Virus:Worm/Skipi.C
Date discovered:11/09/2007
Type:Worm
In the wild:Yes
Reported Infections:Medium
Distribution Potential:Medium
Damage Potential:Low to medium
Static file:Yes
File size:188.416 Bytes
MD5 checksum:f86f7c9642474bd93fb22185ec27ffee
IVDF version:6.39.01.113 - Tuesday, September 11, 2007

 General Method of propagation:
   • Messenger


Aliases:
   •  Kaspersky: Worm.Win32.Skipi.c
   •  Eset: a variant of Win32/Persky worm


Platforms / OS:
   • Windows NT
   • Windows 2000
   • Windows XP
   • Windows 2003


Side effects:
   • Registry modification

 Files It copies itself to the following locations:
   • %SYSDIR%\stwinsdat.exe
   • %SYSDIR%\odcwinst.exe
   • %SYSDIR%\windb32.exe
   • %SYSDIR%\servftc.exe

 Registry To each registry key one of the values is added in order to run the processes after reboot:

–  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
   • Windows Sysdat="explorer.exe odcwinst.exe"
   •

–  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
   • "Logon Settings2"="odcwinst.exe"

–  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\
   Run
   • "Policies Options2"="%double-byte-characters%"

–  HKCU\Software\Microsoft\Windows\CurrentVersion\Run
   • System Driver2=-

–  HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
   • "Services Start2"="odcwinst.exe"



The following registry keys are added:

– HKLM\Software\RMX\cfg
   • j="j"

– HKCU\Software\RMX\cfg
   • j="j"

 Messenger Message
The sent message looks like the following:

   • look what crazy photo Tiffany sent to me,looks cool

 Hosts The host file is modified as explained:

– In this case existing entries are deleted.

