Gen.Variant.Symmi.2478_856dfea071

Trojan.Win32.Fsysna.dqir (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS) Behaviour: Trojan, Worm, WormAutorun The descriptio...
Blog rating:2 out of5 with1 ratings

Gen.Variant.Symmi.2478_856dfea071

by malwarelabrobot on August 2nd, 2016 in Malware Descriptions.

Trojan.Win32.Fsysna.dqir (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, WormAutorun


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 856dfea0710f6c989962ab2247ce31c8
SHA1: e263a89717cd0f4c91ce09e6267055a8102d77fa
SHA256: 26ba6b620029351688232f5d8bae55e318f849647c7aea84841948cf322dd001
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 4425904 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: no certificate found
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour Description
WormAutorun A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.


Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):
No processes have been created.

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

No files have been created.

Registry activity

Dropped PE files

MD5 File path
4bad3c0ffad74f4a498d8cef3d5167b2 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\ Afrojack Nayer - Give Me Everything (Tonight).mp3.pif
a0079a607073fb7bab3790151950e4cb c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif
e796d9235f94a4bb65aa75fed5cb3d96 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21_PROPER_320kbps_VRTX.mp3.pif
eb1c96058ec94f66126f45364caa9b9e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - Rolling In the Deep [2010-Single][SW].mp3.pif
93e5d169427f0b125a07edc5b70e999c c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Beyonce-4_(Deluxe_Edition)-2CD-2011-VOiCE.mp3.pif
46574a438d72154891919da3289aca8c c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Black Eyed Peas - The Beginning (Deluxe Edition) 2010-DOH.mp3.pif
ce855bd6a2496310fe361a3c8dbe77c0 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Chris Brown - F.A.M.E Deluxe [2011-MP3-Cov][Bubanee].mp3.pif
c431c72f4acc68ca2609b65fe6a55cc4 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif
c93eaffffd59af8e3b092acae4ad83d3 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Foo Fighters 2011 Wasting Light 320 Kbps.mp3.pif
5730b40ae9c988897d64d0b8cba35583 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif
41638f4652c30c7c5f0fa964bd9a76ec c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jessie J - Who You Are 2011 Album [Deluxe Edition].mp3.pif
f0f9ea624f483dc472c661af746b44ce c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif
90f420b503985867f3ea1929dd9b6c86 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2011-Single@320][TJ].mp3.pif
14a2b38716ee9a6278f01ff51ae0607a c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Lil.Wayne-Sorry.4.The.Wait-(Deluxe.Edition)-2011-[NoFS].mp3.pif
6d756ca1df84c6d7f4f8ff4f248a182a c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Mumford And Sons - Sigh No More (Album).mp3.pif
a593c1bc6a2edd92134b6e05ad410ee4 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Nicki Minaj - Pink Friday (Deluxe Edition) 2011.mp3.pif
112361fca4ae302f8e658bc5c56219e6 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Now Thats What I Call Music 78 (2011) - 2CD.mp3.pif
944275c538bc2171a95a508671115741 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Pitbull - Give Me Everything (feat. Ne-Yo) [2011-Single][SW].mp3.pif
867943373b76fa51950e2b73dd1460e9 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Pitbull ft. Ne-Yo.mp3.pif
a104e9ff6608ff4354954bc1854fcb14 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Rihanna - LOUD (2011 With 5 Bonus Tracks).mp3.pif
dd0e4572ddf05f76f879ff3d6a6e5a5b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Snoop Dogg - Sweat (David Guetta Remix) [2011-Single][SW].mp3.pif

HOSTS file anomalies

The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 61700 bytes in size. The following strings are added to the hosts file listed below:

173.224.217.74 viabcp.com
173.224.217.74 www.viabcp.com
173.224.217.74 ww2.viabcp.com
173.224.217.74 bcpzonasegura.viabcp.com
173.224.217.74 hotmail.com
173.224.217.74 www.hotmail.com
101.169.220.135 13iii.com
133.70.3.137 15660808.co.kr
247.53.123.32 2-spyware.com
118.49.69.196 247fixes.com
138.125.95.185 360.cn
171.27.134.255 360.com
28.9.67.82 360safe.cn
155.5.12.58 360safe.com
107.81.226.48 45pounds.com
140.239.78.50 51nb.com
254.154.198.201 9down.com
192.217.143.109 a-2.org
144.38.102.98 a188.x.akamai.net
177.195.209.168 abuse.ch
35.110.73.251 acs.pandasoftware.com
162.173.18.159 ad-aware-se.uptodown.com
182.250.45.148 ad.fastclick.net
214.151.84.218 ads.fastclick.net
72.66.204.113 agfirewall.ru
199.130.150.21 agnitum.com
151.206.176.10 agnitum.de
252.108.215.80 agnitum.fr
41.22.80.163 agnitum.ru
236.86.25.71 ahn.com.cn
188.162.51.61 ahnlab.com
221.64.91.131 akamai.net
79.235.23.26 aknow.prevx.com
17.42.156.190 aladdin.com
225.119.183.179 alert.rising.com.cn
2.20.34.249 alerta-antivirus.inteco.es
116.191.154.76 alerta-antivirus.red.es
243.254.99.240 alladdin.ru
7.75.58.229 aluriasoftware.com
39.164.165.43 analysis.seclab.tuwien.ac.at
85.147.29.126 andymanchesta.com
24.143.231.102 anti-virus-software-review.com
232.31.1.91 anti-virus.by
9.121.40.93 anti-virus.com
122.103.161.244 antirootkit.com
61.99.106.152 antispam.sunbeltsoftware.com
13.243.132.142 antispy.ru
46.77.172.212 antispyware.sunbeltsoftware.com
160.60.36.39 antivir.es
30.55.237.15 antiviraldp.com
50.132.8.4 antivirus-online.de
83.33.47.6 antivirus-tools.com
129.16.167.157 antivirus.about.com
68.11.113.65 antivirus.cai.com
20.88.139.54 antivirus.comodo.com
52.245.246.124 antivirus.hispavista.com
166.228.110.207 antivirus.sunbeltsoftware.com
105.224.56.115 antiy.net
57.44.14.104 anubis.iseclab.org
90.202.121.174 apac.trendmicro.com
203.184.242.69 ar.answers.yahoo.com
74.180.187.233 ar.atwola.com
94.0.145.223 arcabit.com
127.158.253.37 arcabit.pl
241.141.117.120 archive.bitdefender.com
111.136.62.28 arswp.com
63.213.89.17 arwww.fortinet.cz
96.114.128.87 asap.authentium.com
210.97.248.170 ashampoo.com
149.92.193.146 atazita.blogspot.com
101.169.220.135 atdmt.com
133.70.3.137 attechnical.com
247.53.123.32 atwola.com
118.49.69.196 au.mcafee.com
138.125.95.185 auditmypc.com
171.27.134.255 authentium.com
28.9.67.82 auwww.ealaddin.nl
155.5.12.58 avast-home.uptodown.com
107.81.226.48 avast.com
140.239.78.50 avast.ru
254.154.198.201 avg-antivirus.net
192.217.143.109 avg.com
144.38.102.98 avg.vo.llnwd.net
177.195.209.168 avgate.net
35.110.73.251 avgfrance.com
162.173.18.159 avhide.com
182.250.45.148 avira.com
214.151.84.218 avp.ch
72.66.204.113 avp.com
199.130.150.21 avp.ru
151.206.176.10 avpclub.ddns.info
252.108.215.80 avu.zonelabs.com
41.22.80.163 avx.rob-have.net
236.86.25.71 awaps.net
188.162.51.61 b-have.orgbitdefender-ar.com
221.64.91.131 babooforum.com.br
79.235.23.26 backup.comodo.com
17.42.156.190 baike.360.cn
225.119.183.179 baike.360.com
2.20.34.249 bakunos.com
116.191.154.76 banner.fastclick.net
243.254.99.240 banners.fastclick.net
7.75.58.229 baristamagazine.com
39.164.165.43 basetendencies.com
85.147.29.126 bbs.360.cn
24.143.231.102 bbs.360safe.cn
232.31.1.91 bbs.360safe.com
9.121.40.93 bbs.cfan.com.cn
122.103.161.244 bbs.cpcw.com
61.99.106.152 bbs.dswlab.com
13.243.132.142 bbs.duba.net
46.77.172.212 bbs.ikaka.com
160.60.36.39 bbs.janmeng.com
30.55.237.15 bbs.kafan.cn
50.132.8.4 bbs.kafan.com
83.33.47.6 bbs.kaspersky.com.cn
129.16.167.157 bbs.kpfans.com
68.11.113.65 bbs.mcafeefans.com
20.88.139.54 bbs.s-sos.net
52.245.246.124 bbs.sucop.com
166.228.110.207 bbs.taisha.org
105.224.56.115 bbs.trendmicro.com.cn
57.44.14.104 bbs.winzheng.com
90.202.121.174 bestofewan.com
203.184.242.69 beta.anti-virus.by
74.180.187.233 bg.virusblokada.com
94.0.145.223 bhsbees.com
127.158.253.37 bitcity.info
241.141.117.120 bitcity.org
111.136.62.28 bitdefender.co.uk
63.213.89.17 bitdefender.com
96.114.128.87 bitdefender.com.ua
210.97.248.170 bitdefender.es
149.92.193.146 bitdefender.org
101.169.220.135 bitdefender.secyber.net
133.70.3.137 bitdefenderchina.com
247.53.123.32 bitdefenderguatemala.com
118.49.69.196 bitdefendermalaysia.com
138.125.95.185 bitdefendertaiwan.com
171.27.134.255 bitdefenderuruguay.com
28.9.67.82 bitdefenderusa.com
155.5.12.58 biz.nprotect.com
107.81.226.48 bkav.com.vn
140.239.78.50 blackice.iss.net
254.154.198.201 bleedingthreats.net
192.217.143.109 bleepingcomputer.com
144.38.102.98 blitzblank.com
177.195.209.168 blog.hispasec.com
35.110.73.251 blog.threatfire.com
162.173.18.159 blog.titanium-jewelry.com
182.250.45.148 blog.trendmicro.com
214.151.84.218 blogs.icerocket.com
72.66.204.113 blogs.protegerse.com
199.130.150.21 blogschapines.com
151.206.176.10 boardreader.com
252.108.215.80 bobbondart.com
41.22.80.163 br.mcafee.com
236.86.25.71 br.trendmicro.com
188.162.51.61 brazil.kaspersky.com
221.64.91.131 buddy.bitdefender.com
79.235.23.26 bugs.clamav.net
17.42.156.190 buscafacil.com
225.119.183.179 buscalo.in
2.20.34.249 busco.in
116.191.154.76 buy.bitdefender-es.com
243.254.99.240 buy.bitdefender.com
7.75.58.229 buy.bitdefender.de
39.164.165.43 buy.drweb.com
85.147.29.126 buy.rising.com.cn
24.143.231.102 ca.com
232.31.1.91 cacomvip.ca.com
9.121.40.93 cai.com
122.103.161.244 canada.karuna-shechen.org
61.99.106.152 castlecops.com
13.243.132.142 castlecrops.com
46.77.172.212 ccslaughterspdx.com
160.60.36.39 cddchiangmai.net
30.55.237.15 cdn.atwola.com
50.132.8.4 center.rising.com.cn
83.33.47.6 centralcommand.com
129.16.167.157 cert.org
68.11.113.65 cfan.com.cn
20.88.139.54 cgi.clamav.net
52.245.246.124 changedetection.com
166.228.110.207 changelog.fr
105.224.56.115 channelpartner.trendmicro.com
57.44.14.104 chickensroamfree.com
90.202.121.174 chkrootkit.org
203.184.242.69 chollian.nprotect.co.kr
74.180.187.233 cisrt.org
94.0.145.223 cit.kookmin.ac.kr
127.158.253.37 clamav.net
241.141.117.120 clamwin.com
111.136.62.28 click.atdmt.com
63.213.89.17 clicks.atdmt.com
96.114.128.87 cloudprotection.pandasecurity.com
210.97.248.170 clubic.com
149.92.193.146 cmmings.cn
101.169.220.135 cn.mcafee.com
133.70.3.137 cn.sophos.com
247.53.123.32 cn.trendmicro.com
118.49.69.196 codehard.wordpress.com
138.125.95.185 cohartuk.com
171.27.134.255 commentcamarche.net
28.9.67.82 community.thaiware.com
155.5.12.58 comodo.com
107.81.226.48 company.drweb.com
140.239.78.50 company.hauri.co.kr
254.154.198.201 company.hauri.net
192.217.143.109 computing.net
144.38.102.98 comunidad.wilkinsonpc.com.co
177.195.209.168 configurarequipos.com
35.110.73.251 coresecurity.com
162.173.18.159 cou85.com
182.250.45.148 cowsmo.com
214.151.84.218 cpsecure.com
72.66.204.113 csc.rising.com.cn
199.130.150.21 cureit.ru
151.206.176.10 customer.symantec.com
252.108.215.80 customers.drweb.com
41.22.80.163 cutlines.org
236.86.25.71 cwsandbox.org
188.162.51.61 cybercrime.pandasecurity.com
221.64.91.131 cyberdefender.com
79.235.23.26 cybertechhelp.com
17.42.156.190 daboweb.com
225.119.183.179 daniloff.net
2.20.34.249 daniweb.com
116.191.154.76 darkclockers.com
175.186.32.172 dazhizhu.cn
195.7.246.161 de.bitdefender.com
227.96.97.231 de.mcafee.com
17.79.217.58 de.trendmicro.com
212.75.163.34 deckard.geekstogo.com
164.219.189.23 deerfield.com
197.53.228.25 defalcos.com
54.35.93.176 definitions.symantec.com
249.31.38.84 dell.symantec.com
201.175.64.74 demos.eset.es
234.9.104.144 descargas.eset.es
92.248.224.227 dev.depeuter.org
218.243.169.203 developmentdrums.org
238.64.196.192 dialognauka.ru
15.221.235.194 diamondcs.com.au
61.204.99.89 dicasweb.com.br
0.199.45.253 discussions.virtualdr.com
208.20.71.242 disk-encryption.comodo.com
240.177.178.56 dl.360safe.com
98.160.42.139 dl1.antivir-pe.com
37.156.244.47 dl1.antivir-pe.de
245.232.202.36 dl1.antivir.de
22.134.53.106 dl1.avgate.net
135.116.174.1 dl10.freeav.net
6.112.119.165 dl2.antivir-pe.com
26.188.77.155 dl2.antivir-pe.de
59.90.185.225 dl2.antivir.de
173.73.49.52 dl2.avgate.net
43.68.250.216 dl3.antivir-pe.de
251.145.21.205 dl3.antivir.de
28.46.60.19 dl3.avgate.net
142.29.180.102 dl4.antivir-pe.com
81.24.126.78 dl4.antivir-pe.de
33.101.152.67 dl4.antivir.de
65.2.191.69 dl4.avgate.net
179.241.55.220 dl5.avgate.net
50.237.1.128 dl6.avgate.net
70.57.27.117 dl7.avgate.net
103.215.66.187 dl8.avgate.net
148.129.187.202 dl8.freeav.net
19.125.132.179 dl9.avgate.net
227.201.90.168 dl9.freeav.net
4.103.198.170 dnl-cd1.kaspersky-labs.com
118.18.62.65 dnl-cd10.kaspersky-labs.com
56.81.7.229 dnl-cd11.kaspersky-labs.com
8.158.222.218 dnl-cd12.kaspersky-labs.com
41.59.73.32 dnl-cd13.kaspersky-labs.com
155.230.193.115 dnl-cd2.kaspersky-labs.com
26.37.139.23 dnl-cd3.kaspersky-labs.com
46.114.165.12 dnl-cd4.kaspersky-labs.com
78.15.204.82 dnl-cd5.kaspersky-labs.com
192.186.68.233 dnl-cd6.kaspersky-labs.com
