Gen.Variant.Symmi.2478_75587126d7

by malwarelabrobot on August 6th, 2016 in Malware Descriptions.

Gen:Variant.Symmi.2478 (BitDefender), Worm:Win32/Esfury.X (Microsoft), Win32.HLLW.Autoruner1.24454 (DrWeb), Gen:Variant.Symmi.2478 (B) (Emsisoft), Trojan.Win32.Jorik (Ikarus), Gen:Variant.Symmi.2478 (FSecure), Generic29.AYVZ (AVG), Win32:Malware-gen (Avast), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, WormAutorun, Malware


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 75587126d7a84dd304e80e956476b173
SHA1: 53fee37398715570d59fd7cec0177a5cc9b67c31
SHA256: e8a3ed07bd752ec76cd1d80ef4d2b3835385dd77e530ff9a52e88c7b0e6b5012
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 4471984 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: no certificate found
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour Description
WormAutorun A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.


Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):
No processes have been created.

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

No files have been created.

Registry activity

Dropped PE files

MD5 File path
41638f4652c30c7c5f0fa964bd9a76ec c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\ Afrojack Nayer - Give Me Everything (Tonight).mp3.pif
112361fca4ae302f8e658bc5c56219e6 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\500 Oldies Superhits[mp3].mp3.pif
e057af72bf3f53d1e05d153b8cba9e73 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif
df6b390420ea77395fd1dd912740a903 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21_PROPER_320kbps_VRTX.mp3.pif
fc74150d0f3c4d02ecb8d477ecdc6782 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - Rolling In the Deep [2010-Single][SW].mp3.pif
ab1ff882628b05badd6a733c77f1c45d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Beyonce-4_(Deluxe_Edition)-2CD-2011-VOiCE.mp3.pif
ef22c150e1ce6cdba1e32eb8e23c62e7 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Black Eyed Peas - The Beginning (Deluxe Edition) 2010-DOH.mp3.pif
e9f88e3ae4e26043cde5d45920074f63 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Chris Brown - F.A.M.E Deluxe [2011-MP3-Cov][Bubanee].mp3.pif
1a84f0fa6e3c86b8092ea53270fba3bf c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Chris Brown Ft Lil Wayne & Busta Rhymes - Look At Me Now [Single.mp3.pif
0ccdd2ebb1eb90fbec16c191f10f13a8 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif
93e5d169427f0b125a07edc5b70e999c c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Foo Fighters 2011 Wasting Light 320 Kbps.mp3.pif
6b3cc5e4c33e8843954128c1d86aef4f c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif
0959408d3eb2c6de408791bb47e72941 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jessie J - Price Tag (feat. B.o.B) [2011-Single][MJN].mp3.pif
bb600b960d64e075a743aeb65d8e907f c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jessie J - Who You Are 2011 Album [Deluxe Edition].mp3.pif
736b7127766257f5734e1d4bb329e3eb c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif
31cae58b373a2be74f71762bd22e2ba1 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2011-Single@320][TJ].mp3.pif
8ca7d9ec8eeaa3b272c525ca62428a80 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Lil Wayne - How To Love (Tha Carter IV) [2011] {mp3}.mp3.pif
bfb6b5eb9fb29c0185e1edba3ea3a1a9 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Lil.Wayne-Sorry.4.The.Wait-(Deluxe.Edition)-2011-[NoFS].mp3.pif
6e31e30108d8c7f7435446e7a53bbf4b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Mumford And Sons - Sigh No More (Album).mp3.pif
1cf263ff9392a4043722c8468ef707dd c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Nicki Minaj - Pink Friday (Deluxe Edition) 2011.mp3.pif
98856618415928d5e24472a1e72ea4a9 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Now Thats What I Call Music 78 (2011) - 2CD.mp3.pif
8914b00c42b30cfdc5adf2ae07de925c c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Pitbull - Give Me Everything (feat. Ne-Yo) [2011-Single][SW].mp3.pif
025c738b7e801bf30c6f88494ba980fb c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Pitbull ft. Ne-Yo.mp3.pif
e880e0ecd8f0e91711baba869eb4d2c8 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Rihanna - LOUD (2011 With 5 Bonus Tracks).mp3.pif
6da0520ab921e2e275b8e08f53910f4d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Rihanna - Loud [2010-MP3-Cov][Bubanee].mp3.pif
47d82101926ee5b33f14cc74d86c471f c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Snoop Dogg - Sweat (David Guetta Remix) [2011-Single][SW].mp3.pif
b4f4782c6382f8376ab15881c3795abc c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\The_Script-Science_And_Faith-2010-CaHeSo.mp3.pif

HOSTS file anomalies

The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 61766 bytes in size. The following strings are added to the hosts file listed below:

173.224.217.75 viabcp.com
173.224.217.75 www.viabcp.com
173.224.217.75 ww2.viabcp.com
173.224.217.75 bcpzonasegura.viabcp.com
173.224.217.75 hotmail.com
173.224.217.75 www.hotmail.com
181.249.44.215 13iii.com
213.151.83.217 15660808.co.kr
71.133.204.112 2-spyware.com
198.129.149.20 247fixes.com
218.205.175.9 360.cn
251.107.214.79 360.com
108.89.147.162 360safe.cn
235.85.92.139 360safe.com
187.161.50.128 45pounds.com
220.63.158.130 51nb.com
78.234.22.25 9down.com
17.41.223.189 a-2.org
224.118.182.178 a188.x.akamai.net
1.19.33.248 abuse.ch
115.190.153.75 acs.pandasoftware.com
242.253.99.239 ad-aware-se.uptodown.com
6.74.125.228 ad.fastclick.net
38.232.164.42 ads.fastclick.net
152.146.29.193 agfirewall.ru
23.210.230.101 agnitum.com
231.30.0.90 agnitum.de
76.188.39.160 agnitum.fr
121.102.160.243 agnitum.ru
60.166.105.152 ahn.com.cn
12.242.131.141 ahnlab.com
45.144.171.211 akamai.net
159.59.103.106 aknow.prevx.com
98.122.236.14 aladdin.com
49.199.7.3 alert.rising.com.cn
82.100.114.73 alerta-antivirus.inteco.es
196.15.234.156 alerta-antivirus.red.es
67.78.180.64 alladdin.ru
87.155.138.53 aluriasoftware.com
119.245.245.123 analysis.seclab.tuwien.ac.at
165.227.110.206 andymanchesta.com
104.223.55.182 anti-virus-software-review.com
56.111.81.171 anti-virus.by
89.201.120.173 anti-virus.com
202.183.241.68 antirootkit.com
141.179.186.233 antispam.sunbeltsoftware.com
93.67.212.222 antispy.ru
126.157.252.36 antispyware.sunbeltsoftware.com
240.140.116.119 antivir.es
111.135.61.95 antiviraldp.com
130.212.88.84 antivirus-online.de
163.113.127.86 antivirus-tools.com
209.96.247.237 antivirus.about.com
148.91.193.145 antivirus.cai.com
100.168.219.134 antivirus.comodo.com
132.70.70.204 antivirus.hispavista.com
246.52.190.31 antivirus.sunbeltsoftware.com
185.48.136.195 antiy.net
137.124.94.184 anubis.iseclab.org
170.26.201.254 apac.trendmicro.com
27.8.66.149 ar.answers.yahoo.com
154.4.11.58 ar.atwola.com
174.80.225.47 arcabit.com
207.238.77.117 arcabit.pl
65.221.197.200 archive.bitdefender.com
192.216.142.108 arswp.com
143.37.169.97 arwww.fortinet.cz
176.194.208.167 asap.authentium.com
34.177.72.250 ashampoo.com
229.172.18.226 atazita.blogspot.com
181.249.44.215 atdmt.com
213.151.83.217 attechnical.com
71.133.204.112 atwola.com
198.129.149.20 au.mcafee.com
218.205.175.9 auditmypc.com
251.107.214.79 authentium.com
108.89.147.162 auwww.ealaddin.nl
235.85.92.139 avast-home.uptodown.com
187.161.50.128 avast.com
220.63.158.130 avast.ru
78.234.22.25 avg-antivirus.net
17.41.223.189 avg.com
224.118.182.178 avg.vo.llnwd.net
1.19.33.248 avgate.net
115.190.153.75 avgfrance.com
242.253.99.239 avhide.com
6.74.125.228 avira.com
38.232.164.42 avp.ch
152.146.29.193 avp.com
23.210.230.101 avp.ru
231.30.0.90 avpclub.ddns.info
76.188.39.160 avu.zonelabs.com
121.102.160.243 avx.rob-have.net
60.166.105.152 awaps.net
12.242.131.141 b-have.orgbitdefender-ar.com
45.144.171.211 babooforum.com.br
159.59.103.106 backup.comodo.com
98.122.236.14 baike.360.cn
49.199.7.3 baike.360.com
82.100.114.73 bakunos.com
196.15.234.156 banner.fastclick.net
67.78.180.64 banners.fastclick.net
87.155.138.53 baristamagazine.com
43.168.169.47 basetendencies.com
89.151.33.130 bbs.360.cn
28.146.234.106 bbs.360safe.cn
236.35.5.95 bbs.360safe.com
12.124.44.97 bbs.cfan.com.cn
126.107.164.248 bbs.cpcw.com
65.103.110.156 bbs.dswlab.com
17.247.136.145 bbs.duba.net
50.81.175.215 bbs.ikaka.com
163.63.40.42 bbs.janmeng.com
34.59.241.18 bbs.kafan.cn
54.135.11.8 bbs.kafan.com
87.37.51.10 bbs.kaspersky.com.cn
133.19.171.161 bbs.kpfans.com
71.15.116.69 bbs.mcafeefans.com
23.92.143.58 bbs.s-sos.net
56.249.250.128 bbs.sucop.com
170.232.114.211 bbs.taisha.org
109.227.59.119 bbs.trendmicro.com.cn
61.48.18.108 bbs.winzheng.com
93.205.125.178 bestofewan.com
207.188.245.73 beta.anti-virus.by
78.184.191.237 bg.virusblokada.com
98.4.149.226 bhsbees.com
131.162.0.40 bitcity.info
244.144.121.123 bitcity.org
115.140.66.31 bitdefender.co.uk
67.216.92.21 bitdefender.com
100.118.132.91 bitdefender.com.ua
214.100.252.174 bitdefender.es
152.96.197.150 bitdefender.org
104.173.224.10 bitdefender.secyber.net
9.202.134.12 bitdefenderchina.com
123.184.255.164 bitdefenderguatemala.com
249.180.200.72 bitdefendermalaysia.com
13.0.226.61 bitdefendertaiwan.com
46.158.10.131 bitdefenderuruguay.com
160.141.198.214 bitdefenderusa.com
31.136.143.190 biz.nprotect.com
238.213.102.179 bkav.com.vn
15.114.209.181 blackice.iss.net
129.29.73.76 bleedingthreats.net
68.92.19.240 bleepingcomputer.com
20.169.233.229 blitzblank.com
52.71.84.43 blog.hispasec.com
166.241.205.126 blog.threatfire.com
37.49.150.34 blog.titanium-jewelry.com
57.125.176.23 blog.trendmicro.com
90.27.215.93 blogs.icerocket.com
204.197.80.245 blogs.protegerse.com
74.5.25.153 blogschapines.com
26.81.51.142 boardreader.com
127.239.91.212 bobbondart.com
173.154.211.39 br.mcafee.com
112.217.156.203 br.trendmicro.com
63.38.183.192 brazil.kaspersky.com
96.195.222.6 buddy.bitdefender.com
210.110.154.157 bugs.clamav.net
224.249.107.141 buscafacil.com
176.70.134.130 buscalo.in
209.227.241.200 busco.in
67.142.105.27 buy.bitdefender-es.com
194.205.50.191 buy.bitdefender.com
213.26.9.180 buy.bitdefender.de
246.115.116.250 buy.drweb.com
36.98.236.77 buy.rising.com.cn
231.94.182.53 ca.com
183.238.208.42 cacomvip.ca.com
216.72.247.44 cai.com
73.54.112.195 canada.karuna-shechen.org
12.50.57.103 castlecops.com
220.194.83.92 castlecrops.com
253.28.123.163 ccslaughterspdx.com
111.10.243.246 cddchiangmai.net
237.6.188.222 cdn.atwola.com
1.83.214.211 center.rising.com.cn
34.240.254.213 centralcommand.com
80.223.118.108 cert.org
19.218.63.16 cfan.com.cn
226.39.90.5 cgi.clamav.net
3.196.197.75 changedetection.com
117.179.61.158 changelog.fr
56.175.7.66 channelpartner.trendmicro.com
8.251.221.55 chickensroamfree.com
41.153.72.125 chkrootkit.org
75.56.113.197 chollian.nprotect.co.kr
202.51.59.105 cisrt.org
222.128.17.94 cit.kookmin.ac.kr
254.30.124.164 clamav.net
112.12.245.247 clamwin.com
239.8.190.155 click.atdmt.com
191.84.216.144 clicks.atdmt.com
224.242.255.214 cloudprotection.pandasecurity.com
82.224.120.42 clubic.com
20.220.65.18 cmmings.cn
228.40.91.7 cn.mcafee.com
5.198.131.9 cn.sophos.com
119.181.251.160 cn.trendmicro.com
246.176.196.68 codehard.wordpress.com
9.253.223.57 cohartuk.com
42.154.6.127 commentcamarche.net
156.137.194.210 community.thaiware.com
27.132.140.186 comodo.com
235.209.98.175 company.drweb.com
11.111.205.177 company.hauri.co.kr
125.25.70.72 company.hauri.net
64.89.15.236 computing.net
16.165.169.165 comunidad.wilkinsonpc.com.co
244.6.20.235 configurarequipos.com
102.177.140.62 coresecurity.com
229.241.86.226 cou85.com
249.61.112.215 cowsmo.com
26.219.151.29 cpsecure.com
139.133.16.180 csc.rising.com.cn
10.197.217.88 cureit.ru
218.17.243.78 customer.symantec.com
63.175.27.148 customers.drweb.com
109.89.147.231 cutlines.org
47.153.92.139 cwsandbox.org
255.230.119.128 cybercrime.pandasecurity.com
32.131.158.198 cyberdefender.com
146.46.90.93 cybertechhelp.com
85.109.223.1 daboweb.com
36.186.250.246 daniloff.net
69.87.101.60 daniweb.com
183.2.221.143 darkclockers.com
54.66.167.51 dazhizhu.cn
74.142.133.48 de.bitdefender.com
114.239.240.118 de.mcafee.com
160.222.104.201 de.trendmicro.com
99.217.50.177 deckard.geekstogo.com
51.106.76.166 deerfield.com
83.196.115.168 defalcos.com
197.178.236.63 definitions.symantec.com
136.174.181.227 dell.symantec.com
88.62.207.216 demos.eset.es
121.152.246.30 descargas.eset.es
234.134.111.37 dev.depeuter.org
29.54.236.13 developmentdrums.org
49.130.6.2 dialognauka.ru
82.32.45.4 diamondcs.com.au
127.14.166.155 dicasweb.com.br
66.10.111.63 discussions.virtualdr.com
18.86.137.53 disk-encryption.comodo.com
51.244.245.123 dl.360safe.com
243.49.187.28 dl1.antivir-pe.com
182.45.133.192 dl1.antivir-pe.de
134.121.91.181 dl1.antivir.de
167.23.198.251 dl1.avgate.net
24.5.63.146 dl10.freeav.net
151.1.8.55 dl2.antivir-pe.com
171.77.222.44 dl2.antivir-pe.de
204.235.74.114 dl2.antivir.de
62.218.194.197 dl2.avgate.net
189.213.139.105 dl3.antivir-pe.de
140.34.166.94 dl3.antivir.de
173.191.205.164 dl3.avgate.net
31.174.69.247 dl4.antivir-pe.com
149.93.194.147 dl4.antivir-pe.de
101.170.221.136 dl4.antivir.de
134.71.4.138 dl4.avgate.net
248.54.124.33 dl5.avgate.net
119.49.69.197 dl6.avgate.net
139.126.96.186 dl7.avgate.net
171.27.135.0 dl8.avgate.net
29.10.67.83 dl8.freeav.net
156.6.13.59 dl9.avgate.net
108.82.227.48 dl9.freeav.net
141.240.78.50 dnl-cd1.kaspersky-labs.com
254.154.199.201 dnl-cd10.kaspersky-labs.com
193.218.144.109 dnl-cd11.kaspersky-labs.com
145.38.102.99 dnl-cd12.kaspersky-labs.com
178.196.210.169 dnl-cd13.kaspersky-labs.com
36.110.74.252 dnl-cd2.kaspersky-labs.com
162.174.19.160 dnl-cd3.kaspersky-labs.com
182.251.46.149 dnl-cd4.kaspersky-labs.com
215.152.212.90 dnl-cd5.kaspersky-labs.com
201.194.77.242 dnl-cd6.kaspersky-labs.com
71.2.22.150 dnl-cd7.kaspersky-labs.com
23.78.48.139 dnl-cd8.kaspersky-labs.com
124.236.88.209 dnl-cd9.kaspersky-labs.com
170.151.208.36 dnl-cn1.kaspersky-labs.com
109.214.153.200 dnl-cn10.kaspersky-labs.com
60.35.180.189 dnl-cn11.kaspersky-labs.com
93.192.219.3 dnl-cn12.kaspersky-labs.com
207.107.151.154 dnl-cn13.kaspersky-labs.com
221.246.104.138 dnl-cn14.kaspersky-labs.com
173.67.131.127 dnl-cn15.kaspersky-labs.com
206.224.238.197 dnl-cn2.kaspersky-labs.com
64.139.102.24 dnl-cn3.kaspersky-labs.com
191.202.47.188 dnl-cn4.kaspersky-labs.com
210.23.6.177 dnl-cn5.kaspersky-labs.com
243.112.113.247 dnl-cn6.kaspersky-labs.com
33.95.233.74 dnl-cn7.kaspersky-labs.com
228.91.179.50 dnl-cn8.kaspersky-labs.com
180.235.205.39 dnl-cn9.kaspersky-labs.com
213.69.244.41 dnl-eu1.kaspersky-labs.com
70.51.109.192 dnl-eu10.kaspersky-labs.com
9.47.54.100 dnl-eu11.kaspersky-labs.com
217.191.80.89 dnl-eu12.kaspersky-labs.com
250.25.40.80 dnl-eu13.kaspersky-labs.com
28.184.161.163 dnl-eu14.kaspersky-labs.com
155.180.106.139 dnl-eu15.kaspersky-labs.com
175.0.132.128 dnl-eu2.kaspersky-labs.com
208.158.171.130 dnl-eu3.kaspersky-labs.com
254.140.36.26 dnl-eu4.kaspersky-labs.com
192.136.237.190 dnl-eu5.kaspersky-labs.com
