Analyse von: Michael Cabel   

 Plattform:

Windows 2000, Windows XP, Windows Server 2003

 Risikobewertung (gesamt):
 Schadenspotenzial::
 Verteilungspotenzial::
 reportedInfection:
Niedrig
Mittel
Hoch
Kritisch

  • Malware-Typ:
    Worm

  • Zerstrerisch?:
    Nein

  • Verschlsselt?:
    Nein

  • In the wild::
    Ja

  Überblick

Deaktiviert Task-Manager, Registrierungseditor Ändert Registrierungseinträge, um System- und schreibgeschützte Dateien zu verbergen.

Schleust Kopien von sich selbst in alle Wechsellaufwerke ein. Legt eine AUTORUN.INF-Datei ab, um automatisch die eingeschleusten Kopien auszuführen, wenn ein Benutzer auf die Laufwerke eines betroffenen Systems zugreift.

Ändert die Startseite im Internet Explorer des Benutzers. Dadurch verweist die Malware auf eine Website, die möglicherweise Malware enthält, so dass sich das Infektionsrisiko des betroffenen Computers erhöht. Ändert die Suchseite im Internet Explorer des Benutzers auf eine bestimmte Seite. Dadurch verweist die Malware auf eine Website, die möglicherweise Malware enthält, so dass sich das Infektionsrisiko des betroffenen Computers erhöht.

Ändert die HOSTS-Datei des betroffenen Systems. Dadurch können Benutzer nicht mehr auf bestimmte Websites zugreifen.

  Technische Details

Dateigröße: 66,560 bytes
Dateityp: EXE
Speicherresiden: Ja
Erste Muster erhalten am: 03 November 2011

Installation

Schleust die folgenden Eigenkopien in das betroffene System ein:

  • %User Profile%\{Random Characters}\winlogon.exe

(Hinweis: %User Profile% ist der Ordner für Benutzerprofile des aktuellen Benutzers, normalerweise C:\Windows\Profile\{Benutzername} unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername} unter Windows NT und C:\Dokumente und Einstellungen\{Benutzername} unter Windows 2000, XP und Server 2003.)

Erstellt die folgenden Ordner:

  • %User Profile%\{Random Characters}

(Hinweis: %User Profile% ist der Ordner für Benutzerprofile des aktuellen Benutzers, normalerweise C:\Windows\Profile\{Benutzername} unter Windows 98 und ME, C:\WINNT\Profile\{Benutzername} unter Windows NT und C:\Dokumente und Einstellungen\{Benutzername} unter Windows 2000, XP und Server 2003.)

Autostart-Technik

Fügt folgende Registrierungseinträge hinzu, um bei jedem Systemstart automatisch ausgeführt zu werden.

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
{Random Characters} = "%User Profile%\{Random Characters}\winlogon.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
{Random Characters} = "%User Profile%\{Random Characters}\winlogon.exe"

Andere Systemänderungen

Fügt die folgenden Registrierungseinträge als Teil der Installationsroutine hinzu:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\AppCompatFlags\
Layers
%User Profile%\{Random Characters}\winlogon.exe = "RUNASADMIN"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Image File Execution Options\
{Application Name}
Debugger = ""%User Profile%\{Random Characters}\winlogon.exe""

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows Script Host\Settings
Enabled = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\WindowsFirewall\DomainProfile
EnableFirewall = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\WindowsFirewall\StandardProfile
EnableFirewall = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\
Microsoft\Windows\WindowsUpdate\
AU
NoAutoRebootWithLoggedOnUsers = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile
DisableNotifications = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile
DoNotAllowExceptions = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\SharedAccess\Parameters\
FirewallPolicy\DomainProfile
EnableFirewall = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DisableNotifications = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile
DoNotAllowExceptions = 0

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Download
RunInvalidSignatures = 1

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main
Default_Search_URL = "http://25hpuq24qnn61t8.directorio-w.com"

