Generic.Malware.PDYVdhidTk.E46751A7_ec4138b97f

by malwarelabrobot on June 20th, 2014 in Malware Descriptions.

Trojan.Win32.AntiAV.trq (Kaspersky), Generic.Malware.P!DYVdhidTk.E46751A7 (B) (Emsisoft), Generic.Malware.P!DYVdhidTk.E46751A7 (AdAware), GenericAutorunWorm.YR (Lavasoft MAS)
Behaviour: Trojan, Worm, WormAutorun, Malware


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: ec4138b97fd57966fe8d15c551b8df79
SHA1: d87a36397472da6acaaa75df4780094d73de9446
SHA256: a8f4aab659356f06f9d1c0893e346d0ba81b4c02eb5a6862b4431a08379b3620
SSDeep: 3072:NBx 1K6Hr3bxFNBAg9 FYRXZIOFtylC5CUJBYYhmDWQx68m:N0f7DITC5CU7Y5fx6x
Size: 931840 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: MicrosoftVisualBasicv50v60, UPolyXv05_v6, MicrosoftWindowsShortcutfile
Company: no certificate found
Created at: 2013-10-26 08:53:30
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour Description
WormAutorun A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Generic's file once a user opens a drive's folder in Windows Explorer.


Process activity

The Generic creates the following process(es):
No processes have been created.
The Generic injects its code into the following process(es):
No processes have been created.

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

No files have been created.

Registry activity

Dropped PE files

MD5 File path
1ba64f0a7fc3c6f35e1615b54fe90aed c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\ Afrojack Nayer - Give Me Everything (Tonight).mp3.pif
95b7c4be6914aefa07a497ef34aa265b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\500 Oldies Superhits[mp3].mp3.pif
a88a4410ac052836c9dd587ae3867512 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21 (Limited Edition CD-Rip @320kbps Bonus Cov) [PRIME].mp3.pif
08fbc5ca5f635c418581a74fa3602ccf c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - 21_PROPER_320kbps_VRTX.mp3.pif
76f0e6c5c18098ed69aca4ac00a95a99 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Adele - Rolling In the Deep [2010-Single][SW].mp3.pif
90c22bb0792065259770409326deac01 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Alexandra Stan - Mr. Saxobeat 320kbps.mp3.pif
dc2122c25fadd77c02992ffc3e8b9f82 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Beyonce-4_(Deluxe_Edition)-2CD-2013-VOiCE.mp3.pif
2adf3756f36abbdadbd266758a5492cc c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Black Eyed Peas - Just Can't Get Enough [2013-Single][SW].mp3.pif
346f9220433b6b5a4040108c3d2b317e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Black Eyed Peas - The Beginning (Deluxe Edition) 2010-DOH.mp3.pif
d1df4f51a5eae10a9b3e4fe56e376ac3 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Bruno Mars - The Lazy Song(Radio Edit)[320kbps].mp3.pif
7e9675a5ea3c11c3594c8ce1781a6f3e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Bruno Mars-Doo Wops And Hooligans-2010-H3X.mp3.pif
9955bb64e0b235d53322784acdba7bef c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Chris Brown - F.A.M.E Deluxe [2013-MP3-Cov][Bubanee].mp3.pif
2d6c5e4ef00873eeb7dc38937de0daa6 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Chris Brown Ft Lil Wayne & Busta Rhymes - Look At Me Now [Single.mp3.pif
9533b1d24b549bac4830968c491fd699 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\David Guetta feat. Nicki Minaj & Flo Rida - Where Them Girls At.mp3.pif
346f9220433b6b5a4040108c3d2b317e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Eminem-Recovery-(Retail)-2010-[NoFS].mp3.pif
74799671834b132b1d75f8673dd1badb c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Enrique Iglesias - Dirty Dancer Ft Usher & Lil Wayne 2013 (YOUSE.mp3.pif
77b774dc6c2f63518e9d64a0050ea0e4 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Foo Fighters 2013 Wasting Light 320 Kbps.mp3.pif
2d493b36ab426a16b1c5e03a3b72b2c5 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jennifer Lopez - On The Floor (Feat. Pitbull).mp3.pif
ba7ad790c16313b474acfe829eb64a7e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jessie J - Price Tag (feat. B.o.B) [2013-Single][MJN].mp3.pif
b56d0d2525a8bf2c6c51c3f79c016c3b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Jessie J - Who You Are 2013 Album [Deluxe Edition].mp3.pif
63161f79f67ca26cb741d11e7f612265 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Kanye West-My Beautiful Dark Twisted Fantasy (Explicit) @320kbps.mp3.pif
3eb69db3cf863cd641fae7d95b5ad9d5 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Katy Perry & Kanye West - E.T [2013] - Mp3ViLLe.mp3.pif
26d0b6f9c414ca5060076100031af1dc c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Katy Perry - Last Friday Night (T.G.I.F.).mp3.pif
6fb0e28cfd4e59a056e1ad997dd206c7 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\LMFAO - Party Rock Anthem [2013-Single@320][TJ].mp3.pif
f60cd49cc830bde9f848b04a70f5080a c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Lady Gaga-Born This Way (Special Edition) 2CD 2013-pLAN9.mp3.pif
3f50118dba74454e6a240eb3a47337f4 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Lil Wayne - How To Love (Tha Carter IV) [2013] {mp3}.mp3.pif
4bc8c5215077aef00f087e99bcecf341 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Lil.Wayne-Sorry.4.The.Wait-(Deluxe.Edition)-2013-[NoFS].mp3.pif
a7fdb12906d9e6535e62586fe7475aad c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Mumford And Sons - Sigh No More (Album).mp3.pif
e058aae0c358802e70aa9830aa7b86bb c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Nicki Minaj - Pink Friday (Deluxe Edition) 2013.mp3.pif
3d1d5652c137c909e99c220498e85842 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Now Thats What I Call Music 78 (2013) - 2CD.mp3.pif
effb2c4736a876c10f90db357655be4e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Pitbull - Give Me Everything (feat. Ne-Yo) [2013-Single][SW].mp3.pif
e72f24306945a560e135fbdff8092547 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Pitbull ft. Ne-Yo.mp3.pif
7a1846eb96c4a8493bd8295d2eabd882 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Rihanna - LOUD (2013 With 5 Bonus Tracks).mp3.pif
337300e867043409311629abfddfa9ea c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Rihanna - Loud [2010-MP3-Cov][Bubanee].mp3.pif
7fab35e0b8f5262c8e933515bc27589a c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\Snoop Dogg - Sweat (David Guetta Remix) [2013-Single][SW].mp3.pif
cb4b7ae208a7bc2f6fe88aac13b58dbd c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\The Lonely Island - Turtleneck And Chain 2013-FNT.mp3.pif
c24d424f6703c4f69debacef2beda422 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\16DFD6D4942F81230A\MUSICA\The_Script-Science_And_Faith-2010-CaHeSo.mp3.pif

HOSTS file anomalies

The Generic modifies "%System%\drivers\etc\hosts" file which is used to translate DNS entries to IP addresses.
The modified file is 523067 bytes in size. The following strings are added to the hosts file listed below:

240.243.242.254 13iii.com
252.251.242.253 15660808.co.kr
250.242.240.249 2-spyware.com
251.246.253.248 247fixes.com
246.248.246.250 360.cn
241.245.249.255 360.com
250.250.243.253 360safe.cn
248.240.240.248 360safe.com
245.246.254.250 45pounds.com
254.250.249.247 51nb.com
244.248.248.253 9down.com
242.247.242.249 a-2.org
245.249.247.242 a188.x.akamai.net
247.243.251.242 abuse.ch
251.242.241.250 acs.pandasoftware.com
254.244.241.255 ad-aware-se.uptodown.com
253.245.249.247 ad.fastclick.net
248.250.249.252 ads.fastclick.net
242.251.241.251 agfirewall.ru
250.240.253.250 agnitum.com
250.240.255.246 agnitum.de
241.254.246.255 agnitum.fr
251.252.249.241 agnitum.ru
254.244.245.248 ahn.com.cn
251.249.240.245 ahnlab.com
248.249.241.253 akamai.net
242.250.247.246 aknow.prevx.com
247.246.250.255 aladdin.com
250.240.242.255 alert.rising.com.cn
246.249.241.255 alerta-antivirus.inteco.es
248.249.241.253 alerta-antivirus.red.es
248.242.249.255 alladdin.ru
254.250.246.254 aluriasoftware.com
255.248.252.252 analysis.seclab.tuwien.ac.at
244.244.240.240 andymanchesta.com
254.246.242.247 anti-virus-software-review.com
249.241.241.246 anti-virus.by
247.251.254.249 anti-virus.com
250.253.252.245 antirootkit.com
242.247.248.249 antispam.sunbeltsoftware.com
254.241.247.251 antispy.ru
242.244.241.251 antispyware.sunbeltsoftware.com
241.254.255.253 antivir.es
255.254.241.247 antiviraldp.com
252.255.251.245 antivirus-online.de
244.255.241.249 antivirus-tools.com
244.243.245.244 antivirus.about.com
251.251.247.247 antivirus.cai.com
249.242.243.248 antivirus.comodo.com
251.247.247.240 antivirus.hispavista.com
242.243.249.242 antivirus.sunbeltsoftware.com
247.252.246.251 antiy.net
255.244.245.246 anubis.iseclab.org
241.254.248.246 apac.trendmicro.com
242.246.244.250 ar.answers.yahoo.com
253.246.252.245 ar.atwola.com
246.250.251.246 arcabit.com
250.249.245.252 arcabit.pl
245.242.241.245 archive.bitdefender.com
253.244.244.252 arswp.com
241.245.248.243 arwww.fortinet.cz
250.255.243.246 asap.authentium.com
255.240.244.243 ashampoo.com
243.246.245.254 atazita.blogspot.com
240.252.249.250 atdmt.com
250.241.243.245 attechnical.com
249.255.247.249 atwola.com
243.244.245.242 au.mcafee.com
250.254.254.243 auditmypc.com
243.243.248.245 authentium.com
253.241.251.251 auwww.ealaddin.nl
245.249.254.242 avast-home.uptodown.com
243.240.244.247 avast.com
242.245.245.248 avast.ru
246.247.242.240 avg-antivirus.net
254.242.246.241 avg.com
253.245.245.253 avg.vo.llnwd.net
247.246.249.255 avgate.net
240.243.252.242 avgfrance.com
240.243.252.242 avhide.com
240.243.252.242 avira.com
240.243.252.242 avp.ch
240.243.252.242 avp.com
240.243.252.242 avp.ru
240.243.248.254 avpclub.ddns.info
249.250.244.250 avu.zonelabs.com
251.244.251.250 avx.rob-have.net
252.243.254.241 awaps.net
253.255.250.244 b-have.orgbitdefender-ar.com
250.243.251.240 babooforum.com.br
242.254.246.253 backup.comodo.com
247.255.247.250 baike.360.cn
241.242.250.246 baike.360.com
247.240.244.244 bakunos.com
254.243.254.245 banner.fastclick.net
249.252.243.254 banners.fastclick.net
252.251.251.250 baristamagazine.com
248.240.248.251 basetendencies.com
255.245.242.240 bbs.360.cn
247.254.253.246 bbs.360safe.cn
250.240.253.251 bbs.360safe.com
241.254.248.251 bbs.cfan.com.cn
242.249.253.241 bbs.cpcw.com
249.240.248.250 bbs.dswlab.com
251.252.248.249 bbs.duba.net
255.245.247.244 bbs.ikaka.com
249.244.246.248 bbs.janmeng.com
249.243.249.251 bbs.kafan.cn
245.248.254.242 bbs.kafan.com
241.246.243.244 bbs.kaspersky.com.cn
240.249.250.244 bbs.kpfans.com
252.245.244.244 bbs.mcafeefans.com
248.248.253.254 bbs.s-sos.net
250.241.242.245 bbs.sucop.com
240.240.252.252 bbs.taisha.org
247.254.246.248 bbs.trendmicro.com.cn
252.252.244.247 bbs.winzheng.com
247.248.255.247 bestofewan.com
252.254.255.242 beta.anti-virus.by
242.252.252.246 bg.virusblokada.com
240.251.254.240 bhsbees.com
250.250.248.240 bitcity.info
243.250.255.253 bitcity.org
255.242.248.252 bitdefender.co.uk
242.247.248.242 bitdefender.com
249.243.244.250 bitdefender.com.ua
248.249.255.240 bitdefender.es
243.248.250.251 bitdefender.org
240.247.242.246 bitdefender.secyber.net
246.246.251.252 bitdefenderchina.com
240.242.255.249 bitdefenderguatemala.com
251.251.254.246 bitdefendermalaysia.com
252.253.252.240 bitdefendertaiwan.com
252.244.253.246 bitdefenderuruguay.com
252.240.241.245 bitdefenderusa.com
255.254.254.253 biz.nprotect.com
250.242.249.242 bkav.com.vn
246.254.242.240 blackice.iss.net
254.252.244.253 bleedingthreats.net
249.249.247.255 bleepingcomputer.com
255.248.242.241 blitzblank.com
245.252.251.244 blog.hispasec.com
249.250.248.255 blog.threatfire.com
243.247.250.241 blog.titanium-jewelry.com
255.249.240.246 blog.trendmicro.com
240.251.249.251 blogs.icerocket.com
247.249.242.243 blogs.protegerse.com
249.252.246.246 blogschapines.com
253.241.250.240 boardreader.com
249.242.244.248 bobbondart.com
243.251.247.247 br.mcafee.com
244.240.243.251 br.trendmicro.com
246.241.245.246 brazil.kaspersky.com
253.245.255.248 buddy.bitdefender.com
255.251.240.253 bugs.clamav.net
255.249.252.252 buscafacil.com
254.243.251.251 buscalo.in
240.249.254.243 busco.in
250.254.242.253 buy.bitdefender-es.com
240.247.242.245 buy.bitdefender.com
254.254.250.250 buy.bitdefender.de
245.252.245.246 buy.drweb.com
242.245.252.246 buy.rising.com.cn
255.255.249.251 ca.com
254.249.252.254 cacomvip.ca.com
254.249.252.254 cai.com
242.252.254.255 canada.karuna-shechen.org
243.250.240.244 castlecops.com
242.251.244.255 castlecrops.com
242.253.240.254 ccslaughterspdx.com
251.246.250.241 cddchiangmai.net
253.253.244.244 cdn.atwola.com
251.242.249.247 center.rising.com.cn
245.244.254.243 centralcommand.com
254.253.241.246 cert.org
244.255.243.244 cfan.com.cn
246.248.254.241 cgi.clamav.net
248.240.249.252 changedetection.com
255.247.243.243 changelog.fr
252.245.250.255 channelpartner.trendmicro.com
246.244.246.240 chickensroamfree.com
255.245.242.251 chkrootkit.org
244.249.255.247 chollian.nprotect.co.kr
243.251.247.252 cisrt.org
240.242.246.241 cit.kookmin.ac.kr
251.245.243.249 clamav.net
248.254.252.244 clamwin.com
251.249.244.255 click.atdmt.com
246.251.246.253 clicks.atdmt.com
251.242.250.252 cloudprotection.pandasecurity.com
251.250.242.248 clubic.com
244.248.247.252 cmmings.cn
255.241.245.250 cn.mcafee.com
243.244.246.254 cn.sophos.com
244.244.247.250 cn.trendmicro.com
255.240.255.243 codesigning.ksoftware.net
252.253.245.253 codehard.wordpress.com
249.245.253.244 cohartuk.com
250.253.248.248 commentcamarche.net
242.241.243.254 community.thaiware.com
255.250.249.241 comodo.com
253.243.254.255 company.drweb.com
254.240.244.253 company.hauri.co.kr
254.251.248.252 company.hauri.net
250.246.248.250 computing.net
250.254.255.254 comunidad.wilkinsonpc.com.co
240.247.248.251 configurarequipos.com
240.249.241.246 coresecurity.com
254.247.247.241 cou85.com
247.241.245.244 cowsmo.com
253.244.240.243 cpsecure.com
251.244.247.245 csc.rising.com.cn
254.248.254.240 cureit.ru
247.244.254.252 customer.symantec.com
253.250.244.242 customers.drweb.com
241.246.246.253 cutlines.org
246.248.245.255 cwsandbox.org
249.245.244.242 cybercrime.pandasecurity.com
242.246.247.251 cyberdefender.com
249.253.253.242 cybertechhelp.com
243.243.243.240 daboweb.com
240.252.246.245 daniloff.net
240.255.242.248 daniweb.com
241.253.249.242 darkclockers.com
249.243.245.246 dazhizhu.cn
242.247.241.243 de.bitdefender.com
249.241.253.253 de.mcafee.com
249.247.247.247 de.trendmicro.com
245.245.250.247 deckard.geekstogo.com
247.246.253.248 deerfield.com
248.251.255.247 defalcos.com
247.249.249.247 definitions.symantec.com
251.253.255.245 dell.symantec.com
244.248.246.253 demos.eset.es
246.251.242.242 descargas.eset.es
240.242.246.255 dev.depeuter.org
245.251.248.245 developmentdrums.org
249.246.245.249 dialognauka.ru
254.243.247.243 diamondcs.com.au
248.248.244.240 dicasweb.com.br
254.250.244.243 discussions.virtualdr.com
243.242.245.251 disk-encryption.comodo.com
252.246.247.253 dl.360safe.com
240.254.255.254 dl1.antivir-pe.com
251.246.244.246 dl1.antivir-pe.de
244.250.247.244 dl1.antivir.de
244.252.245.254 dl1.avgate.net
242.242.254.254 dl10.freeav.net
245.248.241.241 dl2.antivir-pe.com
249.240.252.255 dl2.antivir-pe.de
251.255.240.240 dl2.antivir.de
245.254.240.244 dl2.avgate.net
240.250.247.253 dl3.antivir-pe.de
248.252.243.255 dl3.antivir.de
244.253.248.243 dl3.avgate.net
246.240.247.253 dl4.antivir-pe.com
250.249.252.250 dl4.antivir-pe.de
251.242.253.240 dl4.antivir.de
248.249.245.243 dl4.avgate.net
246.244.252.246 dl5.avgate.net
252.243.250.242 dl6.avgate.net
245.243.251.255 dl7.avgate.net
253.247.250.250 dl8.avgate.net
251.240.254.249 dl8.freeav.net
246.244.250.245 dl9.avgate.net
240.253.248.246 dl9.freeav.net
248.245.253.246 dnl-cd1.kaspersky-labs.com
254.251.244.243 dnl-cd10.kaspersky-labs.com
255.252.244.253 dnl-cd11.kaspersky-labs.com
251.243.243.241 dnl-cd12.kaspersky-labs.com
248.242.241.247 dnl-cd13.kaspersky-labs.com
245.251.245.252 dnl-cd2.kaspersky-labs.com
254.240.255.242 dnl-cd3.kaspersky-labs.com
240.241.254.246 dnl-cd4.kaspersky-labs.com
247.254.242.247 dnl-cd5.kaspersky-labs.com
254.250.244.247 dnl-cd6.kaspersky-labs.com
255.247.247.252 dnl-cd7.kaspersky-labs.com
249.247.253.252 dnl-cd8.kaspersky-labs.com
251.240.250.252 dnl-cd9.kaspersky-labs.com
247.253.254.253 dnl-cn1.kaspersky-labs.com
249.251.248.253 dnl-cn10.kaspersky-labs.com
240.241.242.255 dnl-cn11.kaspersky-labs.com
254.245.245.248 dnl-cn12.kaspersky-labs.com
248.254.244.250 dnl-cn13.kaspersky-labs.com
251.243.250.250 dnl-cn14.kaspersky-labs.com
243.243.242.244 dnl-cn15.kaspersky-labs.com
242.251.253.241 dnl-cn2.kaspersky-labs.com
246.250.246.242 dnl-cn3.kaspersky-labs.com
240.254.243.243 dnl-cn4.kaspersky-labs.com
254.250.253.244 dnl-cn5.kaspersky-labs.com
246.253.253.245 dnl-cn6.kaspersky-labs.com
250.245.252.247 dnl-cn7.kaspersky-labs.com
243.246.244.250 dnl-cn8.kaspersky-labs.com
242.255.249.247 dnl-cn9.kaspersky-labs.com
252.249.245.243 dnl-eu1.kaspersky-labs.com
240.240.249.243 dnl-eu10.kaspersky-labs.com
242.247.242.249 dnl-eu11.kaspersky-labs.com
252.243.243.246 dnl-eu12.kaspersky-labs.com
242.248.247.243 dnl-eu13.kaspersky-labs.com
248.247.242.246 dnl-eu14.kaspersky-labs.com
251.248.247.245 dnl-eu15.kaspersky-labs.com
251.248.247.241 dnl-eu2.kaspersky-labs.com
254.240.244.253 dnl-eu3.kaspersky-labs.com
252.243.240.253 dnl-eu4.kaspersky-labs.com
243.243.243.244 dnl-eu5.kaspersky-labs.com
245.249.247.242 dnl-eu6.kaspersky-labs.com
255.249.240.245 dnl-eu7.kaspersky-labs.com
252.243.241.240 dnl-eu8.kaspersky-labs.com