– Access to the following domains are redirected to other destinations:
   • 183.156.162.170 symantec.comsecurityresponse.symantec.com;
      187.106.89.61 www.symantec.comsecurityresponse.symantec.com;
      82.72.216.45 pandasoftware.com; 128.101.84.22 www.pandasoftware.com;
      74.155.33.57 sophos.com; 37.242.129.219 www.sophos.com;
      175.102.186.232 mcafee.com; 157.234.107.220 www.mcafee.com;
      244.172.31.227 downloads-us1.kaspersky-labs.com; 125.155.35.63
      www.downloads-us1.kaspersky-labs.com; 114.39.149.235
      updates1.kaspersky-labs.com; 126.71.190.126
      www.updates1.kaspersky-labs.com; 229.193.162.81
      updates2.kaspersky-labs.com; 254.166.212.228
      www.updates2.kaspersky-labs.com; 234.27.143.126
      updates3.kaspersky-labs.com; 128.95.3.20
      www.updates3.kaspersky-labs.com; 135.10.237.108
      updates4.kaspersky-labs.com; 40.147.106.131
      www.updates4.kaspersky-labs.com; 162.21.13.43
      updates5.kaspersky-labs.com; 64.83.47.248
      www.updates5.kaspersky-labs.com; 137.249.134.93
      downloads1.kaspersky-labs.com; 182.37.250.19
      www.downloads1.kaspersky-labs.com; 105.37.179.186
      downloads2.kaspersky-labs.com; 155.131.119.195
      www.downloads2.kaspersky-labs.com; 214.62.51.141
      downloads3.kaspersky-labs.com; 165.91.215.206
      www.downloads3.kaspersky-labs.com; 74.156.103.53
      downloads4.kaspersky-labs.com; 174.144.79.78
      www.downloads4.kaspersky-labs.com; 158.204.248.165
      downloads5.kaspersky-labs.com; 51.119.152.46
      www.downloads5.kaspersky-labs.com; 146.12.78.228
      ftp.downloads1.kaspersky-labs.com; 214.91.110.177
      www.ftp.downloads1.kaspersky-labs.com; 75.209.26.142
      ftp.downloads2.kaspersky-labs.com; 221.250.18.235
      www.ftp.downloads2.kaspersky-labs.com; 208.68.204.81
      ftp.downloads3.kaspersky-labs.com; 177.6.200.70
      www.ftp.downloads3.kaspersky-labs.com; 140.192.30.113
      ftp.downloads4.kaspersky-labs.com; 95.165.89.254
      www.ftp.downloads4.kaspersky-labs.com; 207.86.135.68
      ftp.downloads5.kaspersky-labs.com; 26.241.145.165
      www.ftp.downloads5.kaspersky-labs.com; 77.74.201.182
      dnl-us3.kaspersky-labs.com; 183.120.194.160
      www.dnl-us3.kaspersky-labs.com; 157.148.100.199
      dnl-us4.kaspersky-labs.com; 47.189.63.169
      www.dnl-us4.kaspersky-labs.com; 187.95.32.8
      dnl-us5.kaspersky-labs.com; 33.181.226.75
      www.dnl-us5.kaspersky-labs.com; 135.141.135.34
      dnl-us6.kaspersky-labs.com; 77.76.136.105
      www.dnl-us6.kaspersky-labs.com; 67.49.104.79
      dnl-us7.kaspersky-labs.com; 26.222.143.183
      www.dnl-us7.kaspersky-labs.com; 25.20.86.222
      dnl-us8.kaspersky-labs.com; 17.190.95.62
      www.dnl-us8.kaspersky-labs.com; 147.49.39.179 kaspersky.ru;
      96.178.222.221 www.kaspersky.ru; 33.56.118.197 msk1.drweb.com;
      89.116.250.195 www.msk1.drweb.com; 151.15.33.159 msk2.drweb.com;
      240.51.35.246 www.msk2.drweb.com; 172.76.203.223 msk3.drweb.com;
      64.16.205.207 www.msk3.drweb.com; 125.189.91.186 msk4.drweb.com;
      6.161.243.123 www.msk4.drweb.com; 7.224.123.118
      boss.drweb.comdrweb.com; 36.114.143.124 www.boss.drweb.comdrweb.com;
      176.107.26.239 liveupdate.symantecliveupdate.com; 32.127.35.38
      www.liveupdate.symantecliveupdate.com; 191.197.234.18 viruslist.com;
      163.187.52.34 www.viruslist.com; 223.139.227.101
      security.symantec.com; 250.140.201.239 www.security.symantec.com;
      160.12.190.125 f-secure.com; 152.77.240.92 www.f-secure.com;
      246.205.123.134 kaspersky-labs.com; 146.202.58.15
      www.kaspersky-labs.com; 184.6.220.191 kaspersky.com; 33.200.58.1
      www.kaspersky.com; 34.35.231.251 avp.com; 36.122.9.255 www.avp.com;
      84.68.104.34 norman.com; 156.13.197.42 www.norman.com; 209.189.109.174
      sandbox.norman.com; 46.29.14.120 www.sandbox.norman.com; 1.151.200.46
      networkassociates.com; 164.62.135.50 www.networkassociates.com;
      175.14.145.198 ca.com; 108.116.91.116 www.ca.com; 139.17.161.173
      mast.mcafee.com; 23.187.181.176 www.mast.mcafee.com; 169.196.24.173
      my-etrust.com; 220.127.71.42 www.my-etrust.com; 0.1.215.167
      download.mcafee.com; 19.37.196.125 www.download.mcafee.com;
      237.211.7.12 dispatch.mcafee.com; 186.129.102.21
      www.dispatch.mcafee.com; 173.249.144.101 secure.nai.com;
      243.93.105.180 www.secure.nai.com; 230.105.163.204 nai.com;
      132.249.142.238 www.nai.com; 31.203.49.113 update.symantec.com;
      85.133.153.172 www.update.symantec.com; 67.250.113.22
      updates.symantec.com; 246.169.211.172 www.updates.symantec.com;
      34.134.94.147 us.mcafee.com; 23.254.137.255 www.us.mcafee.com;
      240.53.54.83 liveupdate.symantec.com; 14.146.139.138
      www.liveupdate.symantec.com; 197.125.253.213 customer.symantec.com;
      84.103.173.133 www.customer.symantec.com; 27.11.248.44
      rads.mcafee.com; 8.244.73.255 www.rads.mcafee.com; 83.64.50.127
      trendmicro.com; 107.163.188.89 www.trendmicro.com; 48.175.251.138
      grisoft.com; 98.82.229.198 www.grisoft.com; 89.160.100.27
      esaugumas.lt; 247.210.169.210 www.esaugumas.lt; 220.143.196.150
      antivirus.esaugumas.lt; 216.107.113.216 www.antivirus.esaugumas.lt;
      166.174.53.113 esecurity.lt; 215.86.170.137 www.esecurity.lt;
      12.95.23.184 virustotal.com; 104.65.68.108 www.virustotal.com;
      69.187.141.139 windowsupdate.microsoft.com; 38.207.52.89
      www.windowsupdate.microsoft.com; 237.14.252.155 microsoft.com;
      79.21.243.253 www.microsoft.com; 132.88.143.177 virusscan.jotti.org;
      67.30.252.89 www.virusscan.jotti.org; 237.205.181.39 bkav.com.vn;
      9.104.82.66 www.bkav.com.vn; 240.86.160.108
      grisoft.czfree.grisoft.com; 201.101.247.227
      www.grisoft.czfree.grisoft.com; 184.14.200.132 bitdefender.com;
      83.251.118.54 www.bitdefender.com; 86.198.103.134 aonealarm.com;
      151.4.90.143 www.aonealarm.com; 60.130.251.29 barracudanetworks.com;
      43.206.180.18 www.barracudanetworks.com; 194.249.199.8 free-av.com;