63.250.14.141 dnl-cd7.kaspersky-labs.com
15.70.40.130 dnl-cd8.kaspersky-labs.com
116.228.79.200 dnl-cd9.kaspersky-labs.com
161.142.200.27 dnl-cn1.kaspersky-labs.com
100.206.145.192 dnl-cn10.kaspersky-labs.com
52.26.171.181 dnl-cn11.kaspersky-labs.com
85.184.211.251 dnl-cn12.kaspersky-labs.com
199.99.143.146 dnl-cn13.kaspersky-labs.com
137.162.20.54 dnl-cn14.kaspersky-labs.com
89.239.47.43 dnl-cn15.kaspersky-labs.com
122.140.154.113 dnl-cn2.kaspersky-labs.com
236.55.18.196 dnl-cn3.kaspersky-labs.com
107.118.220.104 dnl-cn4.kaspersky-labs.com
127.195.178.93 dnl-cn5.kaspersky-labs.com
159.28.29.163 dnl-cn6.kaspersky-labs.com
205.11.149.246 dnl-cn7.kaspersky-labs.com
144.7.95.222 dnl-cn8.kaspersky-labs.com
96.151.121.211 dnl-cn9.kaspersky-labs.com
129.241.160.213 dnl-eu1.kaspersky-labs.com
242.223.25.108 dnl-eu10.kaspersky-labs.com
181.219.226.17 dnl-eu11.kaspersky-labs.com
133.107.252.6 dnl-eu12.kaspersky-labs.com
166.197.36.76 dnl-eu13.kaspersky-labs.com
24.180.156.159 dnl-eu14.kaspersky-labs.com
150.175.101.135 dnl-eu15.kaspersky-labs.com
170.252.128.124 dnl-eu2.kaspersky-labs.com
203.153.167.126 dnl-eu3.kaspersky-labs.com
249.136.31.21 dnl-eu4.kaspersky-labs.com
188.131.233.185 dnl-eu5.kaspersky-labs.com
140.208.3.174 dnl-eu6.kaspersky-labs.com
172.109.110.244 dnl-eu7.kaspersky-labs.com
30.92.230.71 dnl-eu8.kaspersky-labs.com
225.88.176.235 dnl-eu9.kaspersky-labs.com
177.164.134.224 dnl-jp1.kaspersky-labs.com
210.66.241.38 dnl-jp10.kaspersky-labs.com
67.48.106.189 dnl-jp11.kaspersky-labs.com
194.44.51.98 dnl-jp12.kaspersky-labs.com
214.120.9.87 dnl-jp13.kaspersky-labs.com
247.22.117.157 dnl-jp14.kaspersky-labs.com
105.5.237.240 dnl-jp15.kaspersky-labs.com
231.0.182.148 dnl-jp2.kaspersky-labs.com
183.77.209.137 dnl-jp3.kaspersky-labs.com
216.234.248.207 dnl-jp4.kaspersky-labs.com
74.217.112.34 dnl-jp5.kaspersky-labs.com
13.212.58.10 dnl-jp6.kaspersky-labs.com
221.33.84.255 dnl-jp7.kaspersky-labs.com
253.190.123.1 dnl-jp8.kaspersky-labs.com
111.173.243.152 dnl-jp9.kaspersky-labs.com
238.169.189.60 dnl-kr1.kaspersky-labs.com
2.245.215.49 dnl-kr10.kaspersky-labs.com
35.147.254.119 dnl-kr11.kaspersky-labs.com
148.129.187.202 dnl-kr12.kaspersky-labs.com
19.125.132.179 dnl-kr13.kaspersky-labs.com
227.201.90.168 dnl-kr15.kaspersky-labs.com
4.103.198.170 dnl-kr2.kaspersky-labs.com
118.18.62.65 dnl-kr3.kaspersky-labs.com
56.81.7.229 dnl-kr4.kaspersky-labs.com
8.158.222.218 dnl-kr5.kaspersky-labs.com
41.59.73.32 dnl-kr6.kaspersky-labs.com
155.230.193.115 dnl-kr7.kaspersky-labs.com
26.37.139.23 dnl-kr8.kaspersky-labs.com
46.114.165.12 dnl-kr9.kaspersky-labs.com
78.15.204.82 dnl-ru1.kaspersky-labs.com
192.186.68.233 dnl-ru10.kaspersky-labs.com
63.250.14.141 dnl-ru11.kaspersky-labs.com
15.70.40.130 dnl-ru12.kaspersky-labs.com
48.160.11.132 dnl-ru13.kaspersky-labs.com
93.74.132.215 dnl-ru14.kaspersky-labs.com
32.138.77.124 dnl-ru15.kaspersky-labs.com
240.214.103.113 dnl-ru2.kaspersky-labs.com
17.116.143.183 dnl-ru3.kaspersky-labs.com
131.31.75.78 dnl-ru4.kaspersky-labs.com
69.94.208.242 dnl-ru5.kaspersky-labs.com
21.171.235.231 dnl-ru6.kaspersky-labs.com
54.72.86.45 dnl-ru7.kaspersky-labs.com
168.243.206.128 dnl-ru8.kaspersky-labs.com
39.50.152.36 dnl-ru9.kaspersky-labs.com
59.127.110.25 dnl-us1.kaspersky-labs.com
91.216.217.95 dnl-us10.kaspersky-labs.com
137.199.81.178 dnl-us11.kaspersky-labs.com
76.195.27.154 dnl-us12.kaspersky-labs.com
28.83.53.143 dnl-us13.kaspersky-labs.com
61.173.92.145 dnl-us14.kaspersky-labs.com
174.155.213.40 dnl-us15.kaspersky-labs.com
113.151.158.205 dnl-us2.kaspersky-labs.com
65.39.184.194 dnl-us3.kaspersky-labs.com
98.129.224.8 dnl-us4.kaspersky-labs.com
212.112.88.91 dnl-us5.kaspersky-labs.com
83.107.33.67 dnl-us6.kaspersky-labs.com
102.184.60.56 dnl-us7.kaspersky-labs.com
135.85.99.58 dnl-us8.kaspersky-labs.com
181.68.219.209 dnl-us9.kaspersky-labs.com
120.63.165.117 dougknox.com
72.140.191.106 down.360safe.cn
104.41.42.176 down.360safe.com
218.24.162.3 download.avg.com
157.20.108.167 download.bleepingcomputer.com
109.96.66.156 download.com
142.254.173.226 download.com.vn
255.236.38.121 download.eset.com
126.232.239.30 download.f-secure.com
146.52.197.19 download.mcafee.com
179.210.49.89 download.microsoft.com
37.193.169.172 download.microsoft.comguru0.grisoft.cz
164.188.114.80 download.nai.com
115.9.141.69 download.norman.no
148.166.180.139 download.rising.com.cn
6.149.44.222 download.softpedia.com
201.144.246.198 download.sysinternals.com
153.221.16.187 download0.avast.com
185.122.55.189 download1.avast.com
43.105.175.84 download1.emsisoft.com
170.101.121.248 download1.quickheal.com
190.177.147.237 download10.quickheal.com
223.79.186.51 download100.avast.com
80.61.119.134 download1us.softpedia.com
207.57.64.111 download2.avast.com
159.133.22.100 download2.quickheal.com
192.35.130.102 download200.avast.com
50.206.250.253 download201.avast.com
244.13.195.161 download202.avast.com
196.90.154.82 download203.avast.com
161.179.193.152 download204.avast.com
19.94.57.235 download205.avast.com
146.157.3.143 download206.avast.com
166.234.29.132 download207.avast.com
198.135.68.202 download208.avast.com
56.50.188.97 download209.avast.com
183.114.134.5 download210.avast.com
135.190.160.250 download211.avast.com
236.92.199.64 download212.avast.com
25.6.64.147 download213.avast.com
220.70.9.56 download214.avast.com
172.146.35.45 download3.avast.com
205.48.75.115 download3.quickheal.com
63.219.7.10 download4.avast.com
2.26.140.174 download4.emsisoft.com
209.103.167.163 download4.quickheal.com
242.4.18.233 download5.avast.com
100.175.138.60 download5.emsisoft.com
227.238.84.224 download5.quickheal.com
247.59.42.213 download501.avast.com
23.149.149.27 download502.avast.com
69.131.13.110 download503.avast.com
8.127.215.86 download504.avast.com
216.15.241.75 download505.avast.com
249.105.24.77 download511.avast.com
106.87.145.228 download512.avast.com
45.83.90.137 download513.avast.com
253.227.116.126 download514.avast.com
30.61.156.196 download515.avast.com
144.44.20.23 download516.avast.com
15.39.221.255 download535.avast.com
34.116.248.244 download6.avast.com
67.17.31.246 download6.quickheal.com
113.0.151.141 download600.avast.com
52.251.97.49 download601.avast.com
4.72.123.38 download602.avast.com
36.229.230.108 download603.avast.com
150.212.94.191 download604.avast.com
89.208.40.99 download605.avast.com
41.28.254.88 download606.avast.com
74.186.105.158 download607.avast.com
187.168.226.53 download608.avast.com
58.164.171.218 download609.avast.com
78.240.129.207 download617.avast.com
111.142.237.21 download618.avast.com
225.125.101.104 download619.avast.com
96.120.46.12 download620.avast.com
47.197.73.1 download621.avast.com
80.98.112.71 download622.avast.com
194.81.232.154 download623.avast.com
133.76.178.130 download624.avast.com
85.153.204.119 download625.avast.com
117.54.243.121 download626.avast.com
231.37.107.16 download627.avast.com
34.221.241.112 download628.avast.com
54.41.11.101 download629.avast.com
87.199.50.171 download630.avast.com
200.181.239.254 download631.avast.com
71.177.184.231 download632.avast.com
23.253.142.220 download633.avast.com
56.155.250.222 download634.avast.com
170.70.114.117 download635.avast.com
109.133.59.25 download636.avast.com
60.210.18.14 download637.avast.com
93.111.125.84 download638.avast.com
207.26.245.167 download639.avast.com
78.89.191.75 download640.avast.com
98.166.217.64 download641.avast.com
130.68.0.134 download642.avast.com
244.238.120.29 download643.avast.com
115.46.66.193 download644.avast.com
67.122.92.182 download645.avast.com
168.24.131.252 download646.avast.com
213.194.252.79 download647.avast.com
152.2.197.244 download648.avast.com
104.78.223.233 download649.avast.com
137.236.7.47 download650.avast.com
251.151.195.198 download651.avast.com
190.214.72.106 download652.avast.com
141.35.99.95 download653.avast.com
174.192.206.165 download654.avast.com
32.107.70.248 download655.avast.com
159.170.16.156 download656.avast.com
179.247.230.145 download658.avast.com
211.81.81.215 download659.avast.com
1.63.201.42 download660.avast.com
196.59.147.18 download661.avast.com
148.203.173.7 download662.avast.com
181.37.212.9 download663.avast.com
38.19.77.160 download664.avast.com
233.15.22.69 download665.avast.com
185.159.48.58 download666.avast.com
218.249.88.128 download667.avast.com
76.232.208.211 download668.avast.com
203.227.153.187 download669.avast.com
222.48.180.176 download670.avast.com
255.205.219.178 download671.avast.com
45.188.83.73 download672.avast.com
240.183.29.237 download673.avast.com
192.4.55.226 download674.avast.com
224.162.162.40 download675.avast.com
82.144.26.123 download676.avast.com
21.140.228.31 download677.avast.com
229.216.186.20 download678.avast.com