251.253.244.246 dnl-eu9.kaspersky-labs.com
254.246.244.253 dnl-jp1.kaspersky-labs.com
253.254.251.243 dnl-jp10.kaspersky-labs.com
245.245.255.245 dnl-jp11.kaspersky-labs.com
248.252.254.242 dnl-jp12.kaspersky-labs.com
240.254.245.254 dnl-jp13.kaspersky-labs.com
240.243.243.252 dnl-jp14.kaspersky-labs.com
248.248.241.243 dnl-jp15.kaspersky-labs.com
246.251.252.253 dnl-jp2.kaspersky-labs.com
240.244.247.254 dnl-jp3.kaspersky-labs.com
252.255.248.252 dnl-jp4.kaspersky-labs.com
255.245.244.240 dnl-jp5.kaspersky-labs.com
246.249.249.248 dnl-jp6.kaspersky-labs.com
246.248.250.244 dnl-jp7.kaspersky-labs.com
247.249.250.249 dnl-jp8.kaspersky-labs.com
243.247.252.253 dnl-jp9.kaspersky-labs.com
244.253.240.240 dnl-kr1.kaspersky-labs.com
250.242.245.249 dnl-kr10.kaspersky-labs.com
245.242.242.240 dnl-kr11.kaspersky-labs.com
240.250.253.253 dnl-kr12.kaspersky-labs.com
244.249.245.240 dnl-kr13.kaspersky-labs.com
253.241.246.251 dnl-kr15.kaspersky-labs.com
251.248.252.243 dnl-kr2.kaspersky-labs.com
249.249.254.255 dnl-kr3.kaspersky-labs.com
243.250.250.253 dnl-kr4.kaspersky-labs.com
248.240.248.251 dnl-kr5.kaspersky-labs.com
250.252.251.254 dnl-kr6.kaspersky-labs.com
246.253.243.251 dnl-kr7.kaspersky-labs.com
243.251.248.247 dnl-kr8.kaspersky-labs.com
250.251.243.251 dnl-kr9.kaspersky-labs.com
250.242.242.247 dnl-ru1.kaspersky-labs.com
244.252.254.242 dnl-ru10.kaspersky-labs.com
244.251.241.240 dnl-ru11.kaspersky-labs.com
245.243.254.248 dnl-ru12.kaspersky-labs.com
245.248.254.242 dnl-ru13.kaspersky-labs.com
251.240.251.250 dnl-ru14.kaspersky-labs.com
241.246.243.244 dnl-ru15.kaspersky-labs.com
249.248.251.241 dnl-ru2.kaspersky-labs.com
251.242.254.253 dnl-ru3.kaspersky-labs.com
241.254.243.246 dnl-ru4.kaspersky-labs.com
250.244.253.254 dnl-ru5.kaspersky-labs.com
240.245.242.243 dnl-ru6.kaspersky-labs.com
253.245.241.249 dnl-ru7.kaspersky-labs.com
242.240.250.254 dnl-ru8.kaspersky-labs.com
248.252.251.245 dnl-ru9.kaspersky-labs.com
248.248.247.241 dnl-us1.kaspersky-labs.com
247.255.253.242 dnl-us10.kaspersky-labs.com
249.253.244.240 dnl-us11.kaspersky-labs.com
249.249.253.240 dnl-us12.kaspersky-labs.com
252.242.252.243 dnl-us13.kaspersky-labs.com
240.243.243.242 dnl-us14.kaspersky-labs.com
247.249.252.254 dnl-us15.kaspersky-labs.com
247.240.245.251 dnl-us2.kaspersky-labs.com
243.240.255.243 dnl-us3.kaspersky-labs.com
244.248.249.253 dnl-us4.kaspersky-labs.com
255.251.254.241 dnl-us5.kaspersky-labs.com
248.244.245.253 dnl-us6.kaspersky-labs.com
243.249.241.243 dnl-us7.kaspersky-labs.com
243.248.245.241 dnl-us8.kaspersky-labs.com
246.249.249.249 dnl-us9.kaspersky-labs.com
247.255.255.253 dougknox.com
242.252.246.247 down.360safe.cn
247.250.252.251 down.360safe.com
250.243.245.249 download.avg.com
241.245.253.244 download.bleepingcomputer.com
243.244.241.245 download.com
254.251.249.253 download.com.vn
240.246.250.249 download.eset.com
251.245.252.242 download.f-secure.com
255.247.254.242 download.mcafee.com
243.247.243.242 download.microsoft.com
244.255.251.242 download.microsoft.comguru0.grisoft.cz
248.250.245.247 download.nai.com
254.249.251.246 download.norman.no
244.246.243.253 download.rising.com.cn
240.249.250.254 download.softpedia.com
248.247.247.247 download.sysinternals.com
251.245.250.255 download0.avast.com
254.253.240.246 download1.avast.com
247.252.242.255 download1.emsisoft.com
244.251.240.240 download1.quickheal.com
240.244.245.244 download10.quickheal.com
242.246.244.245 download100.avast.com
248.251.250.243 download1us.softpedia.com
252.241.248.250 download2.avast.com
243.240.240.248 download2.quickheal.com
249.240.255.244 download200.avast.com
250.245.243.245 download201.avast.com
243.243.246.254 download202.avast.com
247.248.240.252 download203.avast.com
252.242.246.254 download204.avast.com
242.240.246.245 download205.avast.com
252.245.246.251 download206.avast.com
253.254.251.243 download207.avast.com
243.240.251.246 download208.avast.com
251.247.251.242 download209.avast.com
242.244.243.247 download210.avast.com
254.243.240.241 download211.avast.com
248.253.242.240 download212.avast.com
244.245.251.244 download213.avast.com
254.255.247.255 download214.avast.com
241.241.244.247 download3.avast.com
245.246.254.250 download3.quickheal.com
251.242.241.250 download4.avast.com
250.247.253.251 download4.emsisoft.com
254.246.255.248 download4.quickheal.com
254.242.254.250 download5.avast.com
254.241.253.253 download5.emsisoft.com
245.253.248.249 download5.quickheal.com
244.253.252.241 download501.avast.com
240.255.247.247 download502.avast.com
253.247.249.250 download503.avast.com
251.248.243.250 download504.avast.com
255.244.244.251 download505.avast.com
252.253.251.242 download511.avast.com
254.252.243.252 download512.avast.com
245.254.242.242 download513.avast.com
252.249.250.243 download514.avast.com
247.242.243.249 download515.avast.com
249.254.255.240 download516.avast.com
240.240.241.248 download535.avast.com
240.241.244.251 download6.avast.com
246.249.255.255 download6.quickheal.com
248.255.254.243 download600.avast.com
255.245.249.254 download601.avast.com
242.255.254.248 download602.avast.com
243.244.251.254 download603.avast.com
240.243.245.244 download604.avast.com
249.247.242.253 download605.avast.com
252.242.248.254 download606.avast.com
243.245.247.241 download607.avast.com
246.254.242.252 download608.avast.com
243.244.241.249 download609.avast.com
255.243.243.248 download617.avast.com
243.241.252.242 download618.avast.com
253.247.248.254 download619.avast.com
241.254.248.246 download620.avast.com
244.250.243.244 download621.avast.com
243.248.240.240 download622.avast.com
249.245.241.249 download623.avast.com
253.244.250.254 download624.avast.com
240.253.242.245 download625.avast.com
244.247.250.248 download626.avast.com
250.241.242.246 download627.avast.com
248.240.248.252 download628.avast.com
249.253.243.249 download629.avast.com
243.254.240.248 download630.avast.com
241.252.246.243 download631.avast.com
254.251.244.248 download632.avast.com
248.251.246.246 download633.avast.com
251.247.245.252 download634.avast.com
250.240.241.244 download635.avast.com
253.250.249.247 download636.avast.com
253.253.250.246 download637.avast.com
246.250.248.253 download638.avast.com
249.243.242.253 download639.avast.com
250.253.243.243 download640.avast.com
255.245.254.240 download641.avast.com
245.243.248.249 download642.avast.com
246.251.254.248 download643.avast.com
248.244.244.242 download644.avast.com
241.244.244.243 download645.avast.com
247.242.242.249 download646.avast.com
249.243.252.241 download647.avast.com
240.255.254.243 download648.avast.com
242.254.240.242 download649.avast.com
254.251.244.247 download650.avast.com
254.254.244.250 download651.avast.com
242.252.255.255 download652.avast.com
246.246.242.254 download653.avast.com
246.255.247.248 download654.avast.com
250.255.241.241 download655.avast.com
249.246.251.254 download656.avast.com
247.248.245.253 download658.avast.com
250.243.249.242 download659.avast.com
251.240.245.252 download660.avast.com
254.241.250.254 download661.avast.com
241.252.252.248 download662.avast.com
253.247.251.253 download663.avast.com
251.241.252.253 download664.avast.com
246.253.243.246 download665.avast.com
249.247.247.247 download666.avast.com
249.247.247.243 download667.avast.com
254.251.244.243 download668.avast.com
241.253.242.243 download669.avast.com
241.253.245.252 download670.avast.com
242.245.240.240 download671.avast.com
241.252.251.248 download672.avast.com
246.247.243.241 download673.avast.com
251.251.251.252 download674.avast.com
253.245.253.241 download675.avast.com
251.252.253.250 download676.avast.com
242.246.246.247 download677.avast.com
252.240.247.247 download678.avast.com
246.253.245.243 download679.avast.com
249.250.248.255 download680.avast.com
254.244.253.254 download681.avast.com
253.252.251.240 download682.avast.com
245.249.252.243 download683.avast.com
252.242.253.255 download684.avast.com
254.245.249.253 download685.avast.com
246.252.254.251 download686.avast.com
246.240.240.252 download687.avast.com
243.243.248.249 download688.avast.com
247.252.241.248 download689.avast.com
250.251.242.240 download690.avast.com
249.255.243.250 download691.avast.com
246.247.241.248 download692.avast.com
249.244.242.240 download693.avast.com
246.249.251.240 download694.avast.com
250.255.248.243 download695.avast.com
244.244.249.245 download696.avast.com
240.251.247.254 download697.avast.com
247.240.240.250 download698.avast.com
250.249.251.246 download699.avast.com
250.251.254.251 download7.avast.com
249.246.249.242 download7.quickheal.com
253.251.246.241 download700.avast.com
255.247.251.249 download701.avast.com
250.241.240.249 download702.avast.com
240.250.254.245 download703.avast.com
246.251.247.248 download704.avast.com
250.242.245.249 download705.avast.com
241.242.243.251 download706.avast.com
245.252.254.241 download707.avast.com
246.241.243.251 download708.avast.com
244.250.249.243 download709.avast.com
246.241.252.252 download72.avast.com
249.246.244.251 download73.avast.com
247.240.241.245 download74.avast.com
244.244.242.249 download75.avast.com
243.250.240.244 download76.avast.com
253.249.245.253 download77.avast.com
254.242.246.246 download78.avast.com
241.247.244.242 download79.avast.com
245.248.255.254 download8.quickheal.com
241.243.249.252 download80.avast.com
245.244.240.246 download81.avast.com
241.241.251.242 download82.avast.com
240.248.250.254 download83.avast.com
253.252.250.240 download84.avast.com
240.252.254.240 download85.avast.com
242.254.253.244 download9.quickheal.com
244.247.240.244 download900.avast.com
246.249.244.244 download901.avast.com
243.240.253.241 download902.avast.com
240.247.249.248 download903.avast.com
241.250.251.251 download904.avast.com
252.248.251.242 download905.avast.com
243.240.244.247 download906.avast.com
247.245.250.245 download907.avast.com
254.248.252.252 download908.avast.com
241.254.246.255 download909.avast.com
249.241.250.243 download91.avast.com
252.240.240.245 download910.avast.com
250.243.247.253 download911.avast.com
253.251.241.240 download912.avast.com
243.240.240.244 download913.avast.com
242.242.247.248 download914.avast.com
247.252.252.243 download915.avast.com
253.246.249.249 download916.avast.com
243.248.248.255 download917.avast.com
249.249.249.250 download918.avast.com
253.243.242.249 download919.avast.com
251.243.253.248 download92.avast.com
248.243.243.250 download920.avast.com
253.240.247.241 download921.avast.com
