant.Symmi.2478 (BitDefender), Worm:Win32/Esfury.X (Microsoft), Win32.HLLW.Autoruner1.24454 (DrWeb), Gen:Variant.Symmi.2478 (B) (Emsisoft), Trojan.Win32.Jorik (Ikarus), Gen:Variant.Symmi.2478 (...
Blog rating:2 out of5 with1 ratings

Gen.Variant.Symmi.2478_54784d5167

by malwarelabrobot on August 5th, 2016 in Malware Descriptions.

Gen:Variant.Symmi.2478 (BitDefender), Worm:Win32/Esfury.X (Microsoft), Win32.HLLW.Autoruner1.24454 (DrWeb), Gen:Variant.Symmi.2478 (B) (Emsisoft), Trojan.Win32.Jorik (Ikarus), Gen:Variant.Symmi.2478 (FSecure), Generic29.AYVZ (AVG), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, WormAutorun


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 54784d5167ca15db67b91a17cee7ca23
SHA1: 051fdf36859a05b6713f7ac2bb4004a7a1c60853
SHA256: 5d834bc6fe6613e7d7dced056a771a9f2f5ebab9d49db6c17624dd1e6853bd25
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 4768944 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: no certificate found
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour Description
WormAutorun A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.


Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):
No processes have been created.

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

No files have been created.

Registry activity

Dropped PE files

MD5 File path
09c53a96ba45a953562411fb4635ac2e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif
55e96e2aee74a1042f6a0260c351f2d9 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21_PROPER_320kbps_VRTX.mp3.pif
17368d4c20d754c128670d3e39cdbe5b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - Rolling In the Deep [2010-Single][SW].mp3.pif
f7f7db5cb87b45b563e3d034e29eb222 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Beyonce-4_(Deluxe_Edition)-2CD-2011-VOiCE.mp3.pif
c18d3a93a2d29d03b4f37c96d18d42c8 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Black Eyed Peas - The Beginning (Deluxe Edition) 2010-DOH.mp3.pif
ba1bab1244d35783462b01951b3f7032 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif
a1c69b731a159733d9f9df90f75ca34d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif
e2ad3dbb83a98ac91fbbb6896dbee34e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif
4f470b304dc18c70552a3be86f32c696 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2011-Single@320][TJ].mp3.pif
e796d9235f94a4bb65aa75fed5cb3d96 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Mumford And Sons - Sigh No More (Album).mp3.pif
bb84ac745fd198e6a8d9fc416137ddd5 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Now Thats What I Call Music 78 (2011) - 2CD.mp3.pif
86253ffc3e369cd10c9bc2abc1f1d797 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Pitbull - Give Me Everything (feat. Ne-Yo) [2011-Single][SW].mp3.pif
b320fa0843a27be1e0dbf3824b83a35d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Rihanna - LOUD (2011 With 5 Bonus Tracks).mp3.pif

HOSTS file anomalies

The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 61798 bytes in size. The following strings are added to the hosts file listed below:

173.224.217.72 viabcp.com
173.224.217.72 www.viabcp.com
173.224.217.72 ww2.viabcp.com
173.224.217.72 bcpzonasegura.viabcp.com
173.224.217.72 hotmail.com
173.224.217.72 www.hotmail.com
93.162.213.128 13iii.com
126.63.252.130 15660808.co.kr
240.46.116.25 2-spyware.com
111.41.62.189 247fixes.com
131.118.88.178 360.cn
163.20.127.248 360.com
21.2.60.75 360safe.cn
148.254.5.51 360safe.com
100.74.219.40 45pounds.com
133.232.70.42 51nb.com
247.146.191.194 9down.com
185.210.136.102 a-2.org
137.30.94.91 a188.x.akamai.net
170.188.202.161 abuse.ch
28.103.66.244 acs.pandasoftware.com
155.166.11.152 ad-aware-se.uptodown.com
174.243.38.141 ad.fastclick.net
207.144.77.211 ads.fastclick.net
65.59.197.106 agfirewall.ru
192.122.143.14 agnitum.com
144.199.169.3 agnitum.de
244.101.208.73 agnitum.fr
34.15.73.156 agnitum.ru
229.79.18.64 ahn.com.cn
181.155.44.53 ahnlab.com
214.57.83.123 akamai.net
72.227.16.19 aknow.prevx.com
10.35.149.183 aladdin.com
218.111.175.172 alert.rising.com.cn
251.13.27.242 alerta-antivirus.inteco.es
109.184.147.69 alerta-antivirus.red.es
236.247.92.233 alladdin.ru
255.68.51.222 aluriasoftware.com
32.157.158.36 analysis.seclab.tuwien.ac.at
78.140.22.119 andymanchesta.com
17.135.224.95 anti-virus-software-review.com
225.24.250.84 anti-virus.by
1.114.33.86 anti-virus.com
115.96.154.237 antirootkit.com
54.92.99.145 antispam.sunbeltsoftware.com
6.236.125.134 antispy.ru
39.70.164.204 antispyware.sunbeltsoftware.com
153.52.29.32 antivir.es
23.48.230.8 antiviraldp.com
43.124.0.253 antivirus-online.de
76.26.40.255 antivirus-tools.com
122.9.160.150 antivirus.about.com
61.4.105.58 antivirus.cai.com
12.81.132.47 antivirus.comodo.com
45.238.239.117 antivirus.hispavista.com
159.221.103.200 antivirus.sunbeltsoftware.com
98.216.49.108 antiy.net
50.37.7.97 anubis.iseclab.org
82.195.114.167 apac.trendmicro.com
196.177.235.62 ar.answers.yahoo.com
67.173.180.226 ar.atwola.com
87.249.138.215 arcabit.com
120.151.245.29 arcabit.pl
233.133.110.113 archive.bitdefender.com
104.129.55.21 arswp.com
56.205.81.10 arwww.fortinet.cz
89.107.121.80 asap.authentium.com
203.90.241.163 ashampoo.com
142.85.186.139 atazita.blogspot.com
93.162.213.128 atdmt.com
126.63.252.130 attechnical.com
240.46.116.25 atwola.com
111.41.62.189 au.mcafee.com
131.118.88.178 auditmypc.com
163.20.127.248 authentium.com
21.2.60.75 auwww.ealaddin.nl
148.254.5.51 avast-home.uptodown.com
100.74.219.40 avast.com
133.232.70.42 avast.ru
247.146.191.194 avg-antivirus.net
185.210.136.102 avg.com
137.30.94.91 avg.vo.llnwd.net
170.188.202.161 avgate.net
28.103.66.244 avgfrance.com
155.166.11.152 avhide.com
174.243.38.141 avira.com
207.144.77.211 avp.ch
65.59.197.106 avp.com
192.122.143.14 avp.ru
144.199.169.3 avpclub.ddns.info
244.101.208.73 avu.zonelabs.com
34.15.73.156 avx.rob-have.net
229.79.18.64 awaps.net
48.23.168.177 b-have.orgbitdefender-ar.com
81.180.207.247 babooforum.com.br
195.95.139.142 backup.comodo.com
134.158.17.50 baike.360.cn
86.235.43.39 baike.360.com
118.136.150.109 bakunos.com
232.51.14.192 banner.fastclick.net
103.115.216.100 banners.fastclick.net
123.191.174.89 baristamagazine.com
156.25.25.159 basetendencies.com
201.7.146.242 bbs.360.cn
140.3.91.219 bbs.360safe.cn
92.147.117.208 bbs.360safe.com
125.237.157.210 bbs.cfan.com.cn
239.220.21.105 bbs.cpcw.com
178.215.222.13 bbs.dswlab.com
129.104.249.2 bbs.duba.net
162.193.32.72 bbs.ikaka.com
20.176.152.155 bbs.janmeng.com
147.171.98.131 bbs.kafan.cn
167.248.124.120 bbs.kafan.com
199.150.163.122 bbs.kaspersky.com.cn
245.132.27.17 bbs.kpfans.com
184.128.229.181 bbs.mcafeefans.com
136.204.255.170 bbs.s-sos.net
169.106.106.240 bbs.sucop.com
26.88.227.67 bbs.taisha.org
221.84.172.232 bbs.trendmicro.com.cn
173.160.130.221 bbs.winzheng.com
206.62.238.35 bestofewan.com
64.45.102.186 beta.anti-virus.by
191.40.47.94 bg.virusblokada.com
210.117.6.83 bhsbees.com
243.18.113.153 bitcity.info
101.1.233.236 bitcity.org
228.252.179.144 bitdefender.co.uk
180.73.205.133 bitdefender.com
212.231.244.203 bitdefender.com.ua
70.213.108.30 bitdefender.es
9.209.54.6 bitdefender.org
217.29.80.251 bitdefender.secyber.net
250.187.119.132 bitdefenderchina.com
242.48.119.27 bitdefenderguatemala.com
113.44.64.191 bitdefendermalaysia.com
133.120.90.180 bitdefendertaiwan.com
166.22.129.250 bitdefenderuruguay.com
23.4.62.78 bitdefenderusa.com
150.0.7.54 biz.nprotect.com
102.76.221.43 bkav.com.vn
135.234.73.45 blackice.iss.net
249.149.193.196 bleedingthreats.net
188.212.138.104 bleepingcomputer.com
139.33.97.93 blitzblank.com
172.190.204.163 blog.hispasec.com
30.105.68.246 blog.threatfire.com
157.168.14.154 blog.titanium-jewelry.com
177.245.40.143 blog.trendmicro.com
209.147.79.213 blogs.icerocket.com
67.61.200.108 blogs.protegerse.com
194.125.145.16 blogschapines.com
146.201.171.5 boardreader.com
247.103.210.75 bobbondart.com
37.17.75.159 br.mcafee.com
231.81.20.67 br.trendmicro.com
183.157.46.56 brazil.kaspersky.com
83.182.209.249 buddy.bitdefender.com
197.97.141.144 bugs.clamav.net
136.161.19.52 buscafacil.com
88.237.45.41 buscalo.in
121.139.152.111 busco.in
234.53.17.194 buy.bitdefender-es.com
105.117.218.103 buy.bitdefender.com
125.193.176.92 buy.bitdefender.de
158.27.28.162 buy.drweb.com
204.10.148.245 buy.rising.com.cn
143.5.93.221 ca.com
94.150.120.210 cacomvip.ca.com
127.239.159.212 cai.com
241.222.23.107 canada.karuna-shechen.org
180.217.225.15 castlecops.com
132.106.251.4 castlecrops.com
164.196.34.74 ccslaughterspdx.com
22.178.154.157 cddchiangmai.net
149.174.100.133 cdn.atwola.com
169.250.126.122 center.rising.com.cn
202.152.165.124 centralcommand.com
247.134.30.19 cert.org
186.130.231.184 cfan.com.cn
138.206.1.173 cgi.clamav.net
171.108.109.243 changedetection.com
29.91.229.70 changelog.fr
224.86.174.234 channelpartner.trendmicro.com
175.163.133.223 chickensroamfree.com
208.64.240.37 chkrootkit.org
66.47.104.188 chollian.nprotect.co.kr
64.170.177.224 cisrt.org
84.247.135.213 cit.kookmin.ac.kr
117.148.243.27 clamav.net
231.131.107.110 clamwin.com
102.126.52.18 click.atdmt.com
53.203.79.7 clicks.atdmt.com
86.104.118.77 cloudprotection.pandasecurity.com
200.87.238.160 clubic.com
139.83.184.136 cmmings.cn
91.159.210.125 cn.mcafee.com
124.61.249.127 cn.sophos.com
237.43.114.22 cn.trendmicro.com
108.39.59.186 codehard.wordpress.com
128.115.85.175 cohartuk.com
161.17.125.246 commentcamarche.net
19.255.57.73 community.thaiware.com
145.251.2.49 comodo.com
97.72.216.38 company.drweb.com
130.229.68.40 company.hauri.co.kr
244.144.188.191 company.hauri.net
183.207.133.99 computing.net
134.28.92.88 comunidad.wilkinsonpc.com.co
167.185.199.158 configurarequipos.com
25.100.63.241 coresecurity.com
152.163.9.149 cou85.com
172.240.35.138 cowsmo.com
205.142.74.208 cpsecure.com
62.56.195.103 csc.rising.com.cn
189.120.140.11 cureit.ru
141.196.42.132 customer.symantec.com
118.230.81.202 customers.drweb.com
163.144.202.29 cutlines.org
102.208.147.193 cwsandbox.org
54.28.173.183 cybercrime.pandasecurity.com
87.186.213.253 cyberdefender.com
201.100.145.148 cybertechhelp.com
139.164.143.176 daboweb.com
212.105.169.165 daniloff.net
245.7.20.235 daniweb.com
102.177.141.62 darkclockers.com
229.241.86.226 dazhizhu.cn
249.61.44.215 de.bitdefender.com
26.151.152.30 de.mcafee.com
72.133.16.113 de.trendmicro.com
10.129.217.89 deckard.geekstogo.com
218.18.243.78 deerfield.com
251.107.27.80 defalcos.com
109.90.147.231 definitions.symantec.com
48.85.92.139 dell.symantec.com
255.230.119.128 demos.eset.es
32.63.158.198 descargas.eset.es
146.46.22.25 dev.depeuter.org
17.42.224.1 developmentdrums.org
37.118.250.246 dialognauka.ru
70.20.33.248 diamondcs.com.au
115.2.154.143 dicasweb.com.br
54.254.99.51 discussions.virtualdr.com
138.206.1.172 disk-encryption.comodo.com
171.108.108.242 dl.360safe.com
28.90.229.69 dl1.antivir-pe.com
223.86.174.233 dl1.antivir-pe.de
175.162.132.223 dl1.antivir.de
208.64.240.37 dl1.avgate.net
66.46.104.188 dl10.freeav.net
192.42.49.96 dl2.antivir-pe.com
212.119.8.85 dl2.antivir-pe.de
245.20.115.155 dl2.antivir.de
103.3.235.238 dl2.avgate.net
230.254.180.146 dl3.antivir-pe.de
182.75.207.135 dl3.antivir.de
214.232.246.205 dl3.avgate.net
72.215.110.32 dl4.antivir-pe.com
11.211.56.8 dl4.antivir-pe.de
90.159.210.125 dl4.antivir.de
123.60.249.127 dl4.avgate.net
237.43.113.22 dl5.avgate.net
108.38.59.186 dl6.avgate.net
128.115.85.175 dl7.avgate.net
160.17.124.245 dl8.avgate.net
18.255.57.72 dl8.freeav.net
145.251.2.48 dl9.avgate.net
97.71.216.37 dl9.freeav.net
130.229.67.39 dnl-cd1.kaspersky-labs.com
244.143.188.191 dnl-cd10.kaspersky-labs.com
182.207.133.99 dnl-cd11.kaspersky-labs.com
134.27.91.88 dnl-cd12.kaspersky-labs.com
167.185.199.158 dnl-cd13.kaspersky-labs.com
25.100.63.241 dnl-cd2.kaspersky-labs.com
152.163.8.149 dnl-cd3.kaspersky-labs.com
171.240.158.5 dnl-cd4.kaspersky-labs.com
72.9.197.75 dnl-cd5.kaspersky-labs.com