      201.156.154.55 www.free-av.com; 164.25.81.153 avast.com; 205.35.162.77
      www.avast.com; 130.129.229.58 pandasecurity.com; 187.14.107.244
      www.pandasecurity.com; 95.5.17.227 nod32-es.com; 183.123.21.162
      www.nod32-es.com; 35.45.40.165 nod32.com; 12.124.196.31 www.nod32.com;
      25.182.191.34 eset.com; 166.151.33.8 www.eset.com; 114.16.51.19
      nod32.it; 151.70.216.80 www.nod32.it; 192.222.32.193 nod32.de;
      150.120.27.186 www.nod32.de; 123.121.235.140 nod32.nl; 123.14.29.97
      www.nod32.nl; 127.110.58.103 nod32.datsec.de; 196.95.152.49
      www.nod32.datsec.de; 140.251.118.90 download0.avast.com; 20.180.72.107
      sl0.avast.com; 197.150.80.254 rs0.avast.com; 174.204.110.36
      download1.avast.com; 50.102.57.5 sl1.avast.com; 254.89.78.198
      rs1.avast.com; 63.199.233.176 download2.avast.com; 17.129.178.142
      sl2.avast.com; 58.203.217.86 rs2.avast.com; 24.95.100.12
      download3.avast.com; 216.180.200.228 sl3.avast.com; 233.127.183.167
      rs3.avast.com; 176.123.58.87 download4.avast.com; 126.101.255.22
      sl4.avast.com; 191.75.244.68 rs4.avast.com; 116.7.21.232
      download5.avast.com; 227.7.129.81 sl5.avast.com; 140.79.212.253
      rs5.avast.com; 96.192.177.185 download6.avast.com; 46.154.158.10
      sl6.avast.com; 94.64.21.204 rs6.avast.com; 225.59.215.25
      download7.avast.com; 104.130.132.108 sl7.avast.com; 212.248.105.6
      rs7.avast.com; 238.55.153.145 download8.avast.com; 89.140.63.4
      sl8.avast.com; 197.66.50.198 rs8.avast.com; 100.36.202.22
      download9.avast.com; 162.61.243.170 sl9.avast.com; 17.226.127.150
      rs9.avast.com; 162.243.193.112 download10.avast.com; 27.93.87.178
      sl10.avast.com; 197.227.71.95 rs10.avast.com; 101.31.78.234
      download11.avast.com; 110.195.116.83 sl11.avast.com; 117.37.228.147
      rs11.avast.com; 229.251.251.58 download12.avast.com; 244.98.159.87
      sl12.avast.com; 214.38.210.152 rs12.avast.com; 48.61.134.178
      download13.avast.com; 207.148.179.3 sl13.avast.com; 154.15.168.118
      rs13.avast.com; 197.203.159.168 download14.avast.com; 72.166.147.73
      sl14.avast.com; 144.1.86.196 rs14.avast.com; 116.196.222.34
      download15.avast.com; 106.163.223.43 sl15.avast.com; 251.160.160.207
      rs15.avast.com; 116.209.7.197 download16.avast.com; 223.100.245.114
      sl16.avast.com; 49.224.218.12 rs16.avast.com; 197.173.128.255
      download17.avast.com; 9.215.43.144 sl17.avast.com; 120.15.228.192
      rs17.avast.com; 200.243.18.115 download18.avast.com; 100.143.74.209
      sl18.avast.com; 28.35.104.237 rs18.avast.com; 27.38.223.164
      download19.avast.com; 26.140.77.201 sl19.avast.com; 212.69.83.127
      rs19.avast.com; 186.6.163.229 download20.avast.com; 231.75.90.249
      sl20.avast.com; 86.157.145.182 rs20.avast.com; 83.16.46.128
      download21.avast.com; 47.17.0.194 sl21.avast.com; 56.94.12.214
      rs21.avast.com; 232.86.33.37 download22.avast.com; 93.115.179.143
      sl22.avast.com; 9.21.230.13 rs22.avast.com; 171.129.232.148
      download23.avast.com; 126.41.132.61 sl23.avast.com; 176.46.244.164
      rs23.avast.com; 21.35.247.141 download24.avast.com; 29.20.36.206
      sl24.avast.com; 4.198.126.105 rs24.avast.com; 72.65.72.248
      download25.avast.com; 96.140.27.78 sl25.avast.com; 171.184.53.91
      rs25.avast.com; 167.31.20.80 download26.avast.com; 99.238.68.4
      sl26.avast.com; 55.225.117.150 rs26.avast.com; 178.78.208.85
      download27.avast.com; 212.101.139.220 sl27.avast.com; 125.182.187.129
      rs27.avast.com; 38.244.106.241 download28.avast.com; 207.248.234.20
      sl28.avast.com; 56.8.104.55 rs28.avast.com; 84.90.196.105
      download29.avast.com; 251.212.161.37 sl29.avast.com; 223.22.184.50
      rs29.avast.com; 193.186.113.200 download30.avast.com; 229.218.180.244
      sl30.avast.com; 195.211.252.61 rs30.avast.com; 255.73.174.136
      download31.avast.com; 155.108.170.57 sl31.avast.com; 108.121.31.155
      rs31.avast.com; 202.131.163.130 download32.avast.com; 140.115.131.47
      sl32.avast.com; 52.78.87.115 rs32.avast.com; 102.182.218.24
      download33.avast.com; 159.180.249.124 sl33.avast.com; 35.180.42.127
      rs33.avast.com; 55.209.255.159 download34.avast.com; 145.83.251.98
      sl34.avast.com; 13.118.164.245 rs34.avast.com; 161.110.217.18
      download35.avast.com; 147.167.102.38 sl35.avast.com; 233.81.214.180
      rs35.avast.com; 34.28.137.244 download36.avast.com; 35.64.6.193
      sl36.avast.com; 116.193.145.178 rs36.avast.com; 172.241.1.134
      download37.avast.com; 42.54.204.197 sl37.avast.com; 6.13.100.164
      rs37.avast.com; 71.79.198.41 download38.avast.com; 87.180.79.145
      sl38.avast.com; 180.149.210.239 rs38.avast.com; 231.246.233.21
      download39.avast.com; 186.195.136.183 sl39.avast.com; 166.90.216.206
      rs39.avast.com; 139.74.66.59 download40.avast.com; 164.90.201.173
      sl40.avast.com; 185.206.158.196 rs40.avast.com; 150.229.238.119
      download41.avast.com; 189.166.255.179 sl41.avast.com; 88.220.123.68
      rs41.avast.com; 113.96.12.249 download42.avast.com; 101.150.40.3
      sl42.avast.com; 150.58.47.159 rs42.avast.com; 97.93.179.245
      download43.avast.com; 80.170.22.63 sl43.avast.com; 144.238.91.45
      rs43.avast.com; 165.216.54.136 download44.avast.com; 92.253.101.23
      sl44.avast.com; 1.30.67.191 rs44.avast.com; 211.174.155.237
      download45.avast.com; 181.143.186.57 sl45.avast.com; 38.29.200.67
      rs45.avast.com; 115.109.88.225 download46.avast.com; 43.214.61.125
      sl46.avast.com; 212.177.159.184 rs46.avast.com; 220.94.79.83
      download47.avast.com; 211.136.88.80 sl47.avast.com; 215.169.215.84
      rs47.avast.com; 79.208.12.80 download48.avast.com; 220.162.176.96
      sl48.avast.com; 140.158.137.244 rs48.avast.com; 81.166.61.45
      download49.avast.com; 178.187.100.138 sl49.avast.com; 193.9.224.195
      rs49.avast.com; 77.35.113.245 download50.avast.com; 88.143.132.0
      sl50.avast.com; 203.133.76.45 rs50.avast.com; 105.244.20.21
      download51.avast.com; 2.198.212.190 sl51.avast.com; 233.101.2.6