6.118.37.90 download679.avast.com
119.100.158.241 download680.avast.com
246.96.103.150 download681.avast.com
10.172.61.139 download682.avast.com
43.74.169.209 download683.avast.com
157.57.33.36 download684.avast.com
28.52.234.200 download685.avast.com
235.129.5.189 download686.avast.com
12.30.44.3 download687.avast.com
126.13.164.86 download688.avast.com
65.8.110.62 download689.avast.com
17.85.136.51 download690.avast.com
49.243.175.53 download691.avast.com
163.225.39.204 download692.avast.com
34.221.241.112 download693.avast.com
54.41.11.101 download694.avast.com
87.199.50.171 download695.avast.com
200.181.239.254 download696.avast.com
71.177.184.231 download697.avast.com
23.253.142.220 download698.avast.com
56.155.250.222 download699.avast.com
170.70.114.117 download7.avast.com
109.133.59.25 download7.quickheal.com
60.210.18.14 download700.avast.com
93.111.125.84 download701.avast.com
207.26.245.167 download702.avast.com
78.89.191.75 download703.avast.com
98.166.217.64 download704.avast.com
130.68.0.134 download705.avast.com
244.238.120.29 download706.avast.com
115.46.66.193 download707.avast.com
67.122.92.182 download708.avast.com
168.24.131.252 download709.avast.com
213.194.252.79 download72.avast.com
152.2.197.244 download73.avast.com
104.78.223.233 download74.avast.com
137.236.7.47 download75.avast.com
251.151.195.198 download76.avast.com
190.214.72.106 download77.avast.com
141.35.99.95 download78.avast.com
174.192.206.165 download79.avast.com
32.107.70.248 download8.quickheal.com
159.170.16.156 download80.avast.com
179.247.230.145 download81.avast.com
211.81.81.215 download82.avast.com
1.63.201.42 download83.avast.com
196.59.147.18 download84.avast.com
148.203.173.7 download85.avast.com
181.37.212.9 download9.quickheal.com
38.19.77.160 download900.avast.com
233.15.22.69 download901.avast.com
185.159.48.58 download902.avast.com
218.249.88.128 download903.avast.com
76.232.208.211 download904.avast.com
203.227.153.187 download905.avast.com
222.48.180.176 download906.avast.com
255.205.219.178 download907.avast.com
45.188.83.73 download908.avast.com
172.115.217.169 download909.avast.com
124.192.243.158 download91.avast.com
156.94.94.228 download910.avast.com
14.76.215.55 download911.avast.com
209.72.160.219 download912.avast.com
161.148.118.208 download913.avast.com
194.50.225.22 download914.avast.com
51.32.90.173 download915.avast.com
178.28.35.82 download916.avast.com
198.104.249.71 download917.avast.com
231.6.101.141 download918.avast.com
89.245.221.224 download919.avast.com
216.240.166.132 download92.avast.com
167.61.193.121 download920.avast.com
200.218.232.191 download921.avast.com
58.201.96.18 download922.avast.com
253.196.42.250 download923.avast.com
205.17.68.239 download924.avast.com
237.175.107.241 download925.avast.com
95.157.228.136 download926.avast.com
222.153.173.44 download927.avast.com
242.229.199.33 download928.avast.com
19.131.238.103 download929.avast.com
132.113.171.186 download93.avast.com
3.109.116.163 download930.avast.com
211.185.74.152 download931.avast.com
244.87.182.154 download932.avast.com
102.2.46.49 download933.avast.com
41.65.247.213 download934.avast.com
248.142.206.202 download935.avast.com
25.43.57.16 download936.avast.com
139.214.177.99 download937.avast.com
10.21.123.7 download938.avast.com
30.98.149.252 download939.avast.com
62.0.188.66 download94.avast.com
176.170.53.217 download940.avast.com
47.234.254.125 download941.avast.com
255.54.24.114 download942.avast.com
100.212.63.184 download943.avast.com
145.126.184.11 download944.avast.com
84.190.129.176 download945.avast.com
36.10.155.165 download946.avast.com
69.168.195.235 download947.avast.com
183.83.127.130 download948.avast.com
122.146.4.38 download949.avast.com
73.223.31.27 download95.avast.com
106.124.138.97 download950.avast.com
220.39.2.180 download951.avast.com
91.102.204.88 download952.avast.com
111.179.162.77 download953.avast.com
143.13.13.147 download954.avast.com
189.251.134.230 download955.avast.com
128.247.79.206 download956.avast.com
80.135.105.195 download957.avast.com
113.225.144.197 download958.avast.com
226.207.9.92 download959.avast.com
165.203.210.1 download96.avast.com
117.91.236.246 download960.avast.com
150.181.20.60 download961.avast.com
8.164.140.143 download962.avast.com
135.159.85.119 download963.avast.com
154.236.112.108 download964.avast.com
187.137.151.110 download965.avast.com
233.120.15.5 download966.avast.com
172.115.217.169 download967.avast.com
124.192.243.158 download968.avast.com
156.94.94.228 download969.avast.com
14.76.215.55 download97.avast.com
209.72.160.219 download970.avast.com
161.148.118.208 download971.avast.com
194.50.225.22 download972.avast.com
51.32.90.173 download973.avast.com
178.28.35.82 download974.avast.com
198.104.249.71 download975.avast.com
231.6.101.141 download976.avast.com
89.245.221.224 download977.avast.com
216.240.166.132 download978.avast.com
167.61.193.121 download979.avast.com
200.218.232.191 download98.avast.com
58.201.96.18 download980.avast.com
253.196.42.250 download99.avast.com
205.17.68.239 downloads-eu1.kaspersky-labs.com
237.175.107.241 downloads-eu2.kaspersky-labs.com
95.157.228.136 downloads-eu3.kaspersky-labs.com
222.153.173.44 downloads-eu4.kaspersky-labs.com
242.229.199.33 downloads-us1.kaspersky-labs.com
19.131.238.103 downloads-us2.kaspersky-labs.com
132.113.171.186 downloads-us3.kaspersky-labs.com
3.109.116.163 downloads-us4.kaspersky-labs.com
211.185.74.152 downloads.andymanchesta.com
244.87.182.154 downloads.malwarebytes.org
102.2.46.49 downloads.microsoft.com
41.65.247.213 downloads.My-eTrust.com
248.142.206.202 downloads1.kaspersky-labs.com
25.43.57.16 downloads2.kaspersky-labs.com
139.214.177.99 downloads3.kaspersky-labs.com
10.21.123.7 downloads4.kaspersky-labs.com
30.98.149.252 downloads5.kaspersky-labs.com
62.0.188.66 dr-web-cureit.softonic.com
176.170.53.217 drsolomon.com
47.234.254.125 drweb-inside.com
255.54.24.114 drweb.com
100.212.63.184 drweb.com.es
145.126.184.11 drweb.net
84.190.129.176 drwebinside.com
36.10.155.165 dswlab.com
69.168.195.235 duba.net
183.83.127.130 ealaddin.net
122.146.4.38 ealaddin.orgeshop.aladdin.com
73.223.31.27 easy-vpn.comodo.com
106.124.138.97 edm.symantec.com
220.39.2.180 education.symantec.com
91.102.204.88 eeload.com
111.179.162.77 eeye.com
143.13.13.147 eicar.org
189.251.134.230 elblogdemanu.com
128.247.79.206 elitepvpers.de
80.135.105.195 emea.trendmicro.com
113.225.144.197 emsisoft.com
226.207.9.92 emsisoft.de
165.203.210.1 encarta.msn.com
117.91.236.246 engine.awaps.net
150.181.20.60 enterprisesecur.symantec.com
8.164.140.143 eos.eset.es
135.159.85.119 eradicatespyware.net
154.236.112.108 es.answers.yahoo.com
187.137.151.110 es.kioskea.net
233.120.15.5 es.mcafee.com
231.175.20.229 es.trendmicro.com
183.252.47.218 es.wasalive.com
216.153.154.32 esafe.com
74.136.18.115 esecurity.livecall.co.kr
13.131.219.23 eset-la.com
220.208.178.12 eset.com
253.109.29.82 eset.es
111.92.149.233 eset.sk
238.88.95.141 esp.sophos.com
2.164.53.130 espanol.answers.yahoo.com
35.66.160.200 espanol.dir.groups.yahoo.com
148.48.25.27 espanol.groups.yahoo.com
19.44.226.191 esupport.trendmicro.com
227.120.252.181 et.symantec.com
4.22.36.251 etrr.co.uk
118.4.156.78 eugrantsadvisor.cz
56.0.101.54 eugrantsadvisor.de
8.77.128.43 eval.symantec.com
41.234.167.45 ewido.net
155.217.31.196 exchangeyourcareer.net
26.212.232.104 experts-exchange.com
45.33.3.93 f-prot.com
78.190.42.163 f-secure.com
192.173.230.246 f-secure.frf-secure.hk
63.169.176.222 f-secure.nlfsecure.com
15.245.134.211 fastclick.net
48.147.241.213 feedage.com
161.61.106.108 feeds.sophos.com
100.125.51.16 feeds.trendmicro.com
52.201.9.6 file.ikaka.cn
85.103.117.76 file.ikaka.com
199.17.237.159 file.net
69.81.182.67 files.avast.com
89.158.209.56 files.filefont.com
122.59.248.126 files.trendmicro-europe.com
236.230.112.21 filseclab.com
107.37.57.185 final4ever.com
58.114.84.174 finjan.com
159.15.123.244 firewall.sunbeltsoftware.com
205.186.243.71 firewallguide.com
144.250.189.235 fixmyim.com
96.70.215.224 foro.ethek.com
129.228.254.38 foros.toxico-pc.com
242.142.187.189 foros.zonavirus.com
181.206.64.97 forospanish.com
133.26.90.86 forospyware.com
166.184.198.157 forospyware.es
24.98.62.240 fortiguardcenter.com
150.162.7.148 fortihero.com
170.239.222.137 fortilog.com
203.72.73.207 fortinet.co.at
249.55.193.34 fortinet.com
188.50.138.10 fortiprotect.com
139.195.165.255 fortiwifi.com
172.28.204.1 forum.clubedohardware.com.br
30.11.68.152 forum.emsisoft.com
225.7.14.60 forum.hardware.fr
177.151.40.49 forum.hijackthis.de
210.241.79.119 forum.ikaka.com
67.223.200.202 forum.jiangmin.com
194.219.145.178 forum.kaspersky.com
214.39.171.167 forum.malekal.com
247.197.211.170 forum.piriform.com
37.179.75.65 forum.securitycadets.com
