arrow_back
search
close

WORM_IRCBOT.WPY

May 27, 2016
 PLATFORM:

Windows

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Worm

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It deletes itself after execution.

  TECHNICAL DETAILS

File Size:

76,513 bytes

File Type:

EXE

Memory Resident:

Yes

Initial Samples Received Date:

27 May 2016

Arrival Details

This worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This worm drops the following copies of itself into the affected system:

  • %System%\dllcache.exe

(Note: %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.)

Autostart Technique

This worm adds the following registry entries to enable its automatic execution at every system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
netmon = "%System%\dllcache.exe"

Other System Modifications

This worm adds the following registry keys:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Minimal\
dllcache

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
dllcache

It adds the following registry entries:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
%System%\dllcache.exe = "%System%\dllcache.exe:*:Microsoft Enabled"

Dropping Routine

This worm drops the following files:

  • %System%\drivers\sysdrv32.sys

(Note: %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.)

Other Details

This worm connects to the following possibly malicious URL:

  • {BLOCKED}8.16.222
  • {BLOCKED}8.15.199
  • {BLOCKED}8.116.88
  • {BLOCKED}8.218.232
  • {BLOCKED}8.66.118
  • {BLOCKED}8.64.72
  • {BLOCKED}8.217.159
  • {BLOCKED}8.216.135
  • {BLOCKED}8.61.25
  • {BLOCKED}8.213.89
  • {BLOCKED}8.58.234
  • {BLOCKED}8.163.119
  • {BLOCKED}8.7.242
  • {BLOCKED}8.108.130
  • {BLOCKED}8.57.138
  • {BLOCKED}8.158.26
  • {BLOCKED}8.106.33
  • {BLOCKED}8.53.68
  • {BLOCKED}8.154.212
  • {BLOCKED}8.102.219
  • {BLOCKED}8.204.108
  • {BLOCKED}8.153.139
  • {BLOCKED}8.255.27
  • {BLOCKED}8.101.123
  • {BLOCKED}8.202.11
  • {BLOCKED}8.47.157
  • {BLOCKED}8.147.22
  • {BLOCKED}8.251.163
  • {BLOCKED}8.197.174
  • {BLOCKED}8.45.60
  • {BLOCKED}8.248.93
  • {BLOCKED}8.93.239
  • {BLOCKED}8.245.47
  • {BLOCKED}8.195.77
  • {BLOCKED}8.40.223
  • {BLOCKED}8.244.229
  • {BLOCKED}8.90.119
  • {BLOCKED}8.242.183
  • {BLOCKED}8.87.72
  • {BLOCKED}8.188.217
  • {BLOCKED}8.36.79
  • {BLOCKED}8.137.224
  • {BLOCKED}8.85.231
  • {BLOCKED}8.186.120
  • {BLOCKED}8.83.185
  • {BLOCKED}8.184.73
  • {BLOCKED}8.29.219
  • {BLOCKED}8.134.104
  • {BLOCKED}8.235.249
  • {BLOCKED}8.80.138
  • {BLOCKED}8.56.80
  • {BLOCKED}8.99.8
  • {BLOCKED}8.35.122
  • {BLOCKED}8.181.60
  • {BLOCKED}8.176.215
  • {BLOCKED}8.112.135
  • {BLOCKED}8.109.20
  • {BLOCKED}8.171.114
  • {BLOCKED}8.165.13
  • {BLOCKED}8.176.25
  • {BLOCKED}8.114.59
  • {BLOCKED}8.225.116
  • {BLOCKED}8.89.124
  • {BLOCKED}8.104.175
  • {BLOCKED}8.91.48
  • {BLOCKED}8.153.14
  • {BLOCKED}8.217.28
  • {BLOCKED}8.150.90
  • {BLOCKED}8.22.251
  • {BLOCKED}8.171.176
  • {BLOCKED}8.53.93
  • {BLOCKED}8.230.155
  • {BLOCKED}8.160.230
  • {BLOCKED}8.150.24
  • {BLOCKED}8.212.245
  • {BLOCKED}8.17.212
  • {BLOCKED}8.76.191
  • {BLOCKED}8.81.98
  • {BLOCKED}8.125.26
  • {BLOCKED}8.73.11
  • {BLOCKED}8.68.166
  • {BLOCKED}8.122.106
  • {BLOCKED}8.240.188
  • {BLOCKED}8.186.248
  • {BLOCKED}8.135.232
  • {BLOCKED}8.135.38
  • {BLOCKED}8.196.4
  • {BLOCKED}8.4.19
  • {BLOCKED}8.66.241
  • {BLOCKED}8.60.140
  • {BLOCKED}8.245.33
  • {BLOCKED}8.55.101
  • {BLOCKED}8.250.134
  • {BLOCKED}8.255.45
  • {BLOCKED}8.201.43
  • {BLOCKED}8.207.206
  • {BLOCKED}8.178.222
  • {BLOCKED}8.117.1
  • {BLOCKED}8.111.222
  • {BLOCKED}8.50.0
  • {BLOCKED}8.144.19
  • {BLOCKED}8.136.49
  • {BLOCKED}8.207.253
  • {BLOCKED}8.30.44
  • {BLOCKED}8.47.200
  • {BLOCKED}8.173.68
  • {BLOCKED}8.28.210
  • {BLOCKED}8.146.237
  • {BLOCKED}8.1.251
  • {BLOCKED}8.90.100
  • {BLOCKED}8.82.2
  • {BLOCKED}8.170.234
  • {BLOCKED}8.90.227
  • {BLOCKED}8.162.136
  • {BLOCKED}8.74.32
  • {BLOCKED}8.214.94
  • {BLOCKED}8.97.197
  • {BLOCKED}8.20.113
  • {BLOCKED}8.75.161
  • {BLOCKED}8.84.219
  • {BLOCKED}8.124.28
  • {BLOCKED}8.222.192
  • {BLOCKED}8.116.58
  • {BLOCKED}8.250.24
  • {BLOCKED}8.55.42
  • {BLOCKED}8.114.97
  • {BLOCKED}8.178.75
  • {BLOCKED}8.197.65