185.179.62.226 dnl-cd6.kaspersky-labs.com
56.243.7.135 dnl-cd7.kaspersky-labs.com
8.63.33.124 dnl-cd8.kaspersky-labs.com
109.221.73.194 dnl-cd9.kaspersky-labs.com
155.136.193.21 dnl-cn1.kaspersky-labs.com
94.199.138.185 dnl-cn10.kaspersky-labs.com
45.20.165.174 dnl-cn11.kaspersky-labs.com
78.177.204.244 dnl-cn12.kaspersky-labs.com
192.92.136.139 dnl-cn13.kaspersky-labs.com
131.155.14.47 dnl-cn14.kaspersky-labs.com
83.232.40.36 dnl-cn15.kaspersky-labs.com
115.133.147.241 dnl-cn2.kaspersky-labs.com
108.183.146.68 dnl-cn3.kaspersky-labs.com
235.246.92.232 dnl-cn4.kaspersky-labs.com
255.67.50.221 dnl-cn5.kaspersky-labs.com
31.157.157.35 dnl-cn6.kaspersky-labs.com
77.139.22.118 dnl-cn7.kaspersky-labs.com
16.135.223.94 dnl-cn8.kaspersky-labs.com
224.23.249.83 dnl-cn9.kaspersky-labs.com
1.113.32.85 dnl-eu1.kaspersky-labs.com
115.95.153.237 dnl-eu10.kaspersky-labs.com
53.91.98.145 dnl-eu11.kaspersky-labs.com
5.235.124.134 dnl-eu12.kaspersky-labs.com
38.69.164.204 dnl-eu13.kaspersky-labs.com
152.52.28.31 dnl-eu14.kaspersky-labs.com
23.47.229.7 dnl-eu15.kaspersky-labs.com
42.124.0.252 dnl-eu2.kaspersky-labs.com
75.25.39.254 dnl-eu3.kaspersky-labs.com
121.8.27.16 dnl-eu4.kaspersky-labs.com
183.127.228.181 dnl-eu5.kaspersky-labs.com
135.203.254.170 dnl-eu6.kaspersky-labs.com
168.105.106.240 dnl-eu7.kaspersky-labs.com
26.88.226.67 dnl-eu8.kaspersky-labs.com
221.83.171.231 dnl-eu9.kaspersky-labs.com
44.31.1.91 dnl-jp1.kaspersky-labs.com
77.189.109.162 dnl-jp10.kaspersky-labs.com
191.171.229.57 dnl-jp11.kaspersky-labs.com
61.167.174.221 dnl-jp12.kaspersky-labs.com
81.244.132.210 dnl-jp13.kaspersky-labs.com
114.145.240.24 dnl-jp14.kaspersky-labs.com
228.128.104.107 dnl-jp15.kaspersky-labs.com
99.123.49.15 dnl-jp2.kaspersky-labs.com
50.200.76.4 dnl-jp3.kaspersky-labs.com
83.101.115.74 dnl-jp4.kaspersky-labs.com
197.84.235.157 dnl-jp5.kaspersky-labs.com
136.80.181.133 dnl-jp6.kaspersky-labs.com
88.156.207.122 dnl-jp7.kaspersky-labs.com
121.58.246.124 dnl-jp8.kaspersky-labs.com
234.40.111.19 dnl-jp9.kaspersky-labs.com
105.36.56.183 dnl-kr1.kaspersky-labs.com
125.112.214.48 dnl-kr10.kaspersky-labs.com
34.146.253.118 dnl-kr11.kaspersky-labs.com
147.128.186.201 dnl-kr12.kaspersky-labs.com
18.124.131.177 dnl-kr13.kaspersky-labs.com
226.200.89.167 dnl-kr15.kaspersky-labs.com
123.222.61.33 dnl-kr2.kaspersky-labs.com
237.137.181.184 dnl-kr3.kaspersky-labs.com
176.200.127.92 dnl-kr4.kaspersky-labs.com
128.21.85.81 dnl-kr5.kaspersky-labs.com
161.179.192.151 dnl-kr6.kaspersky-labs.com
18.93.57.234 dnl-kr7.kaspersky-labs.com
145.157.2.142 dnl-kr8.kaspersky-labs.com
165.233.28.131 dnl-kr9.kaspersky-labs.com
198.135.68.202 dnl-ru1.kaspersky-labs.com
56.49.188.97 dnl-ru10.kaspersky-labs.com
182.113.133.5 dnl-ru11.kaspersky-labs.com
134.190.159.250 dnl-ru12.kaspersky-labs.com
111.223.75.196 dnl-ru13.kaspersky-labs.com
157.137.195.23 dnl-ru14.kaspersky-labs.com
95.201.140.187 dnl-ru15.kaspersky-labs.com
47.22.167.176 dnl-ru2.kaspersky-labs.com
80.179.206.246 dnl-ru3.kaspersky-labs.com
194.94.138.141 dnl-ru4.kaspersky-labs.com
133.157.15.49 dnl-ru5.kaspersky-labs.com
212.105.169.166 dnl-ru6.kaspersky-labs.com
245.7.21.236 dnl-ru7.kaspersky-labs.com
103.178.141.63 dnl-ru8.kaspersky-labs.com
230.241.86.227 dnl-ru9.kaspersky-labs.com
249.62.45.216 dnl-us1.kaspersky-labs.com
26.151.152.30 dnl-us10.kaspersky-labs.com
72.134.16.113 dnl-us11.kaspersky-labs.com
11.129.218.89 dnl-us12.kaspersky-labs.com
219.18.244.78 dnl-us13.kaspersky-labs.com
251.108.27.80 dnl-us14.kaspersky-labs.com
109.90.148.231 dnl-us15.kaspersky-labs.com
48.86.93.139 dnl-us2.kaspersky-labs.com
0.230.119.128 dnl-us3.kaspersky-labs.com
33.64.26.66 dnl-us4.kaspersky-labs.com
14.170.146.149 dnl-us5.kaspersky-labs.com
141.165.92.125 dnl-us6.kaspersky-labs.com
161.242.118.114 dnl-us7.kaspersky-labs.com
72.22.36.251 dnl-us8.kaspersky-labs.com
241.128.24.13 dnl-us9.kaspersky-labs.com
180.124.225.178 dougknox.com
132.200.251.167 down.360safe.cn
165.102.103.237 down.360safe.com
23.85.223.64 download.avg.com
218.80.168.228 download.bleepingcomputer.com
169.157.127.217 download.com
202.58.234.31 download.com.vn
60.41.98.182 download.eset.com
187.36.44.90 download.f-secure.com
207.113.2.79 download.mcafee.com
239.15.109.149 download.microsoft.com
97.253.229.232 download.microsoft.comguru0.grisoft.cz
96.120.46.12 download.nai.com
47.197.73.1 download.norman.no
80.98.112.71 download.rising.com.cn
194.81.232.154 download.softpedia.com
133.77.178.130 download.sysinternals.com
85.153.204.119 download0.avast.com
118.55.243.121 download1.avast.com
231.37.108.16 download1.emsisoft.com
234.165.185.56 download1.quickheal.com
254.241.211.45 download10.quickheal.com
31.143.250.115 download100.avast.com
144.125.183.198 download1us.softpedia.com
15.121.128.174 download2.avast.com
223.197.86.164 download2.quickheal.com
0.99.194.166 download200.avast.com
114.13.58.61 download201.avast.com
52.77.3.225 download202.avast.com
4.154.218.214 download203.avast.com
37.55.69.28 download204.avast.com
151.226.189.111 download205.avast.com
22.33.134.139 download206.avast.com
162.230.25.128 download207.avast.com
195.132.65.199 download208.avast.com
53.46.185.225 download209.avast.com
55.242.6.133 download210.avast.com
7.62.32.123 download211.avast.com
108.220.72.193 download212.avast.com
154.134.192.20 download213.avast.com
92.198.137.184 download214.avast.com
44.19.164.173 download3.avast.com
77.176.203.243 download3.quickheal.com
191.91.135.138 download4.avast.com
130.154.12.46 download4.emsisoft.com
82.231.39.35 download4.quickheal.com
114.132.146.105 download5.avast.com
228.47.10.188 download5.emsisoft.com
227.238.83.224 download5.quickheal.com
246.59.42.213 download501.avast.com
23.148.149.27 download502.avast.com
69.131.13.110 download503.avast.com
8.126.215.86 download504.avast.com
216.15.241.75 download505.avast.com
248.105.24.77 download511.avast.com
106.87.145.228 download512.avast.com
45.83.90.4 download513.avast.com
120.95.240.249 download514.avast.com
153.184.23.63 download515.avast.com
11.167.143.146 download516.avast.com
138.162.89.122 download535.avast.com
158.239.115.111 download6.avast.com
190.141.154.113 download6.quickheal.com
236.123.18.8 download600.avast.com
175.119.220.172 download601.avast.com
127.195.246.161 download602.avast.com
160.97.97.231 download603.avast.com
17.79.218.58 download604.avast.com
212.75.163.223 download605.avast.com
164.151.121.212 download606.avast.com
197.53.229.26 download607.avast.com
55.36.93.177 download608.avast.com
182.31.38.85 download609.avast.com
201.108.253.74 download617.avast.com
234.9.104.144 download618.avast.com
227.127.103.106 download619.avast.com
98.122.48.14 download620.avast.com
49.199.75.3 download621.avast.com
82.100.114.73 download622.avast.com
196.83.234.156 download623.avast.com
135.78.180.132 download624.avast.com
87.155.206.121 download625.avast.com
119.57.245.123 download626.avast.com
233.39.110.18 download627.avast.com
104.35.55.182 download628.avast.com
124.111.81.171 download629.avast.com
157.13.120.241 download630.avast.com
138.119.176.192 download631.avast.com
9.114.122.168 download632.avast.com
217.191.80.157 download633.avast.com
249.92.187.159 download634.avast.com
107.7.51.54 download635.avast.com
46.71.253.218 download636.avast.com
254.147.211.207 download637.avast.com
31.49.62.21 download638.avast.com
144.219.183.104 download639.avast.com
15.27.128.13 download640.avast.com
35.103.154.2 download641.avast.com
68.5.194.72 download642.avast.com
182.176.58.223 download643.avast.com
53.239.131.2 download644.avast.com
132.187.157.247 download645.avast.com
233.89.197.62 download646.avast.com
23.3.61.145 download647.avast.com
217.67.6.53 download648.avast.com
169.144.32.42 download649.avast.com
202.45.72.112 download650.avast.com
60.216.4.7 download651.avast.com
255.23.137.171 download652.avast.com
82.232.40.36 download653.avast.com
115.133.147.106 download654.avast.com
229.48.11.189 download655.avast.com
100.111.212.97 download656.avast.com
119.188.171.86 download658.avast.com
152.21.22.156 download659.avast.com
198.4.142.239 download660.avast.com
137.0.88.215 download661.avast.com
89.144.114.204 download662.avast.com
122.234.153.206 download663.avast.com
235.216.18.101 download664.avast.com
39.76.83.130 download665.avast.com
246.221.110.119 download666.avast.com
23.186.25.65 download667.avast.com
13.169.145.148 download668.avast.com
140.164.90.124 download669.avast.com
160.241.117.113 download670.avast.com
192.142.156.115 download671.avast.com
238.125.20.10 download672.avast.com
177.121.222.174 download673.avast.com
129.197.248.163 download674.avast.com
162.99.99.233 download675.avast.com
19.81.220.60 download676.avast.com
214.77.165.224 download677.avast.com
166.153.123.214 download678.avast.com
199.55.102.155 download679.avast.com