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Main
Default_Page_URL = "http://82c04i133wv5dz1.directorio-w.com"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
Associations
LowRiskFileTypes = ".exe"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
Explorer
NoRun = 1

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
Explorer
NoFile = 1

HKEY_CURRENT_USER\Software\Microsoft\
Windows NT\CurrentVersion\AppCompatFlags\
Layers
%User Profile%\{Random Characters}\winlogon.exe = "RUNASADMIN"

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Internet Explorer\Control Panel
HomePage = 1

HKEY_CURRENT_USER\Software\Policies\
Microsoft\Windows\System
DisableCMD = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UacDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiSpyWareDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AntiVirusOverride = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
AutoUpdateDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
cval = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
FirewallDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
InternetSettingsDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Monitoring
DisableMonitoring = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Monitoring\SymantecAntiVirus
DisableMonitoring = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Monitoring\SymantecFirewall
DisableMonitoring = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiVirusOverride = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirewallOverride = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
FirstRunDisabled = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UpdatesDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
UacDisableNotify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center\Svc
AntiSpywareOverride = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
Explorer
NoFolderOptions = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
ConsentPromptBehaviorAdmin = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
PromptOnSecureDesktop = 1

Ändert die folgenden Registrierungsschlüssel/-einträge während der eigenen Installation:

HKEY_CLASSES_ROOT\ftp\shell\
open\command
(Default) = ""%Program Files%\Internet Explorer\iexplore.exe""

(Note: The default value data of the said registry entry is ""%Program Files%\Internet Explorer\iexplore.exe" %1".)

HKEY_CLASSES_ROOT\http\shell\
open\command
(Default) = ""%Program Files%\Internet Explorer\iexplore.exe""

(Note: The default value data of the said registry entry is ""%Program Files%\Internet Explorer\iexplore.exe" -nohome".)

HKEY_CLASSES_ROOT\https\shell\
open\command
(Default) = ""%Program Files%\Internet Explorer\iexplore.exe""

(Note: The default value data of the said registry entry is ""%Program Files%\Internet Explorer\iexplore.exe" -nohome".)

HKEY_CURRENT_USER\Control Panel\Sound
Beep = "no"

(Note: The default value data of the said registry entry is "yes".)

HKEY_CURRENT_USER\Software\Microsoft\
Internet Explorer\Download
CheckExeSignatures = "no"

(Note: The default value data of the said registry entry is "yes".)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\wscsvc
Start = 4

(Note: The default value data of the said registry entry is 2.)

Erstellt den oder die folgenden Registrierungseinträge, um Task-Manager, Registrierungs-Tools und Ordneroptionen zu deaktivieren:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
System
DisableRegistryTools = 1

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
System
DisableTaskMgr = 1

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Policies\
Explorer
NoFolderOptions = 1

Ändert die folgenden Registrierungseinträge, um System- und schreibgeschützte Dateien zu verbergen:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
Hidden = 2

(Note: The default value data of the said registry entry is 1.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
HideFileExt = 3

(Note: The default value data of the said registry entry is 0.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Advanced
ShowSuperHidden = 0

(Note: The default value data of the said registry entry is 1.)

Erstellt den oder die folgenden Registrierungseinträge, um die Windows Firewall zu umgehen:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
%User Profile%\{Random Characters}\winlogon.exe = "%User Profile%\{Random Characters}\winlogon.exe:*:Enabled:@xpsp2res.dll,-7895004"

Verbreitung

Schleust Kopien von sich selbst in alle Wechsellaufwerke ein.

Legt eine AUTORUN.INF-Datei ab, um automatisch die eingeschleusten Kopien auszuführen, wenn ein Benutzer auf die Laufwerke eines betroffenen Systems zugreift.