  • {BLOCKED}8.97.68
  • {BLOCKED}8.239.92
  • {BLOCKED}8.98.29
  • {BLOCKED}8.224.153
  • {BLOCKED}8.246.189
  • {BLOCKED}8.71.197
  • {BLOCKED}8.141.184
  • {BLOCKED}8.125.116
  • {BLOCKED}8.254.30
  • {BLOCKED}8.133.214
  • {BLOCKED}8.247.190
  • {BLOCKED}8.106.126
  • {BLOCKED}8.96.67
  • {BLOCKED}8.87.136
  • {BLOCKED}8.88.97
  • {BLOCKED}8.81.0
  • {BLOCKED}8.239.91
  • {BLOCKED}8.79.39
  • {BLOCKED}8.222.63
  • {BLOCKED}8.214.221
  • {BLOCKED}8.195.103
  • {BLOCKED}8.187.134
  • {BLOCKED}8.144.89
  • {BLOCKED}8.118.217
  • {BLOCKED}8.208.191
  • {BLOCKED}8.28.243
  • {BLOCKED}8.61.13
  • {BLOCKED}8.145.67
  • {BLOCKED}8.41.166
  • {BLOCKED}8.74.91
  • {BLOCKED}8.252.61
  • {BLOCKED}8.27.138
  • {BLOCKED}8.113.169
  • {BLOCKED}8.119.194
  • {BLOCKED}8.43.15
  • {BLOCKED}8.79.139
  • {BLOCKED}8.100.219
  • {BLOCKED}8.53.10
  • {BLOCKED}8.20.226
  • {BLOCKED}8.46.98
  • {BLOCKED}8.139.42
  • {BLOCKED}8.54.116
  • {BLOCKED}8.185.145
  • {BLOCKED}8.121.44
  • {BLOCKED}8.159.17
  • {BLOCKED}8.147.173
  • {BLOCKED}8.191.43
  • {BLOCKED}8.51.45
  • {BLOCKED}8.250.96
  • {BLOCKED}8.65.74
  • {BLOCKED}8.59.176
  • {BLOCKED}8.225.201
  • {BLOCKED}8.215.207
  • {BLOCKED}8.170.231
  • {BLOCKED}8.96.149
  • {BLOCKED}8.5.55
  • {BLOCKED}8.111.177
  • {BLOCKED}8.214.101
  • {BLOCKED}8.107.235
  • {BLOCKED}8.117.230
  • {BLOCKED}8.81.107
  • {BLOCKED}8.189.206
  • {BLOCKED}8.33.48
  • {BLOCKED}8.235.182
  • {BLOCKED}8.188.229
  • {BLOCKED}8.3.206
  • {BLOCKED}8.233.76
  • {BLOCKED}8.144.102
  • {BLOCKED}8.171.80
  • {BLOCKED}8.133.108
  • {BLOCKED}8.145.208
  • {BLOCKED}8.119.79
  • {BLOCKED}.56.48
  • {BLOCKED}8.168.124
  • {BLOCKED}8.232.41
  • {BLOCKED}8.53.43
  • {BLOCKED}8.104.80
  • {BLOCKED}8.85.66
  • {BLOCKED}8.104.51
  • {BLOCKED}8.40.86
  • {BLOCKED}8.34.106
  • {BLOCKED}8.110.60
  • {BLOCKED}8.78.38
  • {BLOCKED}8.33.77
  • {BLOCKED}8.53.73
  • {BLOCKED}8.123.193
  • {BLOCKED}8.8.112
  • {BLOCKED}8.193.236
  • {BLOCKED}8.53.62
  • {BLOCKED}8.194.119
  • {BLOCKED}8.174.24
  • {BLOCKED}8.219.131
  • {BLOCKED}8.91.94
  • {BLOCKED}8.155.58
  • {BLOCKED}8.53.91
  • {BLOCKED}8.14.140
  • {BLOCKED}8.194.137
  • {BLOCKED}8.245.126
  • {BLOCKED}8.251.201
  • {BLOCKED}8.168.143
  • {BLOCKED}8.238.87
  • {BLOCKED}8.232.78
  • {BLOCKED}8.142.148
  • {BLOCKED}8.78.104
  • {BLOCKED}8.213.140
  • {BLOCKED}8.97.59
  • {BLOCKED}8.181.70
  • {BLOCKED}8.161.133
  • {BLOCKED}8.59.108
  • {BLOCKED}8.161.104
  • {BLOCKED}8.181.100
  • {BLOCKED}8.168.241
  • {BLOCKED}8.110.97
  • {BLOCKED}8.40.152
  • {BLOCKED}8.21.58
  • {BLOCKED}8.2.102
  • {BLOCKED}8.33.143
  • {BLOCKED}8.21.87
  • {BLOCKED}8.174.61
  • {BLOCKED}8.225.50
  • {BLOCKED}8.46.52
  • {BLOCKED}8.91.159
  • {BLOCKED}8.72.94
  • {BLOCKED}8.220.252
  • {BLOCKED}8.198.57
  • {BLOCKED}8.254.255
  • {BLOCKED}8.214.250
  • {BLOCKED}8.228.159
  • {BLOCKED}8.31.3
  • {BLOCKED}8.91.46
  • {BLOCKED}8.127.78
  • {BLOCKED}8.187.121
  • {BLOCKED}8.83.16
  • {BLOCKED}8.110.12
  • {BLOCKED}8.178.219
  • {BLOCKED}8.201.30
  • {BLOCKED}8.156.147
  • {BLOCKED}8.133.212
  • {BLOCKED}8.26.202
  • {BLOCKED}8.105.211
  • {BLOCKED}8.68.235
  • {BLOCKED}8.133.80
  • {BLOCKED}8.147.121
  • {BLOCKED}8.124.54
  • {BLOCKED}8.164.54
  • {BLOCKED}8.3.134
  • {BLOCKED}8.62.233
  • {BLOCKED}8.251.226
  • {BLOCKED}8.170.188
  • {BLOCKED}8.176.191
  • {BLOCKED}8.51.46
  • {BLOCKED}8.152.255
  • {BLOCKED}8.224.102
  • {BLOCKED}8.1.106
  • {BLOCKED}8.122.25
  • {BLOCKED}8.15.143
  • {BLOCKED}8.200.167
  • {BLOCKED}8.175.67
  • {BLOCKED}8.46.245
  • {BLOCKED}8.80.244
  • {BLOCKED}8.223.235
  • {BLOCKED}8.38.82
  • {BLOCKED}8.23.178
  • {BLOCKED}8.79.248
  • {BLOCKED}8.144.93
  • {BLOCKED}8.26.206
  • {BLOCKED}8.211.226
  • {BLOCKED}8.248.74
  • {BLOCKED}8.49.18
  • {BLOCKED}8.57.181
  • {BLOCKED}8.24.173
  • {BLOCKED}8.246.46
  • {BLOCKED}8.69.57
  • {BLOCKED}8.111.69
  • {BLOCKED}8.48.1
  • {BLOCKED}8.79.96
  • {BLOCKED}8.17.31
  • {BLOCKED}8.159.201
  • {BLOCKED}8.224.26
  • {BLOCKED}8.77.83
  • {BLOCKED}8.223.16
  • {BLOCKED}8.79.227
  • {BLOCKED}8.158.191
  • {BLOCKED}8.80.105
  • {BLOCKED}8.46.244
  • {BLOCKED}8.127.96
  • {BLOCKED}8.190.40
  • {BLOCKED}8.73.191
  • {BLOCKED}8.50.11
  • {BLOCKED}8.219.125
  • {BLOCKED}8.19.172
  • {BLOCKED}8.13.139