144.212.7.179 dnl-eu6.kaspersky-labs.com
177.114.115.249 dnl-eu7.kaspersky-labs.com
35.97.235.76 dnl-eu8.kaspersky-labs.com
230.92.180.240 dnl-eu9.kaspersky-labs.com
121.108.78.169 dnl-jp1.kaspersky-labs.com
154.10.186.239 dnl-jp10.kaspersky-labs.com
12.248.50.134 dnl-jp11.kaspersky-labs.com
138.244.251.42 dnl-jp12.kaspersky-labs.com
158.65.210.31 dnl-jp13.kaspersky-labs.com
191.222.61.101 dnl-jp14.kaspersky-labs.com
49.205.181.184 dnl-jp15.kaspersky-labs.com
176.200.126.92 dnl-jp2.kaspersky-labs.com
127.21.153.81 dnl-jp3.kaspersky-labs.com
160.178.192.151 dnl-jp4.kaspersky-labs.com
18.161.56.234 dnl-jp5.kaspersky-labs.com
213.157.2.210 dnl-jp6.kaspersky-labs.com
165.233.28.199 dnl-jp7.kaspersky-labs.com
198.135.67.201 dnl-jp8.kaspersky-labs.com
55.117.188.96 dnl-jp9.kaspersky-labs.com
182.113.141.12 dnl-kr1.kaspersky-labs.com
210.197.167.1 dnl-kr10.kaspersky-labs.com
242.99.206.71 dnl-kr11.kaspersky-labs.com
100.81.138.154 dnl-kr12.kaspersky-labs.com
227.77.84.130 dnl-kr13.kaspersky-labs.com
179.153.42.119 dnl-kr15.kaspersky-labs.com
212.55.149.121 dnl-kr2.kaspersky-labs.com
69.225.14.16 dnl-kr3.kaspersky-labs.com
8.33.215.181 dnl-kr4.kaspersky-labs.com
216.109.173.170 dnl-kr5.kaspersky-labs.com
249.11.25.240 dnl-kr6.kaspersky-labs.com
107.182.145.67 dnl-kr7.kaspersky-labs.com
234.245.90.231 dnl-kr8.kaspersky-labs.com
253.66.117.220 dnl-kr9.kaspersky-labs.com
30.223.80.214 dnl-ru1.kaspersky-labs.com
68.61.200.109 dnl-ru10.kaspersky-labs.com
194.125.145.17 dnl-ru11.kaspersky-labs.com
146.202.172.6 dnl-ru12.kaspersky-labs.com
247.103.211.76 dnl-ru13.kaspersky-labs.com
37.18.75.159 dnl-ru14.kaspersky-labs.com
232.81.20.67 dnl-ru15.kaspersky-labs.com
184.158.47.56 dnl-ru2.kaspersky-labs.com
216.59.86.126 dnl-ru3.kaspersky-labs.com
74.230.18.21 dnl-ru4.kaspersky-labs.com
13.38.152.185 dnl-ru5.kaspersky-labs.com
221.114.178.174 dnl-ru6.kaspersky-labs.com
254.16.29.244 dnl-ru7.kaspersky-labs.com
111.186.150.71 dnl-ru8.kaspersky-labs.com
238.250.95.235 dnl-ru9.kaspersky-labs.com
2.149.132.47 dnl-us1.kaspersky-labs.com
113.239.239.117 dnl-us10.kaspersky-labs.com
159.221.104.200 dnl-us11.kaspersky-labs.com
98.217.49.176 dnl-us12.kaspersky-labs.com
50.105.75.165 dnl-us13.kaspersky-labs.com
83.195.114.167 dnl-us14.kaspersky-labs.com
196.177.235.62 dnl-us15.kaspersky-labs.com
135.173.180.227 dnl-us2.kaspersky-labs.com
87.61.206.216 dnl-us3.kaspersky-labs.com
120.151.246.30 dnl-us4.kaspersky-labs.com
234.134.110.113 dnl-us5.kaspersky-labs.com
105.129.55.89 dnl-us6.kaspersky-labs.com
48.129.5.2 dnl-us7.kaspersky-labs.com
81.31.45.4 dnl-us8.kaspersky-labs.com
127.13.165.155 dnl-us9.kaspersky-labs.com
65.9.110.63 dougknox.com
17.86.137.52 down.360safe.cn
50.243.244.122 down.360safe.com
164.226.108.205 download.avg.com
103.221.53.113 download.bleepingcomputer.com
55.42.12.102 download.com
87.199.119.172 download.com.vn
201.182.239.67 download.eset.com
72.178.185.231 download.f-secure.com
92.254.143.220 download.mcafee.com
125.156.250.34 download.microsoft.com
238.138.115.117 download.microsoft.comguru0.grisoft.cz
237.5.188.153 download.nai.com
189.82.214.142 download.norman.no
221.240.253.212 download.rising.com.cn
79.222.118.39 download.softpedia.com
18.218.63.15 download.sysinternals.com
226.38.89.4 download0.avast.com
3.196.128.6 download1.avast.com
117.178.249.158 download1.emsisoft.com
243.174.194.66 download1.quickheal.com
7.250.220.55 download10.quickheal.com
40.152.4.125 download100.avast.com
154.135.192.208 download1us.softpedia.com
25.130.137.184 download2.avast.com
232.207.96.173 download2.quickheal.com
85.184.23.251 download200.avast.com
199.98.143.146 download201.avast.com
137.162.88.54 download202.avast.com
89.239.47.43 download203.avast.com
122.140.154.113 download204.avast.com
236.55.18.196 download205.avast.com
107.118.219.104 download206.avast.com
126.195.246.93 download207.avast.com
159.96.29.163 download208.avast.com
17.11.149.58 download209.avast.com
144.75.95.222 download210.avast.com
96.151.121.211 download211.avast.com
197.53.160.25 download212.avast.com
242.223.25.108 download213.avast.com
181.31.226.16 download214.avast.com
133.107.252.5 download3.avast.com
166.9.36.76 download3.quickheal.com
24.179.224.227 download4.avast.com
139.164.22.55 download4.emsisoft.com
91.240.48.44 download4.quickheal.com
124.142.155.114 download5.avast.com
238.56.20.198 download5.emsisoft.com
108.120.221.106 download5.quickheal.com
68.136.119.34 download501.avast.com
101.226.226.104 download502.avast.com
146.208.91.187 download503.avast.com
85.204.36.163 download504.avast.com
37.92.62.153 download505.avast.com
70.182.102.155 download511.avast.com
184.164.222.50 download512.avast.com
122.160.167.214 download513.avast.com
74.49.194.203 download514.avast.com
107.138.233.17 download515.avast.com
221.121.97.100 download516.avast.com
92.116.42.76 download535.avast.com
111.193.69.65 download6.avast.com
144.94.108.67 download6.quickheal.com
190.77.228.218 download600.avast.com
129.73.174.126 download601.avast.com
81.149.200.115 download602.avast.com
114.51.51.185 download603.avast.com
227.33.172.12 download604.avast.com
166.29.125.184 download605.avast.com
126.113.83.173 download606.avast.com
158.15.190.243 download607.avast.com
16.253.54.138 download608.avast.com
143.249.0.226 download609.avast.com
87.249.138.215 download617.avast.com
119.150.245.29 download618.avast.com
233.133.109.112 download619.avast.com
104.129.55.20 download620.avast.com
56.205.81.9 download621.avast.com
89.107.120.79 download622.avast.com
202.89.241.162 download623.avast.com
141.85.186.138 download624.avast.com
93.161.212.128 download625.avast.com
126.63.252.130 download626.avast.com
240.45.116.25 download627.avast.com
110.41.61.189 download628.avast.com
130.118.88.178 download629.avast.com
163.19.127.248 download630.avast.com
21.2.59.75 download631.avast.com
226.76.83.130 download632.avast.com
178.152.41.119 download633.avast.com
211.54.149.121 download634.avast.com
69.225.13.16 download635.avast.com
8.32.214.180 download636.avast.com
215.109.173.169 download637.avast.com
248.10.24.239 download638.avast.com
106.181.144.66 download639.avast.com
233.244.90.230 download640.avast.com
253.65.116.219 download641.avast.com
209.146.79.213 download642.avast.com
67.61.199.108 download643.avast.com
194.124.144.16 download644.avast.com
146.201.171.5 download645.avast.com
246.102.210.75 download646.avast.com
36.17.74.158 download647.avast.com
231.81.20.66 download648.avast.com
183.157.46.55 download649.avast.com
216.59.85.125 download650.avast.com
73.229.18.20 download651.avast.com
12.37.151.184 download652.avast.com
220.113.177.174 download653.avast.com
253.15.29.244 download654.avast.com
111.185.149.71 download655.avast.com
237.249.94.235 download656.avast.com
1.70.53.224 download658.avast.com
34.159.160.38 download659.avast.com
80.142.24.121 download660.avast.com
19.137.225.97 download661.avast.com
227.26.252.86 download662.avast.com
3.115.35.88 download663.avast.com
245.226.27.111 download664.avast.com
184.221.228.19 download665.avast.com
135.110.255.8 download666.avast.com
168.199.38.78 download667.avast.com
26.182.158.161 download668.avast.com
153.177.104.137 download669.avast.com
173.254.130.126 download670.avast.com
205.156.169.128 download671.avast.com
251.138.34.23 download672.avast.com
190.134.235.187 download673.avast.com
142.210.5.176 download674.avast.com
175.112.112.246 download675.avast.com
33.94.233.74 download676.avast.com
227.90.178.238 download677.avast.com
255.242.212.46 download678.avast.com
32.144.63.116 download679.avast.com
145.126.184.11 download680.avast.com
16.122.129.175 download681.avast.com
36.198.87.164 download682.avast.com
69.100.195.235 download683.avast.com
183.82.59.62 download684.avast.com
53.78.4.226 download685.avast.com
5.155.30.215 download686.avast.com
38.56.70.29 download687.avast.com
152.39.190.112 download688.avast.com
91.34.135.88 download689.avast.com
42.111.162.77 download690.avast.com
75.12.201.79 download691.avast.com
189.251.65.230 download692.avast.com
60.247.11.138 download693.avast.com
80.67.37.127 download694.avast.com
113.225.76.197 download695.avast.com
226.207.9.24 download696.avast.com
97.203.210.0 download697.avast.com
49.23.168.245 download698.avast.com
82.181.20.248 download699.avast.com
196.95.140.143 download7.avast.com
134.159.85.51 download7.quickheal.com
86.236.44.216 download700.avast.com
40.58.71.30 download701.avast.com
154.228.192.114 download702.avast.com
24.36.137.22 download703.avast.com
44.112.163.11 download704.avast.com
77.14.203.81 download705.avast.com
191.185.67.232 download706.avast.com
62.248.12.140 download707.avast.com
13.69.39.129 download708.avast.com
114.226.78.199 download709.avast.com
160.141.198.26 download72.avast.com
99.204.144.190 download73.avast.com
51.25.170.179 download74.avast.com
83.183.209.249 download75.avast.com
197.97.142.144 download76.avast.com
136.161.19.52 download77.avast.com
88.237.45.41 download78.avast.com
121.139.152.111 download79.avast.com
235.53.17.195 download8.quickheal.com
105.117.218.103 download80.avast.com
125.193.176.92 download81.avast.com
158.27.28.162 download82.avast.com
204.10.148.184 download83.avast.com
82.201.33.160 download84.avast.com
34.89.59.150 download85.avast.com
67.179.99.152 download9.quickheal.com
181.161.219.47 download900.avast.com
119.157.164.211 download901.avast.com
71.46.191.200 download902.avast.com
104.135.230.14 download903.avast.com
218.118.94.97 download904.avast.com
89.113.39.73 download905.avast.com
108.190.66.62 download906.avast.com
141.91.105.64 download907.avast.com
187.74.225.215 download908.avast.com
126.70.171.123 download909.avast.com
78.146.197.112 download91.avast.com
111.48.48.182 download910.avast.com
224.30.169.9 download911.avast.com
163.26.114.173 download912.avast.com
115.102.72.163 download913.avast.com
148.4.180.233 download914.avast.com
6.242.44.128 download915.avast.com
132.238.245.36 download916.avast.com
152.59.204.25 download917.avast.com
185.216.55.95 download918.avast.com