252.255.247.241 download922.avast.com
249.246.243.248 download923.avast.com
243.253.250.240 download924.avast.com
250.251.248.252 download925.avast.com
244.249.246.247 download926.avast.com
251.243.241.250 download927.avast.com
244.252.244.249 download928.avast.com
254.254.241.252 download929.avast.com
248.254.247.255 download93.avast.com
242.249.244.248 download930.avast.com
248.242.254.243 download931.avast.com
253.245.245.246 download932.avast.com
241.240.249.250 download933.avast.com
250.240.255.246 download934.avast.com
244.251.251.254 download935.avast.com
245.252.240.253 download936.avast.com
242.251.253.241 download937.avast.com
245.254.255.243 download938.avast.com
246.251.248.243 download939.avast.com
252.253.240.247 download94.avast.com
252.252.245.247 download940.avast.com
248.251.246.246 download941.avast.com
254.252.251.254 download942.avast.com
245.246.247.244 download943.avast.com
250.247.248.246 download944.avast.com
242.243.242.244 download945.avast.com
255.244.250.240 download946.avast.com
244.245.241.254 download947.avast.com
241.242.242.249 download948.avast.com
253.251.250.249 download949.avast.com
240.241.244.247 download95.avast.com
245.246.249.246 download950.avast.com
247.247.250.242 download951.avast.com
244.240.255.253 download952.avast.com
244.244.241.252 download953.avast.com
242.243.249.254 download954.avast.com
240.244.248.254 download955.avast.com
247.246.246.251 download956.avast.com
251.245.242.252 download957.avast.com
246.241.244.246 download958.avast.com
242.242.254.250 download959.avast.com
245.254.254.248 download96.avast.com
242.253.240.242 download960.avast.com
248.255.245.244 download961.avast.com
243.244.245.242 download962.avast.com
246.254.251.250 download963.avast.com
254.248.247.247 download964.avast.com
252.248.240.247 download965.avast.com
242.251.247.241 download966.avast.com
251.245.248.254 download967.avast.com
243.245.247.240 download968.avast.com
248.245.250.249 download969.avast.com
241.254.242.245 download97.avast.com
240.247.253.245 download970.avast.com
241.255.250.244 download971.avast.com
251.240.240.250 download972.avast.com
245.245.241.241 download973.avast.com
248.250.249.252 download974.avast.com
253.250.243.246 download975.avast.com
246.242.245.252 download976.avast.com
249.243.249.244 download977.avast.com
240.242.255.241 download978.avast.com
245.242.250.255 download979.avast.com
249.242.247.252 download98.avast.com
240.251.255.252 download980.avast.com
246.252.246.253 download99.avast.com
240.249.254.244 downloads-eu1.kaspersky-labs.com
246.247.248.246 downloads-eu2.kaspersky-labs.com
255.253.241.246 downloads-eu3.kaspersky-labs.com
251.248.252.251 downloads-eu4.kaspersky-labs.com
255.254.242.247 downloads-us1.kaspersky-labs.com
242.241.255.245 downloads-us2.kaspersky-labs.com
247.241.243.249 downloads-us3.kaspersky-labs.com
250.255.252.253 downloads-us4.kaspersky-labs.com
242.252.240.245 downloads.andymanchesta.com
243.251.247.248 downloads.malwarebytes.org
241.250.251.240 downloads.microsoft.com
240.254.244.243 downloads.My-eTrust.com
254.253.248.252 downloads1.kaspersky-labs.com
244.244.253.255 downloads2.kaspersky-labs.com
245.246.244.247 downloads3.kaspersky-labs.com
249.241.241.246 downloads4.kaspersky-labs.com
241.241.248.248 downloads5.kaspersky-labs.com
241.253.241.248 dr-web-cureit.softonic.com
242.245.255.245 drsolomon.com
248.240.254.247 drweb-inside.com
246.248.241.245 drweb.com
253.244.244.248 drweb.com.es
242.249.255.243 drweb.net
254.252.247.241 drwebinside.com
250.252.245.249 dswlab.com
240.241.248.246 duba.net
245.245.253.240 ealaddin.net
254.241.243.242 ealaddin.orgeshop.aladdin.com
249.247.253.248 easy-vpn.comodo.com
241.247.255.242 edm.symantec.com
242.246.242.241 education.symantec.com
244.240.246.255 eeload.com
244.240.252.245 eeye.com
249.240.251.254 eicar.org
243.246.244.250 elblogdemanu.com
241.247.252.248 elitepvpers.de
248.247.244.240 emea.trendmicro.com
250.244.241.247 emsisoft.com
241.249.241.248 emsisoft.de
252.246.251.247 encarta.msn.com
245.250.240.248 engine.awaps.net
253.253.252.243 enterprisesecur.symantec.com
253.244.254.247 eos.eset.es
249.250.254.253 eradicatespyware.net
255.250.240.241 es.answers.yahoo.com
240.242.255.242 es.kioskea.net
243.244.250.243 es.mcafee.com
252.249.252.248 es.trendmicro.com
246.252.251.242 es.wasalive.com
254.240.249.253 esafe.com
255.244.245.242 esecurity.livecall.co.kr
246.249.250.250 eset-la.com
248.249.249.247 eset.com
243.244.247.250 eset.es
243.250.244.253 eset.sk
245.253.248.253 esp.sophos.com
252.241.254.255 espanol.answers.yahoo.com
248.250.244.248 espanol.dir.groups.yahoo.com
251.250.241.248 espanol.groups.yahoo.com
254.251.245.243 esupport.trendmicro.com
240.249.255.252 et.symantec.com
241.248.252.244 etrr.co.uk
246.244.255.253 eugrantsadvisor.cz
251.255.253.242 eugrantsadvisor.de
248.251.247.241 eval.symantec.com
250.255.244.250 ewido.net
249.242.247.246 exchangeyourcareer.net
250.241.241.253 experts-exchange.com
240.242.253.251 f-prot.com
255.241.243.244 f-secure.com
248.244.243.241 f-secure.frf-secure.hk
253.254.243.245 f-secure.nlfsecure.com
255.250.245.245 fastclick.net
241.242.248.241 feedage.com
245.245.244.249 feeds.sophos.com
246.255.240.245 feeds.trendmicro.com
243.243.243.240 file.ikaka.cn
247.242.252.249 file.ikaka.com
240.253.250.255 file.net
250.253.248.244 files.avast.com
248.249.247.254 files.filefont.com
255.252.251.245 files.trendmicro-europe.com
247.244.248.240 filseclab.com
252.245.247.251 final4ever.com
248.250.247.252 finjan.com
251.254.252.251 firewall.sunbeltsoftware.com
254.243.253.255 firewallguide.com
245.242.242.245 fixmyim.com
245.244.248.253 foro.ethek.com
241.251.241.252 foros.toxico-pc.com
250.242.243.240 foros.zonavirus.com
243.242.249.240 forospanish.com
246.249.252.241 forospyware.com
248.253.241.241 forospyware.es
252.246.240.244 fortiguardcenter.com
250.249.248.253 fortihero.com
246.247.243.241 fortilog.com
250.249.244.244 fortinet.co.at
253.246.245.243 fortinet.com
249.241.248.252 fortiprotect.com
244.244.248.251 fortiwifi.com
252.246.248.248 forum.clubedohardware.com.br
244.245.242.246 forum.emsisoft.com
247.245.251.250 forum.hardware.fr
253.240.249.253 forum.hijackthis.de
243.243.243.240 forum.ikaka.com
251.249.242.243 forum.jiangmin.com
248.245.254.249 forum.kaspersky.com
242.244.243.250 forum.malekal.com
240.240.240.241 forum.piriform.com
243.253.255.240 forum.securitycadets.com
242.253.244.255 forum.sysinternals.com
249.250.247.251 forum.telecharger.01net.com
252.244.240.245 forum.tweaks.com
250.241.251.244 forum.zazana.com
254.244.249.241 forums.cnet.com
249.248.255.254 forums.comodo.com
244.247.247.242 forums.devshed.com
255.243.251.255 forums.maddoktor2.com
253.240.247.247 forums.majorgeeks.com
241.247.252.248 forums.techguy.org
242.247.248.249 forums.whatthetech.com
255.255.249.240 fr.bitdefender.com
250.255.242.248 fr.drweb.com
248.244.240.252 fr.mcafee.com
245.252.250.249 fr.trendmicro.com
246.250.242.242 fr1.drweb.com
251.242.255.252 fr2.drweb.com
255.241.247.245 fr3.drweb.com
241.253.253.246 fr4.drweb.com
240.244.243.254 fr5.drweb.com
246.255.246.245 fr6.drweb.com
249.246.253.248 fr7.drweb.com
247.252.245.244 fractus.mat.uson.mx
247.248.241.249 free-av.com
253.255.254.242 free-av.net
241.249.240.245 free.antivirus.com
246.246.251.252 free.avg.com
254.240.242.245 free.drweb.com
241.243.249.251 free.grisoft.com
248.242.244.245 free.grisoft.cz
250.243.249.243 free.pandasecurity.com
242.252.250.250 free.prevx.com
252.249.246.250 free.tinypicbox.com
253.247.253.244 freeav.com
246.244.244.244 freeav.net
250.252.246.246 freespywareremoval.info
241.252.243.253 frisk-software.com
240.244.252.248 fsc.norman.com
254.241.253.247 fsecure.nlwebyard.com
245.246.249.252 ftp.avp.com
245.246.254.250 ftp.bitdefender.com
248.249.255.248 ftp.ca.co
254.246.254.245 ftp.ca.com
241.247.249.246 ftp.customer.symantec.com
251.254.251.250 ftp.dispatch.mcafee.com
240.250.249.244 ftp.download.mcafee.com
254.252.242.253 ftp.downloads-eu1.kaspersky-labs.com
245.250.254.254 ftp.downloads-eu2.kaspersky-labs.com
240.243.249.249 ftp.downloads-eu3.kaspersky-labs.com
251.250.253.251 ftp.downloads-eu4.kaspersky-labs.com
241.250.251.240 ftp.downloads-us1.kaspersky-labs.com
243.242.251.241 ftp.downloads-us2.kaspersky-labs.com
253.254.244.246 ftp.downloads-us3.kaspersky-labs.com
249.244.247.249 ftp.downloads-us4.kaspersky-labs.com
242.240.241.240 ftp.downloads1.kaspersky-labs.com
244.244.251.251 ftp.downloads2.kaspersky-labs.com
243.254.253.255 ftp.downloads3.kaspersky-labs.com
244.247.250.248 ftp.downloads4.kaspersky-labs.com
254.243.255.246 ftp.drweb.com
249.240.242.244 ftp.esafe.com
248.254.247.244 ftp.europe.f-secure.com
248.252.244.244 ftp.f-prot.com
252.249.246.254 ftp.f-secure.com
248.248.251.254 ftp.grisoft.com
241.252.252.251 ftp.kaspersky-labs.com
254.246.255.254 ftp.kaspersky.com
244.241.254.242 ftp.kasperskylab.ru
242.250.242.241 ftp.liveupdate.symantec.com
248.246.250.251 ftp.liveupdate.symantecliveupdate.com
244.248.242.253 ftp.mast.mcafee.com
254.252.249.243 ftp.mcafee.com
255.248.252.252 ftp.microworldsystems.com
247.246.240.240 ftp.my-etrust.com
240.242.247.251 ftp.nai.com
242.240.246.253 ftp.networkassociates.com
240.249.253.240 ftp.norton.com
249.253.245.247 ftp.rads.mcafee.com
249.248.246.252 ftp.sandbox.norman.com
249.247.252.247 ftp.secure.nai.com
247.243.247.254 ftp.securityresponse.symantec.com
255.247.240.250 ftp.sophos.com
253.241.253.242 ftp.symantec.com
252.240.248.248 ftp.symantecliveupdate.com
254.240.242.255 ftp.symatec.com
251.254.249.245 ftp.trendmicro.com
247.248.249.250 ftp.uk.trendmicro-europe.com
249.255.241.254 ftp.update.symantec.com
253.250.255.254 ftp.updates.symantec.com
243.240.255.253 ftp.updates1.kaspersky-labs.com
251.250.254.243 ftp.updates2.kaspersky-labs.com
250.243.254.245 ftp.updates3.kaspersky-labs.com
255.249.242.247 ftp.updates4.kaspersky-labs.com
245.242.250.254 ftp.us.mcafee.com
247.249.255.244 ftp.viruslist.com
254.253.242.244 funkytoad.com
244.252.244.247 futurenow.bitdefender.com
251.243.250.250 fw.rising.com.cn
245.254.254.248 fx.dk
246.241.241.249 gangbang.mytijn.org
251.254.243.244 gdata.de
247.241.249.244 gdata.es
246.253.244.247 gecadsoftware.com
250.245.240.240 geekstogo.com
251.241.245.247 global.ahnlab.com
246.254.252.240 global.jiangmin.com
253.250.254.241 global.nprotect.com
244.244.251.254 go.mcafee.com
255.247.246.244 go.microsoft.com
248.253.254.255 go.rising.com.cn
246.240.242.251 go.sunbeltsoftware.com
248.244.243.245 go.symantec.com
255.246.253.245 go.trendmicro.com