  • {BLOCKED}8.44.231
  • {BLOCKED}8.109.56
  • {BLOCKED}8.75.70
  • {BLOCKED}8.47.126
  • {BLOCKED}8.104.30
  • {BLOCKED}8.44.234
  • {BLOCKED}8.43.96
  • {BLOCKED}8.124.208
  • {BLOCKED}8.216.233
  • {BLOCKED}8.41.87
  • {BLOCKED}8.69.34
  • {BLOCKED}8.10.117
  • {BLOCKED}8.210.198
  • {BLOCKED}8.11.251
  • {BLOCKED}8.149.11
  • {BLOCKED}8.211.76
  • {BLOCKED}8.10.248
  • {BLOCKED}8.38.195
  • {BLOCKED}8.71.47
  • {BLOCKED}8.179.103
  • {BLOCKED}8.183.250
  • {BLOCKED}8.103.20
  • {BLOCKED}8.40.208
  • {BLOCKED}8.180.237
  • {BLOCKED}8.180.106
  • {BLOCKED}8.120.185
  • {BLOCKED}8.151.24
  • {BLOCKED}8.182.119
  • {BLOCKED}8.148.8
  • {BLOCKED}8.118.172
  • {BLOCKED}8.182.147
  • {BLOCKED}8.71.227
  • {BLOCKED}8.175.85
  • {BLOCKED}8.83.15
  • {BLOCKED}8.250.213
  • {BLOCKED}8.236.28
  • {BLOCKED}8.248.176
  • {BLOCKED}8.165.77
  • {BLOCKED}8.161.156
  • {BLOCKED}8.90.205
  • {BLOCKED}8.11.27
  • {BLOCKED}8.188.233
  • {BLOCKED}8.109.55
  • {BLOCKED}8.237.65
  • {BLOCKED}8.208.187
  • {BLOCKED}8.17.114
  • {BLOCKED}8.123.51
  • {BLOCKED}8.200.88
  • {BLOCKED}8.29.225
  • {BLOCKED}8.89.168
  • {BLOCKED}8.254.134
  • {BLOCKED}8.152.185
  • {BLOCKED}8.66.202
  • {BLOCKED}8.18.217
  • {BLOCKED}8.24.175
  • {BLOCKED}8.39.104
  • {BLOCKED}8.37.68
  • {BLOCKED}8.44.1
  • {BLOCKED}8.139.145
  • {BLOCKED}8.247.119
  • {BLOCKED}8.50.216
  • {BLOCKED}8.91.160
  • {BLOCKED}8.69.194
  • {BLOCKED}8.151.0
  • {BLOCKED}8.172.247
  • {BLOCKED}8.240.57
  • {BLOCKED}8.155.177
  • {BLOCKED}8.1.128
  • {BLOCKED}8.131.174
  • {BLOCKED}8.135.95
  • {BLOCKED}8.83.190
  • {BLOCKED}8.176.40
  • {BLOCKED}8.76.0
  • {BLOCKED}8.66.120
  • {BLOCKED}8.136.199
  • {BLOCKED}8.168.69
  • {BLOCKED}8.59.186
  • {BLOCKED}8.230.49
  • {BLOCKED}8.5.177
  • {BLOCKED}8.86.7
  • {BLOCKED}8.208.4
  • {BLOCKED}8.196.157
  • {BLOCKED}8.121.176
  • {BLOCKED}8.169.252
  • {BLOCKED}8.11.198
  • {BLOCKED}8.212.16
  • {BLOCKED}8.125.60
  • {BLOCKED}8.66.123
  • {BLOCKED}8.169.66
  • {BLOCKED}8.141.219
  • {BLOCKED}8.0.209
  • {BLOCKED}8.11.57
  • {BLOCKED}8.251.11
  • {BLOCKED}8.39.90
  • {BLOCKED}8.153.150
  • {BLOCKED}8.82.97
  • {BLOCKED}8.185.111
  • {BLOCKED}8.148.209
  • {BLOCKED}8.208.190
  • {BLOCKED}8.251.82
  • {BLOCKED}8.0.139
  • {BLOCKED}8.23.116
  • {BLOCKED}8.130.45
  • {BLOCKED}8.121.105
  • {BLOCKED}8.82.167
  • {BLOCKED}8.23.160
  • {BLOCKED}8.126.104
  • {BLOCKED}8.87.223
  • {BLOCKED}8.169.111
  • {BLOCKED}8.130.159
  • {BLOCKED}8.224.163
  • {BLOCKED}8.173.52
  • {BLOCKED}8.27.30
  • {BLOCKED}8.87.82
  • {BLOCKED}8.75.164
  • {BLOCKED}8.157.193
  • {BLOCKED}8.39.134
  • {BLOCKED}8.16.170
  • {BLOCKED}8.114.115
  • {BLOCKED}8.43.75
  • {BLOCKED}8.169.40
  • {BLOCKED}8.110.244
  • {BLOCKED}8.142.7
  • {BLOCKED}8.217.244
  • {BLOCKED}8.39.204
  • {BLOCKED}8.0.253
  • {BLOCKED}8.201.129
  • {BLOCKED}8.244.21
  • {BLOCKED}8.11.101
  • {BLOCKED}8.71.223
  • {BLOCKED}8.169.211
  • {BLOCKED}8.221.44
  • {BLOCKED}8.121.82
  • {BLOCKED}8.45.158
  • {BLOCKED}8.117.97
  • {BLOCKED}8.204.53
  • {BLOCKED}8.97.196
  • {BLOCKED}8.69.249
  • {BLOCKED}8.37.60
  • {BLOCKED}8.225.209
  • {BLOCKED}8.208.166
  • {BLOCKED}8.108.204
  • {BLOCKED}8.140.136
  • {BLOCKED}8.28.90
  • {BLOCKED}8.201.67
  • {BLOCKED}8.125.195
  • {BLOCKED}8.49.67
  • {BLOCKED}8.52.181
  • {BLOCKED}8.117.173
  • {BLOCKED}8.214.202
  • {BLOCKED}8.76.219
  • {BLOCKED}8.197.210
  • {BLOCKED}8.229.66
  • {BLOCKED}8.60.23
  • {BLOCKED}8.236.165
  • {BLOCKED}8.105.14
  • {BLOCKED}8.64.136
  • {BLOCKED}8.60.203
  • {BLOCKED}8.164.150
  • {BLOCKED}8.99.234
  • {BLOCKED}8.67.122
  • {BLOCKED}8.231.181
  • {BLOCKED}8.116.226
  • {BLOCKED}8.19.121
  • {BLOCKED}8.23.106
  • {BLOCKED}8.199.196
  • {BLOCKED}8.192.149
  • {BLOCKED}8.195.83
  • {BLOCKED}8.119.211
  • {BLOCKED}8.255.15
  • {BLOCKED}8.16.8
  • {BLOCKED}8.95.121
  • {BLOCKED}8.175.158
  • {BLOCKED}8.108.127
  • {BLOCKED}8.84.37
  • {BLOCKED}8.103.91
  • {BLOCKED}8.55.167
  • {BLOCKED}8.96.44
  • {BLOCKED}8.151.67
  • {BLOCKED}8.13.143
  • {BLOCKED}8.251.7
  • {BLOCKED}8.13.196
  • {BLOCKED}8.42.164
  • {BLOCKED}8.125.130
  • {BLOCKED}8.36.247
  • {BLOCKED}8.215.197
  • {BLOCKED}8.208.225
  • {BLOCKED}8.155.152
  • {BLOCKED}8.143.9
  • {BLOCKED}8.173.84
  • {BLOCKED}8.119.86
  • {BLOCKED}8.234.55