43.199.175.178 download919.avast.com
177.202.128.94 download92.avast.com
129.22.154.83 download920.avast.com
162.180.194.153 download921.avast.com
20.163.58.236 download922.avast.com
215.158.3.212 download923.avast.com
166.235.30.201 download924.avast.com
199.136.69.203 download925.avast.com
57.119.189.98 download926.avast.com
184.114.135.6 download927.avast.com
204.191.161.251 download928.avast.com
236.93.200.65 download929.avast.com
94.75.132.148 download93.avast.com
221.71.78.124 download930.avast.com
173.147.36.113 download931.avast.com
206.49.143.115 download932.avast.com
63.219.8.10 download933.avast.com
2.27.209.175 download934.avast.com
210.103.167.164 download935.avast.com
243.5.19.234 download936.avast.com
101.176.139.61 download937.avast.com
228.239.84.225 download938.avast.com
247.60.111.214 download939.avast.com
24.217.150.28 download94.avast.com
138.132.14.179 download940.avast.com
188.119.139.11 download941.avast.com
140.196.166.0 download942.avast.com
241.97.205.70 download943.avast.com
31.12.69.153 download944.avast.com
226.75.14.61 download945.avast.com
178.152.41.50 download946.avast.com
210.53.80.120 download947.avast.com
68.224.12.15 download948.avast.com
7.32.146.179 download949.avast.com
215.108.172.168 download95.avast.com
248.10.23.238 download950.avast.com
105.180.144.65 download951.avast.com
232.244.89.229 download952.avast.com
252.64.47.219 download953.avast.com
29.154.155.33 download954.avast.com
75.136.19.116 download955.avast.com
13.132.220.92 download956.avast.com
221.21.247.81 download957.avast.com
254.110.30.83 download958.avast.com
112.93.150.234 download959.avast.com
51.88.95.142 download96.avast.com
3.233.122.131 download960.avast.com
35.66.161.201 download961.avast.com
149.49.25.28 download962.avast.com
20.45.227.4 download963.avast.com
118.200.76.72 download964.avast.com
75.25.39.254 download965.avast.com
121.7.159.149 download966.avast.com
59.3.104.57 download967.avast.com
11.80.131.46 download968.avast.com
44.237.238.116 download969.avast.com
158.220.102.199 download97.avast.com
97.215.47.107 download970.avast.com
49.36.6.96 download971.avast.com
81.193.113.166 download972.avast.com
195.176.233.61 download973.avast.com
66.172.179.225 download974.avast.com
86.248.137.214 download975.avast.com
119.150.244.28 download976.avast.com
232.132.109.111 download977.avast.com
103.128.54.19 download978.avast.com
55.204.80.9 download979.avast.com
215.234.247.206 download98.avast.com
73.216.112.33 download980.avast.com
12.212.57.9 download99.avast.com
220.32.83.254 downloads-eu1.kaspersky-labs.com
253.190.122.0 downloads-eu2.kaspersky-labs.com
111.172.243.152 downloads-eu3.kaspersky-labs.com
237.168.188.60 downloads-eu4.kaspersky-labs.com
1.244.214.49 downloads-us1.kaspersky-labs.com
34.146.254.119 downloads-us2.kaspersky-labs.com
148.129.186.202 downloads-us3.kaspersky-labs.com
19.124.131.178 downloads-us4.kaspersky-labs.com
226.201.90.167 downloads.andymanchesta.com
3.102.197.169 downloads.malwarebytes.org
117.17.61.64 downloads.microsoft.com
56.80.7.228 downloads.My-eTrust.com
8.157.221.217 downloads1.kaspersky-labs.com
40.59.72.31 downloads2.kaspersky-labs.com
154.229.193.114 downloads3.kaspersky-labs.com
101.112.213.98 downloads4.kaspersky-labs.com
120.189.240.87 downloads5.kaspersky-labs.com
153.90.23.157 dr-web-cureit.softonic.com
11.5.143.52 drsolomon.com
138.69.89.216 drweb-inside.com
90.145.115.126 drweb.com
111.223.75.196 drweb.com.es
157.138.195.23 drweb.net
96.201.141.187 drwebinside.com
48.22.167.176 dswlab.com
80.180.206.246 duba.net
194.94.139.141 ealaddin.net
133.158.16.49 ealaddin.orgeshop.aladdin.com
85.234.42.38 easy-vpn.comodo.com
118.136.149.108 edm.symantec.com
232.50.14.192 education.symantec.com
102.114.215.100 eeload.com
122.190.173.89 eeye.com
155.24.25.159 eicar.org
201.7.145.242 elblogdemanu.com
140.2.90.218 elitepvpers.de
31.86.56.147 emea.trendmicro.com
64.176.96.149 emsisoft.com
178.158.216.44 emsisoft.de
116.154.161.208 encarta.msn.com
68.43.188.197 engine.awaps.net
101.132.227.11 enterprisesecur.symantec.com
215.115.91.94 eos.eset.es
93.118.44.78 eradicatespyware.net
113.194.70.67 es.answers.yahoo.com
146.96.110.69 es.kioskea.net
192.79.230.220 es.mcafee.com
131.74.175.128 es.trendmicro.com
82.151.202.117 es.wasalive.com
115.52.53.187 esafe.com
229.35.173.14 esecurity.livecall.co.kr
168.30.119.178 eset-la.com
120.107.77.167 eset.com
152.9.184.237 eset.es
10.247.48.56 eset.sk
61.166.173.220 esp.sophos.com
81.243.132.209 espanol.answers.yahoo.com
113.144.239.23 espanol.dir.groups.yahoo.com
227.127.103.106 espanol.groups.yahoo.com
98.123.49.14 esupport.trendmicro.com
50.199.75.3 et.symantec.com
83.101.114.73 etrr.co.uk
196.83.235.156 eugrantsadvisor.cz
135.79.180.132 eugrantsadvisor.de
166.234.29.200 eval.symantec.com
198.136.68.202 ewido.net
56.118.189.97 exchangeyourcareer.net
183.114.134.5 experts-exchange.com
203.190.160.250 f-prot.com
236.92.199.64 f-secure.com
93.74.132.147 f-secure.frf-secure.hk
220.70.77.124 f-secure.nlfsecure.com
172.146.35.113 fastclick.net
205.48.143.115 feedage.com
63.219.7.10 feeds.sophos.com
2.26.208.174 feeds.trendmicro.com
209.103.167.163 file.ikaka.cn
242.4.18.233 file.ikaka.com
100.175.138.60 file.net
227.238.84.148 files.avast.com
170.239.34.137 files.filefont.com
203.140.73.207 files.trendmicro-europe.com
61.55.193.102 filseclab.com
188.118.138.10 final4ever.com
140.195.165.255 finjan.com
240.96.204.69 firewall.sunbeltsoftware.com
30.11.68.152 firewallguide.com
97.202.141.188 fixmyim.com
48.23.168.177 foro.ethek.com
81.180.207.247 foros.toxico-pc.com
195.95.139.142 foros.zonavirus.com
134.158.17.50 forospanish.com
86.235.43.39 forospyware.com
118.137.150.109 forospyware.es
232.51.15.192 fortiguardcenter.com
103.115.216.100 fortihero.com
123.191.174.89 fortilog.com
156.25.25.159 fortinet.co.at
202.7.146.243 fortinet.com
140.3.91.219 fortiprotect.com
92.147.117.208 fortiwifi.com
201.57.232.29 forum.clubedohardware.com.br
58.39.97.180 forum.emsisoft.com
253.35.42.88 forum.hardware.fr
205.179.68.77 forum.hijackthis.de
238.13.108.148 forum.ikaka.com
16.172.149.151 forum.jiangmin.com
143.168.94.127 forum.kaspersky.com
163.244.120.116 forum.malekal.com
196.146.159.118 forum.piriform.com
242.128.24.14 forum.securitycadets.com
180.124.225.178 forum.sysinternals.com
132.200.251.167 forum.telecharger.01net.com
165.102.103.237 forum.tweaks.com
23.85.223.3 forum.zazana.com
157.20.108.167 forums.cnet.com
109.96.66.157 forums.comodo.com
142.254.174.227 forums.devshed.com
0.236.38.122 forums.maddoktor2.com
126.232.239.30 forums.majorgeeks.com
154.60.205.26 forums.techguy.org
187.218.56.96 forums.whatthetech.com
44.200.177.179 fr.bitdefender.com
171.196.122.88 fr.drweb.com
123.16.148.77 fr.mcafee.com
156.174.188.147 fr.trendmicro.com
14.157.52.230 fr1.drweb.com
209.152.253.206 fr2.drweb.com
160.229.24.195 fr3.drweb.com
193.130.63.197 fr4.drweb.com
231.36.107.16 fr5.drweb.com
101.32.52.180 fr6.drweb.com
121.109.79.169 fr7.drweb.com
154.10.118.239 fractus.mat.uson.mx
12.249.50.66 free-av.com
217.67.74.121 free-av.net
169.143.32.110 free.antivirus.com
202.45.140.112 free.avg.com
60.216.4.7 free.drweb.com
255.23.205.171 free.grisoft.com
206.100.164.160 free.grisoft.cz
239.1.15.230 free.pandasecurity.com
97.172.135.57 free.prevx.com
224.235.81.221 free.tinypicbox.com
167.236.31.134 freeav.com
200.137.70.204 freeav.net
58.52.62.227 freespywareremoval.info
56.243.7.135 frisk-software.com
8.63.33.124 fsc.norman.com
109.221.73.194 fsecure.nlwebyard.com
155.136.193.21 ftp.avp.com
94.199.138.185 ftp.bitdefender.com
45.20.165.174 ftp.ca.co
78.177.204.244 ftp.ca.com
12.167.212.215 ftp.customer.symantec.com
206.231.89.123 ftp.dispatch.mcafee.com
158.52.116.112 ftp.download.mcafee.com
191.209.223.182 ftp.downloads-eu1.kaspersky-labs.com
226.44.8.186 ftp.downloads-eu2.kaspersky-labs.com
96.108.209.94 ftp.downloads-eu3.kaspersky-labs.com
116.184.167.83 ftp.downloads-eu4.kaspersky-labs.com
149.18.19.153 ftp.downloads-us1.kaspersky-labs.com
195.1.139.236 ftp.downloads-us2.kaspersky-labs.com
134.252.84.212 ftp.downloads-us3.kaspersky-labs.com
85.141.111.201 ftp.downloads-us4.kaspersky-labs.com
118.230.150.203 ftp.downloads1.kaspersky-labs.com
232.213.14.98 ftp.downloads2.kaspersky-labs.com
110.148.155.202 ftp.downloads3.kaspersky-labs.com
62.37.182.191 ftp.downloads4.kaspersky-labs.com
95.126.221.5 ftp.drweb.com
209.109.85.88 ftp.esafe.com
80.104.30.72 ftp.europe.f-secure.com
107.188.64.61 ftp.f-prot.com
140.90.104.63 ftp.f-secure.com
186.73.224.214 ftp.grisoft.com
125.68.169.122 ftp.kaspersky-labs.com
76.145.196.111 ftp.kaspersky.com
109.46.47.181 ftp.kasperskylab.ru
223.29.167.8 ftp.liveupdate.symantec.com
162.24.113.96 ftp.liveupdate.symantecliveupdate.com
37.25.251.85 ftp.mast.mcafee.com
70.182.102.155 ftp.mcafee.com
184.165.222.50 ftp.microworldsystems.com
55.160.167.37 ftp.my-etrust.com
153.59.204.26 ftp.nai.com
186.217.56.96 ftp.networkassociates.com
44.200.176.179 ftp.norton.com
171.195.121.87 ftp.rads.mcafee.com
122.16.148.76 ftp.sandbox.norman.com
79.97.111.70 ftp.secure.nai.com
193.79.231.153 ftp.securityresponse.symantec.com
131.75.176.129 ftp.sophos.com
83.152.203.118 ftp.symantec.com
116.53.242.120 ftp.symantecliveupdate.com
102.163.234.143 ftp.symatec.com
228.159.179.51 ftp.trendmicro.com
248.235.205.40 ftp.uk.trendmicro-europe.com
25.137.245.110 ftp.update.symantec.com
139.120.177.193 ftp.updates.symantec.com
85.191.198.244 ftp.updates1.kaspersky-labs.com
37.11.156.233 ftp.updates2.kaspersky-labs.com
70.169.8.156 ftp.updates3.kaspersky-labs.com
104.4.49.51 ftp.updates4.kaspersky-labs.com
43.68.250.215 ftp.us.mcafee.com
251.144.208.204 ftp.viruslist.com
28.46.59.18 funkytoad.com
142.216.180.102 futurenow.bitdefender.com
12.24.125.10 fw.rising.com.cn
32.100.151.255 fx.dk
65.2.191.69 gangbang.mytijn.org
126.120.2.167 gdata.de
253.183.204.75 gdata.es
205.4.230.64 gecadsoftware.com
49.162.13.134 geekstogo.com
95.76.134.217 global.ahnlab.com
34.140.79.125 global.jiangmin.com
242.216.105.38 global.nprotect.com
198.41.68.108 go.mcafee.com