184.165.223.50 download680.avast.com
55.161.168.214 download681.avast.com
75.237.126.203 download682.avast.com
108.139.233.17 download683.avast.com
221.121.98.101 download684.avast.com
92.117.43.9 download685.avast.com
44.193.69.121 download686.avast.com
200.219.232.191 download687.avast.com
58.201.96.18 download688.avast.com
253.197.42.250 download689.avast.com
205.17.68.239 download690.avast.com
238.175.107.241 download691.avast.com
95.157.228.136 download692.avast.com
222.153.173.45 download693.avast.com
242.229.199.34 download694.avast.com
19.131.239.104 download695.avast.com
133.114.171.187 download696.avast.com
4.109.116.163 download697.avast.com
211.186.209.31 download698.avast.com
123.222.61.33 download699.avast.com
237.137.181.184 download7.avast.com
176.200.126.92 download7.quickheal.com
127.21.85.81 download700.avast.com
160.178.192.151 download701.avast.com
18.93.56.234 download702.avast.com
145.156.2.10 download703.avast.com
32.100.151.255 download704.avast.com
65.2.191.69 download705.avast.com
179.173.55.220 download706.avast.com
50.236.0.128 download707.avast.com
1.57.27.117 download708.avast.com
102.214.66.187 download709.avast.com
148.129.186.14 download72.avast.com
87.192.132.178 download73.avast.com
39.13.158.167 download74.avast.com
71.170.197.237 download75.avast.com
185.85.129.132 download76.avast.com
124.149.7.40 download77.avast.com
76.225.33.29 download78.avast.com
109.127.140.99 download79.avast.com
222.41.5.182 download8.quickheal.com
221.232.78.218 download80.avast.com
241.53.36.207 download81.avast.com
18.143.143.21 download82.avast.com
63.125.8.104 download83.avast.com
2.121.209.80 download84.avast.com
210.9.235.69 download85.avast.com
243.99.19.72 download9.quickheal.com
101.81.139.223 download900.avast.com
39.77.84.131 download901.avast.com
247.222.242.252 download902.avast.com
156.187.26.66 download903.avast.com
14.169.146.149 download904.avast.com
140.165.91.125 download905.avast.com
160.242.118.114 download906.avast.com
193.143.157.116 download907.avast.com
239.126.21.11 download908.avast.com
178.121.222.175 download909.avast.com
130.198.249.164 download91.avast.com
162.99.100.234 download910.avast.com
20.82.220.61 download911.avast.com
215.78.166.90 download912.avast.com
31.19.244.79 download913.avast.com
64.176.96.149 download914.avast.com
178.159.216.44 download915.avast.com
49.154.161.208 download916.avast.com
68.231.120.197 download917.avast.com
101.132.227.11 download918.avast.com
91.247.223.226 download919.avast.com
218.242.168.134 download92.avast.com
170.63.195.123 download920.avast.com
202.220.234.193 download921.avast.com
60.203.98.20 download922.avast.com
255.199.44.252 download923.avast.com
78.147.198.113 download924.avast.com
111.48.237.115 download925.avast.com
225.31.101.10 download926.avast.com
96.26.47.174 download927.avast.com
116.103.73.163 download928.avast.com
148.5.112.233 download929.avast.com
6.243.45.60 download93.avast.com
133.239.246.36 download930.avast.com
85.59.204.25 download931.avast.com
241.84.179.151 download932.avast.com
99.255.43.46 download933.avast.com
38.62.245.210 download934.avast.com
246.139.203.199 download935.avast.com
22.40.54.13 download936.avast.com
136.211.174.96 download937.avast.com
7.19.120.4 download938.avast.com
162.230.25.128 download939.avast.com
194.132.64.198 download94.avast.com
52.46.185.93 download940.avast.com
179.110.130.1 download941.avast.com
131.186.156.246 download942.avast.com
232.88.195.60 download943.avast.com
22.2.60.144 download944.avast.com
84.189.129.175 download945.avast.com
36.10.155.164 download946.avast.com
68.167.194.234 download947.avast.com
182.82.126.129 download948.avast.com
121.146.4.37 download949.avast.com
73.222.30.26 download95.avast.com
106.124.137.96 download950.avast.com
219.38.2.179 download951.avast.com
90.102.203.88 download952.avast.com
110.178.161.77 download953.avast.com
143.12.13.147 download954.avast.com
189.251.133.230 download955.avast.com
128.246.206.77 download956.avast.com
207.6.232.66 download957.avast.com
240.96.16.69 download958.avast.com
98.78.136.220 download959.avast.com
36.74.81.128 download96.avast.com
244.219.107.117 download960.avast.com
21.52.147.187 download961.avast.com
135.35.11.14 download962.avast.com
6.30.212.246 download963.avast.com
157.239.115.111 download964.avast.com
190.140.154.113 download965.avast.com
236.123.18.8 download966.avast.com
175.118.219.172 download967.avast.com
127.195.246.161 download968.avast.com
159.96.97.231 download969.avast.com
17.79.217.58 download97.avast.com
212.75.163.222 download970.avast.com
164.151.121.211 download971.avast.com
197.53.228.25 download972.avast.com
54.35.93.176 download973.avast.com
46.151.158.205 download974.avast.com
65.228.117.194 download975.avast.com
98.129.224.8 download976.avast.com
212.112.88.91 download977.avast.com
83.108.34.131 download978.avast.com
167.60.192.120 download979.avast.com
199.217.231.190 download98.avast.com
57.200.95.17 download980.avast.com
252.196.41.249 download99.avast.com
204.16.67.238 downloads-eu1.kaspersky-labs.com
237.174.106.240 downloads-eu2.kaspersky-labs.com
94.156.227.135 downloads-eu3.kaspersky-labs.com
221.152.172.43 downloads-eu4.kaspersky-labs.com
113.100.70.160 downloads-us1.kaspersky-labs.com
145.2.109.230 downloads-us2.kaspersky-labs.com
3.240.42.57 downloads-us3.kaspersky-labs.com
130.236.243.33 downloads-us4.kaspersky-labs.com
82.180.69.146 downloads.andymanchesta.com
238.81.176.148 downloads.malwarebytes.org
96.252.40.43 downloads.microsoft.com
35.59.242.207 downloads.My-eTrust.com
243.15.79.75 downloads1.kaspersky-labs.com
154.172.186.145 downloads2.kaspersky-labs.com
12.87.50.228 downloads3.kaspersky-labs.com
139.150.252.136 downloads4.kaspersky-labs.com
159.227.22.125 downloads5.kaspersky-labs.com
59.252.185.63 dr-web-cureit.softonic.com
173.38.177.85 drsolomon.com
171.102.122.249 drweb-inside.com
123.178.148.238 drweb.com
224.80.188.53 drweb.com.es
14.250.52.136 drweb.net
208.58.129.175 drwebinside.com
36.10.155.165 dswlab.com
69.168.195.235 duba.net
183.82.127.130 ealaddin.net
121.146.4.38 ealaddin.orgeshop.aladdin.com
73.223.31.27 easy-vpn.comodo.com
106.124.2.217 edm.symantec.com
84.159.123.44 education.symantec.com
211.223.68.208 eeload.com
231.43.26.197 eeye.com
8.133.134.12 eicar.org
54.115.254.226 elblogdemanu.com
124.243.75.202 elitepvpers.de
76.131.101.192 emea.trendmicro.com
109.221.141.194 emsisoft.com
223.203.5.89 emsisoft.de
161.199.206.253 encarta.msn.com
113.88.233.242 engine.awaps.net
146.177.16.183 enterprisesecur.symantec.com
132.31.8.11 eos.eset.es
2.27.209.243 eradicatespyware.net
22.103.235.232 es.answers.yahoo.com
55.5.19.234 es.kioskea.net
101.244.139.129 es.mcafee.com
40.239.84.37 es.trendmicro.com
247.60.111.26 es.wasalive.com
24.217.218.96 esafe.com
5.67.206.46 esecurity.livecall.co.kr
200.63.151.211 eset-la.com
152.139.109.200 eset.com
185.41.217.14 eset.es
43.24.81.165 eset.sk
170.19.26.73 esp.sophos.com
189.96.241.62 espanol.answers.yahoo.com
222.253.92.132 espanol.dir.groups.yahoo.com
80.236.212.215 espanol.groups.yahoo.com
86.110.36.2 esupport.trendmicro.com
37.187.63.247 et.symantec.com
70.88.102.61 etrr.co.uk
184.71.222.11 eugrantsadvisor.cz
246.190.35.244 eugrantsadvisor.de
198.10.61.233 eval.symantec.com
231.168.101.235 ewido.net
89.151.221.130 exchangeyourcareer.net
216.146.166.38 experts-exchange.com
235.223.193.27 f-prot.com
12.124.232.97 f-secure.com
126.107.164.180 f-secure.frf-secure.hk
124.230.237.28 f-secure.nlfsecure.com
76.51.195.17 fastclick.net
109.208.47.19 feedage.com
223.123.167.170 feeds.sophos.com
37.62.244.210 feeds.trendmicro.com
245.139.203.199 file.ikaka.cn
22.40.54.13 file.ikaka.com
136.211.174.96 file.net
7.18.119.4 files.avast.com
27.95.146.249 files.filefont.com
180.117.50.184 files.trendmicro-europe.com
38.31.170.79 filseclab.com
164.95.115.243 final4ever.com
116.172.141.232 finjan.com
217.73.181.46 firewall.sunbeltsoftware.com
7.244.45.129 firewallguide.com
202.51.246.37 fixmyim.com
29.4.149.158 foro.ethek.com
62.161.188.228 foros.toxico-pc.com
176.76.120.123 foros.zonavirus.com
115.139.253.31 forospanish.com
67.216.24.20 forospyware.com
227.245.3.218 forospyware.es
85.160.123.45 fortiguardcenter.com
212.223.68.209 fortihero.com
231.44.27.198 fortilog.com
8.133.134.12 fortinet.co.at
177.239.122.218 fortinet.com
116.235.67.195 fortiprotect.com
68.123.93.184 fortiwifi.com
101.213.133.64 forum.clubedohardware.com.br
94.74.132.216 forum.emsisoft.com
32.70.77.124 forum.hardware.fr
240.214.103.113 forum.hijackthis.de
17.48.143.50 forum.ikaka.com
254.154.130.133 forum.jiangmin.com
125.150.76.109 forum.kaspersky.com
145.226.102.98 forum.malekal.com
178.128.141.100 forum.piriform.com
95.238.133.123 forum.securitycadets.com
34.234.79.31 forum.sysinternals.com