      rs51.avast.com; 168.126.170.69 download52.avast.com; 241.5.193.46
      sl52.avast.com; 216.121.183.246 rs52.avast.com; 64.105.75.185
      download53.avast.com; 147.55.163.25 sl53.avast.com; 183.28.156.40
      rs53.avast.com; 61.108.95.136 download54.avast.com; 219.27.53.208
      sl54.avast.com; 28.129.156.50 rs54.avast.com; 86.90.154.91
      download55.avast.com; 221.17.81.155 sl55.avast.com; 118.62.212.70
      rs55.avast.com; 14.109.57.90 download56.avast.com; 172.33.239.97
      sl56.avast.com; 165.24.82.153 rs56.avast.com; 15.209.125.83
      download57.avast.com; 119.76.95.153 sl57.avast.com; 215.17.18.19
      rs57.avast.com; 194.115.103.44 download58.avast.com; 226.22.198.112
      sl58.avast.com; 164.175.53.56 rs58.avast.com; 50.11.182.138
      download59.avast.com; 162.83.214.59 sl59.avast.com; 108.142.131.86
      rs59.avast.com; 34.103.30.194 download60.avast.com; 91.48.209.30
      sl60.avast.com; 241.40.35.240 rs60.avast.com; 108.249.201.255
      download61.avast.com; 189.133.191.253 sl61.avast.com; 48.226.152.105
      rs61.avast.com; 156.163.19.180 download62.avast.com; 220.90.238.163
      sl62.avast.com; 131.91.255.244 rs62.avast.com; 204.194.128.68
      download63.avast.com; 208.183.171.48 sl63.avast.com; 252.240.135.187
      rs63.avast.com; 193.120.1.239 download64.avast.com; 141.175.62.200
      sl64.avast.com; 251.147.48.77 rs64.avast.com; 71.61.103.0
      download65.avast.com; 4.174.42.120 sl65.avast.com; 17.204.199.77
      rs65.avast.com; 201.168.39.52 download66.avast.com; 122.2.165.107
      sl66.avast.com; 24.15.32.88 rs66.avast.com; 51.122.79.109
      download67.avast.com; 39.168.85.78 sl67.avast.com; 147.64.150.54
      rs67.avast.com; 12.235.200.151 download68.avast.com; 18.88.77.0
      sl68.avast.com; 66.132.192.68 rs68.avast.com; 206.56.206.217
      download69.avast.com; 43.211.71.126 sl69.avast.com; 9.73.116.32
      rs69.avast.com; 136.108.172.255 download70.avast.com; 169.106.34.13
      sl70.avast.com; 2.151.1.150 rs70.avast.com; 183.109.187.38
      download71.avast.com; 165.209.157.168 sl71.avast.com; 224.152.168.203
      rs71.avast.com; 96.74.156.170 download72.avast.com; 247.38.85.171
      sl72.avast.com; 134.102.90.167 rs72.avast.com; 113.196.180.76
      download73.avast.com; 80.60.252.192 sl73.avast.com; 232.20.184.135
      rs73.avast.com; 89.26.232.167 download74.avast.com; 152.45.219.10
      sl74.avast.com; 32.254.71.35 rs74.avast.com; 229.24.153.213
      download75.avast.com; 138.30.138.144 sl75.avast.com; 211.84.243.189
      rs75.avast.com; 93.97.226.92 download76.avast.com; 141.84.237.235
      sl76.avast.com; 198.228.198.138 rs76.avast.com; 223.252.16.94
      download77.avast.com; 212.119.113.51 sl77.avast.com; 187.40.233.101
      rs77.avast.com; 250.29.98.0 download78.avast.com; 184.36.136.38
      sl78.avast.com; 145.143.218.177 rs78.avast.com; 142.53.1.26
      download79.avast.com; 84.185.97.154 sl79.avast.com; 155.15.239.142
      rs79.avast.com; 226.59.66.32 download80.avast.com; 97.92.236.36
      sl80.avast.com; 64.234.10.64 rs80.avast.com; 6.60.26.80
      download81.avast.com; 84.77.13.8 sl81.avast.com; 211.191.157.219
      rs81.avast.com; 107.32.225.28 download82.avast.com; 182.109.31.100
      sl82.avast.com; 180.212.225.51 rs82.avast.com; 192.190.75.218
      download83.avast.com; 194.13.171.152 sl83.avast.com; 167.162.82.3
      rs83.avast.com; 14.35.163.169 download84.avast.com; 68.251.105.248
      sl84.avast.com; 115.162.110.91 rs84.avast.com; 22.30.73.166
      download85.avast.com; 176.202.119.180 sl85.avast.com; 190.86.173.78
      rs85.avast.com; 234.15.109.79 download86.avast.com; 129.96.216.6
      sl86.avast.com; 39.153.195.220 rs86.avast.com; 202.240.12.55
      download87.avast.com; 212.198.46.158 sl87.avast.com; 165.43.20.29
      rs87.avast.com; 64.163.43.235 download88.avast.com; 68.42.187.74
      sl88.avast.com; 31.119.119.175 rs88.avast.com; 126.126.83.35
      download89.avast.com; 7.56.149.233 sl89.avast.com; 75.166.47.97
      rs89.avast.com; 246.20.76.44 download90.avast.com; 73.155.41.145
      sl90.avast.com; 203.233.38.31 rs90.avast.com; 59.69.29.148
      download91.avast.com; 200.205.242.254 sl91.avast.com; 133.2.107.32
      rs91.avast.com; 23.135.66.23 download92.avast.com; 176.38.121.62
      sl92.avast.com; 66.20.238.78 rs92.avast.com; 236.118.47.202
      download93.avast.com; 185.35.143.154 sl93.avast.com; 137.172.122.245
      rs93.avast.com; 79.154.5.133 download94.avast.com; 125.246.201.198
      sl94.avast.com; 189.15.242.176 rs94.avast.com; 226.119.147.149
      download95.avast.com; 30.79.61.76 sl95.avast.com; 117.196.207.143
      rs95.avast.com; 113.218.143.162 download96.avast.com; 24.105.122.53
      sl96.avast.com; 27.100.217.140 rs96.avast.com; 80.97.21.221
      download97.avast.com; 98.86.204.250 sl97.avast.com; 200.161.36.47
      rs97.avast.com; 243.76.96.110 download98.avast.com; 204.142.177.169
      sl98.avast.com; 93.149.78.128 rs98.avast.com; 206.130.198.28
      download99.avast.com; 148.182.149.91 sl99.avast.com; 229.76.246.45
      rs99.avast.com; 111.230.249.62 download100.avast.com; 73.173.213.213
      sl100.avast.com; 42.147.127.252 rs100.avast.com; 217.220.124.225
      download101.avast.com; 228.220.243.124 sl101.avast.com; 149.2.6.114
      rs101.avast.com; 34.21.98.57 download102.avast.com; 36.190.21.125
      sl102.avast.com; 74.71.161.195 rs102.avast.com; 79.162.78.77
      download103.avast.com; 41.173.196.61 sl103.avast.com; 132.180.216.253
      rs103.avast.com; 110.55.167.221 download104.avast.com; 84.238.225.254
      sl104.avast.com; 45.11.104.112 rs104.avast.com; 245.191.26.151
      download105.avast.com; 93.255.234.211 sl105.avast.com; 193.136.54.95
      rs105.avast.com; 90.33.85.122 download106.avast.com; 181.32.111.197
      sl106.avast.com; 99.47.145.237 rs106.avast.com; 243.80.0.137
      download107.avast.com; 29.31.206.70 sl107.avast.com; 64.87.172.65
      rs107.avast.com; 15.152.255.180 download108.avast.com; 134.104.54.213
      sl108.avast.com; 36.119.90.251 rs108.avast.com; 84.39.230.3