  • {BLOCKED}8.216.251
  • {BLOCKED}8.145.172
  • {BLOCKED}8.245.16
  • {BLOCKED}8.66.141
  • {BLOCKED}8.78.156
  • {BLOCKED}8.137.146
  • {BLOCKED}8.102.207
  • {BLOCKED}8.54.126
  • {BLOCKED}8.84.201
  • {BLOCKED}8.192.18
  • {BLOCKED}8.231.20
  • {BLOCKED}8.226.29
  • {BLOCKED}8.196.61
  • {BLOCKED}8.66.195
  • {BLOCKED}8.181.110
  • {BLOCKED}8.181.164
  • {BLOCKED}8.132.155
  • {BLOCKED}8.49.61
  • {BLOCKED}8.143.116
  • {BLOCKED}8.128.219
  • {BLOCKED}8.137.200
  • {BLOCKED}8.127.165
  • {BLOCKED}8.205.141
  • {BLOCKED}8.14.48
  • {BLOCKED}8.37.99
  • {BLOCKED}8.151.142
  • {BLOCKED}8.216.102
  • {BLOCKED}8.204.87
  • {BLOCKED}8.155.4
  • {BLOCKED}8.211.185
  • {BLOCKED}8.240.153
  • {BLOCKED}8.234.109
  • {BLOCKED}8.67.249
  • {BLOCKED}8.43.70
  • {BLOCKED}8.132.209
  • {BLOCKED}8.37.153
  • {BLOCKED}8.57.31
  • {BLOCKED}8.226.97
  • {BLOCKED}8.6.152
  • {BLOCKED}8.231.24
  • {BLOCKED}8.209.194
  • {BLOCKED}8.219.8
  • {BLOCKED}8.249.56
  • {BLOCKED}8.49.119
  • {BLOCKED}8.144.92
  • {BLOCKED}8.104.234
  • {BLOCKED}8.156.113
  • {BLOCKED}8.13.241
  • {BLOCKED}8.189.137
  • {BLOCKED}8.217.234
  • {BLOCKED}8.175.218
  • {BLOCKED}8.140.243
  • {BLOCKED}8.197.49
  • {BLOCKED}8.242.223
  • {BLOCKED}8.89.237
  • {BLOCKED}8.111.195
  • {BLOCKED}8.166.99
  • {BLOCKED}8.228.127
  • {BLOCKED}8.177.120
  • {BLOCKED}8.163.74
  • {BLOCKED}8.207.247
  • {BLOCKED}8.215.159
  • {BLOCKED}8.178.71
  • {BLOCKED}8.47.44
  • {BLOCKED}8.188.142
  • {BLOCKED}8.216.238
  • {BLOCKED}8.238.118
  • {BLOCKED}8.217.189
  • {BLOCKED}8.210.100
  • {BLOCKED}8.166.55
  • {BLOCKED}8.99.179
  • {BLOCKED}8.175.46
  • {BLOCKED}8.240.227
  • {BLOCKED}8.189.93
  • {BLOCKED}8.26.165
  • {BLOCKED}8.239.148
  • {BLOCKED}8.6.236
  • {BLOCKED}8.253.244
  • {BLOCKED}8.13.69
  • {BLOCKED}8.230.29
  • {BLOCKED}8.48.123
  • {BLOCKED}8.123.167
  • {BLOCKED}8.200.158
  • {BLOCKED}8.36.107
  • {BLOCKED}8.226.181
  • {BLOCKED}8.152.210
  • {BLOCKED}8.248.195
  • {BLOCKED}8.168.248
  • {BLOCKED}8.115.182
  • {BLOCKED}8.88.173
  • {BLOCKED}8.8.225
  • {BLOCKED}8.4.158
  • {BLOCKED}8.172.68
  • {BLOCKED}8.103.211
  • {BLOCKED}8.240.44
  • {BLOCKED}8.218.54
  • {BLOCKED}8.226.205
  • {BLOCKED}8.69.139
  • {BLOCKED}8.153.201
  • {BLOCKED}8.54.93
  • {BLOCKED}8.153.154
  • {BLOCKED}8.46.197
  • {BLOCKED}8.68.59
  • {BLOCKED}8.103.219
  • {BLOCKED}8.207.83
  • {BLOCKED}8.179.210
  • {BLOCKED}8.210.39
  • {BLOCKED}8.19.197
  • {BLOCKED}8.123.69
  • {BLOCKED}8.153.145
  • {BLOCKED}8.237.168
  • {BLOCKED}8.249.139
  • {BLOCKED}8.177.78
  • {BLOCKED}8.211.239
  • {BLOCKED}8.1.27
  • {BLOCKED}8.249.130
  • {BLOCKED}8.100.216
  • {BLOCKED}8.226.21
  • {BLOCKED}8.200.12
  • {BLOCKED}8.24.216
  • {BLOCKED}8.51.225
  • {BLOCKED}8.88.253
  • {BLOCKED}8.85.41
  • {BLOCKED}8.115.126
  • {BLOCKED}8.62.188
  • {BLOCKED}8.55.36
  • {BLOCKED}8.184.230
  • {BLOCKED}8.234.173
  • {BLOCKED}8.135.240
  • {BLOCKED}8.39.254
  • {BLOCKED}8.28.27
  • {BLOCKED}8.195.201
  • {BLOCKED}8.146.202
  • {BLOCKED}8.139.51
  • {BLOCKED}8.94.136
  • {BLOCKED}8.150.142
  • {BLOCKED}8.67.160
  • {BLOCKED}8.229.82
  • {BLOCKED}8.147.217
  • {BLOCKED}8.120.240
  • {BLOCKED}8.9.218
  • {BLOCKED}8.242.38
  • {BLOCKED}8.75.126
  • {BLOCKED}8.249.132
  • {BLOCKED}8.157.247
  • {BLOCKED}8.87.30
  • {BLOCKED}8.160.172
  • {BLOCKED}8.81.232
  • {BLOCKED}8.141.162
  • {BLOCKED}8.89.70
  • {BLOCKED}8.163.97
  • {BLOCKED}8.226.208
  • {BLOCKED}8.1.124
  • {BLOCKED}8.166.22
  • {BLOCKED}8.174.116
  • {BLOCKED}8.213.253
  • {BLOCKED}8.172.76
  • {BLOCKED}8.238.113
  • {BLOCKED}8.248.143
  • {BLOCKED}8.3.164
  • {BLOCKED}8.203.157
  • {BLOCKED}8.92.251
  • {BLOCKED}8.180.222
  • {BLOCKED}8.194.38
  • {BLOCKED}8.154.118
  • {BLOCKED}8.145.127
  • {BLOCKED}8.213.48
  • {BLOCKED}8.121.36
  • {BLOCKED}8.23.85
  • {BLOCKED}8.86.197
  • {BLOCKED}8.197.219
  • {BLOCKED}8.47.137
  • {BLOCKED}8.105.207
  • {BLOCKED}8.190.253
  • {BLOCKED}8.113.173
  • {BLOCKED}8.132.183
  • {BLOCKED}8.9.13
  • {BLOCKED}8.10.130
  • {BLOCKED}8.230.173
  • {BLOCKED}8.20.160
  • {BLOCKED}8.171.243
  • {BLOCKED}8.59.92
  • {BLOCKED}8.0.34
  • {BLOCKED}8.160.59
  • {BLOCKED}8.49.87
  • {BLOCKED}8.181.246
  • {BLOCKED}8.229.67
  • {BLOCKED}8.44.230
  • {BLOCKED}8.196.165
  • {BLOCKED}8.33.13