242.54.105.20 forum.telecharger.01net.com
19.212.212.90 forum.tweaks.com
132.194.77.173 forum.zazana.com
71.190.22.81 forums.cnet.com
23.10.236.70 forums.comodo.com
188.44.219.16 forums.devshed.com
45.26.84.167 forums.maddoktor2.com
172.22.29.75 forums.majorgeeks.com
192.98.243.65 forums.techguy.org
225.0.95.135 forums.whatthetech.com
83.238.215.218 fr.bitdefender.com
74.99.25.246 fr.drweb.com
26.175.51.235 fr.mcafee.com
59.77.90.49 fr.trendmicro.com
172.59.211.132 fr1.drweb.com
111.55.156.240 fr2.drweb.com
195.7.58.229 fr3.drweb.com
228.165.97.231 fr4.drweb.com
85.147.218.126 fr5.drweb.com
212.143.163.34 fr6.drweb.com
232.219.189.24 fr7.drweb.com
136.249.100.221 fractus.mat.uson.mx
250.231.33.48 free-av.com
121.227.234.24 free-av.net
73.47.192.13 free.antivirus.com
106.205.43.15 free.avg.com
87.243.31.34 free.drweb.com
26.50.233.198 free.grisoft.com
234.127.191.187 free.grisoft.cz
10.28.177.136 free.pandasecurity.com
3.78.41.219 free.prevx.com
130.141.243.127 free.tinypicbox.com
150.218.13.116 freeav.com
182.120.52.186 freeav.net
40.34.40.205 freespywareremoval.info
35.221.241.113 frisk-software.com
242.42.12.102 fsc.norman.com
87.199.51.172 fsecure.nlwebyard.com
133.114.171.255 ftp.avp.com
72.49.244.35 ftp.bitdefender.com
151.126.14.24 ftp.ca.co
184.27.54.94 ftp.ca.com
42.198.242.245 ftp.customer.symantec.com
237.5.119.153 ftp.dispatch.mcafee.com
64.214.22.18 ftp.download.mcafee.com
97.115.129.88 ftp.downloads-eu1.kaspersky-labs.com
211.30.249.171 ftp.downloads-eu2.kaspersky-labs.com
82.93.194.79 ftp.downloads-eu3.kaspersky-labs.com
101.170.153.188 ftp.downloads-eu4.kaspersky-labs.com
255.124.125.3 ftp.downloads-us1.kaspersky-labs.com
45.106.245.86 ftp.downloads-us2.kaspersky-labs.com
239.102.190.62 ftp.downloads-us3.kaspersky-labs.com
191.247.216.51 ftp.downloads-us4.kaspersky-labs.com
224.80.0.185 ftp.downloads1.kaspersky-labs.com
214.194.252.80 ftp.downloads2.kaspersky-labs.com
152.190.197.244 ftp.downloads3.kaspersky-labs.com
104.79.224.233 ftp.downloads4.kaspersky-labs.com
137.40.134.174 ftp.drweb.com
123.22.255.2 ftp.esafe.com
117.141.68.101 ftp.europe.f-secure.com
137.218.94.90 ftp.f-prot.com
169.120.133.92 ftp.f-secure.com
215.102.253.243 ftp.grisoft.com
154.98.199.30 ftp.kaspersky-labs.com
241.53.104.19 ftp.kaspersky.com
17.211.211.89 ftp.kasperskylab.ru
131.193.76.172 ftp.liveupdate.symantec.com
70.189.144.204 ftp.liveupdate.symantecliveupdate.com
145.133.103.193 ftp.mast.mcafee.com
178.34.210.7 ftp.mcafee.com
36.17.74.158 ftp.microworldsystems.com
163.140.147.194 ftp.my-etrust.com
54.217.105.183 ftp.nai.com
87.118.213.253 ftp.networkassociates.com
201.101.77.80 ftp.norton.com
72.96.22.244 ftp.rads.mcafee.com
155.49.181.109 ftp.sandbox.norman.com
188.206.220.179 ftp.secure.nai.com
46.189.84.6 ftp.securityresponse.symantec.com
241.184.29.238 ftp.sophos.com
57.125.176.91 ftp.symantec.com
90.27.216.94 ftp.symantecliveupdate.com
204.9.80.245 ftp.symatec.com
74.5.157.28 ftp.trendmicro.com
226.213.183.18 ftp.uk.trendmicro-europe.com
3.115.223.88 ftp.update.symantec.com
117.97.155.171 ftp.updates.symantec.com
243.93.100.147 ftp.updates1.kaspersky-labs.com
67.41.186.7 ftp.updates2.kaspersky-labs.com
100.199.37.9 ftp.updates3.kaspersky-labs.com
214.113.158.161 ftp.updates4.kaspersky-labs.com
152.177.103.69 ftp.us.mcafee.com
228.121.185.181 ftp.viruslist.com
4.22.36.251 funkytoad.com
118.193.156.78 futurenow.bitdefender.com
245.1.102.242 fw.rising.com.cn
9.77.128.110 fx.dk
176.114.46.180 gangbang.mytijn.org
34.28.167.75 gdata.de
161.92.112.239 gdata.es
113.168.138.228 gecadsoftware.com
81.193.45.166 geekstogo.com
127.108.165.249 global.ahnlab.com
66.171.111.157 global.jiangmin.com
18.248.137.146 global.nprotect.com
178.21.48.88 go.mcafee.com
36.192.236.239 go.microsoft.com
231.255.113.147 go.rising.com.cn
182.76.140.136 go.sunbeltsoftware.com
91.109.123.82 go.symantec.com
205.24.243.165 go.trendmicro.com
76.87.188.73 greatis.com
95.164.147.62 grisoft.com
128.253.119.253 grisoft.cz
39.100.239.80 grv.microsoft.com
233.96.184.56 guiadohardware.net
185.241.210.45 guru.avg.com
218.74.250.179 guru1.grisoft.cz
208.188.246.74 guru2.grisoft.cz
146.184.191.238 guru3.grisoft.cz
98.73.218.227 guru4.grisoft.cz
131.162.1.41 guru5.grisoft.cz
117.16.249.252 gwava.nl
243.12.194.228 hacksoft.com.pe
7.88.220.217 hacksoft.pe
163.114.127.86 halmapr.com
209.96.247.237 hauri.co.kr
148.92.193.145 hauri.net
100.168.219.134 haurijapan.com
133.205.205.83 help.rising.com.cn
125.187.70.166 hi.baidu.com
64.50.138.198 hijackthis.de
139.127.97.187 hijackthis.download3000.com
172.28.204.1 hishomeforchildren.com
30.11.68.152 hjt-data.trend-braintree.com
157.6.141.188 hjt.networktechs.com
48.211.99.177 home.mcafee.com
81.112.207.247 hostedmailsecur.symantec.com
195.95.71.74 hotshare.net
197.222.148.114 housecall.com
149.43.39.223 housecall.trendmicro.com
47.65.78.37 housecall60.trendmicro.com
160.47.199.120 housecall65.trendmicro.com
99.43.144.96 howsafeismypc.com
51.119.170.217 huaifai.go.th
216.153.85.219 i-vault.comodo.com
73.135.206.114 iavs.cz
200.131.151.22 ibusca.me
220.207.177.12 idauthority.com
124.237.88.209 ids.kaspersky-labs.com
238.219.21.36 ieupdate.gdata.de
233.82.89.136 ieupdate1.gdata.de
184.159.48.125 ieupdate2.gdata.de
217.60.155.127 ieupdate3.gdata.de
75.231.19.22 ieupdate4.gdata.de
14.173.99.65 ieupdate5.gdata.de
100.250.58.54 ieupdate6.gdata.de
133.151.165.124 ikaka.cn
247.66.29.207 ikaka.com
118.253.98.239 ikarus.at
5.73.124.228 ikarus.net
38.231.164.42 ilove.tigolbittys.info
152.146.28.193 images.kaspersky.com
150.81.101.228 in.answers.yahoo.com
102.157.127.217 incodesolutions.com
203.59.167.32 info.drweb.com
249.229.31.115 info.prevx.com
187.169.108.154 infos-du-net.com
15.245.134.144 infosecpodcast.com
48.147.174.214 infospyware.com
162.61.106.109 inicioid.com
100.245.104.137 iniciorapido.info
173.66.130.126 inline-software.de
206.224.237.72 internetsecurity.comodo.com
195.14.233.155 intranet.cidiroax.ipn.mx
66.78.179.63 investor.symantec.com
86.154.137.52 irc.bigshitsandwich.org
119.244.244.122 irc.metraiciono.com
164.226.109.205 iseclab.org
231.217.49.177 isotopecomics.com
50.105.75.166 iss.net
83.195.249.46 it.answers.yahoo.com
76.56.114.198 it.bitdefender.com
14.52.59.106 it.mcafee.com
222.196.85.95 it.trendmicro.com
255.30.125.165 itw.trendmicro.com
236.136.112.115 ixomodels.com
107.132.58.91 ixostore.ixomodels.com
127.208.84.80 javacoolsoftware.com
160.110.123.210 jetico.com
77.220.115.105 jiangmin.com
16.216.61.13 jiangmin.com.cn
224.36.87.2 jobs.bitdefender.com
1.69.70.204 jotti.org
246.52.190.31 jp.mcafee.com
185.48.136.195 jp.trendmicro.com
137.124.94.184 justfacebook.net
170.146.66.119 k-otik.com
148.129.186.14 k7computing.com
19.124.131.178 kaba.360.cn
38.201.90.167 kaba.360.com
203.234.73.113 karuna-shechen.org
61.217.193.196 kaspersky-fr.com
188.212.138.104 kaspersky-labs.com
140.33.165.93 kaspersky.co.jp
44.62.76.35 kaspersky.co.uk
158.45.196.118 kaspersky.com
97.40.141.94 kaspersky.com.cn
48.117.168.206 kaspersky.dk
205.142.74.208 kaspersky.es
62.124.195.103 kaspersky.gr
189.120.140.146 kaspersky.pl
88.75.45.135 kaspersky.ru
121.233.84.205 kaspersky.se
234.215.17.33 kasperskylab.co.kr
105.211.218.9 kasperskylab.nl
181.155.44.121 kav.ru
213.56.151.123 kav.zonelabs.com
71.227.15.18 kb.bitdefender.com
10.35.217.54 kb.bitdefender.de
89.239.47.43 kb.bitdefender.us
122.140.154.113 kerio.com
236.55.18.196 kimzimmer.net
107.250.95.236 kioskea.net
3.71.122.225 kpfans.com
35.93.26.160 kr.ahnlab.com
14.7.146.55 kr.sophos.com
140.71.91.219 krupunmai.com
92.148.117.208 kvup.jiangmin.com
69.181.33.154 kztechs.com
115.95.153.237 l33t.shadow-mods.net
53.159.98.145 la.trendmicro.com
133.107.252.5 ladooscuro.es
166.9.35.75 laneros.com
24.179.224.227 latam.kaspersky.com
86.110.225.2 latin.bitdefender.com
38.187.251.247 lavasoft.com
70.88.102.61 lavasoft.nu
184.3.222.23 lavasoftusa.com
190.201.47.187 lexikon.ikarus.at
210.145.128.44 license.drweb.com
110.235.236.114 linhadefensiva.org
156.218.100.197 linhadefensiva.uol.com.br
95.213.45.173 linux.bitdefender.com
46.102.199.33 lists.clamav.net
207.63.239.36 liutilities.com
65.45.103.187 live.sunbeltsoftware.com
3.41.48.95 liveprotect.net
87.61.206.216 liveupdate.symantec.com
120.151.246.30 liveupdate.symantec.d4p.net
234.133.110.113 liveupdate.symantecliveupdate.com
104.129.55.89 looknstop.com
245.70.202.198 lovings.technigoyous.net
22.228.241.200 lurker.clamav.net
67.210.106.227 mailcenter.rising.com
138.82.183.135 mailcenter.rising.com.cn
90.158.209.124 majorgeeks.com
123.60.60.194 mall.hauri.co.kr
236.42.181.149 malwarebytes.org
47.165.254.57 malwarecity.com
255.242.212.46 malwarecity.netmalwarecity.org
31.11.187.240 malwaredomainlist.com
13.250.51.135 malwarepedia.com
140.245.252.43 malwareremoval.com
159.66.211.32 malwarescan.emsisoft.com
71.102.197.237 malwarescan.emsisoft.de