      download109.avast.com; 44.75.218.242 sl109.avast.com; 89.47.11.219
      rs109.avast.com; 90.218.189.4 download110.avast.com; 237.143.115.68
      sl110.avast.com; 199.154.6.175 rs110.avast.com; 136.73.245.118
      download111.avast.com; 238.56.252.8 sl111.avast.com; 73.209.232.125
      rs111.avast.com; 47.20.169.53 download112.avast.com; 112.148.169.188
      sl112.avast.com; 76.194.92.241 rs112.avast.com; 228.110.25.104
      download113.avast.com; 239.139.40.12 sl113.avast.com; 174.51.28.9
      rs113.avast.com; 34.235.98.233 download114.avast.com; 124.39.27.252
      sl114.avast.com; 213.17.39.254 rs114.avast.com; 31.134.130.244
      download115.avast.com; 92.97.212.87 sl115.avast.com; 14.253.67.116
      rs115.avast.com; 238.245.140.19 download116.avast.com; 224.46.82.87
      sl116.avast.com; 39.24.182.229 rs116.avast.com; 213.48.39.72
      download117.avast.com; 134.202.123.149 sl117.avast.com; 78.13.63.74
      rs117.avast.com; 240.63.76.124 download118.avast.com; 81.67.155.50
      sl118.avast.com; 44.95.91.12 rs118.avast.com; 6.67.64.40
      download119.avast.com; 101.71.29.69 sl119.avast.com; 61.245.181.41
      rs119.avast.com; 171.199.207.65 download120.avast.com; 229.49.136.136
      sl120.avast.com; 114.226.237.169 rs120.avast.com; 150.72.201.104
      download121.avast.com; 17.82.188.62 sl121.avast.com; 9.121.141.67
      rs121.avast.com; 68.1.193.82 download122.avast.com; 154.124.109.103
      sl122.avast.com; 170.145.72.75 rs122.avast.com; 205.251.4.116
      download123.avast.com; 72.212.223.38 sl123.avast.com; 198.20.117.223
      rs123.avast.com; 5.85.216.242 download124.avast.com; 207.217.226.114
      sl124.avast.com; 44.205.202.81 rs124.avast.com; 214.207.246.201
      download125.avast.com; 237.175.16.251 sl125.avast.com; 236.114.92.215
      rs125.avast.com; 220.157.73.59 download126.avast.com; 199.176.70.95
      sl126.avast.com; 112.240.214.112 rs126.avast.com; 65.105.231.123
      download127.avast.com; 133.52.96.141 sl127.avast.com; 215.246.249.25
      rs127.avast.com; 218.169.79.153 download128.avast.com; 43.159.56.120
      sl128.avast.com; 148.195.83.48 rs128.avast.com; 131.35.228.176
      download129.avast.com; 186.171.223.0 sl129.avast.com; 71.51.67.39
      rs129.avast.com; 183.189.169.77 download130.avast.com; 135.247.29.29
      sl130.avast.com; 219.8.44.109 rs130.avast.com; 114.136.62.33
      download131.avast.com; 218.208.39.76 sl131.avast.com; 224.117.248.153
      rs131.avast.com; 75.15.27.234 download132.avast.com; 202.63.159.62
      sl132.avast.com; 42.240.208.216 rs132.avast.com; 204.220.11.158
      download133.avast.com; 87.82.208.191 sl133.avast.com; 170.55.25.152
      rs133.avast.com; 21.76.234.217 download134.avast.com; 200.174.42.227
      sl134.avast.com; 139.163.177.117 rs134.avast.com; 176.147.162.136
      download135.avast.com; 70.85.251.119 sl135.avast.com; 144.173.106.99
      rs135.avast.com; 182.18.99.214 download136.avast.com; 185.180.111.166
      sl136.avast.com; 172.189.199.29 rs136.avast.com; 34.215.33.86
      download137.avast.com; 227.239.202.234 sl137.avast.com; 227.57.245.205
      rs137.avast.com; 116.117.83.114 download138.avast.com; 186.112.227.54
      sl138.avast.com; 95.205.12.251 rs138.avast.com; 137.5.233.19
      download139.avast.com; 9.173.228.97 sl139.avast.com; 214.248.134.186
      rs139.avast.com; 185.124.141.145 download140.avast.com; 73.57.63.212
      sl140.avast.com; 26.215.255.17 rs140.avast.com; 50.47.30.221
      download141.avast.com; 188.13.243.118 sl141.avast.com; 1.52.46.167
      rs141.avast.com; 147.163.105.236 download142.avast.com; 203.23.0.215
      sl142.avast.com; 118.209.35.178 rs142.avast.com; 204.153.41.102
      download143.avast.com; 162.3.39.156 sl143.avast.com; 224.241.194.33
      rs143.avast.com; 52.89.65.143 download144.avast.com; 8.73.231.42
      sl144.avast.com; 178.40.127.8 rs144.avast.com; 235.62.56.117
      download145.avast.com; 131.119.179.149 sl145.avast.com; 83.99.91.75
      rs145.avast.com; 114.130.245.90 download146.avast.com; 172.191.119.202
      sl146.avast.com; 47.58.30.142 rs146.avast.com; 136.74.187.99
      download147.avast.com; 206.195.78.251 sl147.avast.com; 29.116.213.91
      rs147.avast.com; 70.244.102.130 download148.avast.com; 197.159.124.75
      sl148.avast.com; 244.219.143.148 rs148.avast.com; 126.160.231.160
      download149.avast.com; 21.55.177.186 sl149.avast.com; 104.65.83.27
      rs149.avast.com; 79.252.253.14 download150.avast.com; 73.194.128.82
      sl150.avast.com; 41.210.100.192 rs150.avast.com; 12.83.52.45
      download151.avast.com; 142.150.29.146 sl151.avast.com; 62.156.184.107
      rs151.avast.com; 79.216.35.92 download152.avast.com; 144.53.86.26
      sl152.avast.com; 158.91.180.137 rs152.avast.com; 87.46.225.34
      download153.avast.com; 147.152.212.152 sl153.avast.com; 15.137.45.187
      rs153.avast.com; 170.60.200.156 download154.avast.com; 212.187.146.242
      sl154.avast.com; 67.165.155.188 rs154.avast.com; 231.47.109.40
      download155.avast.com; 33.105.157.180 sl155.avast.com; 48.195.159.147
      rs155.avast.com; 236.207.222.82 download156.avast.com; 182.72.12.187
      sl156.avast.com; 175.84.183.250 rs156.avast.com; 40.6.30.254
      download157.avast.com; 90.39.66.34 sl157.avast.com; 87.54.64.13
      rs157.avast.com; 65.173.221.214 download158.avast.com; 186.134.99.108
      sl158.avast.com; 155.254.172.54 rs158.avast.com; 233.153.124.246
      download159.avast.com; 5.102.20.243 sl159.avast.com; 34.132.3.87
      rs159.avast.com; 252.229.64.214 download160.avast.com; 200.82.118.144
      sl160.avast.com; 102.175.159.57 rs160.avast.com; 222.129.212.119
      download161.avast.com; 10.173.99.139 sl161.avast.com; 144.130.35.52
      rs161.avast.com; 20.250.4.208 download162.avast.com; 171.61.234.197
      sl162.avast.com; 146.103.188.31 rs162.avast.com; 32.139.183.123
      download163.avast.com; 249.248.9.35 sl163.avast.com; 133.187.155.122
      rs163.avast.com; 160.101.46.155 download164.avast.com; 147.14.169.61
      sl164.avast.com; 67.153.177.218 rs164.avast.com; 169.58.123.16
