Nombre: TR/VB.dxva Descubierto: 13/08/2010 Tipo: Troyano En circulación (ITW): Sí Número de infecciones comunicadas: Bajo Potencial de propagación: Bajo Potencial dañino: Bajo Fichero estático: Sí Tamaño: 126.976 Bytes Suma de control MD5: 5d798d4bd949655122f33f20bc7e3b25 Versión del VDF: 7.10.04.141 Versión del IVDF: 7.10.10.173 - viernes, 13 de agosto de 2010
General Método de propagación: • No tiene rutina propia de propagación Alias: • Symantec: W32.Rontokbro@mm • Mcafee: W32/Autorun.worm.g • Kaspersky: Worm.Win32.AutoTsifiri.ac • TrendMicro: WORM_VBNA.SMY • Sophos: W32/SillyFDC-FA Plataformas / Sistemas operativos: • Windows 2000 • Windows XP • Windows 2003 • Windows Vista • Windows 7 Efectos secundarios: • Suelta ficheros • Reduce las opciones de seguridad • Modificaciones en el registro Ficheros Se copia a sí mismo en la siguiente ubicación: • %HOME%\%nombre del usuario actual% 1\winlogon.exe Registro Añade uno de los siguientes valores a cada clave del registro, para ejecutar los procesos al reiniciar el sistema: – [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] • "NVIDIA Media Center Library"="%HOME%\%nombre del usuario actual% 1\winlogon.exe" – [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] • "NVIDIA Media Center Library"="%HOME%\%nombre del usuario actual% 1\winlogon.exe" Elimina del registro de Windows el valor de la siguiente clave: – [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main] • "Local Page"="%SystemRoot%\system32\blank.htm" Añade las siguientes claves al registro: – [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main] • "Local Page"="http://8-6-a-e-h-1-g-2-2-a-7-1-5-j-7-p-.i-k-r-g-1-0-u-5-1-f-3-g-li-9-p-1-x-t-6-g-l**********" – [HKLM\SOFTWARE\Microsoft\Security Center] • "UACDisableNotify"=dword:00000001 – [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] • "EnableLUA"=dword:00000000 – [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Image File Execution Options\lairA .exe] • "Debugger"="%WINDIR% \twunk_16.exe" – [HKCU\Software\Microsoft\Internet Explorer\Main] • "Default_Search_URL"="http://8-5-4-e-d-l-2-b-0-9-i-4-5-5-k-2-9-e-7-x-b-6-u-**********" – [HKCU\Software\Microsoft\Internet Explorer\Main] • "Default_Page_URL"="http://0-c-.i-k-r-g-1-0-u-5-1-f-3-g-li-9-p-**********" – [HKCU\Software\VB and VBA Program Settings\Windows\ CurrentControlSet] • "IP"="%recogido del Internet% " Modifica las siguientes claves del registro: – [HKCU\Software\Microsoft\Internet Explorer\Main] Nuevo valor: • "Local Page"="http://4-6-5-n-m-9-v-9-0-e-0-9-e-k-8-0-6-9-i-4-x-.5-b-e-n-t-f-p-p-7-1-1-0-7-c-q-0-3-00-6-u-7-t-1-n-y-q-u-f-u.info" La página de inicio de Internet Explorer: – [HKCU\Software\Microsoft\Internet Explorer\Main] Nuevo valor: • "Start Page"="http://1-a-2-7-t-8-o-a-8-g-2-4-7-3-a-9-k-r-n-j-o-0-5-0-6-t-6-0-.u-l-c-6**********" – [HKCU\Software\Microsoft\Internet Explorer\Main] Nuevo valor: • "Search Page"="http://0-x-e-y-a-w-4-i-y-s-s-k-o-.i-k-r-g-1-0-u-5-1-f-3-g-li-9-**********" Varias opciones de configuración en Explorer: – [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Nuevo valor: • "Hidden"=dword:00000002 – [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Nuevo valor: • "HideFileExt"=dword:00000003 – [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Nuevo valor: • "ShowSuperHidden"=dword:00000000 Ficheros host El fichero host es modificado de la siguiente manera: – El acceso a los siguientes dominios está bloqueado: • www.k-lite.tk • litetk.com • kazaa.ishareit.com • www.kazaagold.com • www.kazaa-gold.com • kazaagold.com • www.k-lite.com • www.kazaa-download.de • www.mp3downloadhq.com • www.easymusicdownload.com • easymusicdownload.com • www.mp3madeeasy.com • www.monstershare.com • monstershare.com • www.kazaa-plus.net • kazaa-plus.net • www.kazaa-plus.com • www.edonkey.com • www.kazaa-file-sharing-downloads.com • www.kazaaplatinum.com • www.madeformusic.com • www.ikazaa.net • ikazaa.net • www.ondemandmp3.com • www.mp3u.com • www.mp3specialty.com • music-download-world.com • song-download-world.com • www.flixs.net • www.ishareit.net • www.ishareit.com • www.download-doctor.com • www.ezmp3download.com • www.freesoftusa.com • www.kazaamedia.com • mp3-network.com • www.mp3-network.com • www.mp3grandcentral.net • www.mp333.com • www.kazaamate.com • www.emule.biz • www.kazaam8.tk • www.rippro.com • www.kaaza.com • secure.Webstartz.com • www.kazaalite.de • www.kazza.de • kazza.com • www.kazaalite.at • www.kazaalite.ch • www.kazaa-hilfe.de • www.edonkey-2000.de • www.edonkey-bot.de • www.edonkey-edonkey2000.de • www.edonkey-hilfe.de • www.edonkey-morpheus-forum.de • www.emule-hilfe.de • www.file-sharing-forum.de • www.filesharing-forum.de • www.imesh-download.de • www.kazaa-kaza.de • www.kazaa-lite.info • www.kazaa-lite-download.de • www.1md.de • www.mariodolzer.de • www.morpheus-forum.de • www.overnet-download.de • www.overnet-hilfe.de • www.winmx-download.de • www.winmx-hilfe.de • www.download-und-hilfe.de • www.filesharing-hilfe-forum.de • www.musik-download.biz • www.mp3downloads.ch • www.songfly.com • www.kazaa.nl • 1stsoftwaredownloads.com • morpheus-download-morpheus.com • www.icisnet.org • software.global-netcom.de • www.filesharing-download.de • www.p2p.tm • www.filesharing-center.de • www.filesharing-tools.de • kazaa-download-kazaa.com • www.interscilsa.com • www.dvd-download-free.com • www.howtominibooks.com • www.internetmovies.com • www.rippro.net • www.musicmoviesbooks.com • www.kazaalite.org • www.getmp3music.com • www1.ishareit.com • www.filesharing-software.de • www.firewarez.com • www.k-lite.co.uk • kazzaa.info • www.morpheusp2p.com • www.mudima.com • www.download-central.com • kazaaplatinum.com • www.dingosoft.net • www.kazaa-advance.com • www.downloads-unlimited.com • klserver.port5.com • rippro.net • www.findkazaalite.com • www.freegoldkazaa.com • www.freekazaalite.com • www.kazaalitekpp.com • kazaa.filez.ws • www.kazaalite-download.com • www.kazaavip.com • compgenie.host.sk • www.musicdownloadcenter.com • www.kazza-lite.net • www.every.biz • 123banners.com • ad.adsmart.net • ad.ca.doubleclick.net • ad.de.doubleclick.net • ad.doubleclick.net • ad.es.doubleclick.net • ad.fr.doubleclick.net • ad.free6.com • ad.it.doubleclick.net • ad.iwin.com • ad.jp.doubleclick.net • ad.kr.doubleclick.net • ad.linkexchange.com • ad.linksynergy.com • ad.nl.doubleclick.net • ad.no.doubleclick.net • ad.preferences.com • ad.se.doubleclick.net • ad.sma.punto.net • ad.trafficmp.com • ad.uk.doubleclick.net • ad.webprovider.com • ad08.focalink.com • ad1.adcept.net • ad1.icorp.net • ad1.looksmart.com • ad1.peel.com • ad2.adcept.net • ad2.looksmart.com • ad2.peel.com • ad3.adcept.net • ad3.peel.com • ad4.peel.com • ad-adex3.flycast.com • adcontroller.unicast.com • adcreatives.imaginemedia.com • addb.looksmart.com • adevents.msn.com • adex3.flycast.com • adforce.ads.imgis.com • adforce.imgis.com • adfu.blockstackers.com • adimage.blm.net • adimages.earthweb.com • adimages.go.com • adimages.imaginemedia.com • adimg.egroups.com • admedia.xoom.com • admonitor.net • adpick.switchboard.com • adproject.net • adremote.pathfinder.com • adres.internet.com • ads.adflight.com • ads.ad-flow.com • ads.admaximize.com • ads.admonitor.net • ads.adroar.com • ads.astalavista.us • ads.bfast.com • ads.box.sk • ads.burstnet.com • ads.cdfreaks.com • ads.chrbanner.com • ads.clickagents.com • ads.clickhouse.com • ads.dai.net • ads.datais.com • ads.enliven.com • ads.eu.msn.com • ads.fairfax.com.au • ads.fool.com • ads.fortunecity.com • ads.fortunecity.fr • ads.freeze.com • ads.freshmeat.net • ads.god.co.uk • ads.guardianunlimited.co.uk • ads.hitcents.com • ads.hollywood.com • ads.i12.de • ads.i33.com • ads.ign.com • ads.imaginemedia.com • ads.indya.com • ads.infi.net • ads.irover.com • ads.ixo.com • ads.jpost.com • ads.jwtt3.com • ads.killerapp.com • ads.link4ads.com • ads.linksponsor.com • ads.looksmart.com • ads.lycos.com • ads.lycos.de • ads.madison.com • ads.mediaodyssey.com • ads.mediaturf.net • ads.msn.com • ads.musiccity.com • ads.netomia.com • ads.netpumper.com • ads.newcity.com • ads.newcitynet.com • ads.ninemsn.com.au • ads.rediff.com • ads.satyamonline.com • ads.seattletimes.com • ads.smartclicks.com • ads.smartclicks.net • ads.sptimes.com • ads.startpath.com • ads.station.sony.com • ads.tiscali.fr • ads.tripod.com • ads.tucows.com • ads.vcommunities.com • ads.web.aol.com • ads.x10.com • ads.xtra.co.nz • ads.zdnet.com • ads01.focalink.com • ads02.focalink.com • ads03.focalink.com • ads04.focalink.com • ads05.focalink.com • ads06.focalink.com • ads07.focalink.com • ads08.focalink.com • ads09.focalink.com • ads1.activeagent.at • ads1.ad-flow.com • ads1.speedbit.com • ads10.focalink.com • ads11.focalink.com • ads12.focalink.com • ads13.focalink.com • ads14.focalink.com • ads15.focalink.com • ads16.focalink.com • ads17.focalink.com • ads18.focalink.com • ads19.focalink.com • ads2.speedbit.com • ads2.zdnet.com • ads20.focalink.com • ads21.focalink.com • ads22.focalink.com • ads23.focalink.com • ads24.focalink.com • ads25.focalink.com • ads3.speedbit.com • ads3.zdnet.com • ads4.speedbit.com • ads5.gamecity.net • ads5.speedbit.com • ads6.speedbit.com • ads7.speedbit.com • ads8.speedbit.com • adserv.bravenet.com • adserv.iafrica.com • adserv.internetfuel.com • adserv.quality-channel.de • adserver.adtech.de • adserver.affiliation.com • adserver.akqa.net • adserver.dbusiness.com • adserver.directforce.net • adserver.garden.com • adserver.gorillanation.com • adserver.humanux.com • adserver.imaginemedia.com • adserver.isonews.com • adserver.janes.com • adserver.lunarpages.com • adserver.merc.com • adserver.monster.com • adserver.track-star.com • adserver.tweakers.net • adserver.ugo.com • adserver.webads.nl • adserver1.ogilvy-interactive.de • adserver2.imaginemedia.com • adsubstract • ads-ussj1.focalink.com • adtegrity.spinbox.net • adulttds.com • aglink.mircx.com • antfarm-ad.flycast.com • asm3.z1.adserver.com • au.ads.link4ads.com • bach.aureate.com • badservant.guj.de • banner.50megs.com • banner.adverity.com • banner.commissionpartner.com • banner.de • banner.easyspace.com • banner.free6.com • banner.i-3.de • banner.media-system.de • banner.orb.net • banner.relcom.ru • bannerad.ipgnet.com • bannerads.de • bannerfarm.ace.advertising.com • bannerimages.0catch.com • bannermaster.geektech.com • banner-net.com • bannerpower.com • banners.adultfriendfinder.com • banners.easydns.com • banners.free6.com • banners.hotlinks.net • banners.looksmart.com • banners.nextcard.com • banners.pennyweb.com • banners.valuead.com • banners.webmasterplan.com • banners.wunderground.com • bannervip.webjump.com • banzai.moodlogic.com • barnesandnoble.bfast.com • beseen.com • beseen.looksmart.com • beseen5.looksmart.com • beseenad.looksmart.com • beseenad1.looksmart.com • beseenad2.looksmart.com • beseenad3.looksmart.com • beseenadx.looksmart.com • bfast.com • bins.lop.com • bizad.nikkeibp.co.jp • bn.bfast.com • botw.topbucks.com • bsads.looksmart.com • by.advertising.com • c1.thecounter.com • c2.thecounter.com • c3.xxxcounter.com • califia.imaginemedia.com • cash4banner.com • cash4banner.de • cgi.sexlist.com • click.avenuea.com • click.go2net.com • click.linksynergy.com • clickagents.com • clicks.about.com • clicks.nastydollars.com • clicks.oxcash.com • clit5.sextracker.com • code02.pbtech.net • commonwealth.riddler.com • connect.online-dialer.com • cookies.cmpnet.com • cornflakes.pathfinder.com • counter.hitbox.com • counter1.sextracker.com • counter10.sextracker.com • counter11.sextracker.com • counter12.sextracker.com • counter13.sextracker.com • counter14.sextracker.com • counter15.sextracker.com • counter16.sextracker.com • counter2.sextracker.com • counter3.sextracker.com • counter4.sextracker.com • counter5.sextracker.com • counter6.sextracker.com • counter7.sextracker.com • counter8.sextracker.com • counter9.sextracker.com • crs.akamai.com • crux.songline.com • ct.iac-online.de • de.netstatpro.net • desktop.grokster.com • dialer.offshoreclicks.com • doubleclick.net • download1.0190-dialer.com • download1.libereco.net • download2.0190-dialer.com • econnect.libereco.net • ehg.hitbox.com • ehg-commjun.hitbox.com • erie.smartage.com • etad.telegraph.co.uk • everyone.net • exchange-it.com • exitfuel.com • exitmoney.com • fast.mediacharger.com • focalink.com • fp.valueclick.com • fragmentserv.iac-online.de • free.fuck-portal.com • freeadultlottery.com • freeasiahardcore.com • freebieclub.com • freebigcocks.net • freecelebnudity.com • freefarmpics.com • freegaybears.net • freegaylottery.com • freenaughtyteens.com • freepass.elitecities.com • fs.dai.net • gadgeteer.pdamart.com • global.msads.net • gm.preferences.com • go.ezgreen.com • got2goshop.com • goto.trafficmultiplier.com • gp.dejanews.com • hacker-spider.de • hc2.humanclick.com • hg1.hitbox.com • hit.hotlog.ru • hitbox.com • hitmatic.com • hitsfrom.popuprush.com • hotfreewebcams.com • hypercount.com • ifcol.exitfuel.com • image.click2net.com • image.eimg.com • images.sexlist.com • images2.nytimes.com • imageserv.adtech.de • img.lop.com • impnl.tradedoubler.com • internetfuel.com • itn.adbureau.net • jcms.cydoor.com • jeeves.flycast.com • jobkeys.ngadcenter.net • kansas.valueclick.com • leader.linkexchange.com • linkbuddies.com • liquidad.narrowcastmedia.com • liveadvert.com • ln.doubleclick.net • looksmartclicks.com • lop.com • lsads.looksmart.com.au • m.doubleclick.net • macaddictads.snv.futurenet.com • marketing-internet.com • maxexp.com • maximumcash.com • maximumpcads.imaginemedia.com • media.carpediem.fr • media.expedia.com • media.fastclick.net • media.popuptraffic.com • media.preferences.com • media20.fastclick.net • mediacharger.com • mediamgr.ugo.com • megacash.de • megawebcams.tv • mercury.rmuk.co.uk • millenium-hitz.com • mjxads.internet.com • monitor.looksmart.com • monsterhitz.to • musiccity.streamcastnetwork.com • n24.de • nbc.adbureau.net • network.realmedia.com • newads.cmpnet.com • newsticker.shortnews.de • ng3.ads.warnerbros.com • ngads.smartage.com • nitrous.exitfuel.com • nsads.hotwired.com • ntbanner.digitalriver.com • oad.realmedia.com • oas.benchmark.fr • onresponse.com • oz.valueclick.com • p.wtlive.com • paycounter.com • ph-ad04.focalink.com • ph-ad05.focalink.com • ph-ad07.focalink.com • ph-ad16.focalink.com • ph-ad17.focalink.com • ph-ad18.focalink.com • php.offshoreclicks.com • pluto.beseen.com • pop.mircx.com • popup.found404.com • porn-attack.com • portal.hostultra.com • proxy.ladot.com • pub.epiknet.org • pub.infiniland.com • pub.ketix.com • pub.telmedia.fr • pub.weborama.fr • publish.hometown.aol.co.uk • realads.realmedia.com • redherring.ngadcenter.net • redirect.click2net.com • redirect.iac-online.de • regio.adlink.de • ResponseMedia-ad.flycast.com • retaildirect.realmedia.com • rmads.eu.msn.com • rs.webmasterplan.com • s0.bluestreak.com • s1.bluestreak.com • s2.bluestreak.com • s2.focalink.com • s3.bluestreak.com • s4.bluestreak.com • s5.bluestreak.com • s6.bluestreak.com • s7.bluestreak.com • s8.bluestreak.com • sbee.com • script.weborama.fr • search.kazaa.com • secserv.imgis.com • servedby.advertising.com • servedby.advertwizard.com • server.hamster.com • server-uk.imrworldwide.com • sexpromote.com • sextracker.com • sh4banner.de • sh4sure-images.adbureau.net • shop.freepush.com • shortwin.de • specialoffers.aol.com • spezialreporte.de • spin.spinbox.net • sprinks-clicks.about.com • spylog.com • srv1.bannercommunity.de • srv2.bannercommunity.de • srv3.bannercommunity.de • static.admaximize.com • stats.superstats.com • stats3.porntrack.com • statse.webtrendslive.com • Suissa-ad.flycast.com • survey.proactive.nl • sview.avenuea.com • t0.extreme-dm.com • thinknyc.eu-adcenter.net • tour01.bangbus.com • tpl1.realtracker.com • tracker.clicktrade.com • trinityacquisitions.com • tsms-ad.tsms.com • tuerck.de.counted.com • twistedhumor.com • ugo.eu-adcenter.net • uk1.linksynergy.com • uk2.linksynergy.com • uk3.linksynergy.com • uk4.linksynergy.com • uk5.linksynergy.com • us.adserver.yahoo.com • v0.extreme-dm.com • v1.extreme-dm.com • valueclick.com • van.ads.link4ads.com • vant.guj.de • venus.goclick.com • view.accendo.com • view.avenuea.com • vis1.sexlist.com • vis2.sexlist.com • vis3.sexlist.com • vis4.sexlist.com • vis5.sexlist.com • visit.referralware.com • visite.weborama.fr • VNU.eu-adcenter.net • w0.extreme-dm.com • w113.hitbox.com • w117.hitbox.com • w25.hitbox.com • web2.deja.com • webads.bizservers.com • weblist.de • webpdp.gator.com • webxprod.qualcomm.com • www.0190-dialer.com • www.12traffic.de • www.1for1.com • www.3turtles.com • www.404errorpage.com • www.7adpower.com • www.7host.com • www.activeannonce.com • www.adbucks.com • www.adexit.com • www.adexit.de • www.adforce.com • www.admex.com • www.adnetz.net • www.adserver.com • www.adserver.net • www.adsmart.com • www.adsmart.net • www.adultbizvoice.com • www.adultclicks.com • www.ad-up.com • www.adverity.com • www.adverlead.com • www.adverline.com • www.adverline.fr • www.advertising.com • www.advertwizard.com • www.adviews-sponsor.de • www.alexchiu.com • www.alladvantage.com • www.allclicks.com • www.amateur-galleries.com • www.amazingpops.com • www.at-nude-teens.net • www.bannerads.de • www.beseen.com • www.bfast.com • www.boonsolutions.com • www.brutalextreme.com • www.burstnet.com • www.cash1x1.de • www.cash2002.de • www.cash4banner.com • www.cash4banner.de • www.cashcount.com • www.cashfiesta.com • www.cashradio.com • www.cashsurfers.com • www.casinoglamour.com • www.cellularphones.com • www.cibleclick.com • www.cj.com • www.click2sexy.com • www.click-fr.com • www.clickxchange.com • www.clictrafic.com • www.coinpromo.com • www.cometcursor.com • www.cometsystems.net • www.commission-junction.com • www.cr4.com • www.crazypopups.com • www.crxwarez.net • www.cydoor.com • www.daz.com • www.dgm2.com • www.directvalue.nl • www.drawnsex.com • www.eads.com • www.e-bannerx.com • www.eclic.net • www.fastclick.net • www.fastmetasearch.com • www.flycast.co.uk • www.flycast.com • www.found404.com • www.fpctraffic.com • www.freeadultlottery.com • www.freeasiahardcore.com • www.free-banners.com • www.freebigcocks.net • www.freecelebnudity.com • www.freefarmpics.com • www.freegaybears.net • www.freegaylottery.com • www.freenaughtyteens.com • www.freestats.com • www.frontpagecash.com • www.fuck-portal.com • www.gamingclub.com • www.gator.co.uk • www.gator.com • www.gator.net • www.genhit.com • www.getsearches.com • www.gopopup.com • www.greetingwishes.com • www.grokster.com • www.hardcorepornos.org • www.hightrafficads.com • www.hit-parade.com • www.hitsme.com • www.hotfreewebcams.com • www.imaginemedia.com • www.lastconsole.com • www.linkshare.com • www.liveadvert.com • www.lo-litas.com • www.looksmartclicks.com • www.lop.com • www.lottoforever.com • www.reiseservice-graw.de • www.megacash.de • www.megawebcams.tv • www.milfhunter.com • www.modchip.com • www.mod-chip.com • www.money4exit.de • www.my-stats.com • www.netbroadcaster.com • www.netflip.com • www.netgravity.com • www.newtopsites.com • www.nic.co.il • www.nudelinkz.com • www.oneandonlynetwork.com • www.onresponse.com • www.paidpopup.de • www.piratos.de • www.popdown.de • www.popupad.net • www.popuptraffic.com • www.PostMasterBannerNet.com • www.prepaidliving.com • www.qksrv.net • www.qualityhitz.com • www.qualypromos.com • www.radiate.com • www.radiofreecash.com • www.rankyou.com • www.reference-sexe.com • www.sbee.com • www.sbvr.com • www.searchtraffic.com • www.service-url.de • www.sexfranco.com • www.sexfreelist.com • www.sexlist.com • www.sexpromote.com • www.sexspy.com • www.sexstudio24.de • www.sextracker.com • www.sextraffic.org • www.sexyfreehost.com • www.sexyplugin.com • www.simplecounter.net • www.slutzoo.com • www.sonixwarez.com • www.sponsor2002.de • www.targetshop.com • www.teknosurf.com • www.teknosurf2.com • www.teknosurf3.com • www.theadultwire.com • www.topwarez-fr.com • www.toys-galleries.com • www.trafficbox.net • www.trafficmonetizer.com • www.unionwarez.com • www.valueclick.com • www.valuesponsor.com • www.warez33.com • www.warezfield.com • www.web3000.co.uk • www.web3000.com • www.webads.nl • www.webferret.com • www.webhancer.com • www.webhancer.net • www.weblist.de • www.websitefinancing.com • www.wedoo.com • www.win24.de • www.wingowin.com • www.wtlive.com • www.xiti.com • www.xpostx.com • www.xxxdisplay.com • www.xxxfreeamateurs.com • www.xxxteenclub.de • www.youmakemoney.com • www.zeloop.net • www2.burstnet.com • www2.consumercreditusa.com • www3.netgravity.com • www4.netgravity.com • www4.trix.net • www80.valueclick.com • xads.infospace.com • xads.zedo.com • xxxfreeamateurs.com • z.extreme-dm.com • z0.extreme-dm.com • z1.extreme-dm.com • zac.netgravity.com • img.thebugs.ws • pet.thebugs.ws • mt45.mtree.com • www.porncow.com • download.alexa.com • count.exit.exchange.com • www.classmates.com • bidclix.net • www.media-ads.org • www.aitsafe.com • service.bfast.com • spweb.whenu.com • www.getweathercast.com • www.clock-sync.com • secure.goodthinxx.com • port.goodthinxx.com • chochux.offshoreclicks.com • go.offshoreclicks.com • click.atdmt.com • dropcharge.stardialer.de • download.stardialer.de • www.outwar.com • outwar.com • reiseservice-graw.de • www.pornstarguru.com • www.popstarwar.com • www.monsterwar.net • www.gangsterwar.com • srch.lop.com • clickcash.webpower.com • install.serviceurl.de • aim1.radiate.com • aim2.radiate.com • aim3.radiate.com • www.flyswat.com • www.flyswat.net • www.flyswat.org • www.flyswat.co.uk • www.cometsystems.com • www.cometzone.com • www.livecursors.com • aim1.adsoftware.com • aim2.adsoftware.com • aim3.adsoftware.com • aim4.adsoftware.com • aim5.adsoftware.com • www.conducent.com • www.conducent.co.uk • www.mathlogic.com • www.adsoftware.com • www.gohip.com • www.lolitafree.de • www.exitblaze.com • hop.clickbank.net • www.w3exit.com • ads.flabber.nl • servlets.kliks.nl • affiliates.kliks.nl • ads.revenue.net • pops.freeze.com • adlog.com.com • ads.techtv.com • ads.tripod.lycos.co.uk • adserv.happypuppy.com • ads.ipowerweb.com • www.hitboss.com • dbbsrv.com • download.globaldialer.net • www.passthison.com • tafmaster.com • www.xtra.fm • www.mp3bank.nl • www.paypopup.com • download.online-dialer.com • p2p.tm • bbbsearch.com • ads.free-banners.com • www.popinads.com
Description inserted by Andrei Ilie on Monday, February 21, 2011 Description updated by Andrei Ivanes on Wednesday, March 2, 2011
Back
.
.
.
.