56.212.0.3 go.microsoft.com
251.20.134.167 go.rising.com.cn
203.96.160.156 go.sunbeltsoftware.com
236.254.11.226 go.symantec.com
93.168.132.53 go.trendmicro.com
222.234.79.220 greatis.com
242.55.38.209 grisoft.com
147.16.16.150 grisoft.cz
193.254.137.234 grv.microsoft.com
131.250.82.210 guiadohardware.net
83.138.108.199 guru.avg.com
116.228.223.20 guru1.grisoft.cz
49.30.88.171 guru2.grisoft.cz
244.26.33.79 guru3.grisoft.cz
196.170.59.68 guru4.grisoft.cz
229.4.99.139 guru5.grisoft.cz
7.163.140.142 gwava.nl
134.159.85.118 hacksoft.com.pe
154.235.111.107 hacksoft.pe
187.137.150.109 halmapr.com
172.59.210.200 hauri.co.kr
111.55.156.108 hauri.net
63.131.182.97 haurijapan.com
96.33.33.167 help.rising.com.cn
209.15.161.2 hi.baidu.com
156.18.107.166 hijackthis.de
108.95.65.79 hijackthis.download3000.com
64.176.96.149 hishomeforchildren.com
178.159.216.44 hjt-data.trend-braintree.com
49.154.161.208 hjt.networktechs.com
69.231.120.197 home.mcafee.com
101.132.227.11 hostedmailsecur.symantec.com
38.194.170.173 hotshare.net
88.113.39.4 housecall.com
40.189.65.250 housecall.trendmicro.com
73.91.105.64 housecall60.trendmicro.com
187.73.225.147 housecall65.trendmicro.com
125.69.170.123 howsafeismypc.com
77.146.197.112 huaifai.go.th
110.47.236.114 i-vault.comodo.com
224.30.100.137 iavs.cz
222.153.173.45 ibusca.me
242.229.199.34 idauthority.com
19.131.239.104 ids.kaspersky-labs.com
133.114.171.187 ieupdate.gdata.de
4.109.116.238 ieupdate1.gdata.de
31.5.150.227 ieupdate2.gdata.de
64.163.2.230 ieupdate3.gdata.de
178.77.122.125 ieupdate4.gdata.de
116.141.67.149 ieupdate5.gdata.de
184.78.142.138 ieupdate6.gdata.de
217.235.249.208 ikaka.cn
75.150.113.35 ikaka.com
202.214.59.199 ikarus.at
222.34.85.188 ikarus.net
255.192.124.2 ilove.tigolbittys.info
112.106.245.153 images.kaspersky.com
239.170.190.61 in.answers.yahoo.com
191.246.224.58 incodesolutions.com
223.79.187.52 info.drweb.com
13.250.51.135 info.prevx.com
208.57.252.43 infos-du-net.com
160.134.23.32 infosecpodcast.com
192.35.62.102 infospyware.com
50.206.250.253 inicioid.com
245.14.206.240 iniciorapido.info
19.169.233.229 inline-software.de
52.70.84.43 internetsecurity.comodo.com
166.241.204.126 intranet.cidiroax.ipn.mx
37.48.150.85 investor.symantec.com
108.176.159.74 irc.bigshitsandwich.org
141.10.10.144 irc.metraiciono.com
187.248.131.228 iseclab.org
125.244.76.204 isotopecomics.com
153.208.178.12 iss.net
186.42.217.14 it.answers.yahoo.com
43.24.82.165 it.bitdefender.com
238.20.27.73 it.mcafee.com
190.164.230.239 it.trendmicro.com
143.175.13.53 itw.trendmicro.com
1.157.134.136 ixomodels.com
128.153.79.112 ixostore.ixomodels.com
148.229.105.101 javacoolsoftware.com
120.70.84.43 jetico.com
166.53.204.194 jiangmin.com
105.49.150.102 jiangmin.com.cn
64.133.184.99 jobs.bitdefender.com
97.34.35.169 jotti.org
135.196.79.176 jp.mcafee.com
73.192.24.84 jp.trendmicro.com
25.13.239.73 justfacebook.net
58.170.90.143 k-otik.com
172.153.210.38 k7computing.com
43.148.155.25 kaba.360.cn
141.47.192.193 kaba.360.com
98.129.223.7 karuna-shechen.org
211.111.88.90 kaspersky-fr.com
82.107.33.254 kaspersky-labs.com
162.55.187.115 kaspersky.co.jp
194.213.226.185 kaspersky.co.uk
52.195.91.12 kaspersky.com
247.191.36.244 kaspersky.com.cn
199.11.62.53 kaspersky.dk
51.244.177.55 kaspersky.es
165.227.41.206 kaspersky.gr
36.223.243.114 kaspersky.pl
56.43.13.103 kaspersky.ru
89.201.52.173 kaspersky.se
202.183.241.0 kasperskylab.co.kr
250.99.107.153 kasperskylab.nl
202.176.65.142 kav.ru
234.78.172.144 kav.zonelabs.com
92.248.37.39 kb.bitdefender.com
31.56.238.203 kb.bitdefender.de
186.79.143.140 kb.bitdefender.us
219.237.251.210 kerio.com
77.152.115.37 kimzimmer.net
204.215.60.201 kioskea.net
223.36.87.190 kpfans.com
0.193.126.4 kr.ahnlab.com
114.108.246.155 kr.sophos.com
241.171.192.63 krupunmai.com
116.172.142.232 kvup.jiangmin.com
217.73.181.46 kztechs.com
7.244.45.129 l33t.shadow-mods.net
202.51.246.37 la.trendmicro.com
154.128.19.28 ladooscuro.es
189.32.58.98 laneros.com
46.202.247.249 latam.kaspersky.com
241.10.124.157 latin.bitdefender.com
193.86.150.147 lavasoft.com
226.244.2.217 lavasoft.nu
84.158.122.44 lavasoftusa.com
82.94.195.79 lexikon.ikarus.at
102.170.153.144 license.drweb.com
210.79.80.214 linhadefensiva.org
0.62.200.41 linhadefensiva.uol.com.br
195.58.146.194 linux.bitdefender.com
67.123.93.183 lists.clamav.net
100.212.132.185 liutilities.com
214.195.252.80 live.sunbeltsoftware.com
153.190.198.244 liveprotect.net
105.79.224.233 liveupdate.symantec.com
137.169.7.47 liveupdate.symantec.d4p.net
198.98.75.77 liveupdate.symantecliveupdate.com
69.94.20.54 looknstop.com
89.170.46.43 lovings.technigoyous.net
122.72.9.224 lurker.clamav.net
91.234.130.119 mailcenter.rising.com
30.230.75.27 mailcenter.rising.com.cn
238.50.101.17 majorgeeks.com
15.208.209.87 mall.hauri.co.kr
129.190.73.170 malwarebytes.org
67.186.18.78 malwarecity.com
98.85.55.145 malwarecity.netmalwarecity.org
131.243.162.215 malwaredomainlist.com
244.225.27.110 malwarepedia.com
115.221.228.19 malwareremoval.com
135.41.186.8 malwarescan.emsisoft.com
168.199.89.129 malwarescan.emsisoft.de
77.233.209.212 malwarescan.emsisoft.es
204.228.155.120 mamutu.com
156.49.181.109 manuelruvalcaba.com
188.207.220.179 marian.symantec.com
46.189.85.6 mast.mcafee.com
241.185.30.238 mcafee-at-home.com
193.5.132.47 mcafee.com
45.238.171.49 mcafeeb2b.com
159.221.35.200 mcafeefans.com
30.217.237.108 mcafeeretail.com
50.37.7.97 mcaffee.com
199.55.163.28 me.kaspersky.com
57.37.95.111 media.fastclick.net
183.33.40.87 megasecurity.org
135.110.255.76 merijn.org
168.11.106.78 metascan-online.com
26.182.226.229 microsoft.com
221.245.171.145 microsoft.fr
180.73.137.134 midescargas.com
213.231.245.204 mirror02.gdata.de
71.146.109.31 misec.net
198.209.54.195 mmsk.cn
220.32.83.186 moneybookers.com
252.190.122.0 moosoft.com
110.104.243.151 mop.pandasecurity.com
237.168.188.59 mostz.com
189.244.214.48 mozilla-hispano.org
213.69.177.42 msdn.microsoft.com
3.240.41.125 msk.drweb.com
198.48.243.33 msk1.drweb.com
150.124.141.150 msk2.drweb.com
54.153.180.220 msk3.drweb.com
168.68.112.115 msk4.drweb.com
107.207.65.99 msk5.drweb.com
134.28.92.88 msk6.drweb.com
167.185.199.158 msk7.drweb.com
202.20.240.162 msncleaner.softonic.com
72.84.185.70 msnfix.changelog.fr
92.160.143.59 msnvirusremoval.com
65.190.190.68 msr.mcafee.com
110.172.55.151 mvps.org
49.168.0.127 mx.answers.yahoo.com
9.64.34.124 mx.mcafee.com
41.154.73.126 mxttchina.com
155.136.194.21 my-etrust.com
94.132.139.185 my.drweb.com
226.200.89.98 mygeekside.com
2.33.128.168 nabble.com
116.16.248.251 nai.com
243.12.194.227 natsko.com
7.88.220.216 naturesimages.net
118.68.82.41 net-security.org
164.51.202.192 network.drweb.com
103.46.148.100 networkassociates.com
55.123.174.89 networkassociates.nai.com
87.25.25.159 networkworld.com
253.58.197.38 neunet.orgnews.bitdefender.com
191.54.142.202 new-beta.drweb.com
143.130.100.191 new-company.drweb.com
176.32.208.5 new-estore.drweb.com
34.15.72.156 new-forum.drweb.com
161.10.17.64 new-partners.drweb.com
180.87.232.53 new-solutions.drweb.com
33.64.159.199 new-support.drweb.com
147.46.23.26 new-www.drweb.com
194.219.145.110 new.taringa.net
146.39.171.99 news.drweb.com
179.197.210.169 newsletters.trendmicro.com
37.179.75.253 niueight.norman.no
231.175.20.229 niufive.norman.no
183.251.242.157 niufour.norman.no
156.93.25.159 niunine.norman.no
13.75.146.54 niuone.norman.no
140.71.22.150 niuseven.norman.no
91.79.49.139 niusix.norman.no
124.236.88.209 niuthree.norman.no
238.219.20.36 niutwo.norman.no
109.214.44.91 nl.bitdefender.com
139.113.2.80 noadware.net
172.15.110.82 nod32.co.uk
30.186.230.233 nod32.com
225.249.175.141 nod32.datsec.de
176.70.134.130 nod32.lu
209.227.241.200 nod32.ru
118.193.157.78 norman.com
245.1.102.242 norton.com
9.77.128.231 notifier.antivir-pe.de
42.235.167.45 novirusthanks.org
156.149.32.197 nprobeta.norman.com
26.213.233.105 nprotect.com
234.33.79.169 nprotect.net
155.11.118.239 nprotect.seoul.go.kr
200.181.239.66 nsclean.com
139.245.184.230 ntfaq.co.kr
12.242.131.140 obscgi.mcafee.com
44.144.170.210 oem.sunbeltsoftware.com
158.58.103.105 offensivecomputing.net
97.122.175.209 office.microsoft.com
244.138.202.198 oldtimer.geekstogo.com
21.39.53.12 one.tinypicbox.com
66.141.105.26 onecare.live.com
193.205.50.190 online-backup.comodo.com
213.25.8.180 online.jiangmin.com
246.115.116.250 online.rising.com.cn
36.97.59.155 onlinecheck.emsisoft.com
53.172.4.131 onlinecheck.emsisoft.de
5.60.30.120 onlinecheck.emsisoft.net
38.150.69.122 onlinecheck.emsisoft.org
151.132.190.17 onlinescan.avast.com
142.179.186.233 openantivirus.org
93.68.213.222 outpost.pl
126.157.252.36 ozzu.com
240.140.116.119 p3dev.taringa.net
111.135.62.95 pandalabs.pandasecurity.com
131.212.88.84 pandasecurity.com
163.114.127.86 pandasoftware.com
29.172.67.57 pandasoftware.es
224.167.189.142 pantip.com
96.164.215.131 pcav.cn
129.66.67.201 pccreg.antivirus.com
243.49.187.28 pccreg.trendmicro.com
121.240.72.131 pcentraide.com
73.60.30.121 pcguide.com
113.226.145.198 pchell.com
227.208.9.93 pcinternetpatrol.com
98.204.134.181 pcsupportadvisor.com
42.204.93.170 pctools.com
74.105.200.240 pda.drweb.com
188.88.64.67 pedidos.protegerse.com
59.84.88.54 personal.psu.edu
89.239.115.43 personalfirewall.comodo.com
122.140.154.113 pestpatrol.com
236.123.18.196 pg.hauri.net
98.42.143.96 phx.corporate-ir.net
50.119.170.85 pineleafboys.com
83.20.209.87 podcasts.sophos.com
197.3.73.238 pogonyuto.forospanish.com
68.254.18.18 precisesecurity.com
35.22.248.82 prevx.com
68.180.31.152 privacy.microsoft.com
181.162.220.235 products.drweb.com
52.158.165.211 promotions.drweb.com
4.234.123.200 psnw.com
37.136.231.203 pspl.com
71.227.16.18 pvtc.org
10.35.217.182 qqjkw.net
218.111.175.171 quickheal.co.in
251.13.26.241 quickheal.com
48.123.86.8 radius.turvamies.com
175.187.32.172 rads.mcafee.com
195.7.58.161 ravantivirus.com
235.172.105.239 raymond.cc
93.87.225.134 reg-int.nod32-es.com
143.74.94.222 reg.eset.es
95.151.121.211 reg.rising.com.cn
196.52.160.25 register.norman.com
242.223.24.108 removetrojanvirus.org