240.250.254.245 greatis.com
251.255.254.249 grisoft.com
241.251.253.246 grisoft.cz
241.240.251.255 grv.microsoft.com
255.252.254.252 guiadohardware.net
250.248.252.241 guru.avg.com
243.248.242.240 guru1.grisoft.cz
249.252.254.241 guru2.grisoft.cz
245.243.254.244 guru3.grisoft.cz
252.251.242.249 guru4.grisoft.cz
242.253.244.251 guru5.grisoft.cz
248.244.253.255 gwava.nl
245.253.243.253 hacksoft.com.pe
250.248.250.249 hacksoft.pe
244.240.245.246 halmapr.com
242.254.249.247 hauri.co.kr
240.250.252.254 hauri.net
243.255.247.250 haurijapan.com
255.252.241.244 help.rising.com.cn
246.242.250.253 hi.baidu.com
240.248.247.245 hijackthis.de
251.252.255.242 hijackthis.download3000.com
244.240.251.249 hishomeforchildren.com
244.250.252.245 hjt-data.trend-braintree.com
246.250.253.253 hjt.networktechs.com
245.242.241.255 home.mcafee.com
249.244.240.247 hostedmailsecur.symantec.com
241.245.249.243 hotshare.net
250.243.252.251 housecall.com
240.241.242.255 housecall.trendmicro.com
243.241.247.249 housecall60.trendmicro.com
243.242.249.240 housecall65.trendmicro.com
251.250.252.251 howsafeismypc.com
245.255.247.254 huaifai.go.th
248.244.249.245 i-vault.comodo.com
252.252.252.249 iavs.cz
255.250.250.242 ibusca.me
245.243.252.253 idauthority.com
253.250.243.242 ids.kaspersky-labs.com
252.252.244.247 ieupdate.gdata.de
251.240.250.251 ieupdate1.gdata.de
251.240.241.242 ieupdate2.gdata.de
242.255.252.244 ieupdate3.gdata.de
250.254.254.255 ieupdate4.gdata.de
252.243.241.243 ieupdate5.gdata.de
255.252.252.240 ieupdate6.gdata.de
247.243.251.254 ikaka.cn
253.255.243.252 ikaka.com
255.243.247.247 ikarus.at
252.246.252.250 ikarus.net
254.243.249.255 ilove.tigolbittys.info
241.244.252.246 images.kaspersky.com
241.249.242.245 in.answers.yahoo.com
242.253.242.254 incodesolutions.com
251.244.248.248 info.drweb.com
249.246.245.249 info.prevx.com
244.254.253.249 infos-du-net.com
252.253.241.252 infosecpodcast.com
250.251.254.241 infospyware.com
254.241.245.249 inicioid.com
255.254.242.250 iniciorapido.info
245.249.254.255 inline-software.de
246.241.240.252 internetsecurity.comodo.com
242.253.247.244 intranet.cidiroax.ipn.mx
253.250.242.251 investor.symantec.com
250.252.255.251 irc.bigshitsandwich.org
245.242.250.255 irc.metraiciono.com
243.246.246.246 iseclab.org
246.241.244.255 isotopecomics.com
248.250.248.248 iss.net
248.251.249.243 it.answers.yahoo.com
244.241.241.245 it.bitdefender.com
243.244.243.247 it.mcafee.com
241.252.253.249 it.trendmicro.com
242.244.253.253 itw.trendmicro.com
250.244.251.241 ixomodels.com
250.247.246.250 ixostore.ixomodels.com
245.253.245.244 javacoolsoftware.com
246.252.251.247 jetico.com
242.246.244.255 jiangmin.com
245.251.249.250 jiangmin.com.cn
255.241.246.250 jobs.bitdefender.com
252.242.253.255 jotti.org
241.242.243.244 jp.mcafee.com
243.254.241.252 jp.trendmicro.com
252.249.244.242 justfacebook.net
249.244.249.245 k-otik.com
244.250.245.252 k7computing.com
245.241.248.245 kaba.360.cn
253.255.240.255 kaba.360.com
247.248.252.244 karuna-shechen.org
249.253.251.246 kaspersky-fr.com
247.254.246.253 kaspersky-labs.com
249.242.241.253 kaspersky.co.jp
249.242.241.246 kaspersky.co.uk
254.241.244.243 kaspersky.com
243.250.246.249 kaspersky.com.cn
255.243.255.250 kaspersky.dk
253.253.244.240 kaspersky.es
241.246.245.253 kaspersky.gr
253.241.240.251 kaspersky.pl
246.255.249.244 kaspersky.ru
243.240.248.252 kaspersky.se
243.246.252.243 kasperskylab.co.kr
253.253.241.252 kasperskylab.nl
246.248.247.246 kav.ru
240.245.253.249 kav.zonelabs.com
246.249.251.246 kb.bitdefender.com
245.247.246.253 kb.bitdefender.de
243.241.250.246 kb.bitdefender.us
249.253.245.251 kerio.com
245.244.254.247 kimzimmer.net
245.244.242.248 kioskea.net
252.240.246.240 kpfans.com
252.254.247.247 kr.ahnlab.com
242.244.244.242 kr.sophos.com
249.250.243.251 krupunmai.com
252.248.247.246 kvup.jiangmin.com
254.240.246.252 kztechs.com
240.254.244.254 l33t.shadow-mods.net
245.253.241.255 la.trendmicro.com
254.248.251.240 ladooscuro.es
252.243.255.242 laneros.com
250.240.249.246 latam.kaspersky.com
252.253.254.251 latin.bitdefender.com
252.253.252.248 lavasoft.com
250.253.248.243 lavasoft.nu
251.251.254.245 lavasoftusa.com
242.246.253.245 lexikon.ikarus.at
255.255.244.241 license.drweb.com
253.240.240.248 linhadefensiva.org
251.241.247.241 linhadefensiva.uol.com.br
255.246.241.245 linux.bitdefender.com
240.242.253.240 lists.clamav.net
249.250.246.244 liutilities.com
241.249.245.250 live.sunbeltsoftware.com
245.244.254.243 liveprotect.net
241.242.246.253 liveupdate.symantec.com
247.246.246.241 liveupdate.symantec.d4p.net
252.253.250.242 liveupdate.symantecliveupdate.com
244.252.243.248 looknstop.com
244.244.249.250 lovings.technigoyous.net
242.247.255.244 lurker.clamav.net
249.249.247.250 mailcenter.rising.com
242.251.252.249 mailcenter.rising.com.cn
248.244.254.253 majorgeeks.com
252.241.254.255 mall.hauri.co.kr
253.243.241.254 malwarebytes.org
241.244.250.254 malwarecity.com
240.246.247.253 malwarecity.netmalwarecity.org
248.255.250.254 malwaredomainlist.com
254.246.243.242 malwarepedia.com
241.241.248.250 malwareremoval.com
245.242.252.250 malwarescan.emsisoft.com
247.245.250.245 malwarescan.emsisoft.de
254.246.253.242 malwarescan.emsisoft.es
251.247.249.251 mamutu.com
248.252.248.247 manuelruvalcaba.com
241.252.241.254 marian.symantec.com
248.245.244.248 mast.mcafee.com
254.246.246.244 mcafee-at-home.com
254.248.253.245 mcafee.com
241.242.242.249 mcafeeb2b.com
250.249.252.242 mcafeefans.com
242.246.251.255 mcafeeretail.com
251.249.251.240 mcaffee.com
246.246.247.254 me.kaspersky.com
251.244.249.243 media.fastclick.net
241.251.245.245 megasecurity.org
245.245.250.251 merijn.org
248.255.254.250 metascan-online.com
247.240.241.246 microsoft.com
245.245.248.255 microsoft.fr
243.249.251.241 midescargas.com
241.253.245.248 mirror02.gdata.de
245.243.252.253 misec.net
250.254.242.248 mmsk.cn
255.242.244.243 moneybookers.com
249.247.242.242 moosoft.com
240.244.251.247 mop.pandasecurity.com
250.252.240.249 mostz.com
245.251.255.252 mozilla-hispano.org
252.244.247.245 msdn.microsoft.com
253.249.249.250 msk.drweb.com
243.248.252.250 msk1.drweb.com
245.243.240.250 msk2.drweb.com
248.245.252.247 msk3.drweb.com
250.252.246.250 msk4.drweb.com
240.245.245.255 msk5.drweb.com
251.252.255.247 msk6.drweb.com
245.248.253.242 msk7.drweb.com
241.247.252.244 msncleaner.softonic.com
247.248.251.254 msnfix.changelog.fr
249.254.251.252 msnvirusremoval.com
253.241.241.246 msr.mcafee.com
251.253.241.251 mvps.org
246.250.250.255 mx.answers.yahoo.com
240.247.254.241 mx.mcafee.com
254.251.248.248 mxttchina.com
250.247.245.249 my-etrust.com
250.241.243.251 my.drweb.com
242.242.247.244 mygeekside.com
250.252.243.245 nabble.com
255.245.241.244 nai.com
249.248.251.252 natsko.com
240.241.254.246 naturesimages.net
252.247.246.248 net-security.org
251.244.254.255 network.drweb.com
255.254.245.252 networkassociates.com
240.254.253.240 networkassociates.nai.com
242.249.255.243 networkworld.com
248.252.242.248 neunet.orgnews.bitdefender.com
248.245.253.249 new-beta.drweb.com
255.253.242.249 new-company.drweb.com
245.250.251.252 new-estore.drweb.com
241.243.244.252 new-forum.drweb.com
247.247.255.253 new-partners.drweb.com
242.243.251.247 new-solutions.drweb.com
253.251.252.247 new-support.drweb.com
245.246.254.251 new-www.drweb.com
254.251.252.249 new.taringa.net
241.240.244.245 news.drweb.com
245.247.251.240 newsletters.trendmicro.com
240.242.252.240 niueight.norman.no
240.245.254.255 niufive.norman.no
241.254.241.250 niufour.norman.no
246.252.247.248 niunine.norman.no
246.252.246.253 niuone.norman.no
246.251.243.243 niuseven.norman.no
248.240.248.252 niusix.norman.no
245.254.249.249 niuthree.norman.no
249.246.245.255 niutwo.norman.no
248.248.244.244 nl.bitdefender.com
244.251.253.255 noadware.net
245.254.242.247 nod32.co.uk
240.247.242.241 nod32.com
253.243.240.253 nod32.datsec.de
255.251.250.252 nod32.lu
252.243.246.248 nod32.ru
243.243.244.251 norman.com
247.251.241.251 norton.com
251.242.248.252 notifier.antivir-pe.de
241.241.248.244 novirusthanks.org
240.240.241.253 nprobeta.norman.com
242.245.247.250 nprotect.com
246.252.246.243 nprotect.net
249.250.254.253 nprotect.seoul.go.kr
247.253.252.243 nsclean.com
253.255.246.254 ntfaq.co.kr
242.240.242.247 obscgi.mcafee.com
244.241.250.253 oem.sunbeltsoftware.com
251.252.240.252 offensivecomputing.net
250.241.246.255 office.microsoft.com
246.247.251.254 oldtimer.geekstogo.com
251.250.247.246 one.tinypicbox.com
241.246.255.250 onecare.live.com
250.249.247.249 online-backup.comodo.com
248.254.255.242 online.jiangmin.com
240.249.246.250 online.rising.com.cn
246.243.244.253 onlinecheck.emsisoft.com
242.249.248.241 onlinecheck.emsisoft.de
254.251.240.243 onlinecheck.emsisoft.net
253.241.246.246 onlinecheck.emsisoft.org
250.253.244.243 onlinescan.avast.com
254.240.254.251 openantivirus.org
241.248.252.254 outpost.pl
255.241.248.246 ozzu.com
247.252.253.254 p3dev.taringa.net
248.242.253.247 pandalabs.pandasecurity.com
247.242.252.254 pandasecurity.com
252.255.246.252 pandasoftware.com
253.241.250.240 pandasoftware.es
255.252.251.255 pantip.com
250.244.254.254 pcav.cn
248.246.243.248 pccreg.antivirus.com
240.243.249.241 pccreg.trendmicro.com
244.254.252.242 pcentraide.com
247.255.245.251 pcguide.com
250.244.246.247 pchell.com
254.242.245.240 pcinternetpatrol.com
244.243.248.249 pcsupportadvisor.com
243.249.253.245 pctools.com
244.242.248.243 pda.drweb.com
255.244.241.242 pedidos.protegerse.com
255.251.241.242 personal.psu.edu
247.253.249.252 personalfirewall.comodo.com
251.243.242.240 pestpatrol.com
248.250.243.243 pg.hauri.net
248.251.247.241 phx.corporate-ir.net
251.252.250.245 pineleafboys.com
245.241.244.241 podcasts.sophos.com
250.247.244.244 pogonyuto.forospanish.com
251.242.255.252 precisesecurity.com
248.242.248.243 prevx.com
255.240.249.241 privacy.microsoft.com
242.241.243.250 products.drweb.com
243.251.255.253 promotions.drweb.com
254.255.242.254 psnw.com
251.250.240.253 pspl.com
248.247.254.241 pvtc.org
240.245.246.247 qqjkw.net
255.246.252.250 quickheal.co.in
246.240.241.240 quickheal.com
249.255.247.250 radius.turvamies.com
252.254.253.252 rads.mcafee.com
249.255.248.245 ravantivirus.com
243.244.252.249 raymond.cc
240.248.240.255 reg-int.nod32-es.com
245.248.255.249 reg.eset.es
245.251.253.250 reg.rising.com.cn
254.241.247.247 register.norman.com
241.246.252.241 removetrojanvirus.org
255.246.245.250 renewalcenter.symantec.com
240.246.252.254 renewals.bitdefender.com
246.254.242.240 research.microsoft.com