Die besagte .INF-Datei enthält die folgenden Zeichenfolgen:

;{Garbage Characters}
[autorun]
;{Garbage Characters}
open=Sl0zPz1458syhXV8z54flEE05yzL4uFQe3F\S-1-3-01-4631104401-7414418267-104546834-1055\uIaU3k3kzmh4Otjy73o.exe
;{Garbage Characters}
icon=%SystemRoot%\system32\SHELL32.dll,4
;{Garbage Characters}
action=Abrir la carpeta para ver los archivos
;{Garbage Characters}
shell\open=Open
;{Garbage Characters}
shell\open\command=Sl0zPz1458syhXV8z54flEE05yzL4uFQe3F\S-1-3-01-4631104401-7414418267-104546834-1055\uIaU3k3kzmh4Otjy73o.exe
;{Garbage Characters}
shell\open\default=1
;{Garbage Characters}
shell\open\default=1
;{Garbage Characters}

Änderung der Startseite von Webbrowser und Suchseite

Ändert die Startseite im Internet Explorer des Benutzers auf folgende Webseiten:

  • http://u1n15y543n9k6hp.directorio-w.com
  • http://x4ndyy9498p1206.directorio-w.com

Ändert die Suchmaschine im Internet Explorer des Benutzers auf folgende Websites:

  • http://5538d19dc60vfxv.directorio-w.com

Änderung der HOSTS-Datei

Ändert die HOSTS-Datei des betroffenen Systems, damit Benutzer nicht mehr auf die folgenden Websites zugreifen können:

  • {BLOCKED}8.247.79 www.pandasecurity.com
  • {BLOCKED}8.247.79 go.mcafee.com
  • {BLOCKED}.240.135 malwarecity.netmalwarecity.org
  • {BLOCKED}.240.135 download4.emsisoft.com
  • {BLOCKED}.240.135 www.antiy.net
  • {BLOCKED}.240.135 45pounds.com
  • {BLOCKED}3.155.0 www.esafe.com
  • {BLOCKED}4.161.131 smbstore.trendmicro.com
  • {BLOCKED}4.161.131 sophos.com
  • {BLOCKED}6.250.109 www.globalhauri.com
  • {BLOCKED}6.250.109 seasonsecurity.com
  • {BLOCKED}3.83.127 www.npin.co.kr
  • {BLOCKED}0.76.184 archive.bitdefender.com
  • {BLOCKED}0.76.184 www.emsisoft.net
  • {BLOCKED}0.76.184 lists.clamav.net
  • {BLOCKED}0.76.184 fortinet.com
  • {BLOCKED}0.76.184 natsko.com
  • {BLOCKED}.165.41 www.iseclab.org
  • {BLOCKED}8.179.236 chickensroamfree.com
  • {BLOCKED}8.179.236 kaspersky.com
  • {BLOCKED}9.253.180 antivirus.sunbeltsoftware.com
  • {BLOCKED}9.253.180 go.trendmicro.com
  • {BLOCKED}.100.232 download5.emsisoft.com
  • {BLOCKED}.100.232 linux.bitdefender.com
  • {BLOCKED}.100.232 ribbonwarehouse.com
  • {BLOCKED}.100.232 www.ahnlab.com
  • {BLOCKED}8.175.107 www.engyro.com
  • {BLOCKED}.161.168 www.secure-elements.com
  • {BLOCKED}.161.168 new-partners.drweb.com
  • {BLOCKED}.1.21 kioskea.net
  • {BLOCKED}.82.96 www.hxproduction.com
  • {BLOCKED}.82.96 www.bitdefende.de
  • {BLOCKED}.82.96 www.barder.com
  • {BLOCKED}.82.96 www.ikarus.at
  • {BLOCKED}.157.228 www.exchangeyourcareer.com
  • {BLOCKED}0.253.148 network.drweb.com
  • {BLOCKED}0.253.148 www.fortinet.ch
  • {BLOCKED}1.4.92 www.trendmicro.com
  • {BLOCKED}3.93.69 anubis.iseclab.org
  • {BLOCKED}7.37 canada.karuna-shechen.org
  • {BLOCKED}7.37 www.bitdefender.com.au
  • {BLOCKED}7.37 www.professorbeyer.com
  • {BLOCKED}7.37 www.norman.com
  • {BLOCKED}7.37 buscafacil.com
  • {BLOCKED}91.30 tecniservicioslys.com
  • {BLOCKED}92.237 mop.pandasecurity.com
  • {BLOCKED}92.237 nai.com
  • {BLOCKED}106.150 virusfreezone.info
  • {BLOCKED}187.157 cacomvip.ca.com
  • {BLOCKED}194.33 jp.trendmicro.com
  • {BLOCKED}194.33 www.freerav.com
  • {BLOCKED}116.217 together.pctools.com
  • {BLOCKED}116.217 www.mcafee.at
  • {BLOCKED}109.85 www.antivirus-tools.com
  • {BLOCKED}109.85 www.gokidding.com
  • {BLOCKED}109.85 www.f-secure.com
  • {BLOCKED}109.85 www.willsee.com
  • {BLOCKED}102.22 fortinet.co.at
  • {BLOCKED}102.22 drweb.com
  • {BLOCKED}8.198 viruschief.com
  • {BLOCKED}23.206 latin.bitdefender.com
  • {BLOCKED}23.206 www.emsisoft.com
  • {BLOCKED}23.206 www.mamutu.de
  • {BLOCKED}23.206 www.smf.org
  • {BLOCKED}8.149 cou85.com
  • {BLOCKED}94.2 global.jiangmin.com
  • {BLOCKED}94.2 secure.av-desk.com
  • {BLOCKED}01.201 marian.symantec.com
  • {BLOCKED}115.254 www.contentverification.com
  • {BLOCKED}115.254 scan.anti-trojan.net
  • {BLOCKED}115.254 buy.bitdefender.de
  • {BLOCKED}115.254 rising-global.com
  • {BLOCKED}115.254 www.2xlgames.com
  • {BLOCKED}34.179 www.tecniservicioslys.com
  • {BLOCKED}190.129 www.nprotect.com
  • {BLOCKED}.16.43 configurarequipos.com
