Gen.Variant.Symmi.2478_e9987a59bd

by malwarelabrobot on July 31st, 2016 in Malware Descriptions.

Trojan.Win32.Fsysna.dqhe (Kaspersky), Gen:Variant.Symmi.2478 (B) (Emsisoft), Gen:Variant.Symmi.2478 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, WormAutorun


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: e9987a59bd6dbee965182e0a6b723c7c
SHA1: f181b9a09b69cb5277f5d56eace6d327f2ccbaf7
SHA256: 4becc8f605253abc11567ac253e17192089cb810e163e26c9c1dab5e81165194
SSDeep: 1536:UShEW5tE2q1M7cUUwPhfdvcIMMLBU8dsP59ASLUj1qOdFiG6a7vJHQhh :ZE8tEP1M3zPhfOnMLkP5KsUjFl76
Size: 5263536 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MingWin32GCC3x, UPolyXv05_v6
Company: no certificate found
Created at: 2012-08-17 04:42:39
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour Description
WormAutorun A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.


Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):
No processes have been created.

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

No files have been created.

Registry activity

Dropped PE files

MD5 File path
6763e49fa8009adc77d1fff41c3139ad c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif
abe3688fda6037a40835d38e7f9f2f5a c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Black Eyed Peas - The Beginning (Deluxe Edition) 2010-DOH.mp3.pif
7eb47eb8cc230bf1a7b40eccaa93f7a3 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif
ea12b1ea0a4fc2177271d81f0ea9ad2f c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif
3343e1313c107df15904742f1e8ae1c6 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif
951571574713c211f3db22eb2fa393e6 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2011-Single@320][TJ].mp3.pif
ade4b5dde8f0990a1cd4edad4f766e87 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Mumford And Sons - Sigh No More (Album).mp3.pif

HOSTS file anomalies

The Trojan modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 61717 bytes in size. The following strings are added to the hosts file listed below:

173.224.217.73 viabcp.com
173.224.217.73 www.viabcp.com
173.224.217.73 ww2.viabcp.com
173.224.217.73 bcpzonasegura.viabcp.com
173.224.217.73 hotmail.com
173.224.217.73 www.hotmail.com
138.207.2.173 13iii.com
171.108.41.175 15660808.co.kr
29.91.161.70 2-spyware.com
156.86.107.234 247fixes.com
176.163.133.223 360.cn
208.64.172.37 360.com
66.47.104.120 360safe.cn
193.43.50.96 360safe.com
145.119.8.85 45pounds.com
178.21.115.87 51nb.com
35.191.236.238 9down.com
230.255.181.146 a-2.org
182.75.139.136 a188.x.akamai.net
215.233.247.206 abuse.ch
73.148.111.33 acs.pandasoftware.com
199.211.56.197 ad-aware-se.uptodown.com
219.32.83.186 ad.fastclick.net
252.189.122.0 ads.fastclick.net
110.104.242.151 agfirewall.ru
237.167.188.59 agnitum.com
189.244.214.48 agnitum.de
33.145.253.118 agnitum.fr
79.60.117.201 agnitum.ru
18.124.63.109 ahn.com.cn
226.200.89.98 ahnlab.com
3.102.128.168 akamai.net
116.16.61.63 aknow.prevx.com
55.80.194.227 aladdin.com
7.156.220.217 alert.rising.com.cn
40.58.72.31 alerta-antivirus.inteco.es
154.229.192.114 alerta-antivirus.red.es
24.36.137.22 alladdin.ru
44.113.96.11 aluriasoftware.com
77.202.203.81 analysis.seclab.tuwien.ac.at
123.185.67.164 andymanchesta.com
62.180.13.140 anti-virus-software-review.com
14.69.39.129 anti-virus.by
46.158.78.131 anti-virus.com
160.141.198.26 antirootkit.com
99.137.144.190 antispam.sunbeltsoftware.com
51.25.170.179 antispy.ru
84.115.209.249 antispyware.sunbeltsoftware.com
197.97.74.76 antivir.es
68.93.19.52 antiviraldp.com
88.169.45.42 antivirus-online.de
121.71.85.44 antivirus-tools.com
167.54.205.195 antivirus.about.com
105.49.150.103 antivirus.cai.com
57.126.177.92 antivirus.comodo.com
90.27.28.162 antivirus.hispavista.com
204.10.148.245 antivirus.sunbeltsoftware.com
143.5.94.153 antiy.net
95.82.52.142 anubis.iseclab.org
127.239.159.212 apac.trendmicro.com
241.222.23.107 ar.answers.yahoo.com
112.218.225.15 ar.atwola.com
132.38.183.4 arcabit.com
165.196.34.74 arcabit.pl
22.178.155.157 archive.bitdefender.com
149.174.100.66 arswp.com
101.250.126.55 arwww.fortinet.cz
134.152.166.125 asap.authentium.com
248.135.30.208 ashampoo.com
186.130.231.184 atazita.blogspot.com
138.207.2.173 atdmt.com
171.108.41.175 attechnical.com
29.91.161.70 atwola.com
156.86.107.234 au.mcafee.com
176.163.133.223 auditmypc.com
208.64.172.37 authentium.com
66.47.104.120 auwww.ealaddin.nl
193.43.50.96 avast-home.uptodown.com
161.135.24.101 avast.com
194.37.131.103 avast.ru
51.207.252.254 avg-antivirus.net
246.15.197.162 avg.com
198.91.155.152 avg.vo.llnwd.net
231.249.7.222 avgate.net
89.163.127.49 avgfrance.com
215.227.72.213 avhide.com
235.48.99.202 avira.com
12.205.138.16 avp.ch
126.120.2.167 avp.com
253.183.203.75 avp.ru
205.4.230.64 avpclub.ddns.info
49.161.13.134 avu.zonelabs.com
95.76.133.217 avx.rob-have.net
34.140.79.125 awaps.net
242.216.105.114 b-have.orgbitdefender-ar.com
19.118.144.184 babooforum.com.br
132.32.77.79 backup.comodo.com
71.96.210.243 baike.360.cn
23.172.236.233 baike.360.com
56.74.88.47 bakunos.com
170.244.208.130 banner.fastclick.net
40.52.153.38 banners.fastclick.net
60.129.112.27 baristamagazine.com
93.218.219.97 basetendencies.com
139.201.83.180 bbs.360.cn
78.196.28.156 bbs.360safe.cn
29.85.55.145 bbs.360safe.com
62.174.94.147 bbs.cfan.com.cn
176.157.214.42 bbs.cpcw.com
115.153.160.206 bbs.dswlab.com
67.41.186.195 bbs.duba.net
100.131.225.9 bbs.ikaka.com
213.113.90.92 bbs.janmeng.com
84.109.35.68 bbs.kafan.cn
104.185.61.58 bbs.kafan.com
137.87.101.60 bbs.kaspersky.com.cn
183.69.221.211 bbs.kpfans.com
121.65.166.119 bbs.mcafeefans.com
73.142.193.108 bbs.s-sos.net
106.43.44.178 bbs.sucop.com
220.26.164.5 bbs.taisha.org
159.21.109.169 bbs.trendmicro.com.cn
110.98.68.158 bbs.winzheng.com
143.255.175.228 bestofewan.com
1.238.39.123 beta.anti-virus.by
128.234.241.31 bg.virusblokada.com
148.54.199.20 bhsbees.com
181.212.50.90 bitcity.info
38.194.171.173 bitcity.org
165.190.116.81 bitdefender.co.uk
117.10.142.71 bitdefender.com
150.168.182.141 bitdefender.com.ua
8.150.46.224 bitdefender.es
202.146.247.200 bitdefender.org
154.223.18.189 bitdefender.secyber.net
187.124.57.191 bitdefenderchina.com
45.107.177.86 bitdefenderguatemala.com
172.102.122.250 bitdefendermalaysia.com
191.179.149.239 bitdefendertaiwan.com
224.80.188.53 bitdefenderuruguay.com
82.63.9.24 bitdefenderusa.com
97.203.210.1 biz.nprotect.com
49.23.168.246 bkav.com.vn
82.181.20.248 blackice.iss.net
196.96.140.143 bleedingthreats.net
135.159.85.51 bleepingcomputer.com
86.236.44.40 blitzblank.com
119.137.151.110 blog.hispasec.com
233.52.15.193 blog.threatfire.com
104.115.217.101 blog.titanium-jewelry.com
124.192.243.90 blog.trendmicro.com
156.93.26.160 blogs.icerocket.com
14.8.146.55 blogs.protegerse.com
141.72.92.219 blogschapines.com
93.148.118.208 boardreader.com
194.50.157.22 bobbondart.com
239.220.22.105 br.mcafee.com
178.28.223.14 br.trendmicro.com
130.104.249.3 brazil.kaspersky.com
163.6.33.73 buddy.bitdefender.com
21.177.221.224 bugs.clamav.net
216.240.98.132 buscafacil.com
167.61.125.121 buscalo.in
200.218.232.191 busco.in
58.133.96.18 buy.bitdefender-es.com
185.196.42.182 buy.bitdefender.com
205.17.0.171 buy.bitdefender.de
237.107.107.241 buy.drweb.com
27.89.227.68 buy.rising.com.cn
222.85.173.44 ca.com
174.229.199.33 cacomvip.ca.com
207.63.238.35 cai.com
64.45.103.186 canada.karuna-shechen.org
3.41.48.95 castlecops.com
211.185.74.84 castlecrops.com
244.19.114.154 ccslaughterspdx.com
102.2.234.237 cddchiangmai.net
229.253.179.213 cdn.atwola.com
248.74.206.202 center.rising.com.cn
25.231.245.204 centralcommand.com
71.214.109.99 cert.org
10.209.55.7 cfan.com.cn
218.30.81.252 cgi.clamav.net
250.187.188.66 changedetection.com
108.170.52.149 changelog.fr
47.166.254.57 channelpartner.trendmicro.com
255.242.212.46 chickensroamfree.com
32.144.63.116 chkrootkit.org
145.126.184.11 chollian.nprotect.co.kr
16.122.129.176 cisrt.org
36.198.87.165 cit.kookmin.ac.kr
69.100.195.235 clamav.net
183.83.59.62 clamwin.com
54.78.4.226 click.atdmt.com
5.155.31.215 clicks.atdmt.com
38.56.70.29 cloudprotection.pandasecurity.com
152.39.190.112 clubic.com
107.50.151.104 cmmings.cn
59.127.178.93 cn.mcafee.com
91.28.217.95 cn.sophos.com
205.11.81.246 cn.trendmicro.com
76.7.27.154 codehard.wordpress.com
96.83.53.143 cohartuk.com
129.241.92.213 commentcamarche.net
242.223.25.40 community.thaiware.com
113.219.226.16 comodo.com
65.39.184.6 company.drweb.com
98.197.36.8 company.hauri.co.kr
212.112.156.159 company.hauri.net
150.175.101.67 computing.net
102.252.60.56 comunidad.wilkinsonpc.com.co
135.153.167.126 configurarequipos.com
249.68.31.209 coresecurity.com
120.131.232.117 cou85.com
140.208.3.106 cowsmo.com
172.109.42.176 cpsecure.com
30.24.162.71 csc.rising.com.cn
157.88.108.235 cureit.ru
109.164.134.224 customer.symantec.com
210.66.173.38 customers.drweb.com
255.236.38.121 cutlines.org
194.44.239.29 cwsandbox.org
146.120.9.19 cybercrime.pandasecurity.com
179.22.49.89 cyberdefender.com
37.193.237.240 cybertechhelp.com
231.0.114.148 daboweb.com
183.77.141.137 daniloff.net
216.234.248.207 daniweb.com
74.149.112.34 darkclockers.com
201.212.57.198 dazhizhu.cn
221.33.16.187 de.bitdefender.com
253.122.123.1 de.mcafee.com
43.105.243.84 de.trendmicro.com
238.101.189.60 deckard.geekstogo.com
190.245.215.49 deerfield.com
223.79.254.51 defalcos.com
80.61.119.202 definitions.symantec.com
19.57.64.110 dell.symantec.com
227.201.90.100 demos.eset.es
4.35.130.170 descargas.eset.es
118.18.250.253 dev.depeuter.org
244.13.195.229 developmentdrums.org
8.90.222.234 dialognauka.ru
57.7.21.236 diamondcs.com.au
103.246.141.131 dicasweb.com.br
42.241.86.39 discussions.virtualdr.com
249.62.113.28 disk-encryption.comodo.com
26.219.220.98 dl.360safe.com
140.202.84.181 dl1.antivir-pe.com
79.198.30.89 dl1.antivir-pe.de
31.18.244.78 dl1.antivir.de
64.176.95.148 dl1.avgate.net
177.158.216.43 dl10.freeav.net
48.154.161.207 dl2.antivir-pe.com
68.230.119.196 dl2.antivir-pe.de
101.132.227.11 dl2.antivir.de
215.114.91.94 dl2.avgate.net
85.110.36.2 dl3.antivir-pe.de
37.187.63.247 dl3.antivir.de
70.88.102.61 dl3.avgate.net
184.71.222.144 dl4.antivir-pe.com
123.66.167.120 dl4.antivir-pe.de
74.143.194.109 dl4.antivir.de
107.44.233.111 dl4.avgate.net
221.27.97.6 dl5.avgate.net
92.23.43.170 dl6.avgate.net
112.99.69.159 dl7.avgate.net
145.1.108.229 dl8.avgate.net
2.239.41.56 dl8.freeav.net
129.235.242.32 dl9.avgate.net
81.55.200.21 dl9.freeav.net
114.213.52.24 dnl-cd1.kaspersky-labs.com
228.127.172.175 dnl-cd10.kaspersky-labs.com
166.191.117.83 dnl-cd11.kaspersky-labs.com
118.12.76.72 dnl-cd12.kaspersky-labs.com
151.169.183.142 dnl-cd13.kaspersky-labs.com
9.84.47.225 dnl-cd2.kaspersky-labs.com
136.147.248.133 dnl-cd3.kaspersky-labs.com
155.224.19.122 dnl-cd4.kaspersky-labs.com
188.141.74.208 dnl-cd5.kaspersky-labs.com
62.56.194.103 dnl-cd6.kaspersky-labs.com
189.119.140.11 dnl-cd7.kaspersky-labs.com
141.196.166.0 dnl-cd8.kaspersky-labs.com
241.98.205.70 dnl-cd9.kaspersky-labs.com
31.12.70.153 dnl-cn1.kaspersky-labs.com
226.76.15.61 dnl-cn10.kaspersky-labs.com
178.152.41.50 dnl-cn11.kaspersky-labs.com
211.54.81.121 dnl-cn12.kaspersky-labs.com
69.224.13.16 dnl-cn13.kaspersky-labs.com
7.32.146.180 dnl-cn14.kaspersky-labs.com
215.109.172.169 dnl-cn15.kaspersky-labs.com
248.10.24.239 dnl-cn2.kaspersky-labs.com
106.181.144.66 dnl-cn3.kaspersky-labs.com
233.244.89.230 dnl-cn4.kaspersky-labs.com
252.65.48.219 dnl-cn5.kaspersky-labs.com
29.154.155.33 dnl-cn6.kaspersky-labs.com
75.137.19.116 dnl-cn7.kaspersky-labs.com
14.132.221.92 dnl-cn8.kaspersky-labs.com
222.21.247.81 dnl-cn9.kaspersky-labs.com
255.111.30.83 dnl-eu1.kaspersky-labs.com
112.93.151.234 dnl-eu10.kaspersky-labs.com
51.89.96.142 dnl-eu11.kaspersky-labs.com
3.233.122.131 dnl-eu12.kaspersky-labs.com
36.67.162.202 dnl-eu13.kaspersky-labs.com
150.49.26.29 dnl-eu14.kaspersky-labs.com
20.45.227.5 dnl-eu15.kaspersky-labs.com
40.122.253.250 dnl-eu2.kaspersky-labs.com
73.23.37.252 dnl-eu3.kaspersky-labs.com
119.6.157.147 dnl-eu4.kaspersky-labs.com
58.1.102.55 dnl-eu5.kaspersky-labs.com
9.78.129.44 dnl-eu6.kaspersky-labs.com