      download165.avast.com; 130.54.222.71 sl165.avast.com; 72.234.173.148
      rs165.avast.com; 96.15.67.221 download166.avast.com; 149.60.95.62
      sl166.avast.com; 197.172.51.172 rs166.avast.com; 218.66.183.216
      download167.avast.com; 252.202.67.86 sl167.avast.com; 6.130.93.255
      rs167.avast.com; 54.217.208.148 download168.avast.com; 40.118.254.164
      sl168.avast.com; 5.124.118.175 rs168.avast.com; 248.13.201.139
      download169.avast.com; 225.13.154.7 sl169.avast.com; 78.40.245.207
      rs169.avast.com; 167.22.226.143 download170.avast.com; 168.29.57.91
      sl170.avast.com; 20.216.183.79 rs170.avast.com; 168.56.82.114
      download171.avast.com; 78.200.202.224 sl171.avast.com; 148.53.129.41
      rs171.avast.com; 92.13.140.244 download172.avast.com; 213.199.10.232
      sl172.avast.com; 170.4.180.204 rs172.avast.com; 121.20.182.236
      download173.avast.com; 134.188.190.191 sl173.avast.com; 177.54.82.200
      rs173.avast.com; 165.122.102.186 download174.avast.com; 83.188.46.223
      sl174.avast.com; 159.54.49.186 rs174.avast.com; 88.39.159.236
      download175.avast.com; 110.28.228.84 sl175.avast.com; 95.110.125.122
      rs175.avast.com; 243.12.10.46 download176.avast.com; 41.122.165.108
      sl176.avast.com; 113.26.115.131 rs176.avast.com; 27.171.120.118
      download177.avast.com; 16.15.176.163 sl177.avast.com; 192.81.91.162
      rs177.avast.com; 91.230.152.112 download178.avast.com; 68.51.53.205
      sl178.avast.com; 195.80.198.226 rs178.avast.com; 250.12.244.39
      download179.avast.com; 26.49.24.132 sl179.avast.com; 214.9.9.183
      rs179.avast.com; 24.32.49.245 download180.avast.com; 243.76.231.212
      sl180.avast.com; 218.235.249.104 rs180.avast.com; 15.108.135.172
      download181.avast.com; 93.17.24.36 sl181.avast.com; 10.242.231.193
      rs181.avast.com; 8.70.126.5 download182.avast.com; 107.222.134.103
      sl182.avast.com; 32.242.222.249 rs182.avast.com; 219.32.234.72
      download183.avast.com; 81.178.46.132 sl183.avast.com; 168.32.27.225
      rs183.avast.com; 43.213.40.60 download184.avast.com; 67.54.37.2
      sl184.avast.com; 162.225.204.78 rs184.avast.com; 194.50.154.81
      download185.avast.com; 142.12.221.247 sl185.avast.com; 95.214.13.199
      rs185.avast.com; 41.195.95.12 download186.avast.com; 247.87.152.50
      sl186.avast.com; 148.39.31.114 rs186.avast.com; 139.224.87.178
      download187.avast.com; 82.138.43.166 sl187.avast.com; 195.14.235.60
      rs187.avast.com; 203.246.86.55 download188.avast.com; 102.117.248.25
      sl188.avast.com; 203.167.182.71 rs188.avast.com; 227.25.167.104
      download189.avast.com; 0.140.37.14 sl189.avast.com; 204.246.36.152
      rs189.avast.com; 128.202.195.87 download190.avast.com; 86.121.33.239
      sl190.avast.com; 64.57.114.0 rs190.avast.com; 218.5.82.6
      download191.avast.com; 157.229.88.126 sl191.avast.com; 86.111.239.75
      rs191.avast.com; 215.142.97.87 download192.avast.com; 237.130.53.125
      sl192.avast.com; 146.40.187.167 rs192.avast.com; 99.124.229.51
      download193.avast.com; 84.92.88.156 sl193.avast.com; 162.143.195.86
      rs193.avast.com; 9.5.112.249 download194.avast.com; 56.96.25.162
      sl194.avast.com; 130.180.252.150 rs194.avast.com; 214.139.49.41
      download195.avast.com; 241.45.60.223 sl195.avast.com; 210.30.223.208
      rs195.avast.com; 110.231.50.81 download196.avast.com; 166.25.245.208
      sl196.avast.com; 118.144.36.0 rs196.avast.com; 111.245.204.55
      download197.avast.com; 103.134.30.20 sl197.avast.com; 111.26.193.100
      rs197.avast.com; 5.95.109.70 download198.avast.com; 139.103.182.142
      sl198.avast.com; 248.99.37.104 rs198.avast.com; 206.174.141.62
      download199.avast.com; 76.13.156.219 sl199.avast.com; 228.53.177.208
      rs199.avast.com; 239.141.237.22 download200.avast.com; 160.54.141.246
      sl200.avast.com; 54.73.119.38 rs200.avast.com; 118.95.18.53
      download201.avast.com; 89.87.91.40 sl201.avast.com; 2.83.54.102
      rs201.avast.com; 242.4.1.209 download202.avast.com; 127.40.111.54
      sl202.avast.com; 130.80.148.231 rs202.avast.com; 81.231.60.166
      download203.avast.com; 237.112.129.197 sl203.avast.com; 124.15.157.140
      rs203.avast.com; 249.75.252.219 download204.avast.com; 42.18.150.16
      sl204.avast.com; 210.253.123.43 rs204.avast.com; 41.214.175.49
      download205.avast.com; 137.88.57.206 sl205.avast.com; 106.53.119.61
      rs205.avast.com; 144.94.180.109 download206.avast.com; 131.126.252.92
      sl206.avast.com; 64.199.47.199 rs206.avast.com; 46.242.85.6
      download207.avast.com; 83.129.49.50 sl207.avast.com; 200.72.25.136
      rs207.avast.com; 106.43.5.18 download208.avast.com; 211.41.229.132
      sl208.avast.com; 137.154.56.100 rs208.avast.com; 116.180.218.109
      download209.avast.com; 150.84.29.54 sl209.avast.com; 246.252.28.15
      rs209.avast.com; 221.23.76.43 download210.avast.com; 69.133.84.5
      sl210.avast.com; 143.83.31.252 rs210.avast.com; 116.202.47.64
      download211.avast.com; 62.172.52.242 sl211.avast.com; 56.186.221.135
      rs211.avast.com; 99.121.238.110 download212.avast.com; 106.54.147.242
      sl212.avast.com; 216.72.243.97 rs212.avast.com; 137.149.9.110
      download213.avast.com; 94.88.175.212 sl213.avast.com; 53.33.252.60
      rs213.avast.com; 25.29.208.97 download214.avast.com; 181.151.173.114
      sl214.avast.com; 15.191.201.184 rs214.avast.com; 115.170.97.120
      download215.avast.com; 172.155.79.27 sl215.avast.com; 123.129.223.140
      rs215.avast.com; 65.192.223.226 download216.avast.com; 255.52.245.63
      sl216.avast.com; 128.115.54.247 rs216.avast.com; 213.83.243.245
      download217.avast.com; 2.173.214.91 sl217.avast.com; 247.96.46.105
      rs217.avast.com; 194.152.136.160 download218.avast.com; 2.80.127.39
      sl218.avast.com; 159.21.213.109 rs218.avast.com; 184.13.194.16
      download219.avast.com; 221.57.139.254 sl219.avast.com; 127.247.87.218
      rs219.avast.com; 164.203.63.161 download220.avast.com; 223.94.164.141