  • {BLOCKED}30.50 usa.kaspersky.com
  • {BLOCKED}30.50 drwebinside.com
  • {BLOCKED}.37.182 housecall60.trendmicro.com
  • {BLOCKED}.37.182 www.retento.com
  • {BLOCKED}.207.46 www.bitdefender.fr
  • {BLOCKED}.207.46 www.authentium.com
  • {BLOCKED}.207.46 www.sophos.com
  • {BLOCKED}.207.46 authentium.com
  • {BLOCKED}.207.46 welkam.co.jp
  • {BLOCKED}.214.177 reg.eset.es
  • {BLOCKED}.200.170 updates.drweb.com
  • {BLOCKED}.200.170 fortilog.com
  • {BLOCKED}.40.91 www.jotti.org
  • {BLOCKED}.122.166 www.cambridge-steiner-school.co.uk
  • {BLOCKED}.122.166 www.sunbeltsoftware.com
  • {BLOCKED}.122.166 asap.authentium.com
  • {BLOCKED}.122.166 www.bitdefender.hk
  • {BLOCKED}.122.166 avast.com
  • {BLOCKED}.197.42 www.eugrantsadvisor.com
  • {BLOCKED}36.219 products.drweb.com
  • {BLOCKED}36.219 www.fortiid.com
  • {BLOCKED}111.94 sun.symantec.com
  • {BLOCKED}214.214 www.internationalservicecheck.com
  • {BLOCKED}214.214 www.stadiumpage.com
  • {BLOCKED}214.214 nl.bitdefender.com
  • {BLOCKED}214.214 www.avg.com
  • {BLOCKED}132.139 www.scan4you.net
  • {BLOCKED}33.90 www.microsoft.com
  • {BLOCKED}33.90 www.prevx1.com
  • {BLOCKED}.115.4 www.softfaq.com
  • {BLOCKED}128.11 support.drweb.com
  • {BLOCKED}128.11 www.virus.fi
  • {BLOCKED}135.142 search.symantec.com
  • {BLOCKED}.43.131 www.ca.com
  • {BLOCKED}.124.138 networkassociates.com
  • {BLOCKED}.124.138 biz.nprotect.com
  • {BLOCKED}50.195 www.rising-global.com
  • {BLOCKED}50.195 www.bitdefender.es
  • {BLOCKED}50.195 bobbondart.com
  • {BLOCKED}50.195 ruben.bzin.net
  • {BLOCKED}50.195 antiy.net
  • {BLOCKED}.207.52 esecurity.livecall.co.kr
  • {BLOCKED}.207.52 ibusca.me
  • {BLOCKED}.227.190 go.symantec.com
  • {BLOCKED}.32.59 www.flairweddings.co.uk
  • {BLOCKED}.32.59 www.comodoantispam.com
  • {BLOCKED}.32.59 bitdefender.org
  • {BLOCKED}.32.59 kaspersky.com
  • {BLOCKED}.32.59 mamutu.com
  • {BLOCKED}.210.55 firewall.sunbeltsoftware.com
  • {BLOCKED}.210.55 shop.trendmicro.com
  • {BLOCKED}.135.179 support.mcafee.com
  • {BLOCKED}.135.179 www.aks.com
  • {BLOCKED}.56.107 neunet.orgnews.bitdefender.com
  • {BLOCKED}.56.107 www.hackshields.com
  • {BLOCKED}.56.107 roysephotos.com
  • {BLOCKED}.56.107 www.avast.com
  • {BLOCKED}.231.32 static.yoreparo.com
  • {BLOCKED}131.239 eugrantsadvisor.de
  • {BLOCKED}.213.220 www.mygeekside.com
  • {BLOCKED}227.159 company.drweb.com
  • {BLOCKED}227.159 www.fortinet.com
  • {BLOCKED}46.103 www.sunbeltsoftware.com
  • {BLOCKED}46.103 store.trendmicro.com
  • {BLOCKED}.209.24 training.drweb.com
  • {BLOCKED}.209.24 arwww.fortinet.cz
  • {BLOCKED}148.155 us.bitdefender.com
  • {BLOCKED}148.155 www.aladdin.com
  • {BLOCKED}148.155 www.owen.org
  • {BLOCKED}148.155 pvtc.org
  • {BLOCKED}223.31 15660808.co.kr
  • {BLOCKED}.49.201 www.threatexpert.com
  • {BLOCKED}.69.83 education.symantec.com
  • {BLOCKED}.131.20 www.anti-trojan-software.net
  • {BLOCKED}.131.20 ixostore.ixomodels.com
  • {BLOCKED}.131.20 backup.comodo.com