42.235.236.114 dnl-eu7.kaspersky-labs.com
156.218.100.197 dnl-eu8.kaspersky-labs.com
95.213.46.105 dnl-eu9.kaspersky-labs.com
47.34.4.94 dnl-jp1.kaspersky-labs.com
79.192.111.164 dnl-jp10.kaspersky-labs.com
193.174.232.59 dnl-jp11.kaspersky-labs.com
64.170.177.223 dnl-jp12.kaspersky-labs.com
84.246.135.212 dnl-jp13.kaspersky-labs.com
117.148.243.27 dnl-jp14.kaspersky-labs.com
231.130.107.110 dnl-jp15.kaspersky-labs.com
101.126.52.18 dnl-jp2.kaspersky-labs.com
198.91.223.151 dnl-jp3.kaspersky-labs.com
230.248.6.221 dnl-jp4.kaspersky-labs.com
88.231.126.48 dnl-jp5.kaspersky-labs.com
27.227.72.24 dnl-jp6.kaspersky-labs.com
235.47.98.13 dnl-jp7.kaspersky-labs.com
12.205.137.15 dnl-jp8.kaspersky-labs.com
125.187.2.166 dnl-jp9.kaspersky-labs.com
252.183.203.74 dnl-kr1.kaspersky-labs.com
16.3.229.64 dnl-kr10.kaspersky-labs.com
49.161.13.134 dnl-kr11.kaspersky-labs.com
163.143.201.217 dnl-kr12.kaspersky-labs.com
33.139.146.193 dnl-kr13.kaspersky-labs.com
241.216.105.182 dnl-kr15.kaspersky-labs.com
18.117.212.184 dnl-kr2.kaspersky-labs.com
132.32.76.79 dnl-kr3.kaspersky-labs.com
71.95.21.243 dnl-kr4.kaspersky-labs.com
23.172.236.232 dnl-kr5.kaspersky-labs.com
55.73.87.46 dnl-kr6.kaspersky-labs.com
169.244.207.129 dnl-kr7.kaspersky-labs.com
40.52.153.37 dnl-kr8.kaspersky-labs.com
60.128.179.26 dnl-kr9.kaspersky-labs.com
93.30.218.96 dnl-ru1.kaspersky-labs.com
206.200.83.247 dnl-ru10.kaspersky-labs.com
77.8.28.155 dnl-ru11.kaspersky-labs.com
29.84.54.145 dnl-ru12.kaspersky-labs.com
130.242.94.215 dnl-ru13.kaspersky-labs.com
176.157.214.42 dnl-ru14.kaspersky-labs.com
114.220.159.206 dnl-ru15.kaspersky-labs.com
66.41.186.195 dnl-ru2.kaspersky-labs.com
99.198.225.9 dnl-ru3.kaspersky-labs.com
213.113.157.160 dnl-ru4.kaspersky-labs.com
152.176.34.68 dnl-ru5.kaspersky-labs.com
104.253.61.57 dnl-ru6.kaspersky-labs.com
136.154.168.127 dnl-ru7.kaspersky-labs.com
250.69.32.210 dnl-ru8.kaspersky-labs.com
121.133.234.118 dnl-ru9.kaspersky-labs.com
141.209.192.107 dnl-us1.kaspersky-labs.com
174.43.43.177 dnl-us10.kaspersky-labs.com
219.25.164.4 dnl-us11.kaspersky-labs.com
158.21.109.236 dnl-us12.kaspersky-labs.com
110.165.135.226 dnl-us13.kaspersky-labs.com
143.255.175.228 dnl-us14.kaspersky-labs.com
1.237.39.123 dnl-us15.kaspersky-labs.com
195.233.240.31 dnl-us2.kaspersky-labs.com
147.122.11.20 dnl-us3.kaspersky-labs.com
180.211.50.90 dnl-us4.kaspersky-labs.com
38.194.170.173 dnl-us5.kaspersky-labs.com
165.189.115.149 dnl-us6.kaspersky-labs.com
185.10.142.138 dnl-us7.kaspersky-labs.com
217.167.181.140 dnl-us8.kaspersky-labs.com
7.150.45.35 dnl-us9.kaspersky-labs.com
202.146.247.199 dougknox.com
154.222.17.188 down.360safe.cn
187.124.124.2 down.360safe.com
44.106.245.85 download.avg.com
239.102.190.249 download.bleepingcomputer.com
191.178.148.239 download.com
224.80.0.53 download.com.vn
82.62.120.204 download.eset.com
208.58.65.112 download.f-secure.com
228.135.24.101 download.mcafee.com
5.36.147.187 download.microsoft.com
135.35.11.14 download.microsoft.comguru0.grisoft.cz
6.30.212.178 download.nai.com
213.107.239.167 download.norman.no
246.8.22.237 download.rising.com.cn
104.247.142.64 download.softpedia.com
43.243.88.40 download.sysinternals.com
251.63.114.29 download0.avast.com
28.221.153.31 download1.avast.com
141.203.18.182 download1.emsisoft.com
12.199.219.90 download1.quickheal.com
32.19.245.79 download10.quickheal.com
65.177.29.150 download100.avast.com
179.159.217.233 download1us.softpedia.com
65.171.178.225 download2.avast.com
17.248.136.214 download2.quickheal.com
50.149.244.216 download200.avast.com
164.64.108.111 download201.avast.com
103.127.53.19 download202.avast.com
54.204.12.8 download203.avast.com
87.105.119.78 download204.avast.com
201.20.239.161 download205.avast.com
72.83.185.69 download206.avast.com
92.160.211.58 download207.avast.com
124.62.250.128 download208.avast.com
238.232.115.23 download209.avast.com
109.40.60.187 download210.avast.com
61.116.86.176 download211.avast.com
162.18.126.246 download212.avast.com
208.188.246.74 download213.avast.com
146.252.191.238 download214.avast.com
98.73.217.227 download3.avast.com
131.230.1.41 download3.quickheal.com
245.145.189.192 download4.avast.com
184.208.66.100 download4.emsisoft.com
135.29.93.89 download4.quickheal.com
168.186.200.159 download5.avast.com
26.101.64.242 download5.emsisoft.com
153.164.10.150 download5.quickheal.com
173.241.224.139 download501.avast.com
205.75.75.209 download502.avast.com
251.57.196.36 download503.avast.com
190.53.141.12 download504.avast.com
142.197.167.1 download505.avast.com
175.31.207.4 download511.avast.com
33.13.71.155 download512.avast.com
227.9.16.63 download513.avast.com
179.154.42.52 download514.avast.com
212.243.82.122 download515.avast.com
70.226.202.205 download516.avast.com
197.221.147.181 download535.avast.com
216.42.174.170 download6.avast.com
249.199.213.172 download6.quickheal.com
39.182.77.67 download600.avast.com
234.177.23.231 download601.avast.com
186.254.49.220 download602.avast.com
218.156.156.34 download603.avast.com
76.138.21.117 download604.avast.com
15.134.222.25 download605.avast.com
223.210.180.14 download606.avast.com
0.112.32.84 download607.avast.com
114.94.152.236 download608.avast.com
240.90.97.144 download609.avast.com
4.167.55.133 download617.avast.com
37.68.163.203 download618.avast.com
151.51.27.30 download619.avast.com
22.46.228.194 download620.avast.com
229.123.255.199 download621.avast.com
22.40.54.13 download622.avast.com
136.23.174.96 download623.avast.com
75.18.120.72 download624.avast.com
27.95.146.61 download625.avast.com
59.253.185.63 download626.avast.com
173.235.50.214 download627.avast.com
44.231.251.122 download628.avast.com
64.51.21.111 download629.avast.com
97.209.60.181 download630.avast.com
210.191.249.9 download631.avast.com
81.187.194.241 download632.avast.com
33.7.152.230 download633.avast.com
66.165.4.232 download634.avast.com
180.80.124.127 download635.avast.com
119.143.69.35 download636.avast.com
70.220.28.24 download637.avast.com
103.121.135.94 download638.avast.com
217.36.255.177 download639.avast.com
88.99.201.85 download640.avast.com
108.176.227.74 download641.avast.com
140.78.10.144 download642.avast.com
254.248.131.39 download643.avast.com
125.56.76.203 download644.avast.com
77.132.102.192 download645.avast.com
178.34.141.6 download646.avast.com
224.204.6.90 download647.avast.com
162.12.207.254 download648.avast.com
114.88.233.243 download649.avast.com
147.246.17.57 download650.avast.com
5.161.205.208 download651.avast.com
88.112.227.4 download652.avast.com
40.189.253.249 download653.avast.com
73.91.104.63 download654.avast.com
186.5.225.146 download655.avast.com
57.69.170.54 download656.avast.com
77.145.128.43 download658.avast.com
110.235.236.114 download659.avast.com
156.217.100.197 download660.avast.com
94.213.45.173 download661.avast.com
46.102.71.162 download662.avast.com
79.191.111.164 download663.avast.com
193.174.231.59 download664.avast.com
132.169.176.223 download665.avast.com
83.58.203.212 download666.avast.com
116.147.242.26 download667.avast.com
230.130.106.109 download668.avast.com
101.126.52.85 download669.avast.com
121.202.78.74 download670.avast.com
154.104.117.76 download671.avast.com
199.86.238.227 download672.avast.com
138.82.183.135 download673.avast.com
90.158.209.124 download674.avast.com
123.60.61.195 download675.avast.com
237.42.181.22 download676.avast.com
175.38.126.186 download677.avast.com
127.115.84.175 download678.avast.com
160.16.192.245 download679.avast.com
18.255.56.140 download680.avast.com
145.250.1.48 download681.avast.com
164.71.216.37 download682.avast.com
197.228.67.107 download683.avast.com
55.211.187.190 download684.avast.com
182.206.133.98 download685.avast.com
134.27.159.87 download686.avast.com
167.185.198.157 download687.avast.com
24.167.63.240 download688.avast.com
219.163.8.216 download689.avast.com
171.239.34.205 download690.avast.com
204.141.74.208 download691.avast.com
62.123.194.103 download692.avast.com
188.119.139.27 download693.avast.com
224.212.181.16 download694.avast.com
1.113.221.86 download695.avast.com
115.96.153.169 download696.avast.com
242.91.98.145 download697.avast.com
193.168.57.134 download698.avast.com
226.69.164.136 download699.avast.com
84.240.28.31 download7.avast.com
23.47.230.195 download7.quickheal.com
231.124.188.184 download700.avast.com
7.26.39.254 download701.avast.com
121.196.160.81 download702.avast.com
248.4.105.245 download703.avast.com
12.80.131.234 download704.avast.com
45.238.170.48 download705.avast.com
159.152.35.200 download706.avast.com
29.216.236.108 download707.avast.com
237.37.6.97 download708.avast.com
82.194.46.167 download709.avast.com
128.109.166.250 download72.avast.com
67.172.111.158 download73.avast.com
18.249.138.147 download74.avast.com
51.150.177.217 download75.avast.com
165.65.109.112 download76.avast.com
104.128.243.20 download77.avast.com
56.205.13.9 download78.avast.com
88.107.120.79 download79.avast.com
202.21.241.162 download8.quickheal.com
73.85.186.70 download80.avast.com
93.161.144.59 download81.avast.com
126.251.251.129 download82.avast.com
172.233.116.213 download83.avast.com
110.229.61.189 download84.avast.com
62.118.87.178 download85.avast.com
95.207.127.180 download9.quickheal.com
209.190.247.75 download900.avast.com
164.201.208.255 download901.avast.com
115.90.235.244 download902.avast.com
148.179.18.58 download903.avast.com
6.162.138.141 download904.avast.com
133.157.84.117 download905.avast.com
153.234.110.106 download906.avast.com
185.136.149.108 download907.avast.com
231.118.14.3 download908.avast.com
170.114.215.167 download909.avast.com
122.190.241.156 download91.avast.com
155.92.92.226 download910.avast.com
12.74.213.53 download911.avast.com
207.70.158.218 download912.avast.com
159.146.116.207 download913.avast.com
192.48.224.21 download914.avast.com
50.31.88.172 download915.avast.com
177.26.33.80 download916.avast.com
196.103.248.69 download917.avast.com
229.4.99.139 download918.avast.com
87.243.219.222 download919.avast.com