253.248.251.240 research.pandasecurity.com
243.244.242.250 research.sunbelt-software.com
240.250.249.255 resplendence.com
251.247.241.242 retail.sp.f-secure.com
247.247.241.243 retail01.sp.f-secure.com
244.246.247.250 retail02.sp.f-secure.com
248.241.254.242 ribbonwarehouse.com
254.251.252.245 rising-global.com
245.251.254.246 rising.com
250.247.241.255 rising.com.cn
252.244.241.244 rolandovera.com
249.241.248.253 rootkit.com
246.243.251.240 rootkit.nl
240.247.242.245 rover800.gaima.co.uk
247.243.248.249 roysephotos.com
243.243.250.250 ru.trendmicro.com
247.252.244.245 ruben.bzin.net
242.253.246.246 runscanner.net
254.248.246.247 safe.qq.com
248.252.252.241 safecomputing.umn.edu
254.240.247.245 safer-networking.org
255.248.251.247 safetynet.com
246.253.245.247 sales.bitdefender.com
243.244.245.246 samroeng.hi5.com
250.250.251.247 sandbox.norman.com
255.249.248.248 sandboxie.com
240.245.241.254 sapcupgrades.com
243.240.250.253 sarahmcconnellphotography.net
253.252.253.241 saverssite.com
242.248.242.255 scan.anti-trojan.net
252.241.241.243 scan.kingsoft.com
254.254.241.248 scan4you.net
242.243.253.255 scanner.novirusthanks.org
240.255.250.250 scanner.virus.org
242.252.250.251 scanner2.novirusthanks.or
249.245.252.245 schemas.microsoft.com
255.243.242.243 schemas.xmlsoap.org
254.254.246.249 sea.symantec.com
241.245.248.246 search.ca.com
243.251.251.249 search.mcafee.com
254.241.249.243 search.symantec.com
255.249.251.252 seasonsecurity.com
252.243.253.242 secdreg.org
255.247.252.249 secubox.aldria.com
255.244.248.248 secunia.com
244.244.247.253 secure-email.comodo.com
241.245.246.250 secure.av-desk.com
247.253.246.243 secure.nai.com
249.252.249.242 securecomputing.com
252.247.252.253 secureme.com
241.254.244.253 securitoo.com
252.255.241.243 security.symantec.com
240.240.244.247 securitycheck.symantec.com
251.249.240.245 securitynewsportal.com
253.250.242.247 securityrespons.symantec.com
248.253.255.255 securityresponse.symantec.com
255.254.243.244 securitywonks.net
254.251.241.244 secuser.com
243.241.246.247 secuser.model-fx.com
252.249.242.253 sergiwa.com
255.244.251.247 service.mcafee.com
254.245.240.255 service1.symantec.com
246.248.247.250 servicenews.symantec.com
240.253.241.248 sfdoccentral.symantec.com
247.245.247.244 shadow.grisoft.cz
249.242.242.242 shadu.baidu.com
244.247.253.253 shadu.duba.net
243.247.243.251 shield.prevx.com
240.247.242.251 shop.hauri.co.kr
253.255.241.254 shop.pandasecurity.com
249.242.244.254 shop.sunbeltsoftware.com
241.251.249.253 shop.symantec.com
249.246.241.244 shop.trendmicro.com
243.242.241.246 shudoo.com
242.246.252.252 simplysup.com
247.241.247.254 siren24.nprotect.com
245.244.244.255 siteadvisor.com
253.253.249.249 sitedirector.symantec.com
242.252.241.240 smallbiz.symantec.com
240.248.242.245 smbstore.trendmicro.com
247.241.246.245 smokey-services.eu
250.253.249.248 soccersuck.com
252.246.244.249 softfaq.com
249.241.249.248 softonic.com
255.252.246.240 software-files.download.com
250.251.252.249 solutions.drweb.com
246.243.244.241 sophos.com
255.255.255.244 sophos.fr
247.245.251.253 sophos1.ucd.ie
255.252.241.244 sophos10.ucd.ie
249.245.243.251 sophos2.ucd.ie
243.252.244.245 sophos5.ucd.ie
246.248.250.243 sophos6.ucd.ie
244.249.254.240 sophos7.ucd.ie
251.246.240.241 sophos8.ucd.ie
254.247.252.242 sophos9.ucd.ie
242.244.255.241 soporte.pandasecurity.com
243.251.252.244 sos.rising.com.cn
242.246.254.241 sosvirus.changelog.fr
241.248.254.242 spd.atdmt.com
250.246.241.255 specs.xmlsoap.org
248.242.240.246 speedtest.comodo.com
251.247.255.242 spftrl.digitalriver.com
246.240.245.253 spyany.com
245.251.254.251 spyblocker-software.com
244.246.241.255 spybot.info
247.255.255.247 spycheck.co.uk
246.243.244.242 spycheck.es
250.248.241.245 spychecker.com
254.248.248.248 spycop.com
252.253.241.244 spywaredb.com
253.255.252.255 spywaredlls.prevx.com
243.244.251.253 spywarefiles.prevx.com
255.253.242.247 spywareguide.com
244.240.248.251 spywareinfo.com
253.254.241.244 spywareterminator.com
242.246.242.253 square.bitdefender.com
246.255.241.245 static.yoreparo.com
244.254.243.247 stats.norton.com
248.250.252.254 stdio-labs.blogspot.com
251.244.248.244 stiller.com
247.255.255.243 store.bitdefender.com
247.253.246.243 store.de.bitdefender.com
252.252.246.248 store.drweb.com
254.250.250.243 store.trendmicro.com
243.250.245.248 subs.geekstogo.com
242.250.242.249 subwiz.trendmicro.com
253.249.248.250 sucop.com
242.251.243.247 sun.symantec.com
246.249.247.240 sunbelt-software.com
250.251.252.253 sunbeltsecurity.com
240.240.242.243 sunbeltsoftware.com
253.252.244.251 superboy2010.com.au
243.242.252.242 superdicas.com.br
253.240.248.253 superuser.co.kr
241.254.248.246 support.drweb.com
251.250.246.249 support.f-secure.com
248.250.247.253 support.kaspersky.co
243.243.255.251 support.mcafee.com
248.241.243.243 support.microsoft.com
251.248.245.245 support.pandasecurity.com
247.254.247.252 support.rising-global.com
241.241.252.253 sybari.com
244.246.248.253 sygate.com
246.255.243.255 symantec-ese.baynote.net
251.243.246.240 symantec.com
246.250.241.253 symantecliveupdate.com
254.240.255.242 symatec.com
246.247.246.250 sysinternals.com
252.252.245.247 system-cleaner.comodo.com
253.249.251.253 tallemu.com
240.250.247.253 taringa.net
241.245.240.245 tds.diamondcs.com.au
245.251.253.250 tech.pantip.com
246.245.240.240 techimo.com
253.245.251.248 techspot.com
250.252.250.247 techsupportforum.com
246.241.255.245 tecniservicioslys.com
251.253.254.246 tecno-soft.com
252.250.249.252 tempuri.org
253.240.255.248 thecomputerpitstop.com
249.245.241.252 thejokerx.blogspot.com
250.246.247.243 thetechguide.com
252.253.244.242 thinkpad.cn
245.245.243.248 threatexpert.com
248.251.247.246 threatinfo.trendmicro.com
250.253.247.240 timeforyourbusi.pandasecurity.com
246.252.254.252 timestamp.comodoca.com
246.247.242.243 timestamp.wosign.com
240.255.249.255 tinysoftware.com
253.247.245.250 tms.symantec.com
251.242.246.248 together.pctools.com
253.246.244.248 tool.ikaka.com
245.245.249.252 toonbox.de
247.241.254.244 tr.mcafee.com
252.255.241.243 trackingtheworld.com
250.255.245.247 training.drweb.com
242.245.241.240 training.trendmicro.com
244.240.244.251 trapware.com
249.251.241.249 trendmicro.com
255.248.249.243 trendmicro.com.cn
250.249.243.249 trendmicro.fr
240.255.252.243 trendsecure.com
251.254.246.240 trial.trendmicro.com
248.254.248.255 trucoswindows.es
245.249.244.255 trucoswindows.net
254.253.240.253 tw.mcafee.com
255.253.248.254 tw.sophos.com
247.244.253.241 tw.trendmicro.com
254.243.255.240 tweaksforgeeks.com
240.245.242.243 u0.eset.com
251.255.247.242 u1.eset.com
243.244.244.248 u10.eset.com
245.246.244.241 u100.eset.com
249.255.249.240 u11.eset.com
241.242.251.243 u12.eset.com
244.255.254.240 u13.eset.com
243.251.241.247 u14.eset.com
255.253.251.244 u15.eset.com
254.253.242.242 u16.eset.com
247.244.250.248 u17.eset.com
252.249.253.252 u18.eset.com
243.246.240.249 u19.eset.com
249.252.250.249 u2.eset.com
244.248.252.250 u20.eset.com
240.240.247.247 u21.eset.com
248.245.244.248 u22.eset.com
253.245.255.242 u23.eset.com
245.245.243.248 u24.eset.com
254.252.249.243 u25.eset.com
251.248.247.251 u26.eset.com
246.244.251.244 u27.eset.com
251.244.240.250 u28.eset.com
247.252.243.255 u29.eset.com
255.250.241.248 u3.eset.com
246.241.250.252 u30.eset.com
245.246.242.251 u31.eset.com
251.252.253.247 u32.eset.com
251.240.248.244 u33.eset.com
243.240.245.244 u34.eset.com
250.247.255.244 u35.eset.com
243.248.253.255 u36.eset.com
250.246.254.241 u36eset.com
244.246.240.255 u37.eset.com
251.245.248.243 u37eset.com
253.243.252.249 u38.eset.com
254.242.248.248 u39.eset.com
248.248.243.245 u4.eset.com
244.249.246.247 u40.eset.com
241.247.253.244 u41.eset.com
252.252.242.254 u42.eset.com
243.255.241.254 u43.eset.com
248.241.252.247 u44.eset.com
248.247.253.241 u45.eset.com
255.253.255.244 u46.eset.com
247.252.241.251 u47.eset.com
253.253.245.245 u48.eset.com
255.254.240.251 u49.eset.com
253.249.249.253 u5.eset.com
247.247.252.249 u50.eset.com
240.251.240.247 u51.eset.com
242.242.244.251 u52.eset.com
251.255.251.246 u53.eset.com
254.247.249.249 u54.eset.com
254.243.255.252 u55.eset.com
244.249.248.242 u56.eset.com
252.251.255.244 u57.eset.com
249.250.243.251 u58.eset.com
246.246.243.250 u59.eset.com
255.244.248.248 u6.eset.com
246.249.253.249 u60.eset.com
250.240.254.254 u61.eset.com
246.244.250.249 u62.eset.com
253.242.254.255 u63.eset.com
246.252.242.240 u64.eset.com
254.248.247.243 u65.eset.com
242.242.247.244 u66.eset.com
248.244.252.255 u67.eset.com
247.249.244.254 u68.eset.com
252.248.252.243 u69.eset.com
254.255.241.241 u7.eset.com
241.253.245.248 u70.eset.com
249.247.244.254 u71.eset.com
254.240.242.244 u72.eset.com
243.240.255.243 u73.eset.com
254.252.243.252 u74.eset.com
248.252.243.255 u75.eset.com
246.249.255.251 u76.eset.com
255.251.249.247 u77.eset.com
241.240.254.249 u78.eset.com
240.250.244.244 u79.eset.com
241.248.244.253 u8.eset.com
255.240.255.251 u80.eset.com
240.242.248.246 u81.eset.com
253.252.251.240 u82.eset.com
251.240.250.252 u83.eset.com
246.246.246.243 u84.eset.com
248.245.242.242 u85.eset.com
251.250.252.243 u86.eset.com
243.241.247.241 u87.eset.com
249.253.252.247 u88.eset.com
253.241.251.240 u89.eset.com
250.244.246.248 u9.eset.com
252.241.245.245 u90.eset.com
250.241.251.252 u91.eset.com
241.253.250.253 u92.eset.com
245.241.247.240 u93.eset.com
248.240.247.247 u94.eset.com
242.248.240.251 u95.eset.com
242.246.245.252 u96.eset.com
249.248.254.251 u97.eset.com
248.240.253.240 u98.eset.com
241.241.247.253 u99.eset.com
244.240.247.240 uk.mcafee.com
255.254.254.243 uk.trendmicro-europe.com
248.247.246.247 uk.trendmicro.com
249.249.248.245 ulove.tigolbittys.info
240.249.246.250 up.duba.net
246.247.244.241 up.rising.com.cn
249.247.241.245 up1.nod123.cn
254.247.251.255 upd.zonelabs.com
247.241.241.251 update.360safe.cn
253.247.252.244 update.360safe.com
240.251.245.247 update.aladdin.com
248.245.245.248 update.authentium.com
251.240.241.247 update.avg.com
241.254.246.242 update.avgfrance.com
250.253.250.249 update.bitdefender.com
248.243.242.254 update.drweb.com
254.243.249.251 update.ewido.com
253.245.248.247 update.grisoft.com
245.251.244.249 update.grisoft.cz
254.251.249.253 update.hispasec.com
250.254.253.244 update.ikaka.com
244.246.252.250 update.ikarus-software.at
252.242.244.249 update.quickheal.com
242.243.252.244 update.rising.com.cn
252.250.249.242 update.sophos.com
255.254.243.253 update.symantec.com
255.252.249.253 update.trendmicro.com