181.30.225.16 renewalcenter.symantec.com
133.107.252.7 renewals.bitdefender.com
168.11.37.77 research.microsoft.com
25.181.226.228 research.pandasecurity.com
220.245.103.136 research.sunbelt-software.com
44.193.1.253 resplendence.com
76.95.108.67 retail.sp.f-secure.com
190.9.229.150 retail01.sp.f-secure.com
61.73.174.55 retail02.sp.f-secure.com
77.145.128.44 ribbonwarehouse.com
110.235.236.114 rising-global.com
156.218.100.197 rising.com
95.213.45.173 rising.com.cn
46.102.72.162 rolandovera.com
79.191.111.164 rootkit.com
193.174.231.59 rootkit.nl
71.109.116.163 rover800.gaima.co.uk
23.254.143.152 roysephotos.com
56.87.182.222 ru.trendmicro.com
170.70.233.236 ruben.bzin.net
228.253.179.212 runscanner.net
248.73.205.201 safe.qq.com
25.231.244.203 safecomputing.umn.edu
70.213.109.98 safer-networking.org
9.209.54.85 safetynet.com
40.108.159.74 sales.bitdefender.com
252.189.190.68 samroeng.hi5.com
110.172.54.151 sandbox.norman.com
49.167.255.59 sandboxie.com
128.115.85.176 sapcupgrades.com
161.17.193.246 sarahmcconnellphotography.net
19.75.133.216 saverssite.com
221.71.78.124 scan.anti-trojan.net
241.147.36.113 scan.kingsoft.com
194.226.64.104 scan4you.net
52.208.185.187 scanner.novirusthanks.org
119.143.69.35 scanner.virus.org
70.220.96.24 scanner2.novirusthanks.or
103.121.135.94 schemas.microsoft.com
217.112.7.185 schemas.xmlsoap.org
164.107.208.161 sea.symantec.com
115.184.235.150 search.ca.com
148.85.20.154 search.mcafee.com
8.70.141.49 search.symantec.com
135.66.86.213 seasonsecurity.com
155.142.112.202 secdreg.org
188.44.151.196 secubox.aldria.com
225.206.7.23 secunia.com
96.202.209.255 secure-email.comodo.com
48.22.167.244 secure.av-desk.com
28.127.222.194 secure.nai.com
142.41.86.89 securecomputing.com
80.105.31.253 secureme.com
32.182.246.242 securitoo.com
65.83.97.56 security.symantec.com
100.174.138.60 securitycheck.symantec.com
226.238.83.224 securitynewsportal.com
246.58.109.213 securityrespons.symantec.com
226.163.96.230 securityresponse.symantec.com
84.78.216.125 securitywonks.net
211.141.162.33 secuser.com
163.218.112.202 secuser.model-fx.com
187.43.151.16 sergiwa.com
233.214.15.99 service.mcafee.com
172.21.216.7 service1.symantec.com
124.98.65.75 servicenews.symantec.com
235.78.105.145 sfdoccentral.symantec.com
16.172.217.219 shadow.grisoft.cz
211.236.94.127 shadu.baidu.com
163.56.120.117 shadu.duba.net
196.214.228.187 shield.prevx.com
54.128.92.14 shop.hauri.co.kr
180.192.240.125 shop.pandasecurity.com
147.216.199.114 shop.sunbeltsoftware.com
180.49.227.105 shop.symantec.com
147.209.91.188 shop.trendmicro.com
86.204.36.164 shudoo.com
37.93.63.153 simplysup.com
70.182.102.155 siren24.nprotect.com
184.165.222.50 siteadvisor.com
62.100.107.154 sitedirector.symantec.com
14.245.134.143 smallbiz.symantec.com
47.78.173.213 smbstore.trendmicro.com
168.68.45.47 smokey-services.eu
39.64.246.24 soccersuck.com
59.140.16.13 softfaq.com
92.42.56.15 softonic.com
140.27.178.168 software-files.download.com
79.22.124.76 solutions.drweb.com
31.99.150.65 sophos.com
63.1.1.135 sophos.fr
177.239.121.218 sophos1.ucd.ie
116.235.67.126 sophos10.ucd.ie
248.235.205.39 sophos2.ucd.ie
24.136.56.109 sophos5.ucd.ie
138.119.176.4 sophos6.ucd.ie
9.115.122.168 sophos7.ucd.ie
232.138.27.104 sophos8.ucd.ie
9.40.135.175 sophos9.ucd.ie
123.22.255.2 soporte.pandasecurity.com
249.18.200.166 sos.rising.com.cn
201.95.226.155 sosvirus.changelog.fr
234.252.186.145 spd.atdmt.com
13.155.51.229 specs.xmlsoap.org
147.91.192.144 speedtest.comodo.com
99.167.218.133 spftrl.digitalriver.com
132.69.1.135 spyany.com
253.59.129.38 spyblocker-software.com
124.54.75.202 spybot.info
144.131.101.191 spycheck.co.uk
176.33.140.5 spycheck.es
34.17.75.90 spychecker.com
163.13.20.67 spycop.com
115.89.234.56 spywaredb.com
148.247.86.58 spywaredlls.prevx.com
6.162.206.209 spywarefiles.prevx.com
201.225.151.117 spywareguide.com
76.225.33.30 spywareinfo.com
109.127.141.100 spywareterminator.com
223.41.5.183 square.bitdefender.com
221.233.78.218 static.yoreparo.com
241.53.180.27 stats.norton.com
93.30.219.97 stdio-labs.blogspot.com
207.201.83.248 stiller.com
78.9.29.156 store.bitdefender.com
30.85.55.145 store.de.bitdefender.com
179.35.143.8 store.drweb.com
225.206.7.91 store.trendmicro.com
103.209.148.195 subs.geekstogo.com
55.30.175.184 subwiz.trendmicro.com
88.187.214.254 sucop.com
202.102.77.80 sun.symantec.com
72.97.211.244 sunbelt-software.com
24.173.237.233 sunbeltsecurity.com
57.75.88.47 sunbeltsoftware.com
170.245.209.209 superboy2010.com.au
120.131.233.117 superdicas.com.br
140.208.191.106 superuser.co.kr
96.221.222.100 support.drweb.com
142.204.86.183 support.f-secure.com
81.199.31.159 support.kaspersky.co
33.88.58.20 support.mcafee.com
193.49.225.22 support.microsoft.com
51.32.89.173 support.pandasecurity.com
246.27.34.81 support.rising-global.com
197.172.136.66 sybari.com
226.2.96.136 sygate.com
84.240.217.219 symantec-ese.baynote.net
211.236.162.195 symantec.com
231.56.188.184 symantecliveupdate.com
8.214.227.186 symatec.com
249.136.31.21 sysinternals.com
188.132.233.193 system-cleaner.comodo.com
147.216.11.182 tallemu.com
180.117.118.252 taringa.net
38.100.238.79 tds.diamondcs.com.au
233.95.184.243 tech.pantip.com
185.172.142.232 techimo.com
220.76.251.48 techspot.com
77.58.116.199 techsupportforum.com
204.54.61.108 tecniservicioslys.com
224.130.19.97 tecno-soft.com
1.32.127.167 tempuri.org
115.15.247.173 thecomputerpitstop.com
165.190.116.81 thejokerx.blogspot.com
117.10.142.71 thetechguide.com
150.168.182.12 thinkpad.cn
135.22.174.95 threatexpert.com
74.18.119.71 threatinfo.trendmicro.com
26.94.221.136 timeforyourbusi.pandasecurity.com
134.71.4.138 timestamp.comodoca.com
248.54.124.33 timestamp.wosign.com
119.50.70.197 tinysoftware.com
255.242.212.47 tms.symantec.com
32.144.252.117 together.pctools.com
146.126.184.200 tool.ikaka.com
16.122.129.176 toonbox.de
224.199.88.165 tr.mcafee.com
1.100.195.174 trackingtheworld.com
122.22.67.69 training.drweb.com
61.86.12.234 training.trendmicro.com
13.162.226.223 trapware.com
48.66.80.39 trendmicro.com
162.237.200.122 trendmicro.com.cn
33.44.146.30 trendmicro.fr
53.121.172.19 trendsecure.com
85.23.211.89 trial.trendmicro.com
199.193.76.240 trucoswindows.es
250.180.200.72 trucoswindows.net
202.1.227.61 tw.mcafee.com
46.158.10.131 tw.sophos.com
92.73.130.214 tw.trendmicro.com
31.137.76.122 tweaksforgeeks.com
239.213.230.239 u0.eset.com
219.62.89.129 u1.eset.com
77.232.21.24 u10.eset.com
15.40.154.188 u100.eset.com
223.117.181.177 u11.eset.com
0.18.32.247 u12.eset.com
114.189.152.74 u13.eset.com
241.252.97.159 u14.eset.com
181.189.172.87 u15.eset.com
154.23.23.157 u16.eset.com
199.5.144.240 u17.eset.com
138.1.89.216 u18.eset.com
90.145.115.206 u19.eset.com
123.235.155.208 u2.eset.com
237.217.19.34 u20.eset.com
107.144.151.198 u21.eset.com
59.33.178.187 u22.eset.com
91.122.217.1 u23.eset.com
205.105.81.84 u24.eset.com
76.101.27.60 u25.eset.com
96.177.53.49 u26.eset.com
129.79.171.130 u27.eset.com
253.140.35.25 u28.eset.com
192.135.237.189 u29.eset.com
144.212.7.178 u3.eset.com
100.37.38.172 u30.eset.com
214.20.158.255 u31.eset.com
153.15.103.163 u32.eset.com
232.219.189.24 u33.eset.com
9.121.41.94 u34.eset.com
123.104.161.245 u35.eset.com
250.99.106.153 u36.eset.com
13.176.65.142 u36eset.com
42.74.168.208 u37.eset.com
156.56.33.35 u37eset.com
27.52.234.199 u38.eset.com
235.128.4.188 u39.eset.com
12.30.43.2 u4.eset.com
126.12.164.86 u40.eset.com
64.8.109.62 u41.eset.com
212.24.75.246 u42.eset.com
245.182.114.248 u43.eset.com
102.164.235.143 u44.eset.com
229.160.180.51 u45.eset.com
249.236.206.228 u46.eset.com
213.69.177.42 u47.eset.com
71.52.109.125 u48.eset.com
198.47.54.101 u49.eset.com
150.124.13.90 u5.eset.com
182.25.120.92 u50.eset.com
40.196.240.243 u51.eset.com
235.4.186.151 u52.eset.com
9.159.223.219 u53.eset.com
42.60.74.33 u54.eset.com
156.231.194.116 u55.eset.com
27.38.140.24 u56.eset.com
173.242.37.140 u57.eset.com
206.143.76.210 u58.eset.com
64.58.196.105 u59.eset.com
191.122.142.13 u6.eset.com
143.198.168.2 u60.eset.com
164.20.128.249 u61.eset.com
210.191.248.76 u62.eset.com
149.254.194.240 u63.eset.com
101.75.220.229 u64.eset.com
133.233.3.43 u65.eset.com
247.147.192.194 u66.eset.com
136.160.18.52 u67.eset.com
87.237.45.41 u68.eset.com
120.138.152.111 u69.eset.com
234.53.16.194 u7.eset.com
105.116.218.102 u70.eset.com
125.193.176.91 u71.eset.com
81.206.207.85 u72.eset.com
127.189.71.168 u73.eset.com
66.184.16.144 u74.eset.com
18.73.43.133 u75.eset.com
50.162.82.3 u76.eset.com
32.13.70.154 u77.eset.com
227.8.16.62 u78.eset.com
179.153.42.51 u79.eset.com
211.243.81.121 u8.eset.com
69.225.202.204 u80.eset.com
196.221.147.180 u81.eset.com
216.41.173.109 u82.eset.com
188.138.152.111 u83.eset.com
234.121.16.6 u84.eset.com
173.117.218.170 u85.eset.com
125.193.244.159 u86.eset.com
167.105.105.239 u87.eset.com
25.87.225.66 u88.eset.com
220.83.171.230 u89.eset.com
172.159.129.219 u9.eset.com
205.61.236.33 u90.eset.com
62.43.101.184 u91.eset.com
189.39.46.16 u92.eset.com
133.39.184.5 u93.eset.com
166.197.35.75 u94.eset.com
23.179.156.158 u95.eset.com
214.238.164.130 u96.eset.com
165.59.191.119 u97.eset.com
198.216.230.189 u98.eset.com
56.199.94.16 u99.eset.com
251.195.40.248 uk.mcafee.com
203.15.66.237 uk.trendmicro-europe.com
236.173.105.239 uk.trendmicro.com
93.155.233.142 ulove.tigolbittys.info
228.158.179.50 up.duba.net
248.235.205.39 up.rising.com.cn
24.137.170.35 up1.nod123.cn
64.45.102.118 upd.zonelabs.com
191.41.48.94 update.360safe.cn
143.117.6.83 update.360safe.com
176.19.113.85 update.aladdin.com
33.189.234.236 update.authentium.com
228.253.179.16 update.avg.com
52.201.9.5 update.avgfrance.com
84.103.116.75 update.bitdefender.com
198.17.237.158 update.drweb.com
69.81.118.2 update.ewido.com
25.93.144.247 update.grisoft.com
58.251.183.61 update.grisoft.cz
171.165.48.212 update.hispasec.com
42.229.249.120 update.ikaka.com
250.49.27.117 update.ikarus-software.at
28.140.248.113 update.quickheal.com
74.55.112.196 update.rising.com.cn
13.119.58.104 update.sophos.com
221.195.84.93 update.symantec.com