214.238.165.130 download92.avast.com
166.59.191.119 download920.avast.com
198.217.230.189 download921.avast.com
56.199.95.16 download922.avast.com
251.195.40.248 download923.avast.com
203.15.66.237 download924.avast.com
236.173.105.239 download925.avast.com
93.155.226.134 download926.avast.com
220.151.171.43 download927.avast.com
240.227.197.32 download928.avast.com
17.129.237.102 download929.avast.com
131.112.169.185 download93.avast.com
2.107.114.161 download930.avast.com
209.184.73.150 download931.avast.com
242.85.180.152 download932.avast.com
100.0.44.47 download933.avast.com
39.63.246.211 download934.avast.com
247.140.204.200 download935.avast.com
23.42.55.14 download936.avast.com
137.212.176.97 download937.avast.com
8.20.121.5 download938.avast.com
28.96.147.250 download939.avast.com
61.254.186.64 download94.avast.com
174.168.51.215 download940.avast.com
45.232.252.124 download941.avast.com
253.52.22.113 download942.avast.com
98.210.62.199 download943.avast.com
160.141.198.26 download944.avast.com
98.204.143.190 download945.avast.com
50.25.170.179 download946.avast.com
83.182.209.249 download947.avast.com
197.97.141.144 download948.avast.com
136.160.19.52 download949.avast.com
88.237.45.41 download95.avast.com
120.138.152.111 download950.avast.com
234.53.16.194 download951.avast.com
105.117.218.102 download952.avast.com
125.193.176.91 download953.avast.com
158.27.27.161 download954.avast.com
203.9.148.244 download955.avast.com
142.5.233.104 download956.avast.com
234.33.3.93 download957.avast.com
11.123.42.95 download958.avast.com
125.105.163.247 download959.avast.com
63.101.108.155 download96.avast.com
15.245.134.144 download960.avast.com
48.79.174.214 download961.avast.com
162.62.38.41 download962.avast.com
33.57.239.17 download963.avast.com
52.134.10.6 download964.avast.com
85.35.49.8 download965.avast.com
131.18.169.159 download966.avast.com
70.13.115.67 download967.avast.com
22.90.141.56 download968.avast.com
54.248.248.126 download969.avast.com
168.230.113.209 download97.avast.com
107.226.58.117 download970.avast.com
59.46.16.106 download971.avast.com
92.204.123.176 download972.avast.com
206.186.244.72 download973.avast.com
76.182.189.236 download974.avast.com
96.3.147.225 download975.avast.com
129.160.255.39 download976.avast.com
243.143.119.122 download977.avast.com
114.138.64.30 download978.avast.com
65.215.91.19 download979.avast.com
98.116.130.89 download98.avast.com
212.99.250.172 download980.avast.com
151.94.196.148 download99.avast.com
103.171.238.153 downloads-eu1.kaspersky-labs.com
167.104.37.171 downloads-eu2.kaspersky-labs.com
25.87.157.66 downloads-eu3.kaspersky-labs.com
152.83.103.230 downloads-eu4.kaspersky-labs.com
172.159.129.219 downloads-us1.kaspersky-labs.com
205.61.168.33 downloads-us2.kaspersky-labs.com
62.43.101.116 downloads-us3.kaspersky-labs.com
189.39.46.92 downloads-us4.kaspersky-labs.com
141.115.4.82 downloads.andymanchesta.com
174.17.112.84 downloads.malwarebytes.org
32.188.232.235 downloads.microsoft.com
226.251.177.143 downloads.My-eTrust.com
178.72.136.132 downloads1.kaspersky-labs.com
211.229.243.202 downloads2.kaspersky-labs.com
69.144.107.29 downloads3.kaspersky-labs.com
196.207.53.193 downloads4.kaspersky-labs.com
216.28.79.182 downloads5.kaspersky-labs.com
248.185.118.252 dr-web-cureit.softonic.com
106.100.238.147 drsolomon.com
233.164.184.55 drweb-inside.com
185.240.210.44 drweb.com
30.142.249.114 drweb.com.es
75.56.114.197 drweb.net
14.120.59.106 drwebinside.com
222.196.85.95 dswlab.com
255.98.125.181 duba.net
129.28.73.76 ealaddin.net
67.92.206.240 ealaddin.orgeshop.aladdin.com
19.169.233.229 easy-vpn.comodo.com
52.70.84.43 edm.symantec.com
166.241.204.126 education.symantec.com
37.48.149.34 eeload.com
56.125.108.23 eeye.com
89.214.215.93 eicar.org
135.197.79.176 elblogdemanu.com
74.193.25.152 elitepvpers.de
26.81.51.141 emea.trendmicro.com
203.59.235.32 emsisoft.com
61.42.99.183 emsisoft.de
0.37.44.91 encarta.msn.com
207.182.71.80 engine.awaps.net
240.15.110.150 enterprisesecur.symantec.com
98.254.230.233 eos.eset.es
225.249.176.209 eradicatespyware.net
245.70.202.198 es.answers.yahoo.com
21.228.241.200 es.kioskea.net
67.210.105.95 es.mcafee.com
6.206.51.3 es.trendmicro.com
214.26.77.248 es.wasalive.com
247.184.184.62 esafe.com
104.166.49.145 esecurity.livecall.co.kr
43.162.250.54 eset-la.com
251.238.208.43 eset.com
28.140.60.113 eset.es
142.123.180.8 eset.sk
13.118.125.172 esp.sophos.com
32.195.84.161 espanol.answers.yahoo.com
65.96.191.231 espanol.dir.groups.yahoo.com
179.79.55.58 espanol.groups.yahoo.com
50.74.1.222 esupport.trendmicro.com
2.183.59.243 et.symantec.com
66.84.98.57 etrr.co.uk
180.67.218.140 eugrantsadvisor.cz
119.63.164.116 eugrantsadvisor.de
71.139.190.105 eval.symantec.com
104.41.229.107 ewido.net
217.23.94.2 exchangeyourcareer.net
88.19.39.166 experts-exchange.com
108.95.65.155 f-prot.com
141.253.105.226 f-secure.com
255.235.37.53 f-secure.frf-secure.hk
125.231.238.29 f-secure.nlfsecure.com
77.52.197.18 fastclick.net
110.209.48.20 feedage.com
224.124.168.171 feeds.sophos.com
163.187.113.79 feeds.trendmicro.com
114.8.72.68 file.ikaka.cn
147.165.179.138 file.ikaka.com
5.80.43.221 file.net
132.144.245.129 files.avast.com
152.220.15.118 files.filefont.com
185.122.70.204 files.trendmicro-europe.com
58.52.191.99 filseclab.com
185.116.136.7 final4ever.com
137.192.162.252 finjan.com
238.94.202.67 firewall.sunbeltsoftware.com
28.8.66.150 firewallguide.com
222.72.11.58 fixmyim.com
174.149.37.47 foro.ethek.com
207.50.77.117 foros.toxico-pc.com
65.221.9.12 foros.zonavirus.com
4.28.142.176 forospanish.com
211.105.169.165 forospyware.com
244.6.20.235 forospyware.es
102.177.140.62 fortiguardcenter.com
229.240.86.226 fortihero.com
249.61.44.215 fortilog.com
25.151.151.29 fortinet.co.at
71.133.16.112 fortinet.com
10.129.217.88 fortiprotect.com
218.17.243.77 fortiwifi.com
251.107.27.80 forum.clubedohardware.com.br
109.89.147.231 forum.emsisoft.com
192.229.236.27 forum.hardware.fr
144.118.7.16 forum.hijackthis.de
176.207.46.86 forum.ikaka.com
34.190.166.169 forum.jiangmin.com
161.186.112.145 forum.kaspersky.com
181.6.138.134 forum.malekal.com
214.164.177.136 forum.piriform.com
3.146.42.31 forum.securitycadets.com
198.142.243.211 forum.sysinternals.com
166.234.29.200 forum.telecharger.01net.com
199.136.137.15 forum.tweaks.com
57.118.1.98 forum.zazana.com
251.114.202.6 forums.cnet.com
203.191.161.251 forums.comodo.com
236.92.12.65 forums.devshed.com
94.75.132.216 forums.maddoktor2.com
221.70.77.124 forums.majorgeeks.com
240.147.36.113 forums.techguy.org
17.48.143.183 forums.whatthetech.com
131.31.7.10 fr.bitdefender.com
2.27.209.174 fr.drweb.com
210.103.235.163 fr.mcafee.com
243.5.18.233 fr.trendmicro.com
100.243.139.60 fr1.drweb.com
39.239.84.36 fr2.drweb.com
247.59.110.25 fr3.drweb.com
24.217.150.28 fr4.drweb.com
138.199.14.179 fr5.drweb.com
8.195.231.103 fr6.drweb.com
44.32.1.92 fr7.drweb.com
77.189.41.162 fractus.mat.uson.mx
191.172.229.245 free-av.com
62.167.174.221 free-av.net
13.244.133.210 free.antivirus.com
46.145.240.212 free.avg.com
160.60.104.107 free.drweb.com
99.123.50.15 free.grisoft.com
51.200.8.4 free.grisoft.cz
83.102.115.74 free.pandasecurity.com
197.16.236.157 free.prevx.com
68.80.181.65 free.tinypicbox.com
88.172.223.70 freeav.com
137.74.6.140 freeav.net
250.244.127.36 freespywareremoval.info
121.52.72.200 frisk-software.com
73.128.98.189 fsc.norman.com
174.30.138.3 fsecure.nlwebyard.com
220.201.2.86 ftp.avp.com
159.8.203.250 ftp.bitdefender.com
110.85.230.239 ftp.ca.co
143.242.13.53 ftp.ca.com
1.157.201.204 ftp.customer.symantec.com
196.220.79.112 ftp.dispatch.mcafee.com
148.41.105.101 ftp.download.mcafee.com
180.199.212.171 ftp.downloads-eu1.kaspersky-labs.com
38.113.77.254 ftp.downloads-eu2.kaspersky-labs.com
165.177.22.162 ftp.downloads-eu3.kaspersky-labs.com
185.253.236.151 ftp.downloads-eu4.kaspersky-labs.com
218.87.87.221 ftp.downloads-us1.kaspersky-labs.com
8.69.208.49 ftp.downloads-us2.kaspersky-labs.com
91.209.41.169 ftp.downloads-us3.kaspersky-labs.com
42.98.68.158 ftp.downloads-us4.kaspersky-labs.com
75.187.107.160 ftp.downloads1.kaspersky-labs.com
189.170.227.55 ftp.downloads2.kaspersky-labs.com
128.166.173.219 ftp.downloads3.kaspersky-labs.com
80.54.199.208 ftp.downloads4.kaspersky-labs.com
113.144.238.22 ftp.drweb.com
226.126.103.105 ftp.esafe.com
97.122.48.81 ftp.europe.f-secure.com
117.198.74.70 ftp.f-prot.com
150.100.114.73 ftp.f-secure.com
196.82.234.224 ftp.grisoft.com
134.78.179.132 ftp.kaspersky-labs.com
86.155.205.121 ftp.kaspersky.com
119.56.57.191 ftp.kasperskylab.ru
233.39.177.18 ftp.liveupdate.symantec.com
172.34.122.182 ftp.liveupdate.symantecliveupdate.com
123.111.81.187 ftp.mast.mcafee.com
172.28.204.1 ftp.mcafee.com
30.11.68.152 ftp.microworldsystems.com
157.6.14.60 ftp.my-etrust.com
177.83.228.49 ftp.nai.com
209.241.79.119 ftp.networkassociates.com
67.223.200.202 ftp.norton.com
194.219.145.110 ftp.rads.mcafee.com
146.39.171.99 ftp.sandbox.norman.com
179.197.210.169 ftp.secure.nai.com
37.179.75.253 ftp.securityresponse.symantec.com
231.175.36.245 ftp.sophos.com
199.11.62.234 ftp.symantec.com
232.169.102.236 ftp.symantecliveupdate.com
90.152.222.131 ftp.symatec.com
217.147.167.39 ftp.trendmicro.com
236.224.194.28 ftp.uk.trendmicro-europe.com
13.125.233.98 ftp.update.symantec.com
127.108.165.181 ftp.updates.symantec.com
254.103.111.157 ftp.updates1.kaspersky-labs.com
206.180.69.146 ftp.updates2.kaspersky-labs.com
238.82.176.148 ftp.updates3.kaspersky-labs.com
96.252.41.43 ftp.updates4.kaspersky-labs.com
35.60.242.207 ftp.us.mcafee.com
243.136.200.196 ftp.viruslist.com
20.38.51.10 funkytoad.com
133.208.172.94 futurenow.bitdefender.com
4.16.117.2 fw.rising.com.cn
24.108.159.7 fx.dk
73.10.199.77 gangbang.mytijn.org
187.181.63.228 gdata.de
57.244.8.136 gdata.es
9.65.35.125 gecadsoftware.com
110.222.74.195 geekstogo.com
156.137.194.22 global.ahnlab.com
95.200.140.186 global.jiangmin.com
189.164.53.62 global.nprotect.com
222.65.92.132 go.mcafee.com
80.236.24.27 go.microsoft.com