185.85.61.64 malwarescan.emsisoft.es
56.80.6.228 mamutu.com
131.24.156.84 manuelruvalcaba.com
164.182.195.154 marian.symantec.com
21.164.60.237 mast.mcafee.com
216.160.5.85 mcafee-at-home.com
40.108.159.74 mcafee.com
73.10.198.76 mcafeeb2b.com
186.248.63.227 mcafeefans.com
57.244.140.11 mcafeeretail.com
209.196.166.0 mcaffee.com
242.98.205.70 me.kaspersky.com
99.80.138.153 media.fastclick.net
226.76.203.250 megasecurity.org
42.17.162.239 merijn.org
75.174.13.241 metascan-online.com
189.89.133.12 microsoft.com
4.28.210.176 microsoft.fr
212.105.169.165 midescargas.com
244.6.20.235 mirror02.gdata.de
102.177.140.62 misec.net
101.112.213.98 mmsk.cn
120.189.240.87 moneybookers.com
153.90.23.24 moosoft.com
134.128.11.175 mop.pandasecurity.com
5.192.212.84 mostz.com
213.12.238.73 mozilla-hispano.org
58.170.22.143 msdn.microsoft.com
239.219.21.105 msk.drweb.com
177.27.222.13 msk1.drweb.com
129.103.248.2 msk2.drweb.com
162.5.32.195 msk3.drweb.com
143.43.87.90 msk4.drweb.com
82.107.221.254 msk5.drweb.com
34.183.247.243 msk6.drweb.com
67.85.98.57 msk7.drweb.com
52.127.90.12 msncleaner.softonic.com
179.190.36.176 msnfix.changelog.fr
199.11.250.165 msnvirusremoval.com
232.232.233.111 msr.mcafee.com
153.215.97.194 mvps.org
92.211.43.170 mx.answers.yahoo.com
44.99.69.159 mx.mcafee.com
77.53.229.26 mxttchina.com
55.36.93.177 my-etrust.com
250.31.38.85 my.drweb.com
201.176.65.74 mygeekside.com
110.141.236.20 nabble.com
224.124.100.103 nai.com
95.119.45.79 natsko.com
115.196.72.196 naturesimages.net
19.225.239.198 net-security.org
65.208.103.93 network.drweb.com
4.203.172.124 networkassociates.com
79.147.198.113 networkassociates.nai.com
112.184.184.62 networkworld.com
104.166.49.145 neunet.orgnews.bitdefender.com
43.162.250.53 new-beta.drweb.com
118.106.76.166 new-company.drweb.com
151.7.183.236 new-estore.drweb.com
9.246.47.131 new-forum.drweb.com
136.241.120.167 new-partners.drweb.com
27.190.78.156 new-solutions.drweb.com
60.91.186.226 new-support.drweb.com
174.74.50.53 new-www.drweb.com
176.201.127.93 new.taringa.net
128.22.154.82 news.drweb.com
161.179.193.16 newsletters.trendmicro.com
139.26.178.99 niueight.norman.no
78.22.123.75 niufive.norman.no
30.98.149.64 niufour.norman.no
63.0.64.198 niunine.norman.no
52.114.185.93 niuone.norman.no
179.110.130.1 niuseven.norman.no
199.186.156.247 niusix.norman.no
232.88.67.188 niuthree.norman.no
217.198.0.15 niutwo.norman.no
88.194.201.247 nl.bitdefender.com
40.14.159.236 noadware.net
196.39.134.106 nod32.co.uk
54.210.254.1 nod32.com
249.17.200.165 nod32.datsec.de
79.229.37.33 nod32.lu
112.130.144.103 nod32.ru
226.45.8.186 norman.com
97.108.210.94 norton.com
117.185.103.207 notifier.antivir-pe.de
17.210.143.21 novirusthanks.org
131.125.7.172 nprobeta.norman.com
2.188.208.80 nprotect.com
81.136.106.196 nprotect.net
182.38.146.11 nprotect.seoul.go.kr
228.208.10.94 nsclean.com
166.148.87.133 ntfaq.co.kr
250.224.113.123 obscgi.mcafee.com
27.126.153.193 oem.sunbeltsoftware.com
5.161.205.208 offensivecomputing.net
200.224.83.116 office.microsoft.com
152.45.109.105 oldtimer.geekstogo.com
60.78.92.51 one.tinypicbox.com
174.249.212.134 onecare.live.com
45.57.158.42 online-backup.comodo.com
65.133.116.31 online.jiangmin.com
98.94.95.229 online.rising.com.cn
15.77.215.56 onlinecheck.emsisoft.com
210.72.161.32 onlinecheck.emsisoft.de
162.217.187.145 onlinecheck.emsisoft.net
62.174.94.147 onlinecheck.emsisoft.org
176.157.214.42 onlinescan.avast.com
115.152.159.206 openantivirus.org
201.175.64.74 outpost.pl
234.9.104.144 ozzu.com
92.248.224.227 p3dev.taringa.net
219.111.37.70 pandalabs.pandasecurity.com
106.187.63.59 pandasecurity.com
139.89.102.189 pandasoftware.com
56.199.94.84 pandasoftware.es
251.195.40.248 pantip.com
203.15.198.113 pcav.cn
111.48.49.183 pccreg.antivirus.com
225.31.169.10 pccreg.trendmicro.com
156.19.107.167 pcentraide.com
108.96.65.156 pcguide.com
141.129.49.102 pchell.com
131.111.169.253 pcinternetpatrol.com
1.107.114.161 pcsupportadvisor.com
21.184.73.150 pctools.com
182.213.51.91 pda.drweb.com
39.195.172.175 pedidos.protegerse.com
166.191.117.83 personal.psu.edu
118.11.143.195 personalfirewall.comodo.com
18.37.50.9 pestpatrol.com
11.154.49.227 pg.hauri.net
206.149.251.203 phx.corporate-ir.net
158.226.21.192 pineleafboys.com
190.128.60.62 podcasts.sophos.com
172.234.48.213 pogonyuto.forospanish.com
43.229.249.121 precisesecurity.com
62.50.20.110 prevx.com
95.79.187.52 privacy.microsoft.com
81.61.119.135 products.drweb.com
207.57.64.111 promotions.drweb.com
159.134.22.100 psnw.com
68.167.6.234 pspl.com
182.81.126.129 pvtc.org
120.145.71.37 qqjkw.net
193.86.150.146 quickheal.co.in
226.244.1.216 quickheal.com
83.158.122.43 radius.turvamies.com
210.98.199.83 rads.mcafee.com
106.174.225.72 ravantivirus.com
139.76.8.142 raymond.cc
252.246.129.37 reg-int.nod32-es.com
123.181.202.73 reg.eset.es
203.2.228.62 reg.rising.com.cn
47.160.11.132 register.norman.com
93.198.255.83 removetrojanvirus.org
156.5.200.247 renewalcenter.symantec.com
107.82.105.115 renewals.bitdefender.com
19.118.145.185 research.microsoft.com
133.33.77.80 research.pandasecurity.com
72.96.210.244 research.sunbelt-software.com
147.40.104.100 resplendence.com
180.198.211.170 retail.sp.f-secure.com
165.240.203.125 retail01.sp.f-secure.com
36.47.149.33 retail02.sp.f-secure.com
56.124.107.22 ribbonwarehouse.com
89.214.90.224 rising-global.com
10.72.210.51 rising.com
205.68.156.27 rising.com.cn
21.77.46.137 rolandovera.com
54.166.86.139 rootkit.com
168.149.206.34 rootkit.nl
238.20.27.74 rover800.gaima.co.uk
190.165.54.190 roysephotos.com
95.126.220.4 ru.trendmicro.com
209.108.85.88 ruben.bzin.net
203.227.154.187 runscanner.net
223.48.180.176 safe.qq.com
255.206.98.57 safecomputing.umn.edu
180.67.218.208 safer-networking.org
119.62.164.116 safetynet.com
71.139.57.229 sales.bitdefender.com
227.164.165.43 samroeng.hi5.com
85.147.157.253 sandbox.norman.com
151.14.102.161 sandboxie.com
103.90.60.150 sapcupgrades.com
136.248.168.221 sarahmcconnellphotography.net
125.106.164.247 saverssite.com
252.102.229.20 scan.anti-trojan.net
136.43.188.9 scan.kingsoft.com
169.200.39.79 scan4you.net
27.183.35.38 scanner.novirusthanks.org
30.54.236.202 scanner.virus.org
109.2.134.63 scanner2.novirusthanks.or
142.160.174.133 schemas.microsoft.com
0.143.38.216 schemas.xmlsoap.org
195.6.107.194 sea.symantec.com
149.217.12.183 search.ca.com
181.119.51.185 search.mcafee.com
39.101.172.80 search.symantec.com
166.220.240.112 seasonsecurity.com
53.41.11.101 secdreg.org
86.198.50.171 secubox.aldria.com
72.52.110.126 secunia.com
198.48.55.102 secure-email.comodo.com
26.0.145.223 secure.av-desk.com
59.158.253.225 secure.nai.com
173.72.117.240 securecomputing.com
232.0.183.148 secureme.com
184.77.141.137 securitoo.com
217.110.124.83 security.symantec.com
206.25.244.166 securitycheck.symantec.com
77.89.190.74 securitynewsportal.com
97.165.88.191 securityrespons.symantec.com
1.194.127.5 securityresponse.symantec.com
115.109.247.156 securitywonks.net
242.172.60.188 secuser.com
61.116.86.177 secuser.model-fx.com
162.18.126.247 sergiwa.com
87.67.125.209 service.mcafee.com
25.131.70.117 service1.symantec.com
233.207.96.229 servicenews.symantec.com
133.232.3.43 sfdoccentral.symantec.com
247.147.191.194 shadow.grisoft.cz
186.211.69.102 shadu.baidu.com
9.159.223.219 shadu.duba.net
42.60.74.33 shield.prevx.com
32.107.70.248 shop.hauri.co.kr
159.170.15.156 shop.pandasecurity.com
178.247.230.145 shop.sunbeltsoftware.com
76.201.202.80 shop.symantec.com
122.183.66.163 shop.trendmicro.com
192.55.143.14 shudoo.com
144.199.169.4 simplysup.com
177.33.209.6 siren24.nprotect.com
162.143.201.28 siteadvisor.com
101.6.13.60 sitedirector.symantec.com
176.151.40.49 smallbiz.symantec.com
209.240.79.254 smbstore.trendmicro.com
202.102.78.81 smokey-services.eu
73.97.23.57 soccersuck.com
216.41.173.169 softfaq.com
249.199.212.171 softonic.com
38.181.77.66 software-files.download.com
233.49.150.102 solutions.drweb.com
57.125.176.91 sophos.com
90.27.27.37 sophos.fr
79.141.23.120 sophos1.ucd.ie
18.137.225.28 sophos10.ucd.ie
226.213.183.17 sophos2.ucd.ie
123.235.155.84 sophos5.ucd.ie
113.93.151.235 sophos6.ucd.ie
239.89.96.143 sophos7.ucd.ie
3.166.55.132 sophos8.ucd.ie
164.195.33.73 sophos9.ucd.ie
21.177.154.157 soporte.pandasecurity.com
148.173.223.188 sos.rising.com.cn
224.117.249.177 sosvirus.changelog.fr
0.19.32.247 spd.atdmt.com
114.1.152.74 specs.xmlsoap.org
188.131.233.185 speedtest.comodo.com
140.208.3.42 spftrl.digitalriver.com
40.233.166.44 spyany.com
154.216.30.195 spyblocker-software.com
25.211.231.103 spybot.info
172.159.129.219 spycheck.co.uk
205.61.169.34 spycheck.es
63.175.233.248 spychecker.com
65.171.178.224 spycop.com
17.247.1.78 spywaredb.com
170.13.108.80 spywaredlls.prevx.com
28.184.228.231 spywarefiles.prevx.com
223.123.49.15 spywareguide.com