  • {BLOCKED}8.63.7
  • {BLOCKED}8.201.150
  • {BLOCKED}8.74.105
  • {BLOCKED}8.104.176
  • {BLOCKED}8.38.127
  • {BLOCKED}8.55.200
  • {BLOCKED}8.27.156
  • {BLOCKED}8.127.157
  • {BLOCKED}8.22.171
  • {BLOCKED}8.162.223
  • {BLOCKED}8.88.102
  • {BLOCKED}8.82.117
  • {BLOCKED}8.77.141
  • {BLOCKED}8.170.147
  • {BLOCKED}8.184.26
  • {BLOCKED}8.99.200
  • {BLOCKED}8.110.33
  • {BLOCKED}8.148.216
  • {BLOCKED}8.74.55
  • {BLOCKED}8.121.131
  • {BLOCKED}8.104.58
  • {BLOCKED}8.16.145
  • {BLOCKED}8.154.33
  • {BLOCKED}8.198.161
  • {BLOCKED}8.162.183
  • {BLOCKED}8.192.176
  • {BLOCKED}8.140.252
  • {BLOCKED}8.90.138
  • {BLOCKED}8.87.189
  • {BLOCKED}8.220.92
  • {BLOCKED}8.79.40
  • {BLOCKED}8.74.65
  • {BLOCKED}8.225.77
  • {BLOCKED}8.214.235
  • {BLOCKED}8.68.79
  • {BLOCKED}8.203.18
  • {BLOCKED}8.236.166
  • {BLOCKED}8.176.220
  • {BLOCKED}8.96.252
  • {BLOCKED}8.110.43
  • {BLOCKED}8.109.248
  • {BLOCKED}8.184.114
  • {BLOCKED}8.2.251
  • {BLOCKED}8.58.149
  • {BLOCKED}8.190.155
  • {BLOCKED}8.1.188
  • {BLOCKED}8.103.110
  • {BLOCKED}8.168.206
  • {BLOCKED}8.180.20
  • {BLOCKED}8.27.199
  • {BLOCKED}8.93.231
  • {BLOCKED}8.216.160
  • {BLOCKED}8.239.172
  • {BLOCKED}8.57.213
  • {BLOCKED}8.173.140
  • {BLOCKED}8.125.181
  • {BLOCKED}8.15.123
  • {BLOCKED}8.248.116
  • {BLOCKED}8.160.7
  • {BLOCKED}8.181.212
  • {BLOCKED}8.24.200
  • {BLOCKED}8.138.58
  • {BLOCKED}8.115.46
  • {BLOCKED}8.170.8
  • {BLOCKED}8.71.26
  • {BLOCKED}8.226.173
  • {BLOCKED}8.125.59
  • {BLOCKED}8.51.140
  • {BLOCKED}8.116.237
  • {BLOCKED}8.81.27
  • {BLOCKED}8.94.32
  • {BLOCKED}8.206.147
  • {BLOCKED}8.18.121
  • {BLOCKED}8.18.243
  • {BLOCKED}8.139.115
  • {BLOCKED}8.61.141
  • {BLOCKED}8.41.127
  • {BLOCKED}8.172.128
  • {BLOCKED}8.195.12
  • {BLOCKED}8.51.6
  • {BLOCKED}8.117.166
  • {BLOCKED}8.118.44
  • {BLOCKED}8.16.52
  • {BLOCKED}8.240.229
  • {BLOCKED}8.148.59
  • {BLOCKED}8.86.88
  • {BLOCKED}8.149.250
  • {BLOCKED}8.196.146
  • {BLOCKED}8.216.26
  • {BLOCKED}8.251.108
  • {BLOCKED}8.142.113
  • {BLOCKED}8.119.101
  • {BLOCKED}8.186.15
  • {BLOCKED}8.243.204
  • {BLOCKED}8.39.173
  • {BLOCKED}8.128.210
  • {BLOCKED}8.196.11
  • {BLOCKED}8.94.255
  • {BLOCKED}8.220.226
  • {BLOCKED}8.208.116
  • {BLOCKED}8.71.20
  • {BLOCKED}8.109.207
  • {BLOCKED}8.166.145
  • {BLOCKED}8.211.96
  • {BLOCKED}8.134.170
  • {BLOCKED}8.84.125
  • {BLOCKED}8.156.148
  • {BLOCKED}8.230.99
  • {BLOCKED}8.99.82
  • {BLOCKED}8.186.138
  • {BLOCKED}8.198.248
  • {BLOCKED}8.230.94
  • {BLOCKED}8.250.93
  • {BLOCKED}8.253.73
  • {BLOCKED}8.221.221
  • {BLOCKED}8.144.38
  • {BLOCKED}8.240.224
  • {BLOCKED}8.236.183
  • {BLOCKED}8.89.213
  • {BLOCKED}8.77.104
  • {BLOCKED}8.92.193
  • {BLOCKED}8.34.132
  • {BLOCKED}8.191.222
  • {BLOCKED}8.194.206
  • {BLOCKED}8.169.120
  • {BLOCKED}8.179.245
  • {BLOCKED}8.37.108
  • {BLOCKED}8.214.200
  • {BLOCKED}8.216.180
  • {BLOCKED}8.146.142
  • {BLOCKED}8.226.49
  • {BLOCKED}8.47.232
  • {BLOCKED}8.159.119
  • {BLOCKED}8.181.97
  • {BLOCKED}8.169.243
  • {BLOCKED}8.213.204
  • {BLOCKED}8.204.75
  • {BLOCKED}8.24.135
  • {BLOCKED}8.206.55
  • {BLOCKED}8.27.239
  • {BLOCKED}8.180.178
  • {BLOCKED}8.44.108
  • {BLOCKED}8.198.58
  • {BLOCKED}8.181.52
  • {BLOCKED}8.249.216
  • {BLOCKED}8.146.32
  • {BLOCKED}8.196.185
  • {BLOCKED}8.95.10
  • {BLOCKED}8.112.16
  • {BLOCKED}8.91.3
  • {BLOCKED}8.249.86
  • {BLOCKED}8.43.240
  • {BLOCKED}8.232.204
  • {BLOCKED}8.212.65
  • {BLOCKED}8.145.33
  • {BLOCKED}8.60.116
  • {BLOCKED}8.145.36
  • {BLOCKED}8.233.208
  • {BLOCKED}8.43.242
  • {BLOCKED}8.42.236
  • {BLOCKED}8.92.133
  • {BLOCKED}8.197.60
  • {BLOCKED}8.212.195
  • {BLOCKED}8.233.78
  • {BLOCKED}8.92.7
  • {BLOCKED}8.127.156
  • {BLOCKED}8.194.182
  • {BLOCKED}8.192.182
  • {BLOCKED}8.109.17
  • {BLOCKED}8.40.109
  • {BLOCKED}8.37.104
  • {BLOCKED}8.229.77
  • {BLOCKED}8.39.233
  • {BLOCKED}8.91.137
  • {BLOCKED}8.176.46
  • {BLOCKED}8.176.177
  • {BLOCKED}8.90.133
  • {BLOCKED}8.174.174
  • {BLOCKED}8.106.14
  • {BLOCKED}8.21.97
  • {BLOCKED}8.106.140
  • {BLOCKED}8.22.227
  • {BLOCKED}8.38.106
  • {BLOCKED}8.173.44
  • {BLOCKED}8.192.56
  • {BLOCKED}8.174.176
  • {BLOCKED}8.90.7
  • {BLOCKED}8.107.17
  • {BLOCKED}8.41.240
  • {BLOCKED}8.149.87