254.97.123.163 update.trendmicro.com
239.139.183.186 update7.jiangmin.com
178.202.61.94 updatem.360safe.cn
130.23.87.83 updatem.360safe.com
162.181.130.89 updates.a-2.org
212.31.250.172 updates.drweb.com
83.95.196.88 updates.f-prot.com
110.179.162.77 updates.sald.com
143.12.13.147 updates.symantec.com
189.174.57.154 updates3.kaspersky-labs.com
51.170.2.130 updates4.kaspersky-labs.com
3.137.107.197 updates5.kaspersky-labs.com
115.227.146.199 upgrade.bitdefender.com
228.209.11.94 upgrade1.bitdefender.com
91.129.136.182 upgrade2.bitdefender.com
43.17.34.43 upgrade3.bitdefender.com
203.234.73.113 upgrade4.bitdefender.com
61.217.193.196 upload.changelog.fr
188.212.139.172 us.bitdefender.com
27.109.240.237 us.mcafee.com
60.10.24.239 us.trendmicro.com
27.169.65.55 usa.kaspersky.com
221.165.10.219 usbcleaner.cn
173.241.36.208 ushousecall02.trendmicro.com
206.143.144.22 utilidades-utiles.com
64.126.8.52 v.dreamwiz.com
206.68.157.216 v4.windowsupdate.microsoft.com
158.145.115.205 v5.windowsupdate.microsoft.com
190.47.222.19 vet.com.au
48.29.86.170 vicentevirtual.com
175.25.32.78 viguard.com
195.101.246.247 vil.nai.com
151.182.21.61 vil.nail.com
9.165.141.144 virobot.co.kr
136.161.87.52 virscan.org
88.237.113.41 virus.org
123.141.155.114 virusbuster.hu
237.123.19.197 viruschief.com
175.119.220.173 virusdoctor.jp
127.196.247.162 virusfreezone.info
160.97.30.35 virusinfo.prevx.com
146.207.22.187 viruslist.com
16.203.223.95 viruslist.ru
36.23.249.84 virusscan.jotti.org
69.181.33.154 virusscanonline.net
183.164.221.237 virusspy.com
54.159.242.32 virustotal.com
81.55.200.21 visualizesoftware.com
34.134.228.200 visualtracking.symantec.com
148.48.93.95 vivo-austin.com
87.112.38.3 vms.drweb.com
39.188.252.248 vncsvr.com
72.90.103.62 vos.symantec.com
133.208.171.93 vrv.com.cn
4.15.116.1 vsantivirus.com
23.92.143.246 webadmin.norman.no
56.249.182.60 webphand.com
170.164.46.211 webroot.com
41.227.248.119 wedoantivirus.com
172.228.198.32 welkam.co.jp
17.129.237.102 wexperts-exchange.com
63.44.101.185 whatthetech.com
2.107.46.93 wikio.es
210.184.73.82 wilderssecurity.com
65.164.191.231 wilderssecurity.net
179.79.123.49 wildlist.com
41.66.180.213 windowsupdate.microsoft.com
249.142.206.203 winpatrol.com
26.44.58.17 wmcafee.com
140.214.178.100 woottonfootball.com
138.150.251.135 wtc.trendmicro.com
158.226.209.124 ww.emsisoft.com
10.135.136.14 www.1stavenuelimousines.co.uk
56.118.0.97 www.2xlgames.com
251.114.202.73 www.ahnlab.com
203.2.228.62 www.aks.com
236.92.188.241 www.aladdin.com
14.251.52.136 www.anti-trojan-software.net
209.246.254.44 www.anti-trojan.net
100.75.220.229 www.anti-virus.by
133.164.3.43 www.antivir.es
254.154.131.133 www.antivirus-tools.com
125.150.76.110 www.antiy.net
145.226.102.99 www.apsecure.com
178.128.142.101 www.arpia.be
147.34.186.175 www.authentium.com
86.30.131.83 www.authentium.com.au
38.106.157.73 www.av-desk.com
71.8.87.221 www.avast.com
7.69.207.228 www.avg.com
126.244.76.136 www.avhide.com
78.65.35.125 www.avoncourt.com
110.222.142.195 www.avx.ro
224.205.6.90 www.barder.com
95.201.208.254 www.beautybar.com
242.149.38.115 www.bg.virusblokada.com
95.126.221.5 www.bit-defender.de
209.108.85.88 www.bitdefende.de
79.104.30.252 www.bitdefender-es.com
31.181.56.241 www.bitdefender.be
64.82.96.231 www.bitdefender.cl
99.241.137.59 www.bitdefender.co.uk
37.237.82.35 www.bitdefender.com
245.57.108.219 www.bitdefender.com.au
218.155.87.221 www.bitdefender.com.sg
75.137.208.116 www.bitdefender.com.tw
202.133.153.24 www.bitdefender.com.vn
222.209.179.21 www.bitdefender.de
6.119.226.91 www.bitdefender.es
120.101.158.174 www.bitdefender.fr
171.20.27.74 www.bitdefender.hk
123.97.242.63 www.bitdefender.us
155.254.93.65 www.bitdefenderme.com
13.169.213.216 www.briarhurst.com
31.55.237.203 www.brightoctober.com
238.132.196.192 www.buraka.tv
15.33.47.6 www.buscafacil.com
53.127.91.13 www.buscalo.in
179.191.36.177 www.busco.in
199.12.63.166 www.ca.com
232.169.102.236 www.cambridge-steiner-school.co.uk
218.211.94.3 www.ccssforum.org
88.19.39.167 www.celticmerchant.com
40.95.141.231 www.clamav.net
217.73.180.45 www.collectedcurios.com
6.243.45.128 www.comodo.com
201.51.246.36 www.comodo.tv
153.127.16.25 www.comodoantispam.com
106.206.232.16 www.comodopartners.com
220.120.165.167 www.computing.net
159.184.42.75 www.configurarequipos.com
111.4.68.64 www.contentverification.com
83.101.115.74 www.deborahshelton.net
197.16.235.157 www.dr-bull.com
76.87.188.73 www.drweb.com
95.164.147.62 www.ealaddin.com
128.253.254.132 www.elvis-express.com
98.159.42.139 www.emeraldclassic.co.uk
36.155.243.115 www.emsisoft.at
244.44.14.104 www.emsisoft.com
100.212.131.184 www.emsisoft.de
213.194.252.79 www.emsisoft.es
152.190.197.244 www.emsisoft.fr
104.78.223.233 www.emsisoft.it
137.168.7.47 www.emsisoft.jp
174.74.51.53 www.emsisoft.net
45.70.252.29 www.emsisoft.nl
65.146.22.19 www.emsisoft.org
98.48.62.21 www.engyro.com
15.158.54.43 www.entercept.com
210.154.255.207 www.esafe.com
162.230.25.196 www.eset.es
14.207.208.86 www.eugrantsadvisor.com
128.190.72.169 www.eugrantsadvisor.de
67.186.18.77 www.eugrantsadvisor.ie
19.6.232.66 www.eugrantsadvisor.se
52.164.83.136 www.exchangeyourcareer.com
86.67.124.208 www.f-prot.com
213.62.70.116 www.f-secure.com
233.139.28.105 www.fimasys.com
9.41.135.175 www.flairweddings.co.uk
63.219.195.198 www.forospyware.com
190.214.140.106 www.fortifed.com
141.35.167.95 www.fortiid.com
174.192.206.165 www.fortimail.com
40.183.78.0 www.fortinet-apac.com
235.178.23.232 www.fortinet.ch
186.255.50.221 www.fortinet.co.il
219.156.89.147 www.fortinet.com
1.62.133.42 www.fortinet.net
127.58.78.206 www.fortinet.nl
147.135.105.195 www.fortinet.sg
3.115.222.87 www.fortinetuk.com
116.97.155.170 www.freeality.com
243.93.100.147 www.freedrweb.ru
119.93.238.59 www.freerav.com
152.251.89.61 www.frisk-software.com
9.165.210.212 www.frisk.is
204.229.155.120 www.fsecure.com
156.49.113.110 www.garryowen.com
60.79.92.51 www.gdata.es
174.249.213.134 www.globalhauri.com
45.57.158.42 www.gokidding.com
140.209.4.107 www.grisoft.com
173.110.43.177 www.hackshields.com
31.25.163.72 www.hacksoft.com.pe
158.89.109.236 www.hacksoft.pe
30.86.56.146 www.handwritingforkids.com
131.243.95.216 www.hasp.se
177.158.215.43 www.hauri.co.kr
116.221.161.207 www.hauri.net
7.238.127.136 www.hxproduction.com
40.139.166.206 www.ibusca.me
154.54.98.101 www.ikarus.at
93.117.231.9 www.imddomains.co.uk
232.125.189.185 www.indielisboa.com
9.27.40.255 www.inicioid.com
122.197.161.82 www.iniciorapido.info
249.5.106.246 www.internationalservicecheck.com
92.160.143.58 www.irangoals.com
124.250.250.128 www.iseclab.org
170.232.115.211 www.ixomodels.com
109.228.60.187 www.jiangmin.com
61.116.86.176 www.jiangmin.com.cn
94.206.125.178 www.jotti.org
131.112.169.253 www.kaspersky.com
70.108.115.161 www.kioskea.net
149.124.13.22 www.latin-mass-society.org
182.213.52.92 www.livepcsupport.com
40.196.172.175 www.malwarecity.com
167.191.118.151 www.malwarecity.fr
187.12.144.140 www.mamutu.com
219.170.183.142 www.mamutu.de
85.228.123.113 www.manchester-offices.co.uk
24.223.68.198 www.mcafee.at
152.220.15.187 www.mcafee.com
185.122.123.1 www.metascan-online.com
43.105.243.84 www.microsoft.com
177.40.128.187 www.midescargas.com
129.116.86.177 www.mountainlakeslodge.com
162.18.194.247 www.mtr-design.com
27.8.65.149 www.mygeekside.com
154.4.11.57 www.netegrity.com
174.80.225.46 www.norman.com
207.238.76.116 www.nottinghampoetryseries.com
64.220.197.199 www.novirusthanks.org
115.140.66.31 www.npin.co.kr
67.216.92.20 www.nprotect.co.kr
100.118.131.90 www.nprotect.com
213.100.252.252 www.nprotect.com.br
231.174.20.228 www.nsclean.com
183.251.46.217 www.owen.org
215.153.85.219 www.pandasecurity.com
253.59.129.38 www.pctools.com
124.54.74.202 www.peterhearnwaste.co.uk
15.2.228.63 www.phoenixtrikeworks.com
48.160.12.133 www.prdouglas.co.uk
162.143.200.216 www.prevx.com
33.138.145.11 www.prevx1.com
60.34.179.0 www.professorbeyer.com
93.192.31.3 www.quickheal.com
127.27.72.74 www.removetrojanvirus.org
66.91.17.238 www.renningers.com
18.167.231.167 www.residentphotography.com
246.8.22.237 www.retento.com
112.187.150.72 www.reviewsofbooks.com
239.250.95.236 www.rising-global.com
2.71.122.225 www.risingav.com.au
35.228.161.39 www.safenet-inc.com
149.143.25.190 www.scan4you.net
20.206.150.22 www.seasonsecurity.com
151.207.255.89 www.secondchanceboxer.com
75.187.38.159 www.secure-elements.com
120.101.159.242 www.sheffieldmind.co.uk
59.165.104.151 www.smf.org
11.241.130.140 www.softfaq.com
44.143.170.210 www.sophos.com
81.237.26.28 www.spycheck.co.uk
20.45.159.192 www.spycheck.es
228.121.185.182 www.stadiumpage.com
132.151.164.123 www.sunbeltsoftware.com
246.65.29.206 www.symantec.com
117.129.230.114 www.sysinternals.com
137.205.188.103 www.tecniservicioslys.com
170.114.115.249 www.testmypcsecurity.com
35.97.235.76 www.threatexpert.com
230.93.181.52 www.tomorrowsedge.net
102.158.128.218 www.trendmicro.com
135.247.167.220 www.trojaner.info
249.230.31.115 www.trustix.com
188.225.233.23 www.trustlogo.com
140.114.3.208 www.vba.com.by
112.143.238.22 www.virscan.org
226.126.102.105 www.virus.fi
97.121.47.81 www.virus.org
124.205.81.78 www.virusbuster.hu
157.107.121.80 www.viruschief.com
203.90.241.231 www.virusfreezone.info
142.85.186.139 www.virustotal.com
17.85.136.52 www.wellgousa.com
50.243.244.122 www.whichssl.com
242.48.186.27 www.willsee.com
181.44.132.191 www.xmlsoap.org
133.120.90.180 www.zarya.info
166.22.197.250 www1.my-etrust.com
23.4.62.197 www3.ca.com
202.51.58.105 www3.safenet-inc.com
221.128.17.94 www4.symantec.com
254.29.124.164 wwws.clamav.net
112.12.244.247 x-cleaner.com
239.7.190.155 x.360safe.com
191.84.216.144 yoreparo.com
43.61.75.34 z-oleg.com
157.44.195.117 zeustracker.abuse.ch
96.39.140.93 zeylstra.nl
47.116.167.82 zhidao.baidu.com
1.194.127.5 zhidao.ikaka.com
54.116.187.95 ziggamza.net
181.112.132.3 zonavirus.com
201.188.158.249 zonealarm.com
234.90.198.63 zonelabs.com
92.72.130.146 zonelabs.fr
218.68.75.129 zonelog.co.uk
102.76.221.42 zs.kingsoft.com
134.233.72.44 ztl.comodo.com