51.200.8.4 spywareinfo.com
83.101.115.74 spywareterminator.com
69.144.107.29 square.bitdefender.com
196.207.52.193 static.yoreparo.com
215.151.202.49 stats.norton.com
116.53.241.119 stdio-labs.blogspot.com
229.223.106.14 stiller.com
100.31.51.57 store.bitdefender.com
187.242.212.46 store.de.bitdefender.com
32.144.251.116 store.drweb.com
78.58.239.67 store.trendmicro.com
140.245.185.103 subs.geekstogo.com
219.194.82.92 subwiz.trendmicro.com
252.95.254.38 sucop.com
242.141.186.189 sun.symantec.com
180.205.63.97 sunbelt-software.com
132.26.210.206 sunbeltsecurity.com
30.48.61.20 sunbeltsoftware.com
19.94.57.235 superboy2010.com.au
146.158.3.143 superdicas.com.br
166.234.217.132 superuser.co.kr
70.195.196.74 support.drweb.com
116.178.60.157 support.f-secure.com
178.41.129.1 support.kaspersky.co
9.64.34.124 support.mcafee.com
42.154.73.126 support.microsoft.com
23.4.61.145 support.pandasecurity.com
218.255.7.53 support.rising-global.com
170.144.33.42 sybari.com
202.105.200.240 sygate.com
188.88.64.67 symantec-ese.baynote.net
59.83.9.43 symantec.com
78.36.168.164 symantecliveupdate.com
243.193.207.166 symatec.com
33.176.71.61 sysinternals.com
228.168.13.221 system-cleaner.comodo.com
176.244.39.210 tallemu.com
209.146.146.24 taringa.net
66.128.11.235 tds.diamondcs.com.au
133.251.84.143 tech.pantip.com
85.72.42.132 techimo.com
243.99.19.72 techspot.com
101.82.139.223 techsupportforum.com
228.77.85.131 tecniservicioslys.com
248.154.43.248 tecno-soft.com
152.183.22.62 tempuri.org
10.166.142.145 thecomputerpitstop.com
137.161.87.49 thejokerx.blogspot.com
85.234.110.38 thetechguide.com
118.136.149.108 thinkpad.cn
107.250.145.67 threatexpert.com
46.246.91.43 threatinfo.trendmicro.com
254.66.117.32 timeforyourbusi.pandasecurity.com
156.93.25.159 timestamp.comodoca.com
13.75.146.54 timestamp.wosign.com
140.71.91.218 tinysoftware.com
36.23.249.83 tms.symantec.com
69.181.32.153 together.pctools.com
182.163.221.236 tool.ikaka.com
53.159.160.206 toonbox.de
255.229.118.195 tr.mcafee.com
31.130.225.197 trackingtheworld.com
145.45.217.220 training.drweb.com
212.236.162.128 training.trendmicro.com
163.57.121.117 trapware.com
68.86.100.59 trendmicro.com
182.1.220.142 trendmicro.com.cn
53.65.166.50 trendmicro.fr
200.13.64.167 trendsecure.com
233.170.103.237 trial.trendmicro.com
91.85.91.255 trucoswindows.es
85.16.36.164 trucoswindows.net
37.92.62.153 tw.mcafee.com
138.250.232.97 tw.sophos.com
58.38.96.180 tw.trendmicro.com
252.102.41.88 tweaksforgeeks.com
204.179.67.209 u0.eset.com
113.212.239.23 u1.eset.com
227.126.171.174 u10.eset.com
165.190.48.206 u100.eset.com
241.134.198.195 u11.eset.com
18.36.50.9 u12.eset.com
132.207.170.92 u13.eset.com
126.138.239.123 u14.eset.com
146.214.197.112 u15.eset.com
179.48.48.182 u16.eset.com
227.33.171.12 u17.eset.com
166.28.116.115 u18.eset.com
245.44.14.104 u19.eset.com
22.134.54.107 u2.eset.com
136.116.174.133 u20.eset.com
206.244.251.41 u21.eset.com
158.132.21.31 u22.eset.com
55.86.181.221 u23.eset.com
169.69.45.48 u24.eset.com
40.65.247.24 u25.eset.com
192.17.149.145 u26.eset.com
224.174.188.147 u27.eset.com
14.29.180.170 u28.eset.com
81.24.125.78 u29.eset.com
32.224.19.190 u3.eset.com
189.126.126.4 u30.eset.com
46.108.247.87 u31.eset.com
120.239.71.130 u32.eset.com
72.59.29.119 u33.eset.com
105.217.136.57 u34.eset.com
86.67.124.208 u35.eset.com
84.190.197.244 u36.eset.com
104.11.155.233 u36eset.com
137.168.139.179 u37.eset.com
127.26.3.6 u37eset.com
253.22.69.34 u38.eset.com
70.219.95.23 u39.eset.com
103.121.134.93 u4.eset.com
216.103.130.52 u40.eset.com
31.102.203.156 u41.eset.com
110.179.230.145 u42.eset.com
143.80.13.147 u43.eset.com
1.63.1.165 u44.eset.com
251.182.202.74 u45.eset.com
15.2.228.63 u46.eset.com
48.39.146.11 u47.eset.com
40.21.79.95 u48.eset.com
167.17.148.194 u49.eset.com
243.217.106.183 u5.eset.com
19.118.213.185 u50.eset.com
133.33.205.208 u51.eset.com
200.224.150.116 u52.eset.com
151.177.241.237 u53.eset.com
60.78.92.51 u54.eset.com
174.249.212.134 u55.eset.com
165.177.22.162 u56.eset.com
185.253.48.27 u57.eset.com
94.31.219.97 u58.eset.com
207.201.84.248 u59.eset.com
78.136.157.28 u6.eset.com
158.213.183.17 u60.eset.com
126.238.90.211 u61.eset.com
172.31.89.173 u62.eset.com
245.95.34.81 u63.eset.com
65.39.184.193 u64.eset.com
97.196.223.7 u65.eset.com
83.239.27.30 u66.eset.com
22.46.160.194 u67.eset.com
229.123.63.59 u68.eset.com
138.156.170.129 u69.eset.com
252.71.34.212 u7.eset.com
123.255.100.240 u70.eset.com
7.75.58.105 u71.eset.com
172.41.41.175 u72.eset.com
217.23.162.2 u73.eset.com
156.19.107.106 u74.eset.com
236.35.5.219 u75.eset.com
136.248.168.221 u76.eset.com
250.231.32.116 u77.eset.com
189.226.233.159 u78.eset.com
19.249.138.148 u79.eset.com
175.207.45.85 u8.eset.com
33.189.165.168 u80.eset.com
160.185.111.144 u81.eset.com
51.133.9.5 u82.eset.com
84.34.48.7 u83.eset.com
6.149.44.34 u84.eset.com
201.144.245.198 u85.eset.com
153.221.16.187 u86.eset.com
50.243.244.122 u87.eset.com
164.225.108.205 u88.eset.com
102.221.53.113 u89.eset.com
54.42.11.102 u9.eset.com
87.199.119.172 u90.eset.com
201.57.115.199 u91.eset.com
203.53.60.107 u92.eset.com
223.130.146.223 u93.eset.com
251.26.121.161 u94.eset.com
109.9.241.244 u95.eset.com
236.4.187.152 u96.eset.com
188.81.213.141 u97.eset.com
220.239.254.213 u98.eset.com
80.223.119.40 u99.eset.com
19.219.64.17 uk.mcafee.com
227.39.90.6 uk.trendmicro-europe.com
4.197.130.8 uk.trendmicro.com
118.180.250.162 ulove.tigolbittys.info
248.179.199.70 up.duba.net
12.255.225.59 up.rising.com.cn
45.157.8.129 up1.nod123.cn
158.139.197.212 upd.zonelabs.com
29.135.142.188 update.360safe.cn
237.208.97.174 update.360safe.com
10.109.204.176 update.aladdin.com
252.151.196.199 update.authentium.com
190.215.141.107 update.avg.com
142.35.99.96 update.avgfrance.com
175.193.74.33 update.bitdefender.com
156.231.194.116 update.drweb.com
27.39.140.24 update.ewido.com
47.115.166.13 update.grisoft.com
214.152.84.218 update.grisoft.cz
196.190.72.237 update.hispasec.com
67.253.17.145 update.ikaka.com
18.74.44.134 update.ikarus-software.at
119.231.83.204 update.quickheal.com
165.146.203.159 update.rising.com.cn
231.81.20.67 update.sophos.com
59.33.178.188 update.symantec.com
92.191.218.2 update.trendmicro.com
206.105.150.153 update7.jiangmin.com
144.169.27.61 updatem.360safe.cn
96.246.54.170 updatem.360safe.com
125.143.157.116 updates.a-2.org
239.58.21.199 updates.drweb.com
110.122.223.107 updates.f-prot.com
130.198.181.96 updates.sald.com
163.32.32.166 updates.symantec.com
208.14.153.249 updates3.kaspersky-labs.com
147.10.98.225 updates4.kaspersky-labs.com
99.154.124.215 updates5.kaspersky-labs.com
127.239.159.212 upgrade.bitdefender.com
241.222.23.107 upgrade1.bitdefender.com
180.217.224.15 upgrade2.bitdefender.com
131.106.251.4 upgrade3.bitdefender.com
164.195.34.74 upgrade4.bitdefender.com
22.178.154.157 upload.changelog.fr
149.173.100.133 us.bitdefender.com
169.250.126.122 us.mcafee.com
201.152.165.124 us.trendmicro.com
126.13.164.154 usa.kaspersky.com
65.8.110.62 usbcleaner.cn
17.85.136.51 ushousecall02.trendmicro.com
49.243.243.121 utilidades-utiles.com
163.225.108.204 v.dreamwiz.com
102.221.53.112 v4.windowsupdate.microsoft.com
54.41.11.101 v5.windowsupdate.microsoft.com
87.199.118.171 vet.com.au
201.181.239.67 vicentevirtual.com
66.172.179.226 viguard.com
86.249.137.215 vil.nai.com
119.150.245.29 vil.nail.com
233.133.109.112 virobot.co.kr
104.128.54.20 virscan.org
55.205.81.9 virus.org
88.106.120.79 virusbuster.hu
202.89.240.162 viruschief.com
141.85.186.138 virusdoctor.jp
93.161.212.127 virusfreezone.info
126.63.251.129 virusinfo.prevx.com
239.45.116.24 viruslist.com
110.41.61.188 viruslist.ru
130.117.87.177 virusscan.jotti.org
163.19.127.248 virusscanonline.net
152.133.191.206 virusspy.com
23.129.136.182 virustotal.com
95.70.215.36 visualizesoftware.com
128.227.66.38 visualtracking.symantec.com
242.142.186.189 vivo-austin.com
181.205.132.97 vms.drweb.com
133.26.90.86 vncsvr.com
166.184.197.156 vos.symantec.com
23.98.62.239 vrv.com.cn
150.162.7.147 vsantivirus.com
170.114.165.12 webadmin.norman.no
79.16.204.82 webphand.com
64.58.196.105 webroot.com
191.121.142.13 wedoantivirus.com
143.198.168.2 welkam.co.jp
243.100.207.72 wexperts-exchange.com
157.138.195.23 whatthetech.com
96.201.140.187 wikio.es
47.22.167.176 wilderssecurity.com
80.179.206.246 wilderssecurity.net
194.94.138.141 wildlist.com
133.157.16.49 windowsupdate.microsoft.com
85.234.42.38 winpatrol.com
117.135.149.108 wmcafee.com
231.50.13.191 woottonfootball.com
102.114.215.99 wtc.trendmicro.com
122.190.173.88 ww.emsisoft.com
33.159.159.37 www.1stavenuelimousines.co.uk
79.141.24.120 www.2xlgames.com
18.137.225.96 www.ahnlab.com
226.25.251.85 www.aks.com
3.115.34.87 www.aladdin.com
117.97.155.239 www.anti-trojan-software.net
55.93.100.147 www.anti-trojan.net