19.43.158.191 go.rising.com.cn
227.120.184.180 go.sunbeltsoftware.com
3.22.35.250 go.symantec.com
117.192.156.77 go.trendmicro.com
244.0.101.241 greatis.com
8.76.59.230 grisoft.com
41.166.166.44 grisoft.cz
87.148.31.128 grv.microsoft.com
25.144.232.104 guiadohardware.net
25.80.50.141 guru.avg.com
58.170.90.143 guru1.grisoft.cz
172.152.210.38 guru2.grisoft.cz
110.148.155.202 guru3.grisoft.cz
62.37.182.191 guru4.grisoft.cz
95.126.221.5 guru5.grisoft.cz
209.109.85.88 gwava.nl
80.104.30.64 hacksoft.com.pe
244.69.201.197 hacksoft.pe
21.227.240.199 halmapr.com
66.209.105.94 hauri.co.kr
5.205.50.3 hauri.net
213.25.76.248 haurijapan.com
246.183.184.62 help.rising.com.cn
104.166.48.145 hi.baidu.com
43.161.249.53 hijackthis.de
250.238.208.42 hijackthis.download3000.com
27.139.59.112 hishomeforchildren.com
141.122.179.7 hjt-data.trend-braintree.com
12.117.125.171 hjt.networktechs.com
32.194.83.160 home.mcafee.com
64.95.190.230 hostedmailsecur.symantec.com
178.78.54.57 hotshare.net
49.74.0.221 housecall.com
1.150.26.210 housecall.trendmicro.com
34.52.81.40 housecall60.trendmicro.com
163.50.202.123 housecall65.trendmicro.com
102.46.147.99 howsafeismypc.com
54.122.173.89 huaifai.go.th
87.24.213.91 i-vault.comodo.com
201.7.77.242 iavs.cz
71.2.22.150 ibusca.me
91.79.49.139 idauthority.com
124.236.88.209 ids.kaspersky-labs.com
238.219.20.36 ieupdate.gdata.de
109.214.221.12 ieupdate1.gdata.de
61.35.180.17 ieupdate2.gdata.de
109.208.47.19 ieupdate3.gdata.de
223.123.167.170 ieupdate4.gdata.de
162.187.113.78 ieupdate5.gdata.de
114.7.71.67 ieupdate6.gdata.de
147.165.178.137 ikaka.cn
4.79.43.220 ikaka.com
131.143.244.128 ikarus.at
151.219.14.118 ikarus.net
184.121.54.188 ilove.tigolbittys.info
42.35.174.83 images.kaspersky.com
168.99.119.247 in.answers.yahoo.com
120.176.146.236 incodesolutions.com
221.77.185.50 info.drweb.com
11.248.49.133 info.prevx.com
206.55.250.41 infos-du-net.com
157.132.21.30 infosecpodcast.com
190.33.60.100 infospyware.com
48.204.248.11 inicioid.com
3.27.142.175 iniciorapido.info
211.104.168.164 inline-software.de
243.6.19.234 internetsecurity.comodo.com
101.176.140.61 intranet.cidiroax.ipn.mx
228.240.85.225 investor.symantec.com
248.60.43.214 irc.bigshitsandwich.org
169.38.39.173 irc.metraiciono.com
215.21.159.0 iseclab.org
154.16.104.232 isotopecomics.com
106.161.131.221 iss.net
138.250.170.223 it.answers.yahoo.com
252.233.34.118 it.bitdefender.com
191.229.236.26 it.mcafee.com
143.117.6.15 it.trendmicro.com
176.207.45.85 itw.trendmicro.com
33.189.166.168 ixomodels.com
160.185.111.144 ixostore.ixomodels.com
180.5.137.134 javacoolsoftware.com
213.163.177.136 jetico.com
3.145.41.31 jiangmin.com
197.141.242.211 jiangmin.com.cn
165.234.28.200 jobs.bitdefender.com
198.135.136.14 jotti.org
56.118.0.97 jp.mcafee.com
251.113.201.5 jp.trendmicro.com
202.190.160.250 justfacebook.net
235.91.11.64 k-otik.com
93.74.131.215 k7computing.com
220.70.77.123 kaba.360.cn
240.146.35.112 kaba.360.com
17.48.142.182 karuna-shechen.org
130.30.7.9 kaspersky-fr.com
1.42.224.189 kaspersky-labs.com
225.118.250.178 kaspersky.co.jp
2.20.34.248 kaspersky.co.uk
116.2.154.76 kaspersky.com
54.254.99.52 kaspersky.com.cn
6.75.125.41 kaspersky.dk
39.232.165.43 kaspersky.es
153.215.29.194 kaspersky.gr
24.210.230.102 kaspersky.pl
43.31.1.91 kaspersky.ru
76.188.40.161 kaspersky.se
190.171.228.244 kasperskylab.co.kr
221.71.78.124 kasperskylab.nl
173.147.36.113 kav.ru
206.49.144.116 kav.zonelabs.com
64.219.8.11 kb.bitdefender.com
2.27.209.175 kb.bitdefender.de
210.104.167.164 kb.bitdefender.us
243.5.19.234 kerio.com
101.176.139.61 kimzimmer.net
228.239.84.225 kioskea.net
247.60.111.214 kpfans.com
24.217.150.28 kr.ahnlab.com
138.132.14.179 kr.sophos.com
9.195.216.87 krupunmai.com
217.16.242.76 kvup.jiangmin.com
62.174.25.146 kztechs.com
107.88.146.229 l33t.shadow-mods.net
46.168.107.153 la.trendmicro.com
14.244.133.142 ladooscuro.es
47.146.173.212 laneros.com
161.60.105.108 latam.kaspersky.com
99.124.238.16 latin.bitdefender.com
51.201.8.5 lavasoft.com
84.102.116.75 lavasoft.nu
198.17.236.158 lavasoftusa.com
69.80.181.66 lexikon.ikarus.at
88.157.140.55 license.drweb.com
137.6.7.141 linhadefensiva.org
183.245.127.224 linhadefensiva.uol.com.br
122.240.73.216 linux.bitdefender.com
90.145.115.205 lists.clamav.net
122.234.154.207 liutilities.com
236.217.18.102 live.sunbeltsoftware.com
175.213.220.10 liveprotect.net
127.101.246.255 liveupdate.symantec.com
160.191.29.69 liveupdate.symantec.d4p.net
17.173.150.152 liveupdate.symantecliveupdate.com
144.169.95.129 looknstop.com
164.245.121.118 lovings.technigoyous.net
197.147.161.120 lurker.clamav.net
243.130.25.15 mailcenter.rising.com
181.125.226.179 mailcenter.rising.com.cn
133.202.253.168 majorgeeks.com
166.249.250.128 mall.hauri.co.kr
170.232.114.211 malwarebytes.org
109.227.59.119 malwarecity.com
60.48.18.108 malwarecity.netmalwarecity.org
93.205.125.178 malwaredomainlist.com
207.188.245.73 malwarepedia.com
78.183.207.253 malwareremoval.com
114.20.165.242 malwarescan.emsisoft.com
146.178.16.56 malwarescan.emsisoft.de
4.160.136.139 malwarescan.emsisoft.es
131.156.82.47 mamutu.com
83.232.108.36 manuelruvalcaba.com
116.134.147.106 marian.symantec.com
229.116.12.189 mast.mcafee.com
168.112.213.166 mcafee-at-home.com
120.188.239.155 mcafee.com
153.90.23.157 mcafeeb2b.com
11.73.143.52 mcafeefans.com
138.68.88.216 mcafeeretail.com
157.145.115.205 mcaffee.com
190.46.154.19 me.kaspersky.com
48.29.102.118 media.fastclick.net
191.40.48.94 megasecurity.org
143.117.6.83 merijn.org
175.18.113.85 metascan-online.com
33.189.233.236 microsoft.com
228.253.179.144 microsoft.fr
180.73.137.133 midescargas.com
213.231.244.203 mirror02.gdata.de
70.145.109.30 misec.net
197.209.70.210 mmsk.cn
233.45.96.200 moneybookers.com
10.203.136.14 moosoft.com
124.117.0.165 mop.pandasecurity.com
250.181.201.73 mostz.com
202.2.228.62 mozilla-hispano.org
47.159.11.132 msdn.microsoft.com
93.74.131.215 msk.drweb.com
32.137.76.123 msk1.drweb.com
239.214.103.112 msk2.drweb.com
16.115.142.182 msk3.drweb.com
130.30.74.77 msk4.drweb.com
69.94.208.241 msk5.drweb.com
21.170.234.230 msk6.drweb.com
54.72.85.44 msk7.drweb.com
56.131.94.16 msncleaner.softonic.com
183.194.39.180 msnfix.changelog.fr
202.15.254.169 msnvirusremoval.com
235.104.105.239 msr.mcafee.com
25.87.225.66 mvps.org
220.82.171.42 mx.answers.yahoo.com
172.227.197.31 mx.mcafee.com
204.61.236.33 mxttchina.com
62.43.100.184 my-etrust.com
1.39.46.92 my.drweb.com
209.183.72.81 mygeekside.com
2.33.127.167 nabble.com
115.15.248.250 nai.com
242.11.193.226 natsko.com
6.87.219.216 naturesimages.net
39.245.3.218 net-security.org
85.228.123.113 network.drweb.com
23.223.68.21 networkassociates.com
231.44.95.10 networkassociates.nai.com
8.201.202.80 networkworld.com
122.184.66.163 neunet.orgnews.bitdefender.com
61.179.11.71 new-beta.drweb.com
13.0.226.60 new-company.drweb.com
45.157.77.130 new-estore.drweb.com
159.140.197.25 new-forum.drweb.com
30.136.159.205 new-partners.drweb.com
66.228.117.194 new-solutions.drweb.com
99.130.224.8 new-support.drweb.com
212.112.89.91 new-www.drweb.com
83.108.34.255 new.taringa.net
35.184.60.245 news.drweb.com
68.86.100.59 newsletters.trendmicro.com
198.84.236.158 niueight.norman.no
136.80.181.134 niufive.norman.no
88.157.207.123 niufour.norman.no
121.58.247.125 niunine.norman.no
235.41.111.20 niuone.norman.no
106.36.56.184 niuseven.norman.no
125.113.83.173 niusix.norman.no
158.14.122.243 niuthree.norman.no
16.253.54.70 niutwo.norman.no
143.248.0.46 nl.bitdefender.com
95.69.214.35 noadware.net
128.227.65.37 nod32.co.uk
241.141.186.188 nod32.com
180.205.131.96 nod32.datsec.de
132.25.89.85 nod32.lu
53.71.85.44 nod32.ru
167.242.205.127 norman.com
38.49.150.35 norton.com
58.126.177.24 notifier.antivir-pe.de
90.27.216.94 novirusthanks.org
204.198.80.245 nprobeta.norman.com
75.6.26.153 nprotect.com
27.82.52.142 nprotect.net
144.0.107.228 nprotect.seoul.go.kr
189.170.228.55 nsclean.com
128.234.173.219 ntfaq.co.kr
80.54.199.208 obscgi.mcafee.com
113.212.239.23 oem.sunbeltsoftware.com
227.126.171.174 offensivecomputing.net
165.190.48.82 office.microsoft.com
117.11.74.71 oldtimer.geekstogo.com
150.168.182.141 one.tinypicbox.com
8.83.46.224 onecare.live.com
135.146.247.132 online-backup.comodo.com
154.223.206.121 online.jiangmin.com
187.56.57.191 online.rising.com.cn
249.55.193.34 onlinecheck.emsisoft.com
188.50.139.10 onlinecheck.emsisoft.de
140.195.165.255 onlinecheck.emsisoft.net
172.29.204.1 onlinecheck.emsisoft.org
30.11.69.152 onlinescan.avast.com
241.23.30.76 openantivirus.org
193.167.56.65 outpost.pl
226.1.95.135 ozzu.com
83.239.216.219 p3dev.taringa.net
210.235.161.195 pandalabs.pandasecurity.com
230.55.187.184 pandasecurity.com
7.213.227.186 pandasoftware.com
53.196.91.81 pandasoftware.es
248.191.36.245 pantip.com
199.12.63.234 pcav.cn
232.169.170.48 pccreg.antivirus.com
90.152.34.131 pccreg.trendmicro.com
29.147.236.39 pcentraide.com
237.224.82.172 pcguide.com
158.14.190.243 pchell.com
16.252.54.138 pcinternetpatrol.com
142.248.255.46 pcsupportadvisor.com
162.69.213.35 pctools.com
195.226.65.105 pda.drweb.com
53.209.185.188 pedidos.protegerse.com
180.204.130.96 personal.psu.edu
131.25.157.85 personalfirewall.comodo.com
164.182.196.155 pestpatrol.com
22.165.60.238 pg.hauri.net
233.176.22.230 phx.corporate-ir.net
185.253.48.219 pineleafboys.com
217.155.87.221 podcasts.sophos.com
75.137.208.116 pogonyuto.forospanish.com
202.133.153.24 precisesecurity.com
222.209.179.13 prevx.com
255.111.219.83 privacy.microsoft.com
113.93.151.167 products.drweb.com
239.89.96.143 promotions.drweb.com
191.166.54.132 psnw.com
240.83.178.150 pspl.com
98.254.42.45 pvtc.org
37.61.243.209 qqjkw.net
244.138.202.198 quickheal.co.in
21.39.53.12 quickheal.com
135.210.173.95 radius.turvamies.com
6.17.119.3 rads.mcafee.com
26.94.145.248 ravantivirus.com
58.252.184.62 raymond.cc
172.166.49.213 reg-int.nod32-es.com
43.230.250.121 reg.eset.es
11.66.36.126 reg.rising.com.cn
112.224.75.196 register.norman.com
157.138.196.23 removetrojanvirus.org
96.202.141.188 renewalcenter.symantec.com