  • {BLOCKED}8.14.147
  • {BLOCKED}8.236.71
  • {BLOCKED}8.143.214
  • {BLOCKED}8.106.51
  • {BLOCKED}8.54.62
  • {BLOCKED}8.201.75
  • {BLOCKED}8.35.21
  • {BLOCKED}8.220.245
  • {BLOCKED}8.193.67
  • {BLOCKED}8.67.136
  • {BLOCKED}8.254.64
  • {BLOCKED}8.209.149
  • {BLOCKED}8.164.40
  • {BLOCKED}8.217.157
  • {BLOCKED}8.35.229
  • {BLOCKED}8.32.141
  • {BLOCKED}8.48.222
  • {BLOCKED}8.146.175
  • {BLOCKED}8.141.126
  • {BLOCKED}8.88.217
  • {BLOCKED}8.72.136
  • {BLOCKED}8.19.147
  • {BLOCKED}8.130.93
  • {BLOCKED}8.254.16
  • {BLOCKED}8.177.242
  • {BLOCKED}8.246.56
  • {BLOCKED}8.11.139
  • {BLOCKED}8.206.141
  • {BLOCKED}8.196.235
  • {BLOCKED}8.2.130
  • {BLOCKED}8.148.104
  • {BLOCKED}8.42.46
  • {BLOCKED}8.243.176
  • {BLOCKED}8.121.245
  • {BLOCKED}8.190.59
  • {BLOCKED}8.156.112
  • {BLOCKED}8.172.193
  • {BLOCKED}8.132.22
  • {BLOCKED}8.153.152
  • {BLOCKED}8.224.182
  • {BLOCKED}8.171.145
  • {BLOCKED}8.209.101
  • {BLOCKED}8.187.227
  • {BLOCKED}8.50.6
  • {BLOCKED}8.251.56
  • {BLOCKED}8.156.64
  • {BLOCKED}8.116.196
  • {BLOCKED}8.137.70
  • {BLOCKED}8.121.12
  • {BLOCKED}8.69.127
  • {BLOCKED}8.242.253
  • {BLOCKED}8.130.209
  • {BLOCKED}8.30.246
  • {BLOCKED}8.243.150
  • {BLOCKED}8.156.62
  • {BLOCKED}8.104.178
  • {BLOCKED}8.239.191
  • {BLOCKED}8.142.34
  • {BLOCKED}8.8.71
  • {BLOCKED}8.151.154
  • {BLOCKED}8.9.224
  • {BLOCKED}8.255.25
  • {BLOCKED}8.26.82
  • {BLOCKED}8.129.57
  • {BLOCKED}8.251.67
  • {BLOCKED}8.117.53
  • {BLOCKED}8.99.245
  • {BLOCKED}8.4.113
  • {BLOCKED}8.230.44
  • {BLOCKED}8.138.126
  • {BLOCKED}8.83.155
  • {BLOCKED}8.17.218
  • {BLOCKED}8.21.99
  • {BLOCKED}8.190.11
  • {BLOCKED}8.30.169
  • {BLOCKED}8.56.200
  • {BLOCKED}8.160.199
  • {BLOCKED}8.246.134
  • {BLOCKED}8.21.21
  • {BLOCKED}8.191.213
  • {BLOCKED}8.216.66
  • {BLOCKED}8.146.221
  • {BLOCKED}8.68.25
  • {BLOCKED}8.112.67
  • {BLOCKED}8.82.53
  • {BLOCKED}8.165.182
  • {BLOCKED}8.238.139
  • {BLOCKED}8.212.236
  • {BLOCKED}8.91.250
  • {BLOCKED}8.177.185
  • {BLOCKED}8.172.74
  • {BLOCKED}8.60.30
  • {BLOCKED}8.107.212
  • {BLOCKED}8.16.38
  • {BLOCKED}8.29.16
  • {BLOCKED}8.168.245
  • {BLOCKED}8.60.25
  • {BLOCKED}8.89.91
  • {BLOCKED}8.251.83
  • {BLOCKED}8.221.123
  • {BLOCKED}8.225.98
  • {BLOCKED}8.48.218
  • {BLOCKED}8.170.140
  • {BLOCKED}8.156.182
  • {BLOCKED}8.166.165
  • {BLOCKED}8.24.185
  • {BLOCKED}8.48.253
  • {BLOCKED}8.128.139
  • {BLOCKED}8.157.112
  • {BLOCKED}8.50.42
  • {BLOCKED}8.115.111
  • {BLOCKED}8.172.220
  • {BLOCKED}8.100.3
  • {BLOCKED}8.161.86
  • {BLOCKED}8.74.239
  • {BLOCKED}8.21.105
  • {BLOCKED}8.210.246
  • {BLOCKED}8.171.69
  • {BLOCKED}8.51.228
  • {BLOCKED}8.19.25
  • {BLOCKED}8.198.240
  • {BLOCKED}8.169.175
  • {BLOCKED}8.255.93
  • {BLOCKED}8.144.84
  • {BLOCKED}8.240.241
  • {BLOCKED}8.176.229
  • {BLOCKED}8.68.9
  • {BLOCKED}8.10.6
  • {BLOCKED}8.66.115
  • {BLOCKED}8.27.194
  • {BLOCKED}8.228.107
  • {BLOCKED}8.123.95
  • {BLOCKED}8.14.237
  • {BLOCKED}8.174.79
  • {BLOCKED}8.215.150
  • {BLOCKED}8.151.138
  • {BLOCKED}8.117.169
  • {BLOCKED}8.202.215
  • {BLOCKED}8.11.157
  • {BLOCKED}8.120.15
  • {BLOCKED}8.130.126
  • {BLOCKED}8.65.220
  • {BLOCKED}8.119.249
  • {BLOCKED}8.188.36
  • {BLOCKED}8.78.244
  • {BLOCKED}8.253.12
  • {BLOCKED}8.80.133
  • {BLOCKED}8.197.248
  • {BLOCKED}8.255.214
  • {BLOCKED}8.132.115
  • {BLOCKED}8.104.142
  • {BLOCKED}8.91.65
  • {BLOCKED}8.117.219
  • {BLOCKED}8.160.162
  • {BLOCKED}8.2.51
  • {BLOCKED}8.251.251
  • {BLOCKED}8.164.253
  • {BLOCKED}8.189.209
  • {BLOCKED}8.203.104
  • {BLOCKED}8.205.249
  • {BLOCKED}8.109.52
  • {BLOCKED}8.63.146
  • {BLOCKED}8.175.185
  • {BLOCKED}8.201.211
  • {BLOCKED}8.27.6
  • {BLOCKED}8.0.104
  • {BLOCKED}8.240.191
  • {BLOCKED}8.111.197
  • {BLOCKED}8.157.198
  • {BLOCKED}8.3.253
  • {BLOCKED}8.44.47
  • {BLOCKED}8.125.220
  • {BLOCKED}8.9.233
  • {BLOCKED}8.221.219
  • {BLOCKED}8.234.168
  • {BLOCKED}8.101.83
  • {BLOCKED}8.20.37
  • {BLOCKED}8.45.64
  • {BLOCKED}8.65.125
  • {BLOCKED}8.103.30
  • {BLOCKED}8.172.126
  • {BLOCKED}8.181.240
  • {BLOCKED}8.185.203
  • {BLOCKED}8.89.134
  • {BLOCKED}8.10.180
  • {BLOCKED}8.226.72
  • {BLOCKED}8.196.8
  • {BLOCKED}8.179.95
  • {BLOCKED}8.21.240
  • {BLOCKED}8.159.177
  • {BLOCKED}8.183.187