Rootkit activity

No anomalies have been detected.

Propagation

A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.

VersionInfo

No information is available.

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 12644 12800 3.76874 55d274f88e5ab59aa27a86516437f7d8
.data 20480 64 512 0.164757 75fe664fdcd708925b7ca712ee127c19
.rdata 24576 1328 1536 3.03097 2707a7526abdc69c43f37dd3b6665e30
.bss 28672 320 0 0 d41d8cd98f00b204e9800998ecf8427e
.idata 32768 800 1024 2.18489 4e803ebabfbd6fe3233c57c1b6e762a8
.rsrc 36864 87232 87552 5.54166 34b5a2a0306aa053bf792aa7f84ba6c7

Dropped from:

e3028e60e19306afe6b0f4c6e124884e

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a

URLs

URL IP
hxxp://6923f7bxpvyuwpsmq4a15h4s2628yi.ipcheker.com/ 75.126.104.226
hxxp://eyco2a1c9n7r5p826562043zg86350.ipcheker.com/ 75.126.104.226
hxxp://3m81sd281159k3ok007272p3oiy67l.ipcheker.com/ 75.126.104.226
hxxp://1wr9878tz5ms73368l81k8m7362nwg.ipcheker.com/ 75.126.104.226
www.buscaid.com 8.5.1.51


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps were not found.


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Delete the original Trojan file.
  2. Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
    127.0.0.1 localhost
  3. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  4. Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
  5. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now