48.22.167.177 renewals.bitdefender.com
81.180.207.247 research.microsoft.com
195.95.139.142 research.pandasecurity.com
133.158.16.50 research.sunbelt-software.com
85.235.43.39 resplendence.com
118.136.150.109 retail.sp.f-secure.com
232.51.14.192 retail01.sp.f-secure.com
103.114.216.100 retail02.sp.f-secure.com
123.191.174.89 ribbonwarehouse.com
155.24.25.159 rising-global.com
201.7.145.242 rising.com
140.3.91.218 rising.com.cn
92.147.117.207 rolandovera.com
125.237.156.209 rootkit.com
238.219.21.104 rootkit.nl
177.215.222.13 rover800.gaima.co.uk
129.103.248.2 roysephotos.com
162.193.32.214 ru.trendmicro.com
163.62.39.42 ruben.bzin.net
33.58.240.18 runscanner.net
53.135.10.7 safe.qq.com
86.36.50.9 safecomputing.umn.edu
132.19.170.160 safer-networking.org
71.14.115.68 safetynet.com
22.91.142.57 sales.bitdefender.com
55.248.249.127 samroeng.hi5.com
169.231.113.210 sandbox.norman.com
108.226.59.118 sandboxie.com
60.47.17.107 sapcupgrades.com
92.205.124.177 sarahmcconnellphotography.net
206.187.245.72 saverssite.com
77.183.190.236 scan.anti-trojan.net
97.3.148.225 scan.kingsoft.com
130.161.255.39 scan4you.net
244.143.120.123 scanner.novirusthanks.org
114.139.65.31 scanner.virus.org
66.215.91.20 scanner2.novirusthanks.or
99.117.131.90 schemas.microsoft.com
229.116.11.189 schemas.xmlsoap.org
168.111.212.165 sea.symantec.com
119.188.239.154 search.ca.com
152.89.22.156 search.mcafee.com
10.72.142.51 search.symantec.com
137.67.88.215 seasonsecurity.com
157.144.114.204 secdreg.org
189.46.153.18 secubox.aldria.com
47.28.85.101 secunia.com
174.24.31.77 secure-email.comodo.com
126.100.245.66 secure.av-desk.com
159.2.96.68 secure.nai.com
16.172.217.219 securecomputing.com
211.236.162.128 secureme.com
163.56.120.117 securitoo.com
212.230.244.203 security.symantec.com
70.145.108.30 securitycheck.symantec.com
196.208.53.194 securitynewsportal.com
216.29.80.183 securityrespons.symantec.com
249.186.119.253 securityresponse.symantec.com
107.101.239.148 securitywonks.net
234.164.185.56 secuser.com
186.241.211.45 secuser.model-fx.com
30.142.250.115 sergiwa.com
76.57.114.198 service.mcafee.com
15.121.60.106 service1.symantec.com
223.197.86.95 servicenews.symantec.com
0.99.125.165 sfdoccentral.symantec.com
113.29.74.76 shadow.grisoft.cz
68.93.207.240 shadu.baidu.com
20.169.233.230 shadu.duba.net
53.71.85.44 shield.prevx.com
167.241.205.127 shop.hauri.co.kr
37.49.150.35 shop.pandasecurity.com
57.126.109.24 shop.sunbeltsoftware.com
90.215.216.94 shop.symantec.com
136.198.80.177 shop.trendmicro.com
75.193.25.153 shudoo.com
26.82.52.142 simplysup.com
59.171.91.144 siren24.nprotect.com
173.154.100.183 siteadvisor.com
0.38.45.92 sitedirector.symantec.com
208.182.71.81 smallbiz.symantec.com
241.16.111.151 smbstore.trendmicro.com
99.255.231.234 smokey-services.eu
226.250.176.210 soccersuck.com
245.71.203.199 softfaq.com
22.228.242.201 softonic.com
68.211.106.96 software-files.download.com
7.206.52.36 solutions.drweb.com
246.59.110.25 sophos.com
23.216.217.95 sophos.fr
137.199.81.178 sophos1.ucd.ie
76.195.27.86 sophos10.ucd.ie
28.15.241.75 sophos2.ucd.ie
61.173.92.145 sophos5.ucd.ie
190.171.229.56 sophos6.ucd.ie
61.167.174.220 sophos7.ucd.ie
81.243.132.209 sophos8.ucd.ie
114.145.240.24 sophos9.ucd.ie
228.127.104.107 soporte.pandasecurity.com
98.123.49.15 sos.rising.com.cn
50.200.75.4 sosvirus.changelog.fr
83.101.115.74 spd.atdmt.com
197.84.235.157 specs.xmlsoap.org
136.79.180.133 speedtest.comodo.com
87.156.207.122 spftrl.digitalriver.com
120.57.246.124 spyany.com
234.40.110.19 spyblocker-software.com
105.35.56.71 spybot.info
13.0.226.61 spycheck.co.uk
46.158.10.131 spycheck.es
160.140.198.214 spychecker.com
30.136.143.190 spycop.com
238.213.102.179 spywaredb.com
15.114.209.181 spywaredlls.prevx.com
129.29.73.76 spywarefiles.prevx.com
68.92.18.240 spywareguide.com
20.169.233.229 spywareinfo.com
52.70.84.43 spywareterminator.com
166.241.204.126 square.bitdefender.com
37.49.150.34 static.yoreparo.com
57.125.176.23 stats.norton.com
106.43.231.109 stdio-labs.blogspot.com
219.213.96.4 stiller.com
90.21.41.168 store.bitdefender.com
42.97.67.157 store.de.bitdefender.com
143.255.107.228 store.drweb.com
189.169.227.55 store.trendmicro.com
127.233.172.219 subs.geekstogo.com
79.54.198.208 subwiz.trendmicro.com
112.211.238.22 sucop.com
226.126.170.173 sun.symantec.com
165.189.47.81 sunbelt-software.com
116.10.74.70 sunbeltsecurity.com
149.167.181.140 sunbeltsoftware.com
7.82.45.223 superboy2010.com.au
134.146.247.131 superdicas.com.br
154.222.205.120 superuser.co.kr
187.56.56.190 support.drweb.com
232.38.177.17 support.f-secure.com
171.34.138.9 support.kaspersky.co
139.194.164.254 support.mcafee.com
172.28.204.1 support.microsoft.com
30.10.68.152 support.pandasecurity.com
224.6.13.60 support.rising-global.com
176.151.39.49 sybari.com
209.240.79.119 sygate.com
67.223.199.202 symantec-ese.baynote.net
194.218.144.178 symantec.com
213.39.171.167 symantecliveupdate.com
246.196.210.169 symatec.com
36.179.74.64 sysinternals.com
231.174.20.228 system-cleaner.comodo.com
199.11.62.233 tallemu.com
231.169.169.47 taringa.net
89.151.34.130 tds.diamondcs.com.au
28.147.235.38 tech.pantip.com
236.223.193.27 techimo.com
13.125.44.97 techspot.com
126.107.165.249 techsupportforum.com
253.103.110.157 tecniservicioslys.com
17.179.68.146 tecno-soft.com
50.81.176.216 tempuri.org
164.64.40.43 thecomputerpitstop.com
35.59.241.207 thejokerx.blogspot.com
242.136.156.84 thetechguide.com
164.182.195.154 thinkpad.cn
21.164.60.237 threatexpert.com
216.160.5.213 threatinfo.trendmicro.com
168.236.31.202 timeforyourbusi.pandasecurity.com
201.138.71.205 timestamp.comodoca.com
59.120.191.100 timestamp.wosign.com
185.116.136.8 tinysoftware.com
205.193.162.253 tms.symantec.com
238.94.202.67 together.pctools.com
96.77.134.150 tool.ikaka.com
223.72.79.126 toonbox.de
174.149.54.131 tr.mcafee.com
223.66.161.133 trackingtheworld.com
81.237.25.28 training.drweb.com
20.44.227.192 training.trendmicro.com
228.121.185.181 trapware.com
4.23.36.251 trendmicro.com
118.193.157.78 trendmicro.com.cn
245.1.102.242 trendmicro.fr
9.77.128.231 trendsecure.com
42.235.167.45 trial.trendmicro.com
156.149.32.197 trucoswindows.es
26.213.233.105 trucoswindows.net
234.34.3.94 tw.mcafee.com
79.191.43.164 tw.sophos.com
125.106.163.247 tw.trendmicro.com
64.169.108.155 tweaksforgeeks.com
15.246.135.144 u0.eset.com
48.147.174.214 u1.eset.com
162.62.106.109 u10.eset.com
101.125.240.17 u100.eset.com
69.218.26.22 u11.eset.com
101.120.133.92 u12.eset.com
215.34.254.175 u13.eset.com
86.98.199.83 u14.eset.com
106.174.157.72 u15.eset.com
139.8.8.142 u16.eset.com
184.246.129.226 u17.eset.com
123.242.74.202 u18.eset.com
75.130.100.191 u19.eset.com
108.220.140.193 u2.eset.com
222.203.4.88 u20.eset.com
161.198.205.252 u21.eset.com
112.87.232.241 u22.eset.com
161.192.31.71 u23.eset.com
19.175.151.154 u24.eset.com
146.170.97.130 u25.eset.com
166.247.123.119 u26.eset.com
198.148.162.121 u27.eset.com
244.131.26.16 u28.eset.com
183.127.228.180 u29.eset.com
135.203.254.169 u3.eset.com
168.105.105.239 u30.eset.com
165.227.110.206 u31.eset.com
104.223.55.114 u32.eset.com
56.43.13.103 u33.eset.com
89.201.120.173 u34.eset.com
203.183.241.84 u35.eset.com
89.195.202.249 u36.eset.com
109.15.160.238 u36eset.com
158.189.28.68 u37.eset.com
16.172.148.151 u37eset.com
142.167.93.59 u38.eset.com
94.244.120.48 u39.eset.com
127.145.159.118 u4.eset.com
241.128.23.201 u40.eset.com
180.123.225.177 u41.eset.com
132.200.251.166 u42.eset.com
164.101.34.168 u43.eset.com
22.84.154.63 u44.eset.com
149.80.100.227 u45.eset.com
185.172.142.232 u46.eset.com
218.74.181.46 u47.eset.com
75.56.114.129 u48.eset.com
202.52.59.105 u49.eset.com
154.128.17.95 u5.eset.com
75.174.13.241 u50.eset.com
189.89.133.136 u51.eset.com
128.152.79.44 u52.eset.com
80.229.37.33 u53.eset.com
112.130.144.103 u54.eset.com
226.45.8.186 u55.eset.com
97.109.210.94 u56.eset.com
117.185.236.83 u57.eset.com
150.87.19.153 u58.eset.com
7.1.140.48 u59.eset.com
134.65.85.213 u6.eset.com
86.141.111.202 u60.eset.com
187.43.151.16 u61.eset.com
233.214.15.99 u62.eset.com
172.21.216.7 u63.eset.com
123.98.243.252 u64.eset.com
156.255.26.66 u65.eset.com
14.170.214.217 u66.eset.com
209.233.92.125 u67.eset.com
161.54.118.114 u68.eset.com
209.227.241.200 u69.eset.com
67.142.105.27 u7.eset.com
194.206.51.191 u70.eset.com
214.26.9.180 u71.eset.com
247.116.116.250 u72.eset.com
36.98.237.77 u73.eset.com
231.94.182.53 u74.eset.com
183.238.208.43 u75.eset.com
216.72.248.45 u76.eset.com
74.55.112.196 u77.eset.com
28.66.73.120 u78.eset.com
252.227.115.125 u79.eset.com
29.60.155.195 u8.eset.com
143.43.19.22 u80.eset.com
14.38.220.254 u81.eset.com
33.115.247.243 u82.eset.com
66.16.30.245 u83.eset.com
112.255.150.140 u84.eset.com
51.250.96.48 u85.eset.com
3.71.122.37 u86.eset.com
36.229.229.107 u87.eset.com
149.211.94.190 u88.eset.com
88.207.39.98 u89.eset.com
40.27.253.87 u9.eset.com
73.185.105.158 u90.eset.com
187.167.225.53 u91.eset.com
57.163.170.217 u92.eset.com
77.240.17.94 u93.eset.com
254.29.124.164 u94.eset.com
112.12.244.247 u95.eset.com
239.8.190.155 u96.eset.com
191.84.216.144 u97.eset.com
224.242.255.214 u98.eset.com
81.224.120.41 u99.eset.com
36.236.81.33 uk.mcafee.com
244.56.107.22 uk.trendmicro-europe.com
21.214.147.25 uk.trendmicro.com
135.196.11.176 ulove.tigolbittys.info
5.192.212.84 up.duba.net
25.13.238.73 up.rising.com.cn
58.170.22.143 up1.nod123.cn
172.153.210.226 upd.zonelabs.com
43.148.155.202 update.360safe.cn
250.225.114.191 update.360safe.com
43.142.237.209 update.aladdin.com
157.57.101.104 update.authentium.com
96.120.47.12 update.avg.com
64.213.21.17 update.avgfrance.com
96.115.128.87 update.bitdefender.com
210.29.249.170 update.drweb.com
81.93.194.78 update.ewido.com
101.169.220.67 update.grisoft.com
134.71.3.137 update.grisoft.cz
247.241.124.33 update.hispasec.com
118.49.69.197 update.ikaka.com
70.125.95.186 update.ikarus-software.at
171.27.135.0 update.quickheal.com
217.198.255.83 update.rising.com.cn
156.5.200.247 update.sophos.com
107.82.227.236 update.symantec.com
140.239.10.50 update.trendmicro.com