  • {BLOCKED}8.104.104
  • {BLOCKED}8.142.27
  • {BLOCKED}8.239.239
  • {BLOCKED}8.166.105
  • {BLOCKED}8.164.29
  • {BLOCKED}8.127.253
  • {BLOCKED}8.72.97
  • {BLOCKED}8.173.35
  • {BLOCKED}8.55.118
  • {BLOCKED}8.152.203
  • {BLOCKED}8.159.133
  • {BLOCKED}8.187.65
  • {BLOCKED}8.1.125
  • {BLOCKED}8.137.131
  • {BLOCKED}8.144.231
  • {BLOCKED}8.213.50
  • {BLOCKED}8.153.109
  • {BLOCKED}8.18.103
  • {BLOCKED}8.196.71
  • {BLOCKED}8.151.33
  • {BLOCKED}8.168.11
  • {BLOCKED}8.11.44
  • {BLOCKED}8.156.185
  • {BLOCKED}8.26.58
  • {BLOCKED}8.43.36
  • {BLOCKED}8.71.55
  • {BLOCKED}8.180.93
  • {BLOCKED}8.211.230
  • {BLOCKED}8.191.47
  • {BLOCKED}8.232.190
  • {BLOCKED}8.8.183
  • {BLOCKED}8.229.114
  • {BLOCKED}8.85.213
  • {BLOCKED}8.168.190
  • {BLOCKED}8.128.175
  • {BLOCKED}8.145.153
  • {BLOCKED}8.225.132
  • {BLOCKED}8.184.75
  • {BLOCKED}8.215.212
  • {BLOCKED}8.152.212
  • {BLOCKED}8.131.251
  • {BLOCKED}8.62.99
  • {BLOCKED}8.217.32
  • {BLOCKED}8.246.92
  • {BLOCKED}8.114.17
  • {BLOCKED}8.46.121
  • {BLOCKED}8.174.69
  • {BLOCKED}8.201.54
  • {BLOCKED}8.135.234
  • {BLOCKED}8.29.143
  • {BLOCKED}8.84.192
  • {BLOCKED}8.82.99
  • {BLOCKED}8.203.63
  • {BLOCKED}8.34.209
  • {BLOCKED}8.242.61
  • {BLOCKED}8.250.208
  • {BLOCKED}8.169.116
  • {BLOCKED}8.146.26
  • {BLOCKED}8.130.246
  • {BLOCKED}8.101.229
  • {BLOCKED}8.20.137
  • {BLOCKED}8.11.246
  • {BLOCKED}8.157.9
  • {BLOCKED}8.179.99
  • {BLOCKED}8.213.46
  • {BLOCKED}8.192.80
  • {BLOCKED}8.194.172
  • {BLOCKED}8.220.101
  • {BLOCKED}8.28.28
  • {BLOCKED}8.55.175
  • {BLOCKED}8.246.248
  • {BLOCKED}8.22.230
  • {BLOCKED}8.65.190
  • {BLOCKED}8.37.47
  • {BLOCKED}8.1.7
  • {BLOCKED}8.182.193
  • {BLOCKED}8.14.85
  • {BLOCKED}8.63.66
  • {BLOCKED}8.55.177
  • {BLOCKED}8.234.13
  • {BLOCKED}8.7.30
  • {BLOCKED}8.99.233
  • {BLOCKED}8.51.215
  • {BLOCKED}8.35.51
  • {BLOCKED}8.161.195
  • {BLOCKED}8.243.159
  • {BLOCKED}8.87.158
  • {BLOCKED}8.20.106
  • {BLOCKED}8.232.176
  • {BLOCKED}8.113.49
  • {BLOCKED}8.49.122
  • {BLOCKED}8.33.215
  • {BLOCKED}8.136.139
  • {BLOCKED}8.212.178
  • {BLOCKED}8.170.86
  • {BLOCKED}8.40.104
  • {BLOCKED}8.227.124
  • {BLOCKED}8.147.124
  • {BLOCKED}8.97.13
  • {BLOCKED}8.199.103
  • {BLOCKED}8.87.94
  • {BLOCKED}8.182.180
  • {BLOCKED}8.116.152
  • {BLOCKED}8.173.56
  • {BLOCKED}8.56.98
  • {BLOCKED}8.196.140
  • {BLOCKED}8.174.131
  • {BLOCKED}8.80.55
  • {BLOCKED}8.71.58
  • {BLOCKED}8.160.33
  • {BLOCKED}8.0.185
  • {BLOCKED}8.225.188
  • {BLOCKED}8.213.165
  • {BLOCKED}8.240.159
  • {BLOCKED}8.42.0
  • {BLOCKED}8.249.17
  • {BLOCKED}8.242.224
  • {BLOCKED}8.4.222
  • {BLOCKED}8.138.151
  • {BLOCKED}8.144.253
  • {BLOCKED}8.35.217
  • {BLOCKED}8.75.71
  • {BLOCKED}8.6.159
  • {BLOCKED}8.189.91
  • {BLOCKED}8.122.254
  • {BLOCKED}8.35.207
  • {BLOCKED}8.95.133
  • {BLOCKED}8.111.168
  • {BLOCKED}8.29.105
  • {BLOCKED}8.145.190
  • {BLOCKED}8.17.82
  • {BLOCKED}8.9.161
  • {BLOCKED}8.154.177
  • {BLOCKED}8.31.42
  • {BLOCKED}8.171.212
  • {BLOCKED}8.169.137
  • {BLOCKED}8.118.79
  • {BLOCKED}8.104.119
  • {BLOCKED}8.53.180
  • {BLOCKED}8.242.86
  • {BLOCKED}8.127.194
  • {BLOCKED}8.140.217
  • {BLOCKED}8.2.122
  • {BLOCKED}8.9.43
  • {BLOCKED}8.138.141
  • {BLOCKED}8.0.47
  • {BLOCKED}8.147.0
  • {BLOCKED}8.51.104
  • {BLOCKED}8.167.72
  • {BLOCKED}8.128.208
  • {BLOCKED}8.144.158
  • {BLOCKED}8.95.52
  • {BLOCKED}8.165.166
  • {BLOCKED}8.60.126
  • {BLOCKED}8.46.14
  • {BLOCKED}8.50.199
  • {BLOCKED}8.189.11
  • {BLOCKED}8.111.130
  • {BLOCKED}8.149.88
  • {BLOCKED}8.163.201
  • {BLOCKED}8.118.92
  • {BLOCKED}8.210.214
  • {BLOCKED}8.83.38
  • {BLOCKED}8.5.91
  • {BLOCKED}8.104.235
  • {BLOCKED}8.53.165
  • {BLOCKED}8.39.247
  • {BLOCKED}8.64.56
  • {BLOCKED}8.200.92
  • {BLOCKED}8.15.17
  • {BLOCKED}8.109.165
  • {BLOCKED}8.156.178
  • {BLOCKED}8.254.128
  • {BLOCKED}8.231.93
  • {BLOCKED}8.40.211
  • {BLOCKED}8.240.148
  • {BLOCKED}8.111.8
  • {BLOCKED}8.71.146
  • {BLOCKED}8.88.224
  • {BLOCKED}8.87.35
  • {BLOCKED}8.172.67
  • {BLOCKED}8.118.31
  • {BLOCKED}8.47.45
  • {BLOCKED}8.50.77
  • {BLOCKED}8.66.155
  • {BLOCKED}8.196.40
  • {BLOCKED}8.156.117
  • {BLOCKED}8.252.40
  • {BLOCKED}8.252.101
  • {BLOCKED}8.217.175
  • {BLOCKED}8.163.140
  • {BLOCKED}8.12.119