231.175.20.229 forum.sysinternals.com
183.252.47.218 forum.telecharger.01net.com
216.153.154.32 forum.tweaks.com
74.136.18.115 forum.zazana.com
13.131.219.23 forums.cnet.com
220.208.178.12 forums.comodo.com
253.109.29.82 forums.devshed.com
111.92.149.233 forums.maddoktor2.com
238.88.95.141 forums.majorgeeks.com
2.164.53.130 forums.techguy.org
35.66.160.132 forums.whatthetech.com
80.236.213.215 fr.bitdefender.com
207.232.158.123 fr.drweb.com
159.52.184.113 fr.mcafee.com
192.210.224.183 fr.trendmicro.com
50.192.88.10 fr1.drweb.com
244.188.33.242 fr2.drweb.com
196.9.60.231 fr3.drweb.com
229.166.99.233 fr4.drweb.com
87.149.219.128 fr5.drweb.com
214.144.164.36 fr6.drweb.com
233.221.191.25 fr7.drweb.com
10.122.230.95 fractus.mat.uson.mx
124.105.162.178 free-av.com
251.101.108.154 free-av.net
203.177.66.143 free.antivirus.com
236.79.173.145 free.avg.com
93.249.38.40 free.drweb.com
32.57.239.204 free.grisoft.com
240.133.197.194 free.grisoft.cz
17.35.49.8 free.pandasecurity.com
131.205.169.91 free.prevx.com
1.13.114.255 free.tinypicbox.com
21.90.141.244 freeav.com
54.247.180.58 freeav.net
168.162.44.209 freespywareremoval.info
39.225.245.117 frisk-software.com
247.46.16.106 fsc.norman.com
91.203.55.176 fsecure.nlwebyard.com
137.118.175.3 ftp.avp.com
76.182.121.167 ftp.bitdefender.com
28.2.147.156 ftp.ca.co
61.160.186.226 ftp.ca.com
174.74.119.121 ftp.customer.symantec.com
113.138.252.29 ftp.dispatch.mcafee.com
65.214.22.19 ftp.download.mcafee.com
98.116.130.89 ftp.downloads-eu1.kaspersky-labs.com
212.30.250.172 ftp.downloads-eu2.kaspersky-labs.com
82.94.195.80 ftp.downloads-eu3.kaspersky-labs.com
102.171.154.69 ftp.downloads-eu4.kaspersky-labs.com
135.4.5.139 ftp.downloads-us1.kaspersky-labs.com
181.243.125.222 ftp.downloads-us2.kaspersky-labs.com
120.238.70.198 ftp.downloads-us3.kaspersky-labs.com
71.127.97.187 ftp.downloads-us4.kaspersky-labs.com
104.216.136.189 ftp.downloads1.kaspersky-labs.com
218.199.0.84 ftp.downloads2.kaspersky-labs.com
157.195.202.248 ftp.downloads3.kaspersky-labs.com
109.83.228.237 ftp.downloads4.kaspersky-labs.com
142.173.11.51 ftp.drweb.com
255.155.132.134 ftp.esafe.com
126.151.77.110 ftp.europe.f-secure.com
146.227.103.100 ftp.f-prot.com
179.129.143.102 ftp.f-secure.com
225.111.7.253 ftp.grisoft.com
163.107.208.161 ftp.kaspersky-labs.com
115.184.235.150 ftp.kaspersky.com
148.85.86.220 ftp.kasperskylab.ru
6.68.206.47 ftp.liveupdate.symantec.com
201.63.151.211 ftp.liveupdate.symantecliveupdate.com
85.72.42.132 ftp.mast.mcafee.com
117.229.149.202 ftp.mcafee.com
231.212.13.97 ftp.microworldsystems.com
102.208.215.5 ftp.my-etrust.com
122.28.173.250 ftp.nai.com
155.186.24.64 ftp.networkassociates.com
12.168.145.147 ftp.norton.com
139.164.90.55 ftp.rads.mcafee.com
91.240.116.45 ftp.sandbox.norman.com
124.142.156.115 ftp.secure.nai.com
238.124.20.198 ftp.securityresponse.symantec.com
176.120.221.174 ftp.sophos.com
128.197.248.163 ftp.symantec.com
161.98.31.165 ftp.symantecliveupdate.com
19.81.151.60 ftp.symatec.com
146.76.96.224 ftp.trendmicro.com
166.153.123.213 ftp.uk.trendmicro-europe.com
198.54.162.27 ftp.update.symantec.com
56.37.94.110 ftp.updates.symantec.com
183.33.40.86 ftp.updates1.kaspersky-labs.com
135.109.254.75 ftp.updates2.kaspersky-labs.com
168.11.105.77 ftp.updates3.kaspersky-labs.com
25.181.226.228 ftp.updates4.kaspersky-labs.com
220.245.171.136 ftp.us.mcafee.com
172.65.129.126 ftp.viruslist.com
205.223.237.196 funkytoad.com
63.137.101.23 futurenow.bitdefender.com
189.201.46.187 fw.rising.com.cn
209.22.73.176 fx.dk
242.179.112.246 gangbang.mytijn.org
100.94.232.141 gdata.de
227.157.177.49 gdata.es
179.234.204.38 gecadsoftware.com
23.135.243.108 geekstogo.com
69.50.107.191 global.ahnlab.com
8.114.53.99 global.jiangmin.com
216.190.79.88 global.nprotect.com
249.92.118.158 go.mcafee.com
106.6.51.53 go.microsoft.com
45.70.184.217 go.rising.com.cn
253.146.210.207 go.sunbeltsoftware.com
30.48.62.21 go.symantec.com
144.218.182.104 go.trendmicro.com
14.26.127.12 greatis.com
34.103.86.1 grisoft.com
67.192.193.71 grisoft.cz
113.175.57.154 grv.microsoft.com
52.170.2.130 guiadohardware.net
4.59.29.119 guru.avg.com
36.148.68.121 guru1.grisoft.cz
150.131.188.16 guru2.grisoft.cz
21.59.66.112 guru3.grisoft.cz
229.203.92.101 guru4.grisoft.cz
6.37.131.171 guru5.grisoft.cz
119.19.252.254 gwava.nl
246.15.197.230 hacksoft.com.pe
10.91.223.220 hacksoft.pe
43.249.7.222 halmapr.com
89.232.127.117 hauri.co.kr
27.227.72.25 hauri.net
235.48.99.14 haurijapan.com
12.205.206.84 help.rising.com.cn
126.188.70.167 hi.baidu.com
65.183.15.75 hijackthis.de
17.4.230.64 hijackthis.download3000.com
49.161.81.134 hishomeforchildren.com
163.144.201.29 hjt-data.trend-braintree.com
34.140.147.193 hjt.networktechs.com
54.216.105.182 home.mcafee.com
87.118.212.252 hostedmailsecur.symantec.com
200.100.77.79 hotshare.net
71.96.22.243 housecall.com
23.172.48.233 housecall.trendmicro.com
56.74.88.47 housecall60.trendmicro.com
170.57.208.130 housecall65.trendmicro.com
108.52.153.106 howsafeismypc.com
60.129.180.95 huaifai.go.th
93.30.219.97 i-vault.comodo.com
207.13.83.248 iavs.cz
78.8.28.156 ibusca.me
98.85.55.145 idauthority.com
130.242.94.215 ids.kaspersky-labs.com
244.225.214.230 ieupdate.gdata.de
47.153.160.206 ieupdate1.gdata.de
255.229.118.195 ieupdate2.gdata.de
32.131.225.197 ieupdate3.gdata.de
145.45.90.92 ieupdate4.gdata.de
84.109.35.0 ieupdate5.gdata.de
36.185.249.246 ieupdate6.gdata.de
69.87.101.60 ikaka.cn
183.2.221.143 ikaka.com
53.65.166.51 ikarus.at
73.142.193.40 ikarus.net
106.43.232.110 ilove.tigolbittys.info
220.214.96.5 images.kaspersky.com
91.21.42.169 in.answers.yahoo.com
43.98.68.158 incodesolutions.com
143.255.107.228 info.drweb.com
189.170.227.55 info.prevx.com
60.166.105.151 infos-du-net.com
12.242.131.140 infosecpodcast.com
45.144.170.210 infospyware.com
158.58.103.105 inicioid.com
97.122.236.13 iniciorapido.info
49.198.6.3 inline-software.de
82.100.114.73 internetsecurity.comodo.com
196.15.234.156 intranet.cidiroax.ipn.mx
66.78.179.64 investor.symantec.com
86.155.138.53 irc.bigshitsandwich.org
119.244.245.123 irc.metraiciono.com
165.227.109.206 iseclab.org
104.222.55.182 isotopecomics.com
56.111.81.171 iss.net
88.200.120.173 it.answers.yahoo.com
202.183.240.68 it.bitdefender.com
141.179.186.232 it.mcafee.com
93.67.212.221 it.trendmicro.com
126.157.251.35 itw.trendmicro.com
239.139.116.118 ixomodels.com
110.135.61.94 ixostore.ixomodels.com
130.211.87.84 javacoolsoftware.com
163.113.127.86 jetico.com
209.96.247.237 jiangmin.com
147.91.192.145 jiangmin.com.cn
99.168.219.134 jobs.bitdefender.com
132.69.70.204 jotti.org
246.52.190.31 jp.mcafee.com
185.47.136.195 jp.trendmicro.com
69.56.26.116 justfacebook.net
101.213.133.186 k-otik.com
215.196.253.81 k7computing.com
86.192.199.245 kaba.360.cn
106.12.157.234 kaba.360.com
139.170.8.48 karuna-shechen.org
252.152.129.131 kaspersky-fr.com
123.148.74.40 kaspersky-labs.com
75.224.100.29 kaspersky.co.jp
108.126.140.99 kaspersky.co.uk
222.109.4.182 kaspersky.com
160.104.205.158 kaspersky.com.cn
112.181.232.147 kaspersky.dk
145.82.15.149 kaspersky.es
3.65.135.44 kaspersky.gr
130.60.81.208 kaspersky.pl
150.137.107.197 kaspersky.ru
182.38.146.11 kaspersky.se
40.21.78.94 kasperskylab.co.kr
167.17.24.70 kasperskylab.nl
119.93.238.59 kav.ru
152.251.89.61 kav.zonelabs.com
9.165.210.212 kb.bitdefender.com
204.229.155.121 kb.bitdefender.de
156.49.113.110 kb.bitdefender.us
189.207.221.180 kerio.com
47.122.17.195 kimzimmer.net
106.117.218.103 kioskea.net
125.194.245.92 kpfans.com
158.95.28.162 kr.ahnlab.com
16.10.148.57 kr.sophos.com
143.73.94.221 krupunmai.com
95.150.120.210 kvup.jiangmin.com
195.51.159.24 kztechs.com
241.222.23.107 l33t.shadow-mods.net
180.30.225.15 la.trendmicro.com
132.106.251.4 ladooscuro.es
165.8.34.74 laneros.com
22.178.223.225 latam.kaspersky.com
217.242.100.134 latin.bitdefender.com
169.62.126.123 lavasoft.com
202.220.234.193 lavasoft.nu
60.135.98.20 lavasoftusa.com
187.198.43.184 lexikon.ikarus.at
206.19.2.173 license.drweb.com
239.108.109.243 linhadefensiva.org
29.91.229.70 linhadefensiva.uol.com.br
224.86.175.46 linux.bitdefender.com
176.231.201.35 lists.clamav.net
208.64.240.37 liutilities.com
66.47.104.188 live.sunbeltsoftware.com
5.43.238.28 liveprotect.net
145.119.8.17 liveupdate.symantec.com
178.209.47.87 liveupdate.symantec.d4p.net
35.191.168.170 liveupdate.symantecliveupdate.com
162.187.113.147 looknstop.com
182.7.139.136 lovings.technigoyous.net
215.165.179.138 lurker.clamav.net
5.148.43.33 mailcenter.rising.com
200.143.244.197 mailcenter.rising.com.cn
151.220.15.186 majorgeeks.com
184.121.122.0 mall.hauri.co.kr
42.104.242.83 malwarebytes.org
237.99.188.247 malwarecity.com
189.176.146.236 malwarecity.netmalwarecity.org
221.78.253.50 malwaredomainlist.com
79.60.117.201 malwarepedia.com