254.154.198.201 update7.jiangmin.com
193.217.76.109 updatem.360safe.cn
145.38.102.98 updatem.360safe.com
177.196.209.168 updates.a-2.org
35.110.74.251 updates.drweb.com
162.174.19.159 updates.f-prot.com
182.250.233.148 updates.sald.com
103.228.229.107 updates.symantec.com
149.211.93.190 updates3.kaspersky-labs.com
88.206.38.166 updates4.kaspersky-labs.com
39.95.65.155 updates5.kaspersky-labs.com
72.184.104.157 upgrade.bitdefender.com
186.167.224.52 upgrade1.bitdefender.com
125.163.170.216 upgrade2.bitdefender.com
77.51.196.205 upgrade3.bitdefender.com
110.141.235.19 upgrade4.bitdefender.com
223.123.100.102 upload.changelog.fr
94.119.45.78 us.bitdefender.com
114.195.71.67 us.mcafee.com
163.113.127.85 us.trendmicro.com
209.95.247.237 usa.kaspersky.com
147.91.192.145 usbcleaner.cn
99.168.218.134 ushousecall02.trendmicro.com
132.69.70.204 utilidades-utiles.com
246.52.190.31 v.dreamwiz.com
185.47.135.195 v4.windowsupdate.microsoft.com
136.124.94.184 v5.windowsupdate.microsoft.com
169.25.201.254 vet.com.au
27.8.65.149 vicentevirtual.com
154.3.11.57 viguard.com
174.80.225.46 vil.nai.com
206.238.76.116 vil.nail.com
64.220.197.199 virobot.co.kr
191.216.142.107 virscan.org
143.36.168.96 virus.org
176.194.207.166 virusbuster.hu
34.176.72.250 viruschief.com
228.172.17.226 virusdoctor.jp
180.249.43.215 virusfreezone.info
213.150.83.217 virusinfo.prevx.com
71.133.203.112 viruslist.com
198.128.148.20 viruslist.ru
217.205.175.9 virusscan.jotti.org
250.106.214.79 virusscanonline.net
108.89.146.162 virusspy.com
235.84.92.138 virustotal.com
203.177.66.143 visualizesoftware.com
235.79.173.145 visualtracking.symantec.com
93.249.38.40 vivo-austin.com
32.57.239.204 vms.drweb.com
240.133.197.193 vncsvr.com
17.35.48.7 vos.symantec.com
130.205.169.91 vrv.com.cn
1.13.114.255 vsantivirus.com
21.89.140.244 webadmin.norman.no
54.247.180.58 webphand.com
168.162.44.209 webroot.com
39.225.245.117 wedoantivirus.com
246.46.16.106 welkam.co.jp
91.203.55.176 wexperts-exchange.com
137.118.175.3 whatthetech.com
76.181.121.167 wikio.es
28.2.147.156 wilderssecurity.com
60.160.186.226 wilderssecurity.net
174.74.119.121 wildlist.com
113.138.252.29 windowsupdate.microsoft.com
65.214.22.18 winpatrol.com
98.116.129.88 wmcafee.com
211.30.250.171 woottonfootball.com
82.94.195.80 wtc.trendmicro.com
102.170.153.85 ww.emsisoft.com
151.20.21.155 www.1stavenuelimousines.co.uk
197.3.141.238 www.2xlgames.com
135.254.86.214 www.ahnlab.com
87.143.113.203 www.aks.com
120.232.152.205 www.aladdin.com
234.215.16.100 www.anti-trojan-software.net
173.210.218.8 www.anti-trojan.net
125.99.244.253 www.anti-virus.by
157.188.27.67 www.antivir.es
15.171.147.150 www.antivirus-tools.com
142.167.93.126 www.antiy.net
162.243.119.115 www.apsecure.com
195.145.158.117 www.arpia.be
240.127.23.12 www.authentium.com
179.123.224.177 www.authentium.com.au
131.199.250.166 www.av-desk.com
164.101.102.236 www.avast.com
22.84.222.63 www.avg.com
216.79.167.227 www.avhide.com
168.156.126.216 www.avoncourt.com
201.57.233.30 www.avx.ro
59.40.97.181 www.barder.com
186.35.43.89 www.beautybar.com
206.112.1.78 www.bg.virusblokada.com
238.13.108.148 www.bit-defender.de
96.252.228.231 www.bitdefende.de
223.248.174.139 www.bitdefender-es.com
175.68.200.128 www.bitdefender.be
208.226.239.198 www.bitdefender.cl
65.208.104.25 www.bitdefender.co.uk
4.204.49.2 www.bitdefender.com
99.167.218.133 www.bitdefender.com.au
132.69.1.135 www.bitdefender.com.sg
246.51.122.31 www.bitdefender.com.tw
116.47.67.195 www.bitdefender.com.vn
136.123.93.184 www.bitdefender.de
169.25.133.254 www.bitdefender.es
27.8.65.81 www.bitdefender.fr
154.3.10.57 www.bitdefender.hk
105.80.225.46 www.bitdefender.us
138.237.76.48 www.bitdefenderme.com
252.152.196.199 www.briarhurst.com
191.215.142.107 www.brightoctober.com
143.36.100.96 www.buraka.tv
175.194.207.166 www.buscafacil.com
33.108.72.249 www.buscalo.in
160.172.17.157 www.busco.in
180.248.43.146 www.ca.com
213.150.82.216 www.cambridge-steiner-school.co.uk
71.64.203.112 www.ccssforum.org
197.128.148.20 www.celticmerchant.com
149.204.174.9 www.clamav.net
250.106.214.79 www.collectedcurios.com
40.21.78.162 www.comodo.com
251.100.39.86 www.comodo.tv
202.177.66.75 www.comodoantispam.com
235.78.105.145 www.comodopartners.com
93.249.37.40 www.computing.net
32.56.171.204 www.configurarequipos.com
240.133.197.193 www.contentverification.com
16.35.48.7 www.deborahshelton.net
130.205.168.90 www.dr-bull.com
1.13.114.254 www.drweb.com
21.89.72.243 www.ealaddin.com
54.179.179.57 www.elvis-express.com
99.161.44.140 www.emeraldclassic.co.uk
38.157.245.117 www.emsisoft.at
246.45.15.106 www.emsisoft.com
23.135.55.108 www.emsisoft.de
137.118.175.3 www.emsisoft.es
76.113.120.167 www.emsisoft.fr
27.2.147.156 www.emsisoft.it
60.91.186.226 www.emsisoft.jp
174.74.50.53 www.emsisoft.net
45.69.252.29 www.emsisoft.nl
65.146.22.18 www.emsisoft.org
97.48.61.20 www.engyro.com
143.30.182.171 www.entercept.com
82.26.127.79 www.esafe.com
34.102.153.68 www.eset.es
67.4.4.138 www.eugrantsadvisor.com
180.242.125.221 www.eugrantsadvisor.de
119.238.70.130 www.eugrantsadvisor.ie
71.58.28.119 www.eugrantsadvisor.se
120.232.152.205 www.exchangeyourcareer.com
234.215.16.100 www.f-prot.com
104.210.217.8 www.f-secure.com
124.31.176.253 www.fimasys.com
157.188.27.67 www.flairweddings.co.uk
15.171.147.150 www.forospyware.com
142.166.93.58 www.fortifed.com
94.243.119.47 www.fortiid.com
126.144.158.117 www.fortimail.com
240.127.22.200 www.fortinet-apac.com
179.123.224.176 www.fortinet.ch
131.199.250.165 www.fortinet.co.il
164.101.33.167 www.fortinet.com
21.83.154.62 www.fortinet.net
148.79.99.226 www.fortinet.nl
168.171.141.232 www.fortinet.sg
217.73.181.46 www.fortinetuk.com
75.55.113.129 www.freeality.com
201.51.58.105 www.freedrweb.ru
153.128.17.94 www.freerav.com
186.29.124.96 www.frisk-software.com
44.200.244.247 www.frisk.is
239.7.189.155 www.fsecure.com
190.84.148.144 www.garryowen.com
223.241.255.214 www.gdata.es
81.156.119.41 www.globalhauri.com
208.220.65.205 www.gokidding.com
228.40.91.194 www.grisoft.com
5.198.130.8 www.hackshields.com
118.112.251.159 www.hacksoft.com.pe
245.176.196.67 www.hacksoft.pe
197.252.222.57 www.handwritingforkids.com
42.154.6.127 www.hasp.se
88.68.126.210 www.hauri.co.kr
26.132.71.118 www.hauri.net
234.209.98.107 www.hxproduction.com
11.110.137.177 www.ibusca.me
125.25.69.72 www.ikarus.at
64.88.202.236 www.imddomains.co.uk
15.165.229.225 www.indielisboa.com
48.66.80.39 www.inicioid.com
162.237.200.122 www.iniciorapido.info
33.45.146.30 www.internationalservicecheck.com
53.121.104.19 www.irangoals.com
86.211.211.89 www.iseclab.org
131.193.76.172 www.ixomodels.com
215.77.165.37 www.jiangmin.com
166.222.192.26 www.jiangmin.com.cn
199.55.231.28 www.jotti.org
57.38.95.179 www.kaspersky.com
252.33.41.87 www.kioskea.net
204.178.67.76 www.latin-mass-society.org
236.12.106.146 www.livepcsupport.com
94.250.226.229 www.malwarecity.com
221.246.172.205 www.malwarecity.fr
241.66.198.194 www.mamutu.com
18.224.237.196 www.mamutu.de
63.206.102.91 www.manchester-offices.co.uk
2.202.47.0 www.mcafee.at
210.22.73.245 www.mcafee.com
243.180.181.59 www.metascan-online.com
101.163.45.142 www.microsoft.com
40.158.246.50 www.midescargas.com
247.235.205.39 www.mountainlakeslodge.com
24.136.56.109 www.mtr-design.com
138.119.176.4 www.mygeekside.com
9.114.122.168 www.netegrity.com
29.191.80.157 www.norman.com
61.92.187.227 www.nottinghampoetryseries.com
175.75.51.54 www.novirusthanks.org
46.71.253.218 www.npin.co.kr
254.147.23.207 www.nprotect.co.kr
31.49.62.21 www.nprotect.com
160.47.199.120 www.nprotect.com.br
99.43.144.96 www.nsclean.com
51.119.170.86 www.owen.org
84.21.210.88 www.pandasecurity.com
198.4.74.239 www.pctools.com
68.255.19.147 www.peterhearnwaste.co.uk
88.76.46.136 www.phoenixtrikeworks.com
121.233.85.206 www.prdouglas.co.uk
235.216.17.33 www.prevx.com
106.211.218.9 www.prevx1.com
58.32.177.254 www.professorbeyer.com
90.189.28.0 www.quickheal.com
204.104.148.151 www.removetrojanvirus.org
143.168.94.59 www.renningers.com
95.244.52.48 www.residentphotography.com
128.146.159.118 www.retento.com
241.60.24.201 www.reviewsofbooks.com
112.124.225.109 www.rising-global.com
132.200.251.99 www.risingav.com.au
165.102.35.169 www.safenet-inc.com
23.17.155.64 www.scan4you.net
149.80.100.228 www.seasonsecurity.com
101.157.127.217 www.secondchanceboxer.com
202.58.166.31 www.secure-elements.com
248.229.30.114 www.sheffieldmind.co.uk
187.36.232.22 www.smf.org
139.113.2.11 www.softfaq.com
171.14.41.81 www.sophos.com
29.185.229.232 www.spycheck.co.uk
224.249.107.140 www.spycheck.es
176.69.133.129 www.stadiumpage.com
209.227.240.199 www.sunbeltsoftware.com
66.141.105.26 www.symantec.com
193.205.50.190 www.sysinternals.com
213.25.8.180 www.tecniservicioslys.com
246.115.116.250 www.testmypcsecurity.com
52.113.252.93 www.threatexpert.com
246.109.197.69 www.tomorrowsedge.net
198.254.224.58 www.trendmicro.com
231.87.7.60 www.trojaner.info
89.70.127.211 www.trustix.com
28.65.72.119 www.trustlogo.com
235.210.99.108 www.vba.com.by
12.43.138.178 www.virscan.org
126.26.2.5 www.virus.fi
253.22.204.237 www.virus.org
17.98.230.226 www.virusbuster.hu
50.0.13.228 www.viruschief.com
95.238.134.123 www.virusfreezone.info
34.234.79.31 www.virustotal.com
242.54.105.20 www.wellgousa.com
19.212.213.91 www.whichssl.com
133.194.77.174 www.willsee.com
71.190.22.82 www.xmlsoap.org
23.11.237.71 www.zarya.info
56.168.88.141 www1.my-etrust.com
170.151.208.36 www3.ca.com
57.162.169.216 www3.safenet-inc.com
76.239.128.205 www4.symantec.com
109.140.235.19 wwws.clamav.net
223.123.99.102 x-cleaner.com
94.118.45.10 x.360safe.com
46.195.71.255 yoreparo.com
79.97.110.69 z-oleg.com
192.79.231.152 zeustracker.abuse.ch
131.75.176.128 zeylstra.nl
83.151.202.117 zhidao.baidu.com
116.53.242.120 zhidao.ikaka.com
230.35.106.15 ziggamza.net
100.31.51.179 zonavirus.com
120.108.77.168 zonealarm.com
153.9.117.238 zonelabs.com
11.248.49.65 zonelabs.fr
138.243.250.41 zonelog.co.uk
89.64.209.30 zs.kingsoft.com
122.221.60.32 ztl.comodo.com