  • {BLOCKED}.131.20 bitdefender.com
  • {BLOCKED}.131.20 jiangmin.com
  • {BLOCKED}.52.203 vos.symantec.com
  • {BLOCKED}.233.72 internetsecurity.comodo.com
  • {BLOCKED}.233.72 frisk-software.com
  • {BLOCKED}.223.68 onlinecheck.emsisoft.com
  • {BLOCKED}.223.68 bitdefenderusa.com
  • {BLOCKED}.223.68 pandasecurity.com
  • {BLOCKED}.223.68 www.trustix.com
  • {BLOCKED}.223.68 bestofewan.com
  • {BLOCKED}.73.249 virusbuster.hu
  • {BLOCKED}.229.199 exchangeyourcareer.net
  • {BLOCKED}9.120 www.fortinet.com
  • {BLOCKED}9.120 store.drweb.com
  • {BLOCKED}56.113 scanner.novirusthanks.org
  • {BLOCKED}144.252 eval.symantec.com
  • {BLOCKED}144.252 www.vba.com.by
  • {BLOCKED}.52.240 forum.kaspersky.com
  • {BLOCKED}.52.240 daniloff.net
  • {BLOCKED}247.48 www.nottinghampoetryseries.com
  • {BLOCKED}247.48 avx.rob-have.net
  • {BLOCKED}247.48 www.emsisoft.it
  • {BLOCKED}247.48 bugs.clamav.net
  • {BLOCKED}247.48 gdata.es
  • {BLOCKED}65.247 eos.eset.es
  • {BLOCKED}.148.161 spycheck.es
  • {BLOCKED}.196 www.pichincha.com
  • {BLOCKED}.196 pichincha.com
  • {BLOCKED}.229.236 www.deborahshelton.net
  • {BLOCKED}.229.236 www.bitdefender.de
  • {BLOCKED}.229.236 elblogdemanu.com
  • {BLOCKED}.229.236 www.prevx.com
  • {BLOCKED}.229.236 antivir.es
  • {BLOCKED}168.44 www4.symantec.com
  • {BLOCKED}.150.164 esupport.trendmicro.com
  • {BLOCKED}.150.164 superboy2010.com.au
  • {BLOCKED}.144.33 i-vault.comodo.com
  • {BLOCKED}.144.33 www.f-prot.com
  • {BLOCKED}.65.216 www.bitdefender-es.com
  • {BLOCKED}.65.216 www.wellgousa.com
  • {BLOCKED}.65.216 www.jiangmin.com
  • {BLOCKED}.65.216 www.antivir.es
  • {BLOCKED}.239.209 www.virusbuster.hu
  • {BLOCKED}.239.209 www.inicioid.com
  • {BLOCKED}.72.160 spywarefiles.prevx.com
  • {BLOCKED}.72.160 privacy.microsoft.com
  • {BLOCKED}.242.212 enterprisesecur.symantec.com
  • {BLOCKED}.242.212 bg.virusblokada.com
  • {BLOCKED}.168.13 fsecure.nlwebyard.com
  • {BLOCKED}.168.13 www.nsclean.com
  • {BLOCKED}154.74 www.virus.org
  • {BLOCKED}150.201 www.kaspersky.com
  • {BLOCKED}150.201 www.freedrweb.ru
  • {BLOCKED}.89.9 futurenow.bitdefender.com
  • {BLOCKED}.89.9 onlinecheck.emsisoft.net
  • {BLOCKED}.89.9 online-backup.comodo.com
  • {BLOCKED}.89.9 trackingtheworld.com
  • {BLOCKED}.89.9 symantec.com
  • {BLOCKED}64.140 cybercrime.pandasecurity.com
  • {BLOCKED}64.140 jp.mcafee.com
  • {BLOCKED}246.54 intranet.cidiroax.ipn.mx
  • {BLOCKED}78.193 servicenews.symantec.com
  • {BLOCKED}72.129 www.testmypcsecurity.com
  • {BLOCKED}72.129 www.reviewsofbooks.com
  • {BLOCKED}72.129 it.bitdefender.com
  • {BLOCKED}72.129 hacksoft.com.pe
  • {BLOCKED}72.129 blitzblank.com
  • {BLOCKED}.249.125 support.rising-global.com
  • {BLOCKED}.249.125 itw.trendmicro.com
  • {BLOCKED}.242.181 me.kaspersky.com
  • {BLOCKED}.242.181 ealaddin.net
  • {BLOCKED}.82.102 www.spycheck.co.uk
  • {BLOCKED}.163.177 www.malwarecity.com
  • {BLOCKED}.163.177 www.mtr-design.com
  • {BLOCKED}.163.177 www.trendmicro.com