206.56.63.109 malwareremoval.com
226.132.21.98 malwarescan.emsisoft.com
3.34.128.168 malwarescan.emsisoft.de
116.16.249.251 malwarescan.emsisoft.es
243.12.194.160 mamutu.com
195.88.220.149 manuelruvalcaba.com
228.246.4.219 marian.symantec.com
86.229.124.46 mast.mcafee.com
25.224.69.22 mcafee-at-home.com
232.45.96.11 mcafee.com
9.202.135.13 mcafeeb2b.com
123.185.255.164 mcafeefans.com
250.180.201.72 mcafeeretail.com
14.1.227.61 mcaffee.com
46.159.10.131 me.kaspersky.com
160.141.198.214 media.fastclick.net
31.137.76.122 megasecurity.org
171.145.34.111 merijn.org
204.47.141.113 metascan-online.com
61.217.6.8 microsoft.com
0.25.207.173 microsoft.fr
208.101.165.162 midescargas.com
241.3.17.232 mirror02.gdata.de
99.174.137.59 misec.net
226.237.82.223 mmsk.cn
245.58.109.212 moneybookers.com
22.215.148.26 moosoft.com
136.130.12.177 mop.pandasecurity.com
7.193.214.85 mostz.com
215.14.240.74 mozilla-hispano.org
59.172.23.144 msdn.microsoft.com
105.86.144.227 msk.drweb.com
44.150.89.135 msk1.drweb.com
252.226.115.124 msk2.drweb.com
29.128.154.194 msk3.drweb.com
142.42.87.89 msk4.drweb.com
81.106.220.254 msk5.drweb.com
33.182.246.243 msk6.drweb.com
66.84.98.57 msk7.drweb.com
180.255.218.140 msncleaner.softonic.com
51.62.163.48 msnfix.changelog.fr
70.139.122.37 msnvirusremoval.com
103.228.229.107 msr.mcafee.com
149.211.93.190 mvps.org
20.138.227.98 mx.answers.yahoo.com
228.27.253.87 mx.mcafee.com
4.117.36.89 mxttchina.com
118.99.157.240 my-etrust.com
57.95.102.148 my.drweb.com
9.239.128.137 mygeekside.com
42.73.167.207 nabble.com
155.55.32.34 nai.com
26.51.233.11 natsko.com
46.127.3.0 naturesimages.net
79.29.43.2 net-security.org
125.12.163.153 network.drweb.com
64.7.108.61 networkassociates.com
15.84.135.50 networkassociates.nai.com
48.241.242.120 networkworld.com
162.224.106.203 neunet.orgnews.bitdefender.com
101.219.52.111 new-beta.drweb.com
53.40.10.100 new-company.drweb.com
85.198.117.170 new-estore.drweb.com
199.180.238.65 new-forum.drweb.com
70.176.183.161 new-partners.drweb.com
22.184.73.150 new-solutions.drweb.com
55.86.180.220 new-support.drweb.com
168.68.45.48 new-www.drweb.com
39.64.246.212 new.taringa.net
247.140.16.201 news.drweb.com
24.42.56.15 newsletters.trendmicro.com
138.25.176.98 niueight.norman.no
77.20.121.74 niufive.norman.no
28.97.148.63 niufour.norman.no
61.254.187.65 niunine.norman.no
175.237.51.216 niuone.norman.no
46.232.253.124 niuseven.norman.no
66.53.23.113 niusix.norman.no
98.211.62.183 niuthree.norman.no
212.193.251.10 niutwo.norman.no
83.189.196.242 nl.bitdefender.com
35.9.154.231 noadware.net
68.167.5.233 nod32.co.uk
181.81.126.129 nod32.com
52.77.3.225 nod32.datsec.de
4.153.217.214 nod32.lu
37.55.69.28 nod32.ru
151.226.189.111 norman.com
22.33.134.19 norton.com
41.110.161.8 notifier.antivir-pe.de
74.11.200.78 novirusthanks.org
188.182.64.229 nprobeta.norman.com
59.245.10.137 nprotect.com
11.66.36.126 nprotect.net
111.224.75.196 nprotect.seoul.go.kr
157.138.196.23 nsclean.com
96.202.141.187 ntfaq.co.kr
48.22.167.176 obscgi.mcafee.com
81.180.206.246 oem.sunbeltsoftware.com
195.94.139.142 offensivecomputing.net
133.158.16.50 office.microsoft.com
85.234.42.39 oldtimer.geekstogo.com
118.136.150.109 one.tinypicbox.com
232.51.14.192 onecare.live.com
103.114.215.100 online-backup.comodo.com
122.191.174.89 online.jiangmin.com
155.24.25.159 online.rising.com.cn
201.7.145.242 onlinecheck.emsisoft.com
140.2.91.218 onlinecheck.emsisoft.de
92.147.117.207 onlinecheck.emsisoft.net
124.237.156.209 onlinecheck.emsisoft.org
170.151.209.36 onlinescan.avast.com
109.147.154.200 openantivirus.org
61.35.180.189 outpost.pl
94.125.219.3 ozzu.com
208.107.84.87 p3dev.taringa.net
78.103.29.63 pandalabs.pandasecurity.com
98.180.55.52 pandasecurity.com
131.81.95.54 pandasoftware.com
177.64.215.205 pandasoftware.es
116.59.160.113 pantip.com
67.136.187.102 pcav.cn
100.37.38.172 pccreg.antivirus.com
214.20.158.255 pccreg.trendmicro.com
153.15.104.163 pcentraide.com
105.92.62.152 pcguide.com
137.250.169.222 pchell.com
251.232.34.117 pcinternetpatrol.com
122.228.235.25 pcsupportadvisor.com
142.48.193.14 pctools.com
175.206.44.84 pda.drweb.com
33.188.165.168 pedidos.protegerse.com
159.184.110.76 personal.psu.edu
111.4.136.65 personalfirewall.comodo.com
144.162.176.135 pestpatrol.com
2.145.40.218 pg.hauri.net
197.140.241.194 phx.corporate-ir.net
80.149.200.115 pineleafboys.com
113.50.239.117 podcasts.sophos.com
227.33.103.12 pogonyuto.forospanish.com
98.28.49.176 precisesecurity.com
118.105.75.165 prevx.com
150.7.114.235 privacy.microsoft.com
8.245.47.62 products.drweb.com
135.241.248.38 promotions.drweb.com
87.61.206.27 psnw.com
120.219.57.29 pspl.com
234.133.178.181 pvtc.org
172.197.123.89 qqjkw.net
124.18.81.78 quickheal.co.in
157.175.189.148 quickheal.com
15.90.53.231 radius.turvamies.com
142.153.254.139 rads.mcafee.com
161.230.25.128 ravantivirus.com
194.131.64.198 raymond.cc
52.46.184.93 reg-int.nod32-es.com
179.109.130.1 reg.eset.es
131.186.156.246 reg.rising.com.cn
231.88.195.60 register.norman.com
21.2.60.143 removetrojanvirus.org
216.66.5.51 renewalcenter.symantec.com
168.142.31.40 renewals.bitdefender.com
201.44.70.110 research.microsoft.com
59.214.3.6 research.pandasecurity.com
185.210.68.102 research.sunbelt-software.com
137.31.94.91 resplendence.com
170.188.202.161 retail.sp.f-secure.com
28.103.66.244 retail01.sp.f-secure.com
155.166.11.152 retail02.sp.f-secure.com
174.243.226.141 ribbonwarehouse.com
207.76.77.211 rising-global.com
253.59.197.38 rising.com
192.54.143.14 rising.com.cn
144.199.169.3 rolandovera.com
176.33.208.5 rootkit.com
34.15.73.156 rootkit.nl
229.11.18.64 rover800.gaima.co.uk
181.155.44.53 roysephotos.com
214.245.84.123 ru.trendmicro.com
72.227.204.207 ruben.bzin.net
198.223.149.183 runscanner.net
218.44.175.172 safe.qq.com
251.201.215.174 safecomputing.umn.edu
41.184.79.69 safer-networking.org
236.179.24.233 safetynet.com
187.0.51.222 sales.bitdefender.com
220.157.158.36 samroeng.hi5.com
78.140.22.119 sandbox.norman.com
17.135.224.27 sandboxie.com
225.212.182.16 sapcupgrades.com
1.114.33.86 sarahmcconnellphotography.net
115.96.154.237 saverssite.com
242.92.99.145 scan.anti-trojan.net
6.168.118.195 scan.kingsoft.com
99.130.225.9 scan4you.net
213.113.89.92 scanner.novirusthanks.org
84.108.35.0 scanner.virus.org
36.185.61.245 scanner2.novirusthanks.or
68.86.100.59 schemas.microsoft.com
182.69.220.142 schemas.xmlsoap.org
121.65.166.118 sea.symantec.com
73.141.192.107 search.ca.com
106.43.231.109 search.mcafee.com
219.25.96.4 search.symantec.com
90.21.41.169 seasonsecurity.com
110.97.67.158 secdreg.org
143.255.107.228 secubox.aldria.com
1.238.39.55 secunia.com
127.233.240.31 secure-email.comodo.com
79.54.199.20 secure.av-desk.com
44.143.238.210 secure.nai.com
158.58.102.105 securecomputing.com
97.121.48.13 secureme.com
49.198.6.2 securitoo.com
81.99.113.72 security.symantec.com
195.14.233.155 securitycheck.symantec.com
66.78.179.63 securitynewsportal.com
86.154.205.52 securityrespons.symantec.com
119.56.244.122 securityresponse.symantec.com
232.226.109.17 securitywonks.net
103.34.54.182 secuser.com
55.110.80.171 secuser.model-fx.com
156.12.120.241 sergiwa.com
202.183.240.68 service.mcafee.com
140.246.185.232 service1.symantec.com
92.67.212.221 servicenews.symantec.com
125.224.251.35 sfdoccentral.symantec.com
239.139.183.186 shadow.grisoft.cz
178.202.61.94 shadu.baidu.com
130.23.87.83 shadu.duba.net
162.180.194.153 shield.prevx.com
20.95.58.236 shop.hauri.co.kr
147.159.4.144 shop.pandasecurity.com
167.235.218.133 shop.sunbeltsoftware.com
132.1.1.135 shop.symantec.com
177.239.122.218 shop.trendmicro.com
116.235.67.195 shudoo.com
68.123.93.184 simplysup.com
101.213.133.186 siren24.nprotect.com
215.196.253.81 siteadvisor.com
154.191.198.245 sitedirector.symantec.com
105.80.225.234 smallbiz.symantec.com
138.169.8.48 smbstore.trendmicro.com
252.152.128.131 smokey-services.eu
123.147.74.107 soccersuck.com
143.224.100.96 softfaq.com
175.125.139.98 softonic.com
221.108.3.249 software-files.download.com
160.104.205.157 solutions.drweb.com
112.180.231.146 sophos.com
145.82.82.216 sophos.fr
2.64.203.43 sophos1.ucd.ie
197.60.148.208 sophos10.ucd.ie
149.136.106.197 sophos2.ucd.ie
114.226.146.199 sophos5.ucd.ie
228.209.10.94 sophos6.ucd.ie
99.204.211.2 sophos7.ucd.ie
118.25.170.247 sophos8.ucd.ie
151.182.21.61 sophos9.ucd.ie
9.165.141.144 soporte.pandasecurity.com
136.160.87.52 sos.rising.com.cn
88.237.113.41 sosvirus.changelog.fr
120.139.152.111 spd.atdmt.com
234.121.16.194 specs.xmlsoap.org
173.117.218.170 speedtest.comodo.com
125.193.244.159 spftrl.digitalriver.com
158.95.27.161 spyany.com
15.77.148.56 spyblocker-software.com
142.73.93.221 spybot.info
162.149.119.210 spycheck.co.uk
195.51.159.24 spycheck.es
53.34.91.107 spychecker.com