254.251.240.255 update7.jiangmin.com
246.242.250.253 updatem.360safe.cn
245.243.254.244 updatem.360safe.com
240.245.255.252 updates.a-2.org
250.252.245.253 updates.drweb.com
251.251.253.253 updates.f-prot.com
249.249.252.244 updates.sald.com
251.254.243.247 updates.symantec.com
248.253.250.251 updates3.kaspersky-labs.com
248.246.250.249 updates4.kaspersky-labs.com
243.252.244.248 updates5.kaspersky-labs.com
244.246.245.244 upgrade.bitdefender.com
244.251.255.255 upgrade1.bitdefender.com
248.246.255.248 upgrade2.bitdefender.com
246.245.251.251 upgrade3.bitdefender.com
245.243.249.251 upgrade4.bitdefender.com
253.250.244.243 upload.changelog.fr
241.254.242.241 us.bitdefender.com
252.255.254.247 us.mcafee.com
243.240.249.253 us.trendmicro.com
255.255.240.241 usa.kaspersky.com
248.253.245.250 usbcleaner.cn
252.243.242.251 ushousecall02.trendmicro.com
253.248.251.249 utilidades-utiles.com
246.255.245.250 v.dreamwiz.com
244.245.243.240 v4.windowsupdate.microsoft.com
254.251.247.249 v5.windowsupdate.microsoft.com
240.243.246.244 vet.com.au
241.246.252.244 vicentevirtual.com
245.251.241.248 viguard.com
245.241.251.247 vil.nai.com
245.251.241.252 vil.nail.com
243.250.253.255 virobot.co.kr
255.242.247.248 virscan.org
255.248.244.254 virus.org
245.252.248.241 virusbuster.hu
241.245.245.253 viruschief.com
249.251.244.244 virusdoctor.jp
241.253.248.246 virusfreezone.info
245.246.248.248 virusinfo.prevx.com
252.252.245.244 viruslist.com
241.250.253.249 viruslist.ru
246.247.255.247 virusscan.jotti.org
248.255.251.243 virusscanonline.net
244.242.250.248 virusspy.com
245.255.242.242 virustotal.com
254.246.251.255 visualizesoftware.com
249.248.254.243 visualtracking.symantec.com
254.248.252.253 vivo-austin.com
248.253.249.240 vms.drweb.com
254.251.248.248 vncsvr.com
246.240.241.253 vos.symantec.com
245.251.254.254 vrv.com.cn
253.249.241.244 vsantivirus.com
251.253.246.247 webadmin.norman.no
247.245.243.252 webphand.com
240.245.247.247 webroot.com
254.249.254.255 wedoantivirus.com
248.252.250.241 welkam.co.jp
241.251.240.243 wexperts-exchange.com
240.240.255.246 whatthetech.com
244.252.248.240 wikio.es
252.247.249.252 wilderssecurity.com
252.250.242.252 wilderssecurity.net
254.251.252.250 wildlist.com
243.249.243.250 windowsupdate.microsoft.com
255.241.254.243 winpatrol.com
242.251.246.241 wmcafee.com
250.245.246.254 woottonfootball.com
240.255.248.254 wtc.trendmicro.com
252.248.252.243 ww.emsisoft.com
247.247.242.244 www.1stavenuelimousines.co.uk
253.252.243.254 www.2xlgames.com
247.253.245.243 www.ahnlab.com
247.251.254.250 www.aks.com
254.254.243.245 www.aladdin.com
240.251.244.254 www.anti-trojan-software.net
246.250.247.246 www.anti-trojan.net
244.248.243.248 www.anti-virus.by
249.253.240.240 www.antivir.es
243.250.255.243 www.antivirus-tools.com
243.246.253.253 www.antiy.net
244.254.254.254 www.apsecure.com
244.247.252.244 www.arpia.be
244.249.241.245 www.authentium.com
246.244.244.247 www.authentium.com.au
255.244.249.254 www.av-desk.com
253.247.248.254 www.avast.com
245.253.244.244 www.avg.com
247.249.242.252 www.avhide.com
254.253.249.243 www.avoncourt.com
255.252.246.248 www.avx.ro
243.253.252.252 www.barder.com
242.255.251.248 www.beautybar.com
242.250.243.246 www.bg.virusblokada.com
248.247.252.247 www.bit-defender.de
251.245.250.249 www.bitdefende.de
244.247.247.250 www.bitdefender-es.com
246.252.242.243 www.bitdefender.be
252.253.246.254 www.bitdefender.cl
246.244.243.252 www.bitdefender.co.uk
244.254.252.253 www.bitdefender.com
248.247.254.241 www.bitdefender.com.au
241.252.249.241 www.bitdefender.com.sg
246.241.252.248 www.bitdefender.com.tw
240.255.246.252 www.bitdefender.com.vn
240.250.249.245 www.bitdefender.de
247.253.254.253 www.bitdefender.es
242.253.240.245 www.bitdefender.fr
247.254.250.249 www.bitdefender.hk
245.244.249.243 www.bitdefender.us
243.240.255.243 www.bitdefenderme.com
251.248.245.253 www.briarhurst.com
249.255.251.248 www.brightoctober.com
254.248.250.251 www.buraka.tv
243.242.249.247 www.buscafacil.com
255.240.246.250 www.buscalo.in
245.252.255.240 www.busco.in
253.240.255.248 www.ca.com
250.247.241.255 www.cambridge-steiner-school.co.uk
249.240.243.250 www.ccssforum.org
247.247.250.245 www.celticmerchant.com
254.247.252.254 www.clamav.net
254.250.242.250 www.collectedcurios.com
252.242.246.254 www.comodo.com
240.250.253.249 www.comodo.tv
253.247.241.241 www.comodoantispam.com
252.254.249.250 www.comodopartners.com
244.247.254.253 www.computing.net
249.251.252.250 www.configurarequipos.com
241.241.244.244 www.contentverification.com
245.254.243.244 www.deborahshelton.net
242.249.253.254 www.dr-bull.com
254.251.241.250 www.drweb.com
244.250.244.247 www.ealaddin.com
250.250.253.252 www.elvis-express.com
252.242.247.248 www.emeraldclassic.co.uk
249.244.255.255 www.emsisoft.at
246.251.240.254 www.emsisoft.com
242.249.241.244 www.emsisoft.de
246.243.242.246 www.emsisoft.es
247.240.246.251 www.emsisoft.fr
253.253.250.245 www.emsisoft.it
245.244.244.249 www.emsisoft.jp
249.244.242.240 www.emsisoft.net
240.248.244.249 www.emsisoft.nl
240.243.252.246 www.emsisoft.org
243.247.248.248 www.engyro.com
249.253.240.240 www.entercept.com
255.246.244.246 www.esafe.com
254.251.240.254 www.eset.es
244.243.242.247 www.eugrantsadvisor.com
254.255.244.246 www.eugrantsadvisor.de
248.247.252.245 www.eugrantsadvisor.ie
255.255.240.253 www.eugrantsadvisor.se
250.250.244.249 www.exchangeyourcareer.com
246.246.244.247 www.f-prot.com
254.248.251.240 www.f-secure.com
245.255.245.244 www.fimasys.com
240.251.252.254 www.flairweddings.co.uk
254.241.246.252 www.forospyware.com
250.253.253.252 www.fortifed.com
245.245.241.242 www.fortiid.com
255.247.252.255 www.fortimail.com
242.246.242.254 www.fortinet-apac.com
240.242.255.244 www.fortinet.ch
243.255.242.249 www.fortinet.co.il
254.255.247.243 www.fortinet.com
248.249.252.255 www.fortinet.net
245.249.250.250 www.fortinet.nl
253.247.240.241 www.fortinet.sg
245.255.254.244 www.fortinetuk.com
241.249.252.243 www.freeality.com
247.242.243.247 www.freedrweb.ru
242.242.243.244 www.freerav.com
240.243.248.240 www.frisk-software.com
247.243.244.254 www.frisk.is
247.252.253.244 www.fsecure.com
244.243.246.247 www.garryowen.com
248.249.248.244 www.gdata.es
251.248.249.246 www.globalhauri.com
241.241.240.254 www.gokidding.com
250.242.250.249 www.grisoft.com
246.249.252.241 www.hackshields.com
246.253.250.243 www.hacksoft.com.pe
251.248.252.245 www.hacksoft.pe
255.241.244.252 www.handwritingforkids.com
244.253.250.254 www.hasp.se
252.249.246.254 www.hauri.co.kr
254.245.242.251 www.hauri.net
252.242.249.250 www.hxproduction.com
254.250.248.240 www.ibusca.me
249.246.250.249 www.ikarus.at
241.252.242.243 www.imddomains.co.uk
248.250.240.254 www.indielisboa.com
253.243.252.249 www.inicioid.com
247.240.245.240 www.iniciorapido.info
243.252.244.249 www.internationalservicecheck.com
247.247.245.248 www.irangoals.com
240.253.240.253 www.iseclab.org
246.245.252.243 www.ixomodels.com
254.254.249.251 www.jiangmin.com
253.255.253.250 www.jiangmin.com.cn
244.247.246.255 www.jotti.org
241.251.240.255 www.kaspersky.com
252.246.247.249 www.kioskea.net
253.244.255.255 www.latin-mass-society.org
241.245.254.240 www.livepcsupport.com
249.255.250.241 www.malwarecity.com
253.246.243.247 www.malwarecity.fr
243.250.248.253 www.mamutu.com
246.248.243.246 www.mamutu.de
240.248.244.252 www.manchester-offices.co.uk
244.240.247.240 www.mcafee.at
252.245.249.252 www.mcafee.com
253.243.253.240 www.metascan-online.com
245.251.240.247 www.microsoft.com
246.241.246.243 www.midescargas.com
242.249.249.248 www.mountainlakeslodge.com
251.249.246.255 www.mtr-design.com
242.251.252.242 www.mygeekside.com
254.254.246.246 www.netegrity.com
252.243.252.242 www.norman.com
251.247.246.253 www.nottinghampoetryseries.com
248.248.253.253 www.novirusthanks.org
248.242.249.250 www.npin.co.kr
254.251.250.254 www.nprotect.co.kr
255.240.245.247 www.nprotect.com
243.244.240.254 www.nprotect.com.br
255.249.246.255 www.nsclean.com
253.253.241.243 www.owen.org
244.245.244.252 www.pandasecurity.com
254.247.254.253 www.pctools.com
240.254.243.252 www.peterhearnwaste.co.uk
241.246.250.242 www.phoenixtrikeworks.com
249.255.249.246 www.prdouglas.co.uk
242.247.251.245 www.prevx.com
254.252.248.248 www.prevx1.com
240.250.251.250 www.professorbeyer.com
249.241.249.248 www.quickheal.com
247.250.242.252 www.removetrojanvirus.org
255.240.244.251 www.renningers.com
248.248.250.245 www.residentphotography.com
246.241.244.250 www.retento.com
250.245.245.253 www.reviewsofbooks.com
253.254.248.250 www.rising-global.com
252.244.240.251 www.risingav.com.au
244.248.255.255 www.safenet-inc.com
254.241.248.254 www.scan4you.net
242.243.247.255 www.seasonsecurity.com
249.247.251.244 www.secondchanceboxer.com
249.249.252.252 www.secure-elements.com
254.240.248.250 www.sheffieldmind.co.uk
251.248.241.246 www.smf.org
252.244.249.250 www.softfaq.com
246.247.246.243 www.sophos.com
243.255.253.245 www.spycheck.co.uk
241.252.240.253 www.spycheck.es
247.250.255.253 www.stadiumpage.com
246.246.249.252 www.sunbeltsoftware.com
244.254.242.247 www.symantec.com
249.251.253.254 www.sysinternals.com
249.249.247.242 www.tecniservicioslys.com
245.255.241.253 www.testmypcsecurity.com
249.244.245.240 www.threatexpert.com
248.246.251.246 www.tomorrowsedge.net
250.240.242.248 www.trendmicro.com
249.252.243.250 www.trojaner.info
254.253.255.246 www.trustix.com
245.245.247.247 www.trustlogo.com
255.240.249.241 www.vba.com.by
248.245.248.245 www.virscan.org
241.247.249.242 www.virus.fi
244.247.244.241 www.virus.org
251.241.241.245 www.virusbuster.hu
255.245.240.254 www.viruschief.com
255.252.245.240 www.virusfreezone.info
249.254.243.249 www.virustotal.com
241.251.250.246 www.wellgousa.com
242.243.251.251 www.whichssl.com
247.253.254.253 www.willsee.com
245.245.248.255 www.xmlsoap.org
255.253.254.249 www.zarya.info
249.249.245.252 www1.my-etrust.com
247.240.252.246 www3.ca.com
244.255.248.242 www3.safenet-inc.com
250.246.241.255 www4.symantec.com
249.253.249.244 wwws.clamav.net
247.242.248.249 x-cleaner.com
240.243.255.245 x.360safe.com
248.249.247.250 yoreparo.com
252.242.241.244 z-oleg.com
248.252.255.255 zeustracker.abuse.ch
250.253.243.247 zeylstra.nl
244.243.246.241 zhidao.baidu.com
254.255.249.251 zhidao.ikaka.com
248.252.252.246 ziggamza.net
249.242.245.250 zonavirus.com
241.251.249.255 zonealarm.com
244.251.249.243 zonelabs.com
249.254.251.252 zonelabs.fr
248.243.244.240 zonelog.co.uk
253.248.244.250 zs.kingsoft.com
252.243.254.253 ztl.comodo.com