  • {BLOCKED}8.142.70
  • {BLOCKED}8.57.228
  • {BLOCKED}8.33.60
  • {BLOCKED}8.198.4
  • {BLOCKED}8.33.255
  • {BLOCKED}8.101.81
  • {BLOCKED}8.171.67
  • {BLOCKED}8.237.132
  • {BLOCKED}8.209.119
  • {BLOCKED}8.253.158
  • {BLOCKED}8.190.9
  • {BLOCKED}8.171.156
  • {BLOCKED}8.229.228
  • {BLOCKED}8.162.252
  • {BLOCKED}8.135.149
  • {BLOCKED}8.179.227
  • {BLOCKED}8.72.39
  • {BLOCKED}8.193.55
  • {BLOCKED}8.146.137
  • {BLOCKED}8.25.211
  • {BLOCKED}8.22.166
  • {BLOCKED}8.207.240
  • {BLOCKED}8.163.163
  • {BLOCKED}8.245.37
  • {BLOCKED}8.97.8
  • {BLOCKED}8.44.243
  • {BLOCKED}8.155.41
  • {BLOCKED}8.207.74
  • {BLOCKED}8.80.200
  • {BLOCKED}8.118.85
  • {BLOCKED}8.171.106
  • {BLOCKED}8.127.67
  • {BLOCKED}8.105.168
  • {BLOCKED}8.6.13
  • {BLOCKED}8.26.250
  • {BLOCKED}8.114.111
  • {BLOCKED}8.78.193
  • {BLOCKED}8.12.166
  • {BLOCKED}8.152.35
  • {BLOCKED}8.196.113
  • {BLOCKED}8.86.136
  • {BLOCKED}8.160.195
  • {BLOCKED}8.188.209
  • {BLOCKED}8.141.124
  • {BLOCKED}8.254.146
  • {BLOCKED}8.113.72
  • {BLOCKED}8.122.15
  • {BLOCKED}8.216.222
  • {BLOCKED}8.86.97
  • {BLOCKED}8.136.227
  • {BLOCKED}8.161.234
  • {BLOCKED}8.34.65
  • {BLOCKED}8.81.238
  • {BLOCKED}8.180.49
  • {BLOCKED}8.136.38
  • {BLOCKED}8.254.17
  • {BLOCKED}8.198.209
  • {BLOCKED}8.55.56
  • {BLOCKED}8.234.165
  • {BLOCKED}8.123.173
  • {BLOCKED}8.202.45
  • {BLOCKED}8.77.146
  • {BLOCKED}8.169.71
  • {BLOCKED}8.105.174
  • {BLOCKED}8.117.99
  • {BLOCKED}8.131.93
  • {BLOCKED}8.180.211
  • {BLOCKED}8.99.229
  • {BLOCKED}8.212.75
  • {BLOCKED}8.161.16
  • {BLOCKED}8.226.109
  • {BLOCKED}8.24.192
  • {BLOCKED}8.195.246
  • {BLOCKED}8.193.136
  • {BLOCKED}8.230.73
  • {BLOCKED}8.108.138
  • {BLOCKED}8.79.121
  • {BLOCKED}8.224.0
  • {BLOCKED}8.111.154
  • {BLOCKED}8.56.90
  • {BLOCKED}8.93.155
  • {BLOCKED}8.252.28
  • {BLOCKED}8.231.235
  • {BLOCKED}8.137.72
  • {BLOCKED}8.254.138
  • {BLOCKED}8.165.229
  • {BLOCKED}8.60.182
  • {BLOCKED}8.229.253
  • {BLOCKED}8.235.199
  • {BLOCKED}8.5.118
  • {BLOCKED}8.6.228
  • {BLOCKED}8.88.210
  • {BLOCKED}8.10.64
  • {BLOCKED}8.200.56
  • {BLOCKED}8.134.109
  • {BLOCKED}8.30.172
  • {BLOCKED}8.169.192
  • {BLOCKED}8.36.238
  • {BLOCKED}8.197.92
  • {BLOCKED}8.13.56
  • {BLOCKED}8.160.94
  • {BLOCKED}8.90.67
  • {BLOCKED}8.31.111
  • {BLOCKED}8.7.27
  • {BLOCKED}8.9.122
  • {BLOCKED}8.11.217
  • {BLOCKED}8.185.15
  • {BLOCKED}8.219.50
  • {BLOCKED}8.162.188
  • {BLOCKED}8.98.42
  • {BLOCKED}8.43.20
  • {BLOCKED}8.133.196
  • {BLOCKED}8.102.232
  • {BLOCKED}8.26.73
  • {BLOCKED}8.78.149
  • {BLOCKED}8.194.247
  • {BLOCKED}8.177.40
  • {BLOCKED}8.126.187
  • {BLOCKED}8.87.124
  • {BLOCKED}8.233.54
  • {BLOCKED}8.70.174
  • {BLOCKED}8.240.190
  • {BLOCKED}8.220.41
  • {BLOCKED}8.49.156
  • {BLOCKED}8.182.73
  • {BLOCKED}8.211.197
  • {BLOCKED}8.180.234
  • {BLOCKED}8.252.99
  • {BLOCKED}8.129.253
  • {BLOCKED}8.127.158
  • {BLOCKED}8.222.116
  • {BLOCKED}8.38.238
  • {BLOCKED}8.119.183
  • {BLOCKED}8.236.247
  • {BLOCKED}8.226.177
  • {BLOCKED}8.173.101
  • {BLOCKED}8.24.225
  • {BLOCKED}8.36.143
  • {BLOCKED}8.62.193
  • {BLOCKED}8.235.25
  • {BLOCKED}8.143.10
  • {BLOCKED}8.88.115
  • {BLOCKED}8.131.92
  • {BLOCKED}8.145.233
  • {BLOCKED}8.31.101

It deletes itself after execution.

This report is generated via an automated analysis system.

  SOLUTION

Minimum Scan Engine:

9.8

Step 1

Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.

Step 2

Restart in Safe Mode

[ Learn More ]

Step 3

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal
    • dllcache
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
    • dllcache

Step 4

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    • netmon = "%System%\dllcache.exe"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
    • %System%\dllcache.exe = "%System%\dllcache.exe:*:Microsoft Enabled"

Step 5

Search and delete this file

[ Learn More ]
There may be some files that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.
  • %System%\drivers\sysdrv32.sys

Step 6

Restart in normal mode and scan your computer with your Trend Micro product for files detected as WORM_IRCBOT.WPY. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.


Did this description help? Tell us how we did.