180.29.36.83 spycop.com
63.38.183.4 spywaredb.com
96.195.34.6 spywaredlls.prevx.com
210.110.154.157 spywarefiles.prevx.com
149.173.100.65 spywareguide.com
101.250.58.54 spywareinfo.com
133.152.165.124 spywareterminator.com
247.66.30.207 square.bitdefender.com
118.130.231.115 static.yoreparo.com
138.206.1.104 stats.norton.com
171.108.40.174 stdio-labs.blogspot.com
28.22.161.69 stiller.com
155.86.106.234 store.bitdefender.com
107.162.132.223 store.de.bitdefender.com
208.64.172.37 store.drweb.com
254.235.36.120 store.trendmicro.com
193.42.237.28 subs.geekstogo.com
144.119.8.17 subwiz.trendmicro.com
177.20.47.87 sucop.com
35.191.235.238 sun.symantec.com
230.254.113.146 sunbelt-software.com
182.75.139.135 sunbeltsecurity.com
214.233.246.205 sunbeltsoftware.com
72.147.110.32 superboy2010.com.au
199.211.56.196 superdicas.com.br
219.31.14.185 superuser.co.kr
252.121.121.187 support.drweb.com
229.35.174.15 support.f-secure.com
168.31.119.247 support.kaspersky.co
120.175.145.236 support.mcafee.com
153.9.185.238 support.microsoft.com
11.248.49.133 support.pandasecurity.com
206.243.250.41 support.rising-global.com
157.132.21.30 sybari.com
190.221.60.100 sygate.com
48.204.180.183 symantec-ese.baynote.net
175.199.126.159 symantec.com
195.20.152.148 symantecliveupdate.com
227.178.191.150 symatec.com
17.160.56.45 sysinternals.com
212.156.1.209 system-cleaner.comodo.com
164.232.27.198 tallemu.com
197.134.134.12 taringa.net
54.116.255.95 tds.diamondcs.com.au
249.112.200.4 tech.pantip.com
201.188.158.249 techimo.com
234.90.10.63 techspot.com
92.73.130.214 techsupportforum.com
219.68.75.122 tecniservicioslys.com
238.145.34.111 tecno-soft.com
15.46.141.181 tempuri.org
129.29.5.8 thecomputerpitstop.com
0.24.207.172 thejokerx.blogspot.com
208.101.233.161 thetechguide.com
172.191.204.163 thinkpad.cn
30.173.69.246 threatexpert.com
225.169.14.222 threatinfo.trendmicro.com
177.245.40.211 timeforyourbusi.pandasecurity.com
210.147.79.213 timestamp.comodoca.com
67.129.200.109 timestamp.wosign.com
194.125.145.17 tinysoftware.com
214.201.171.6 tms.symantec.com
247.103.211.76 together.pctools.com
105.86.143.159 tool.ikaka.com
232.81.88.135 toonbox.de
183.158.47.124 tr.mcafee.com
216.59.154.126 trackingtheworld.com
74.230.18.21 training.drweb.com
13.37.220.185 training.trendmicro.com
221.114.178.174 trapware.com
253.16.29.244 trendmicro.com
111.186.150.71 trendmicro.com.cn
238.250.95.235 trendmicro.fr
2.70.121.224 trendsecure.com
35.228.160.38 trial.trendmicro.com
148.142.25.190 trucoswindows.es
19.206.226.98 trucoswindows.net
227.26.252.87 tw.mcafee.com
72.184.36.157 tw.sophos.com
118.99.156.240 tw.trendmicro.com
57.162.101.148 tweaksforgeeks.com
8.239.128.137 u0.eset.com
41.140.167.207 u1.eset.com
87.243.31.34 u10.eset.com
26.50.165.198 u100.eset.com
234.127.191.187 u11.eset.com
10.29.42.1 u12.eset.com
124.199.163.84 u13.eset.com
251.7.108.248 u14.eset.com
15.83.66.237 u15.eset.com
48.173.173.51 u16.eset.com
94.155.38.135 u17.eset.com
32.151.239.111 u18.eset.com
240.39.9.100 u19.eset.com
17.129.49.102 u2.eset.com
131.112.169.253 u20.eset.com
70.107.114.161 u21.eset.com
21.252.141.150 u22.eset.com
54.85.180.220 u23.eset.com
168.68.44.47 u24.eset.com
39.63.246.23 u25.eset.com
59.140.16.12 u26.eset.com
91.42.55.14 u27.eset.com
137.24.176.165 u28.eset.com
76.20.121.73 u29.eset.com
28.96.147.62 u3.eset.com
61.254.254.132 u30.eset.com
175.236.119.216 u31.eset.com
113.232.64.124 u32.eset.com
65.52.22.113 u33.eset.com
30.142.62.115 u34.eset.com
144.125.182.10 u35.eset.com
15.120.127.174 u36.eset.com
34.197.86.163 u36eset.com
67.98.193.233 u37.eset.com
181.81.57.60 u37eset.com
52.76.3.224 u38.eset.com
4.153.29.213 u39.eset.com
36.55.68.27 u4.eset.com
150.37.189.110 u40.eset.com
89.33.134.86 u41.eset.com
41.109.160.75 u42.eset.com
74.11.199.77 u43.eset.com
188.249.64.229 u44.eset.com
58.245.9.137 u45.eset.com
78.66.35.126 u46.eset.com
111.223.75.196 u47.eset.com
225.206.7.23 u48.eset.com
96.201.208.255 u49.eset.com
47.22.167.244 u5.eset.com
80.179.18.246 u50.eset.com
194.94.138.141 u51.eset.com
133.157.84.49 u52.eset.com
85.234.42.38 u53.eset.com
117.136.149.108 u54.eset.com
231.50.14.191 u55.eset.com
102.114.215.99 u56.eset.com
122.190.241.88 u57.eset.com
155.92.24.158 u58.eset.com
13.6.145.54 u59.eset.com
139.70.90.218 u6.eset.com
91.146.116.207 u60.eset.com
124.236.88.209 u61.eset.com
170.151.208.36 u62.eset.com
109.214.153.200 u63.eset.com
60.35.180.189 u64.eset.com
93.192.219.3 u65.eset.com
207.107.151.154 u66.eset.com
146.170.29.62 u67.eset.com
98.247.55.51 u68.eset.com
130.149.162.121 u69.eset.com
244.63.27.204 u7.eset.com
115.127.228.112 u70.eset.com
135.203.186.101 u71.eset.com
168.37.37.171 u72.eset.com
214.19.158.255 u73.eset.com
152.15.103.231 u74.eset.com
104.160.129.220 u75.eset.com
137.249.169.222 u76.eset.com
251.232.33.117 u77.eset.com
190.227.234.25 u78.eset.com
141.116.5.14 u79.eset.com
174.205.44.84 u8.eset.com
32.188.164.167 u80.eset.com
159.183.110.143 u81.eset.com
179.4.136.132 u82.eset.com
211.162.175.134 u83.eset.com
1.144.40.29 u84.eset.com
128.72.173.125 u85.eset.com
80.148.199.114 u86.eset.com
113.50.51.184 u87.eset.com
227.32.171.12 u88.eset.com
165.28.116.176 u89.eset.com
117.105.74.165 u9.eset.com
150.6.182.235 u90.eset.com
8.245.46.130 u91.eset.com
135.240.247.38 u92.eset.com
154.61.206.27 u93.eset.com
187.218.57.97 u94.eset.com
45.201.177.180 u95.eset.com
172.196.123.88 u96.eset.com
124.17.149.77 u97.eset.com
156.175.188.147 u98.eset.com
14.157.53.230 u99.eset.com
209.153.254.206 uk.mcafee.com
161.229.24.195 uk.trendmicro-europe.com
194.131.64.197 uk.trendmicro.com
52.113.184.93 ulove.tigolbittys.info
178.109.129.1 up.duba.net
198.186.155.246 up.rising.com.cn
231.87.195.60 up1.nod123.cn
21.2.59.75 upd.zonelabs.com
148.253.4.51 update.360safe.cn
99.74.219.40 update.360safe.com
132.231.70.42 update.aladdin.com
246.146.190.193 update.authentium.com
185.209.136.101 update.avg.com
137.30.94.90 update.avgfrance.com
169.188.201.160 update.bitdefender.com
27.102.66.243 update.drweb.com
154.166.11.151 update.ewido.com
174.242.37.140 update.grisoft.com
207.144.77.211 update.grisoft.cz
65.58.197.106 update.hispasec.com
191.122.142.14 update.ikaka.com
143.199.168.3 update.ikarus-software.at
244.100.208.73 update.quickheal.com
34.15.72.156 update.rising.com.cn
229.78.17.64 update.sophos.com
180.155.44.53 update.symantec.com
213.56.83.123 update.trendmicro.com
71.227.15.206 update7.jiangmin.com
198.222.81.114 updatem.360safe.cn
150.43.107.103 updatem.360safe.com
182.201.214.173 updates.a-2.org
40.115.79.0 updates.drweb.com
167.179.24.164 updates.f-prot.com
187.255.238.153 updates.sald.com
220.89.90.224 updates.symantec.com
10.71.210.51 updates3.kaspersky-labs.com
204.67.155.27 updates4.kaspersky-labs.com
156.212.181.16 updates5.kaspersky-labs.com
189.45.221.18 upgrade.bitdefender.com
47.28.85.169 upgrade1.bitdefender.com
242.23.30.77 upgrade2.bitdefender.com
193.168.57.66 upgrade3.bitdefender.com
226.1.96.136 upgrade4.bitdefender.com
84.240.216.219 upload.changelog.fr
211.235.162.195 us.bitdefender.com
231.56.188.184 us.mcafee.com
7.214.227.186 us.trendmicro.com
241.128.24.13 usa.kaspersky.com
180.124.225.177 usbcleaner.cn
132.200.251.166 ushousecall02.trendmicro.com
165.102.103.237 utilidades-utiles.com
23.84.223.64 v.dreamwiz.com
217.80.168.228 v4.windowsupdate.microsoft.com
169.157.126.217 v5.windowsupdate.microsoft.com
202.58.234.31 vet.com.au
60.41.98.182 vicentevirtual.com
187.36.43.90 viguard.com
206.113.2.79 vil.nai.com
239.14.109.149 vil.nail.com
97.253.229.232 virobot.co.kr
224.248.175.140 virscan.org
176.69.201.129 virus.org
209.227.240.199 virusbuster.hu
66.209.105.26 viruschief.com
5.205.50.2 virusdoctor.jp
213.25.76.247 virusfreezone.info
246.183.116.250 virusinfo.prevx.com
104.165.236.145 viruslist.com
230.161.181.53 viruslist.ru
250.238.207.42 virusscan.jotti.org
27.139.247.112 virusscanonline.net
141.122.179.195 virusspy.com
12.117.124.171 virustotal.com
219.194.83.160 visualizesoftware.com
252.95.190.162 visualtracking.symantec.com
110.10.54.57 vivo-austin.com
49.73.0.221 vms.drweb.com
189.82.146.142 vncsvr.com
222.240.253.212 vos.symantec.com
79.154.118.39 vrv.com.cn
206.218.63.203 vsantivirus.com
226.38.89.192 webadmin.norman.no
3.196.129.7 webphand.com
117.110.249.158 webroot.com
243.174.194.66 wedoantivirus.com
195.251.220.55 welkam.co.jp
40.152.4.125 wexperts-exchange.com
86.67.124.208 whatthetech.com
25.130.69.116 wikio.es
232.207.96.105 wilderssecurity.com
9.108.135.175 wilderssecurity.net
123.23.67.70 wildlist.com
62.87.201.234 windowsupdate.microsoft.com
14.163.227.223 winpatrol.com
47.65.78.37 wmcafee.com
160.235.199.120 woottonfootball.com
31.43.144.28 wtc.trendmicro.com
51.119.102.17 ww.emsisoft.com
84.209.210.88 www.1stavenuelimousines.co.uk