      sl220.avast.com; 128.199.197.57 rs220.avast.com; 8.10.144.7
      download221.avast.com; 224.222.185.191 sl221.avast.com; 74.180.10.120
      rs221.avast.com; 151.244.250.188 download222.avast.com;
      155.138.128.231 sl222.avast.com; 94.161.41.208 rs222.avast.com;
      20.174.105.171 download223.avast.com; 79.177.46.46 sl223.avast.com;
      116.184.187.243 rs223.avast.com; 107.164.180.30 download224.avast.com;
      155.47.117.63 sl224.avast.com; 22.46.168.122 rs224.avast.com;
      16.20.23.229 download225.avast.com; 150.184.190.49 sl225.avast.com;
      125.88.37.141 rs225.avast.com; 152.221.237.199 download226.avast.com;
      46.96.168.180 sl226.avast.com; 170.238.238.211 rs226.avast.com;
      149.136.173.45 download227.avast.com; 194.110.192.127 sl227.avast.com;
      200.158.195.155 rs227.avast.com; 181.151.38.12 download228.avast.com;
      1.98.129.249 sl228.avast.com; 193.211.39.76 rs228.avast.com;
      29.13.254.18 download229.avast.com; 4.68.142.37 sl229.avast.com;
      31.199.87.9 rs229.avast.com; 3.61.104.21 download230.avast.com;
      170.46.45.211 sl230.avast.com; 36.198.137.169 rs230.avast.com;
      138.214.36.184 download231.avast.com; 52.28.7.4 sl231.avast.com;
      43.196.102.213 rs231.avast.com; 225.46.188.94 download232.avast.com;
      32.242.30.157 sl232.avast.com; 65.34.200.130 rs232.avast.com;
      158.207.253.83 download233.avast.com; 74.206.14.79 sl233.avast.com;
      255.187.184.146 rs233.avast.com; 87.63.178.56 download234.avast.com;
      63.143.135.197 sl234.avast.com; 169.53.162.197 rs234.avast.com;
      130.19.167.175 download235.avast.com; 228.165.10.15 sl235.avast.com;
      140.134.218.228 rs235.avast.com; 142.54.221.71 download236.avast.com;
      71.26.226.78 sl236.avast.com; 148.196.83.48 rs236.avast.com;
      65.117.10.170 download237.avast.com; 197.224.101.161 sl237.avast.com;
      44.49.157.8 rs237.avast.com; 84.78.83.4 download238.avast.com;
      92.93.108.78 sl238.avast.com; 90.134.31.218 rs238.avast.com;
      76.250.76.182 download239.avast.com; 82.52.16.52 sl239.avast.com;
      26.127.150.75 rs239.avast.com; 155.184.48.59 download240.avast.com;
      6.85.166.112 sl240.avast.com; 249.166.206.169 rs240.avast.com;
      246.91.92.89 download241.avast.com; 21.71.252.77 sl241.avast.com;
      245.99.158.144 rs241.avast.com; 248.22.17.140 download242.avast.com;
      176.179.212.113 sl242.avast.com; 148.68.41.219 rs242.avast.com;
      248.134.106.175 download243.avast.com; 60.52.160.69 sl243.avast.com;
      67.136.82.205 rs243.avast.com; 38.0.155.235 download244.avast.com;
      42.94.127.165 sl244.avast.com; 240.242.127.127 rs244.avast.com;
      236.27.107.228 download245.avast.com; 24.12.120.200 sl245.avast.com;
      234.204.147.140 rs245.avast.com; 131.128.244.34 download246.avast.com;
      41.237.245.113 sl246.avast.com; 247.57.37.251 rs246.avast.com;
      211.241.152.189 download247.avast.com; 161.81.130.86 sl247.avast.com;
      182.191.4.108 rs247.avast.com; 144.152.70.76 download248.avast.com;
      196.47.198.208 sl248.avast.com; 55.19.240.134 rs248.avast.com;
      145.145.238.14 download249.avast.com; 239.122.193.196 sl249.avast.com;
      217.39.145.160 rs249.avast.com; 115.185.65.90 download250.avast.com;
      247.165.71.209 sl250.avast.com; 98.113.187.173 rs250.avast.com;
      110.184.173.67 download251.avast.com; 193.116.188.186 sl251.avast.com;
      100.125.228.108 rs251.avast.com; 118.76.152.143 download252.avast.com;
      34.5.17.21 sl252.avast.com; 206.181.229.208 rs252.avast.com;
      149.215.219.218 download253.avast.com; 248.30.254.52 sl253.avast.com;
      208.110.240.173 rs253.avast.com; 135.43.129.6 download254.avast.com;
      136.183.128.83 sl254.avast.com; 244.54.210.164 rs254.avast.com;
      151.149.192.229 download255.avast.com; 26.202.149.3 sl255.avast.com;
      122.93.105.81 rs255.avast.com; 185.39.56.41 download256.avast.com;
      211.90.55.214 sl256.avast.com; 243.193.103.177 rs256.avast.com;
      231.73.106.139 download257.avast.com; 209.193.150.75 sl257.avast.com;
      32.222.72.216 rs257.avast.com; 191.130.122.58 download258.avast.com;
      140.61.152.252 sl258.avast.com; 12.21.144.212 rs258.avast.com;
      93.130.41.134 download259.avast.com; 108.189.149.5 sl259.avast.com;
      104.58.73.219 rs259.avast.com; 118.115.12.204 download260.avast.com;
      166.232.78.182 sl260.avast.com; 37.100.188.188 rs260.avast.com;
      181.129.17.163 download261.avast.com; 91.110.47.124 sl261.avast.com;
      87.240.110.132 rs261.avast.com; 89.167.52.72 download262.avast.com;
      242.147.198.13 sl262.avast.com; 73.215.93.110 rs262.avast.com;
      15.188.125.71 download263.avast.com; 181.248.130.210 sl263.avast.com;
      220.49.124.16 rs263.avast.com; 13.189.60.107 download264.avast.com;
      170.172.175.153 sl264.avast.com; 36.8.107.195 rs264.avast.com;
      111.91.136.231 download265.avast.com; 179.114.177.123 sl265.avast.com;
      69.97.122.83 rs265.avast.com; 213.199.244.196 download266.avast.com;
      233.83.128.10 sl266.avast.com; 138.135.224.231 rs266.avast.com;
      60.188.148.141 download267.avast.com; 52.103.99.190 sl267.avast.com;
      198.154.56.50 rs267.avast.com; 29.206.47.57 download268.avast.com;
      46.223.240.161 sl268.avast.com; 238.88.60.218 rs268.avast.com;
      195.241.197.88 download269.avast.com; 57.86.67.57 sl269.avast.com;
      247.42.196.40 rs269.avast.com; 241.76.67.129 download270.avast.com;
      223.89.125.181 sl270.avast.com; 237.114.0.241 rs270.avast.com;
      180.63.133.250 download271.avast.com; 105.51.127.92 sl271.avast.com;
      84.18.244.195 rs271.avast.com; 132.177.140.169 download272.avast.com;
      194.254.232.49 sl272.avast.com; 195.63.52.83 rs272.avast.com;
      162.159.0.58 download273.avast.com; 141.230.75.234 sl273.avast.com;
      190.136.225.38 rs273.avast.com; 172.225.232.145 download274.avast.com;
      131.191.181.19 sl274.avast.com; 210.33.228.126 rs274.avast.com;
      132.62.167.114 download275.avast.com; 18.201.94.126 sl275.avast.com;
      247.116.104.135 rs275.avast.com; 99.179.57.110 download276.avast.com;