Rootkit activity

No anomalies have been detected.

Propagation

A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.

VersionInfo

No information is available.

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 12644 12800 3.76874 55d274f88e5ab59aa27a86516437f7d8
.data 20480 64 512 0.164757 75fe664fdcd708925b7ca712ee127c19
.rdata 24576 1328 1536 3.03097 2707a7526abdc69c43f37dd3b6665e30
.bss 28672 320 0 0 d41d8cd98f00b204e9800998ecf8427e
.idata 32768 800 1024 2.18489 4e803ebabfbd6fe3233c57c1b6e762a8
.rsrc 36864 87232 87552 5.54166 34b5a2a0306aa053bf792aa7f84ba6c7

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 525
07d576cfc8749ec1dc2a8f89312e5ac5
f77a016b9f33b5ee0a5a8c8a6c17459a
f50f41b83c2e6e1b2f49607d14ea81c2
f34bfc536acebc73ad9181702bbdfa5a
f1ed8dc66d2a2782af3643273b748306
ec81527c6dcfd0252934f92e9ede48d9
e8072c41998d249698faee80cc8c4594
f6900f036b412f4c5ced0e1f52efca06
de186f3edfa81f70dc55b5eac5d35ebc
d686fde7ce9d6ea74fb6950fc2b89516
d439b7f1ce2b4895391578f35ce64326
cd58f76e4d21754d3eab2db80a65151f
c461ac2f040da7e9541c909dfc3b417f
c04ca21adb8f2aaf14b5f86fffca1db7
bef1577f05fc60053d776b2888854ca8
bcd2d168befe088a37367c66abd07146
b96ecb65d9b77eb0090f954b75488b68
ab6321eb42f7693e88168822f2fb5fad
a46830e78a628feaf16cd7e09157adc9
9f82b446c66404467b313824de338d0e
9caba3476b3ed334358f5791079cff37
94937abfe84553cc471bc62b416b1dcc
8f09cab20b06040b21cbb560fa81aaca
9362eaaaa1b6d1fc3355a0d2903c06fb
9052f30e0f32d8459551c18ac675c5b7
89c3e67a100de99faba3798abfca093a

URLs

No activity has been detected.

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps were not found.


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Delete the original Trojan file.
  2. Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
    127.0.0.1 localhost
  3. Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
  4. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now