130.191.74.171 www.2xlgames.com
68.187.19.147 www.ahnlab.com
20.76.45.136 www.aks.com
53.165.85.138 www.aladdin.com
167.148.205.33 www.anti-trojan-software.net
38.75.82.129 www.anti-trojan.net
245.220.109.118 www.anti-virus.by
22.53.148.188 www.antivir.es
136.36.12.15 www.antivirus-tools.com
7.32.214.247 www.antiy.net
27.108.240.236 www.apsecure.com
60.10.23.238 www.arpia.be
105.248.144.133 www.authentium.com
44.244.89.41 www.authentium.com.au
252.64.115.30 www.av-desk.com
29.222.223.101 www.avast.com
143.204.87.184 www.avg.com
81.200.32.92 www.avhide.com
33.21.247.81 www.avoncourt.com
66.178.98.151 www.avx.ro
180.161.218.46 www.barder.com
51.156.163.210 www.beautybar.com
70.233.122.199 www.bg.virusblokada.com
103.134.229.13 www.bit-defender.de
217.117.93.96 www.bitdefende.de
88.113.39.4 www.bitdefender-es.com
40.189.65.249 www.bitdefender.be
73.91.104.63 www.bitdefender.cl
186.73.225.146 www.bitdefender.co.uk
125.69.170.182 www.bitdefender.com
137.205.0.171 www.bitdefender.com.au
101.39.227.105 www.bitdefender.com.sg
215.21.92.0 www.bitdefender.com.tw
86.17.37.164 www.bitdefender.com.vn
106.93.63.153 www.bitdefender.de
139.251.102.223 www.bitdefender.es
252.233.35.51 www.bitdefender.fr
123.229.236.27 www.bitdefender.hk
75.49.194.16 www.bitdefender.us
108.207.46.18 www.bitdefenderme.com
222.122.166.169 www.briarhurst.com
161.185.111.77 www.brightoctober.com
112.6.70.254 www.buraka.tv
77.95.109.68 www.buscafacil.com
191.10.229.151 www.buscalo.in
62.73.175.59 www.busco.in
82.150.201.48 www.ca.com
114.52.240.118 www.cambridge-steiner-school.co.uk
228.222.105.13 www.ccssforum.org
99.30.50.177 www.celticmerchant.com
51.106.76.166 www.clamav.net
152.8.115.236 www.collectedcurios.com
198.178.236.64 www.comodo.com
136.242.181.228 www.comodo.tv
88.62.207.217 www.comodoantispam.com
121.220.247.31 www.comodopartners.com
235.135.179.182 www.computing.net
174.198.56.90 www.configurarequipos.com
125.19.83.79 www.contentverification.com
158.176.190.149 www.deborahshelton.net
16.91.54.232 www.dr-bull.com
143.154.0.140 www.drweb.com
163.231.214.129 www.ealaddin.com
195.65.65.199 www.elvis-express.com
241.47.186.26 www.emeraldclassic.co.uk
180.43.131.2 www.emsisoft.at
132.187.157.247 www.emsisoft.com
165.21.196.249 www.emsisoft.de
23.3.61.77 www.emsisoft.es
149.187.194.241 www.emsisoft.fr
101.75.220.230 www.emsisoft.it
134.165.4.44 www.emsisoft.jp
248.148.124.127 www.emsisoft.net
119.143.69.103 www.emsisoft.nl
138.220.96.92 www.emsisoft.org
171.121.135.94 www.engyro.com
217.104.255.245 www.entercept.com
156.99.201.153 www.esafe.com
108.176.227.142 www.eset.es
140.78.78.212 www.eugrantsadvisor.com
254.60.199.39 www.eugrantsadvisor.de
193.56.144.203 www.eugrantsadvisor.ie
145.132.102.192 www.eugrantsadvisor.se
178.34.209.6 www.exchangeyourcareer.com
36.16.74.158 www.f-prot.com
162.12.19.66 www.f-secure.com
182.89.233.55 www.fimasys.com
215.246.85.125 www.flairweddings.co.uk
73.229.205.208 www.forospyware.com
200.224.150.116 www.fortifed.com
151.45.177.105 www.fortiid.com
184.202.216.175 www.fortimail.com
42.185.80.2 www.fortinet-apac.com
237.180.26.234 www.fortinet.ch
189.1.52.223 www.fortinet.co.il
221.159.91.225 www.fortinet.com
79.141.212.120 www.fortinet.net
206.137.157.28 www.fortinet.nl
226.213.183.17 www.fortinet.sg
3.115.222.87 www.fortinetuk.com
117.97.155.171 www.freeality.com
175.25.32.79 www.freedrweb.ru
127.102.246.68 www.freerav.com
160.3.98.70 www.frisk-software.com
18.174.218.221 www.frisk.is
213.237.163.129 www.fsecure.com
164.58.122.118 www.garryowen.com
197.215.229.188 www.gdata.es
55.130.93.15 www.globalhauri.com
182.193.39.179 www.gokidding.com
202.14.65.168 www.grisoft.com
234.172.104.238 www.hackshields.com
92.86.225.133 www.hacksoft.com.pe
219.150.170.41 www.hacksoft.pe
171.226.196.30 www.handwritingforkids.com
16.128.236.100 www.hasp.se
62.42.100.184 www.hauri.co.kr
0.106.45.92 www.hauri.net
208.183.71.81 www.hxproduction.com
241.84.111.151 www.ibusca.me
99.255.43.46 www.ikarus.at
38.62.176.210 www.imddomains.co.uk
245.139.203.199 www.indielisboa.com
22.40.54.13 www.inicioid.com
136.211.174.96 www.iniciorapido.info
7.18.120.4 www.internationalservicecheck.com
27.95.78.249 www.irangoals.com
59.185.185.63 www.iseclab.org
105.167.50.146 www.ixomodels.com
44.163.251.122 www.jiangmin.com
252.51.21.111 www.jiangmin.com.cn
29.141.61.113 www.jotti.org
143.123.181.9 www.kaspersky.com
81.119.126.173 www.kioskea.net
33.8.152.162 www.latin-mass-society.org
66.29.124.164 www.livepcsupport.com
112.12.244.247 www.malwarecity.com
239.7.189.223 www.malwarecity.fr
2.84.216.212 www.mamutu.com
35.241.255.214 www.mamutu.de
81.224.119.109 www.manchester-offices.co.uk
20.219.65.17 www.mcafee.at
228.40.91.6 www.mcafee.com
4.198.198.76 www.metascan-online.com
118.180.63.159 www.microsoft.com
57.176.8.67 www.midescargas.com
9.252.222.56 www.mountainlakeslodge.com
42.154.74.126 www.mtr-design.com
156.136.194.22 www.mygeekside.com
26.132.139.186 www.netegrity.com
46.209.97.175 www.norman.com
79.110.205.245 www.nottinghampoetryseries.com
193.93.69.72 www.novirusthanks.org
64.88.14.236 www.npin.co.kr
15.165.41.225 www.nprotect.co.kr
48.66.80.39 www.nprotect.com
162.49.200.122 www.nprotect.com.br
101.44.146.98 www.nsclean.com
53.121.172.87 www.owen.org
85.23.211.89 www.pandasecurity.com
199.5.76.240 www.pctools.com
70.1.21.148 www.peterhearnwaste.co.uk
90.77.47.137 www.phoenixtrikeworks.com
123.235.87.207 www.prdouglas.co.uk
237.217.19.35 www.prevx.com
107.213.220.11 www.prevx1.com
59.34.178.0 www.professorbeyer.com
92.191.30.2 www.quickheal.com
206.106.150.153 www.removetrojanvirus.org
77.101.27.249 www.renningers.com
28.178.242.238 www.residentphotography.com
61.79.93.52 www.retento.com
175.250.213.135 www.reviewsofbooks.com
46.57.159.43 www.rising-global.com
66.134.185.32 www.risingav.com.au
98.36.224.102 www.safenet-inc.com
212.206.89.253 www.scan4you.net
83.14.34.161 www.seasonsecurity.com
35.90.60.150 www.secondchanceboxer.com
136.248.100.221 www.secure-elements.com
182.162.220.48 www.sheffieldmind.co.uk
120.226.165.212 www.smf.org
72.47.191.201 www.softfaq.com
105.204.231.15 www.sophos.com
219.119.163.166 www.spycheck.co.uk
158.182.40.74 www.spycheck.es
109.3.67.63 www.stadiumpage.com
142.160.174.133 www.sunbeltsoftware.com
0.75.38.216 www.symantec.com
127.138.240.124 www.sysinternals.com
147.215.198.113 www.tecniservicioslys.com
179.49.49.183 www.testmypcsecurity.com
225.31.170.10 www.threatexpert.com
164.27.115.242 www.tomorrowsedge.net
116.171.141.231 www.trendmicro.com
149.5.181.234 www.trojaner.info
7.243.45.129 www.trustix.com
201.239.246.37 www.trustlogo.com
153.128.16.26 www.vba.com.by
186.217.56.96 www.virscan.org
44.200.176.179 www.virus.fi
171.127.53.87 www.virus.org
122.204.80.76 www.virusbuster.hu
155.105.119.78 www.viruschief.com
201.88.239.229 www.virusfreezone.info
140.83.185.137 www.virustotal.com
92.160.211.126 www.wellgousa.com
125.62.62.196 www.whichssl.com
238.44.183.23 www.willsee.com
177.40.128.187 www.xmlsoap.org
129.116.86.176 www.zarya.info
162.18.194.247 www1.my-etrust.com
20.0.58.142 www3.ca.com
146.252.3.50 www3.safenet-inc.com
166.73.217.39 www4.symantec.com
199.230.69.109 wwws.clamav.net
57.213.189.192 x-cleaner.com
184.208.134.100 x.360safe.com
135.29.161.89 yoreparo.com
168.186.200.159 z-oleg.com
26.169.64.242 zeustracker.abuse.ch
221.164.10.218 zeylstra.nl
173.241.36.207 zhidao.baidu.com
206.143.75.209 zhidao.ikaka.com
63.125.196.104 ziggamza.net
190.121.141.12 zonavirus.com
210.197.167.1 zonealarm.com
243.99.207.72 zonelabs.com
101.81.139.155 zonelabs.fr
227.77.84.131 zonelog.co.uk
179.154.42.120 zs.kingsoft.com
212.55.150.122 ztl.comodo.com


Rootkit activity

No anomalies have been detected.

Propagation

A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.

VersionInfo

No information is available.

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 12644 12800 3.76874 55d274f88e5ab59aa27a86516437f7d8
.data 20480 64 512 0.164757 75fe664fdcd708925b7ca712ee127c19
.rdata 24576 1328 1536 3.03097 2707a7526abdc69c43f37dd3b6665e30
.bss 28672 320 0 0 d41d8cd98f00b204e9800998ecf8427e
.idata 32768 800 1024 2.18489 4e803ebabfbd6fe3233c57c1b6e762a8
.rsrc 36864 87232 87552 5.54166 34b5a2a0306aa053bf792aa7f84ba6c7

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a

URLs

No activity has been detected.

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps were not found.


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Delete the original Trojan file.
  2. Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
    127.0.0.1 localhost
  3. Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
  4. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Average: 2 (1 vote)

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now