      51.194.173.237 sl276.avast.com; 33.233.156.194 rs276.avast.com;
      56.255.175.16 download277.avast.com; 140.45.114.2 sl277.avast.com;
      39.244.170.177 rs277.avast.com; 70.113.232.72 download278.avast.com;
      198.224.94.102 sl278.avast.com; 217.96.242.195 rs278.avast.com;
      253.245.145.23 download279.avast.com; 47.211.198.55 sl279.avast.com;
      91.218.139.129 rs279.avast.com; 24.93.95.123 download280.avast.com;
      146.39.152.183 sl280.avast.com; 199.192.251.250 rs280.avast.com;
      247.236.138.156 download281.avast.com; 85.117.157.50 sl281.avast.com;
      3.42.52.107 rs281.avast.com; 61.40.140.56 download282.avast.com;
      213.88.240.48 sl282.avast.com; 223.57.210.50 rs282.avast.com;
      173.224.26.76 download283.avast.com; 254.61.190.219 sl283.avast.com;
      114.159.147.244 rs283.avast.com; 65.122.99.3 download284.avast.com;
      45.105.63.178 sl284.avast.com; 181.111.22.13 rs284.avast.com;
      140.130.135.227 download285.avast.com; 73.74.244.111 sl285.avast.com;
      96.38.216.55 rs285.avast.com; 81.112.90.53 download286.avast.com;
      31.2.34.53 sl286.avast.com; 4.248.107.126 rs286.avast.com;
      99.184.89.180 download287.avast.com; 254.48.141.253 sl287.avast.com;
      105.95.248.99 rs287.avast.com; 191.23.236.122 download288.avast.com;
      147.1.121.66 sl288.avast.com; 41.225.246.78 rs288.avast.com;
      230.27.222.38 download289.avast.com; 6.119.222.235 sl289.avast.com;
      141.33.43.57 rs289.avast.com; 128.244.25.81 download290.avast.com;
      84.247.234.120 sl290.avast.com; 167.40.227.154 rs290.avast.com;
      46.121.166.51 download291.avast.com; 239.25.187.112 sl291.avast.com;
      176.244.112.145 rs291.avast.com; 175.125.227.145
      download292.avast.com; 147.171.93.9 sl292.avast.com; 163.65.225.82
      rs292.avast.com; 54.83.5.233 download293.avast.com; 106.6.1.24
      sl293.avast.com; 25.151.6.211 rs293.avast.com; 9.159.209.225
      download294.avast.com; 99.149.127.60 sl294.avast.com; 103.148.163.185
      rs294.avast.com; 93.94.150.235 download295.avast.com; 207.162.14.69
      sl295.avast.com; 245.122.242.128 rs295.avast.com; 113.56.109.60
      download296.avast.com; 61.98.66.234 sl296.avast.com; 225.251.95.233
      rs296.avast.com; 233.4.180.239 download297.avast.com; 150.67.69.171
      sl297.avast.com; 212.67.126.169 rs297.avast.com; 108.156.199.117
      download298.avast.com; 123.116.89.3 sl298.avast.com; 35.70.80.78
      rs298.avast.com; 128.227.1.64 download299.avast.com; 221.182.141.210
      sl299.avast.com; 40.75.183.116 rs299.avast.com; 164.19.242.175
      u0.eset.com; 222.97.190.9 u1.eset.com; 226.185.53.41 u2.eset.com;
      174.74.225.59 u3.eset.com; 231.185.209.150 u4.eset.com; 203.32.236.156
      u5.eset.com; 103.87.133.226 u6.eset.com; 10.114.47.146 u7.eset.com;
      249.138.210.13 u8.eset.com; 100.193.254.212 u9.eset.com;
      153.128.128.168 u10.eset.com; 120.3.51.240 u11.eset.com; 39.24.25.92
      u12.eset.com; 7.35.170.200 u13.eset.com; 230.102.108.99 u14.eset.com;
      118.127.196.16 u15.eset.com; 253.50.12.12 u16.eset.com; 79.105.229.209
      u17.eset.com; 250.121.207.59 u18.eset.com; 192.167.247.234
      u19.eset.com; 74.235.79.231 u20.eset.com; 26.244.228.138 u21.eset.com;
      194.107.109.155 u22.eset.com; 83.124.31.183 u23.eset.com;
      25.147.201.245 u24.eset.com; 133.99.28.202 u25.eset.com; 107.45.74.42
      u26.eset.com; 110.63.212.240 u27.eset.com; 184.187.156.128
      u28.eset.com; 238.153.66.171 u29.eset.com; 98.239.173.211
      u30.eset.com; 139.112.232.79 u31.eset.com; 179.51.48.16 u32.eset.com;
      240.183.75.133 u33.eset.com; 85.35.27.189 u34.eset.com;
      105.210.114.204 u35.eset.com; 216.14.40.111 u36.eset.com;
      105.28.107.243 u37.eset.com; 48.122.87.82 u38.eset.com; 5.100.198.160
      u39.eset.com; 53.156.106.165 u40.eset.com; 119.107.25.204
      u41.eset.com; 33.227.103.60 u42.eset.com; 155.104.122.68 u43.eset.com;
      20.111.26.252 u44.eset.com; 117.132.8.41 u45.eset.com; 147.146.145.98
      u46.eset.com; 169.95.98.113 u47.eset.com; 5.86.158.252 u48.eset.com;
      1.137.46.101 u49.eset.com; 53.246.89.238 u50.eset.com; 235.9.148.33
      u51.eset.com; 211.99.155.111 u52.eset.com; 249.218.192.23
      u53.eset.com; 243.193.131.73 u54.eset.com; 95.105.100.139
      u55.eset.com; 141.231.245.93 u56.eset.com; 120.24.51.24 u57.eset.com;
      251.227.22.28 u58.eset.com; 65.190.103.42 u59.eset.com; 126.116.210.15
      u60.eset.com; 220.37.60.131 u61.eset.com; 185.142.87.80 u62.eset.com;
      15.138.115.183 u63.eset.com; 51.217.151.15 u64.eset.com;
      195.33.208.175 u65.eset.com; 217.50.201.14 u66.eset.com;
      133.142.156.41 u67.eset.com; 123.41.232.37 u68.eset.com; 8.109.36.54
      u69.eset.com; 75.129.50.191 u70.eset.com; 161.203.55.187 u71.eset.com;
      97.180.171.91 u72.eset.com; 202.171.172.240 u73.eset.com;
      57.108.152.12 u74.eset.com; 159.130.218.228 u75.eset.com; 51.10.4.249
      u76.eset.com; 100.187.31.248 u77.eset.com; 18.35.62.222 u78.eset.com;
      253.51.90.95 u79.eset.com; 126.254.89.137 u80.eset.com;
      117.190.112.165 u81.eset.com; 130.24.171.94 u82.eset.com;
      120.161.202.37 u83.eset.com; 14.160.79.211 u84.eset.com;
      216.22.213.144 u85.eset.com; 118.251.163.244 u86.eset.com;
      12.203.129.109 u87.eset.com; 242.65.203.225 u88.eset.com;
      172.98.195.148 u89.eset.com; 28.190.43.75 u90.eset.com; 246.243.20.178
      u91.eset.com; 117.114.241.251 u92.eset.com; 76.134.239.200
      u93.eset.com; 224.146.137.75 u94.eset.com; 180.154.86.171
      u95.eset.com; 36.4.38.170 u96.eset.com; 87.160.78.134 u97.eset.com;
      111.231.64.28 u98.eset.com; 2.128.95.83 u99.eset.com; 206.9.17.184
      u100.eset.com;


 Injection – It injects itself into a process.

    Process name:
   • %WINDIR%\Explorer.EXE


 File details Programming language:
 The malware program was written in MS Visual C++.

Description inserted by Viktor Graeber on Tuesday, September 11, 2007
Description updated by Andrei Gherman on Thursday, September 13, 2007

Back . . . .