Rootkit activity

No anomalies have been detected.

Propagation

A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Generic's file once a user opens a drive's folder in Windows Explorer.

VersionInfo

No information is available.

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 234908 237568 3.29897 396bdece0d81bf22f07889866820a124
.data 241664 8524 0 0 d41d8cd98f00b204e9800998ecf8427e
.rsrc 253952 16 4096 0 620f0b67a91f7f74151bc5be745b7110

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 40
6014eabd2d43ddcf124119bc9ad9b133
426cbe9802e01311388b2875c0cf37c1
63f6d33b8547a3db8cf03c1dc69796d8
27f1dc9b79bcfffd63a7373b1439ef4e
cbe6b835892fa16d7be796d2a1d17c89
048df73dd12fedc63c080d4463365f73
f2d2eb4bb29420affc17156eea9e7b97
76ffa88ed4c1bfa2117a90fe52af5adf
3905e2962a61da303cf2ba852f1d3ed6
9b99e0784275cb26482dc0fec6a46175
5f34a4afced3918683a62a3c2dbd679f
3a00831ef42cc1a5caf42e7a116720de
270ae0d9d14f688012160e3cece70c75
c975e4e202ae1e70ae2c617a6fab07cf
112bdfc5b80519a036c08a396668b065
021d8b6cb4ccba0b9dd32f593b428592
7f901cecb13bd3eb9ffcb54b5f99448d
095d80be7b6e339f3ce0360bd51a6be6
56be18630a2a16823d2a23fab20e4312
f975c41fb78aa8005e84aa258651965d
7ac7d79d87b5367eee2de2c98346321e
37071862db508893afa479401057a602
043c394e0b93e6eaf2be0f84895ade45
824df032609c65d70f05cbcce96649de
4f1b3ccb84ff5f21ec3e6a95b968a288

URLs

URL IP
hxxp://cloud.ns1.dnsdynnet.com/ 141.101.116.15
hxxp://whos.amung.us/swidget/78ejo1rdbrrt 67.202.94.93
hxxp://widgets.amung.us/small/00/2.png 173.192.170.82


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Web Traffic was not found.

The Generic connects to the servers at the folowing location(s):

Strings from Dumps were not found.


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Delete the original Generic file.
  2. Restore the original content of the HOSTS file (%System%\drivers\etc\hosts):
    127.0.0.1 localhost
  3. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  4. Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now