7.237.126.136 www.anti-virus.by
163.195.33.73 www.antivir.es
21.177.153.156 www.antivirus-tools.com
148.173.99.132 www.antiy.net
168.249.125.121 www.apsecure.com
201.151.164.123 www.arpia.be
246.133.29.18 www.authentium.com
185.129.230.183 www.authentium.com.au
137.205.0.172 www.av-desk.com
173.110.111.245 www.avast.com
31.93.231.72 www.avg.com
226.89.177.236 www.avhide.com
178.165.135.225 www.avoncourt.com
211.67.242.39 www.avx.ro
68.49.107.190 www.barder.com
195.45.52.98 www.beautybar.com
215.121.10.88 www.bg.virusblokada.com
112.143.238.22 www.bit-defender.de
226.126.102.105 www.bitdefende.de
97.122.48.13 www.bitdefender-es.com
49.198.74.2 www.bitdefender.be
82.100.113.72 www.bitdefender.cl
195.82.234.155 www.bitdefender.co.uk
134.78.179.131 www.bitdefender.com
86.154.205.120 www.bitdefender.com.au
119.56.245.123 www.bitdefender.com.sg
233.38.109.18 www.bitdefender.com.tw
103.34.54.57 www.bitdefender.com.vn
255.242.212.47 www.bitdefender.de
32.144.252.117 www.bitdefender.es
146.126.184.200 www.bitdefender.fr
16.122.129.176 www.bitdefender.hk
224.199.88.165 www.bitdefender.us
1.100.195.167 www.bitdefenderme.com
115.15.59.62 www.briarhurst.com
54.78.4.226 www.brightoctober.com
6.155.219.215 www.buraka.tv
38.56.70.29 www.buscafacil.com
147.222.185.107 www.buscalo.in
18.30.131.15 www.busco.in
38.106.157.4 www.ca.com
71.8.196.74 www.cambridge-steiner-school.co.uk
184.178.61.225 www.ccssforum.org
55.242.6.134 www.celticmerchant.com
7.62.32.123 www.clamav.net
108.220.72.193 www.collectedcurios.com
154.135.192.20 www.comodo.com
93.198.137.184 www.comodo.tv
44.19.164.173 www.comodoantispam.com
77.176.203.243 www.comodopartners.com
70.226.14.17 www.computing.net
9.33.147.181 www.configurarequipos.com
216.110.174.170 www.contentverification.com
117.135.148.107 www.deborahshelton.net
230.49.13.190 www.dr-bull.com
101.113.214.99 www.drweb.com
121.189.172.88 www.ealaddin.com
154.23.24.158 www.elvis-express.com
200.6.144.241 www.emeraldclassic.co.uk
139.1.89.217 www.emsisoft.at
94.149.119.209 www.emsisoft.com
127.239.158.211 www.emsisoft.de
240.221.23.106 www.emsisoft.es
44.81.88.135 www.emsisoft.fr
251.226.115.124 www.emsisoft.it
28.59.154.194 www.emsisoft.jp
142.42.18.21 www.emsisoft.net
13.38.220.253 www.emsisoft.nl
33.114.246.242 www.emsisoft.org
66.16.29.244 www.engyro.com
111.254.150.139 www.entercept.com
50.250.95.47 www.esafe.com
2.70.121.36 www.eset.es
167.104.104.238 www.eugrantsadvisor.com
24.86.225.65 www.eugrantsadvisor.de
219.82.170.229 www.eugrantsadvisor.ie
171.158.128.219 www.eugrantsadvisor.se
204.60.236.33 www.exchangeyourcareer.com
62.42.100.184 www.f-prot.com
60.166.173.219 www.f-secure.com
80.242.131.208 www.fimasys.com
113.144.238.22 www.flairweddings.co.uk
226.126.103.106 www.forospyware.com
97.122.48.14 www.fortifed.com
49.198.74.3 www.fortiid.com
82.100.114.73 www.fortimail.com
196.83.234.156 www.fortinet-apac.com
2.202.47.255 www.fortinet.ch
210.22.73.244 www.fortinet.co.il
243.180.112.246 www.fortinet.com
100.162.233.141 www.fortinet.net
227.158.178.50 www.fortinet.nl
247.234.204.39 www.fortinet.sg
24.136.244.109 www.fortinetuk.com
138.119.176.192 www.freeality.com
9.114.121.168 www.freedrweb.ru
219.193.82.159 www.freerav.com
251.94.189.161 www.frisk-software.com
109.9.53.56 www.frisk.is
48.73.255.220 www.fsecure.com
0.149.213.209 www.garryowen.com
33.51.64.23 www.gdata.es
146.221.185.106 www.globalhauri.com
17.29.130.15 www.gokidding.com
37.105.156.4 www.grisoft.com
70.7.196.74 www.hackshields.com
184.178.60.225 www.hacksoft.com.pe
55.241.5.133 www.hacksoft.pe
6.62.32.122 www.handwritingforkids.com
107.219.71.192 www.hasp.se
153.134.191.19 www.hauri.co.kr
95.201.140.186 www.hauri.net
47.21.166.176 www.hxproduction.com
80.179.206.246 www.ibusca.me
194.93.138.141 www.ikarus.at
132.157.15.49 www.imddomains.co.uk
84.234.42.38 www.indielisboa.com
117.135.149.108 www.inicioid.com
231.50.13.191 www.iniciorapido.info
102.113.214.99 www.internationalservicecheck.com
121.190.173.88 www.irangoals.com
19.144.145.23 www.iseclab.org
65.126.9.106 www.ixomodels.com
3.122.210.82 www.jiangmin.com
211.11.236.71 www.jiangmin.com.cn
244.100.20.73 www.jotti.org
102.83.140.224 www.kaspersky.com
41.78.85.132 www.kioskea.net
252.226.115.124 www.latin-mass-society.org
29.60.154.194 www.livepcsupport.com
143.42.19.22 www.malwarecity.com
137.161.88.121 www.malwarecity.fr
157.238.114.110 www.mamutu.com
189.140.153.112 www.mamutu.de
235.122.17.7 www.manchester-offices.co.uk
174.118.219.171 www.mcafee.at
126.194.245.160 www.mcafee.com
159.96.96.230 www.metascan-online.com
16.78.217.57 www.microsoft.com
211.74.162.222 www.midescargas.com
163.150.120.211 www.mountainlakeslodge.com
196.52.228.25 www.mtr-design.com
54.35.92.176 www.mygeekside.com
183.32.40.86 www.netegrity.com
203.109.254.75 www.norman.com
235.11.105.145 www.nottinghampoetryseries.com
93.249.225.228 www.novirusthanks.org
220.245.171.136 www.npin.co.kr
172.65.197.125 www.nprotect.co.kr
205.223.236.195 www.nprotect.com
62.205.101.22 www.nprotect.com.br
1.201.46.255 www.nsclean.com
209.21.72.244 www.owen.org
242.179.112.246 www.pandasecurity.com
100.162.232.141 www.pctools.com
230.161.181.52 www.peterhearnwaste.co.uk
250.237.207.41 www.phoenixtrikeworks.com
27.139.246.111 www.prdouglas.co.uk
140.121.179.194 www.prevx.com
11.117.124.170 www.prevx1.com
219.193.82.160 www.professorbeyer.com
252.95.190.162 www.quickheal.com
110.9.54.57 www.removetrojanvirus.org
48.73.255.221 www.renningers.com
0.150.214.210 www.residentphotography.com
154.172.185.144 www.retento.com
11.86.50.227 www.reviewsofbooks.com
138.150.251.135 www.rising-global.com
158.226.21.124 www.risingav.com.au
191.128.61.195 www.safenet-inc.com
49.42.181.90 www.scan4you.net
175.106.126.254 www.seasonsecurity.com
3.58.28.119 www.secondchanceboxer.com
104.216.68.189 www.secure-elements.com
150.130.188.16 www.sheffieldmind.co.uk
88.194.133.180 www.smf.org
168.10.155.164 www.softfaq.com
68.167.194.234 www.sophos.com
182.82.126.129 www.spycheck.co.uk
121.145.4.37 www.spycheck.es
73.222.30.26 www.stadiumpage.com
240.2.16.231 www.sunbeltsoftware.com
98.173.136.58 www.symantec.com
225.236.82.222 www.sysinternals.com
112.180.163.79 www.tecniservicioslys.com
145.14.15.149 www.testmypcsecurity.com
191.253.135.232 www.threatexpert.com
130.248.80.208 www.tomorrowsedge.net
81.137.107.197 www.trendmicro.com
114.226.146.199 www.trojaner.info
228.209.10.94 www.trustix.com
167.204.212.2 www.trustlogo.com
122.96.241.251 www.vba.com.by
155.186.25.65 www.virscan.org
13.168.145.148 www.virus.fi
139.164.90.124 www.virus.org
159.241.117.113 www.virusbuster.hu
57.7.20.235 www.viruschief.com
102.245.141.130 www.virusfreezone.info
41.241.86.38 www.virustotal.com
249.61.112.27 www.wellgousa.com
26.219.220.98 www.whichssl.com
140.201.84.181 www.willsee.com
78.197.29.89 www.xmlsoap.org
162.149.119.210 www.zarya.info
195.51.227.24 www1.my-etrust.com
53.33.91.175 www3.ca.com
51.157.164.210 www3.safenet-inc.com
71.233.122.199 www4.symantec.com
104.135.229.13 wwws.clamav.net
217.241.217.220 x-cleaner.com
212.236.163.128 x.360safe.com
164.57.189.117 yoreparo.com
196.215.228.187 z-oleg.com
189.76.227.149 zeustracker.abuse.ch
128.71.173.125 zeylstra.nl
80.148.199.114 zhidao.baidu.com
112.50.238.116 zhidao.ikaka.com
226.32.103.11 ziggamza.net
97.28.48.175 zonavirus.com
240.228.198.32 zonealarm.com
17.129.237.102 zonelabs.com
3.239.41.57 zonelabs.fr
129.235.242.33 zonelog.co.uk
81.56.200.22 zs.kingsoft.com
114.213.52.24 ztl.comodo.com


Rootkit activity

No anomalies have been detected.

Propagation

A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.

VersionInfo

No information is available.

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 12644 12800 3.76874 55d274f88e5ab59aa27a86516437f7d8
.data 20480 64 512 0.164757 75fe664fdcd708925b7ca712ee127c19
.rdata 24576 1328 1536 3.03097 2707a7526abdc69c43f37dd3b6665e30
.bss 28672 320 0 0 d41d8cd98f00b204e9800998ecf8427e
.idata 32768 800 1024 2.18489 4e803ebabfbd6fe3233c57c1b6e762a8
.rsrc 36864 87232 87552 5.54166 34b5a2a0306aa053bf792aa7f84ba6c7

Dropped from:

71909eada4fca1fc018487d0e6b657ef
e12a6dd5698996f0f6eb4e1e57c6ba03

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a

URLs

URL IP
hxxp://4rl144t5h0m232fpeig438v5n565cm.ipcheker.com/ 75.126.104.226
www.buscaid.com 8.5.1.51


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps were not found.


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Delete the original Trojan file.
  2. Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
    127.0.0.1 localhost
  3. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  4. Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
  5. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Average: 2 (1 vote)

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now