  • {BLOCKED}.163.177 quickheal.com
  • {BLOCKED}.163.177 www.avast.com
  • {BLOCKED}.170.53 fsc.norman.com
  • {BLOCKED}.85.105 ru.trendmicro.com
  • {BLOCKED}.85.105 kr.sophos.com
  • {BLOCKED}.10.229 new-solutions.drweb.com
  • {BLOCKED}.10.229 jiangmin.com
  • {BLOCKED}52.222 virus.org
  • {BLOCKED}249.94 customers.drweb.com
  • {BLOCKED}249.94 www.fortinet.co.il
  • {BLOCKED}.255.225 onlinecheck.emsisoft.org
  • {BLOCKED}.255.225 sunbeltsoftware.com
  • {BLOCKED}.255.225 fr.bitdefender.com
  • {BLOCKED}.255.225 basetendencies.com
  • {BLOCKED}.255.225 www.comodo.tv
  • {BLOCKED}.6.101 schemas.microsoft.com
  • {BLOCKED}88.15 iseclab.org
  • {BLOCKED}177.153 www.rising-global.com
  • {BLOCKED}177.153 de.trendmicro.com
  • {BLOCKED}170.90 www.latin-mass-society.org
  • {BLOCKED}170.90 store.bitdefender.com
  • {BLOCKED}170.90 pineleafboys.com
  • {BLOCKED}170.90 www.comodo.com
  • {BLOCKED}.85.142 vms.drweb.com
  • {BLOCKED}.85.142 fortinet.com
  • {BLOCKED}91.18 hostedmailsecur.symantec.com
  • {BLOCKED}.180.63 www.viruschief.com
  • {BLOCKED}.6.70 www.1stavenuelimousines.co.uk
  • {BLOCKED}.6.70 www.bitdefenderme.com
  • {BLOCKED}.6.70 www.hacksoft.com.pe
  • {BLOCKED}.6.70 bitdefender.com
  • {BLOCKED}.6.70 avast.com
  • {BLOCKED}.13.13 nprotect.seoul.go.kr
  • {BLOCKED}.13.13 mx.mcafee.com
  • {BLOCKED}.95.183 virobot.co.kr
  • {BLOCKED}.95.183 inicioid.com
  • {BLOCKED}.183.66 tms.symantec.com
  • {BLOCKED}.176.190 www.ealaddin.com
  • {BLOCKED}.98.118 sarahmcconnellphotography.net
  • {BLOCKED}.98.118 malwarescan.emsisoft.com
  • {BLOCKED}.98.118 lurker.clamav.net
  • {BLOCKED}.98.118 www.grisoft.com
  • {BLOCKED}.98.118 f-prot.com
  • {BLOCKED}.105.250 www.eugrantsadvisor.ie
  • {BLOCKED}187.231 www.configurarequipos.com
  • {BLOCKED}187.231 company.hauri.net
  • {BLOCKED}.19.114 ushousecall02.trendmicro.com
  • {BLOCKED}.19.114 antispam.sunbeltsoftware.com
  • {BLOCKED}12.238 square.bitdefender.com
  • {BLOCKED}12.238 www.indielisboa.com
  • {BLOCKED}12.238 www.beautybar.com
  • {BLOCKED}12.238 www.clamav.net
  • {BLOCKED}190.234 antispyware.sunbeltsoftware.com
  • {BLOCKED}190.234 subwiz.trendmicro.com
  • {BLOCKED}183.35 www.fortinet.sg
  • {BLOCKED}183.35 free.drweb.com
  • {BLOCKED}23.211 in.answers.yahoo.com
  • {BLOCKED}.179.162 liveprotect.net
  • {BLOCKED}.179.162 au.mcafee.com
  • {BLOCKED}104.31 www.fortinet.com
  • {BLOCKED}104.31 defalcos.com
  • {BLOCKED}104.31 halmapr.com
  • {BLOCKED}104.31 www.avx.ro
  • {BLOCKED}.5.76 es.answers.yahoo.com
  • {BLOCKED}.19.83 www.ealaddin.com
  • {BLOCKED}.19.83 home.mcafee.com
  • {BLOCKED}26.26 www.hacksoft.pe
  • {BLOCKED}.196.79 renewals.bitdefender.com
  • {BLOCKED}.196.79 www.elvis-express.com
  • {BLOCKED}.196.79 www.bitdefender.com
  • {BLOCKED}.196.79 www.irangoals.com
  • {BLOCKED}.203.210 pandasecurity.com
  • {BLOCKED}.203.210 obscgi.mcafee.com
  • {BLOCKED}.111.199 de.bitdefender.com
  • {BLOCKED}.111.199 www.trojaner.info
  • {BLOCKED}.111.199 idauthority.com
  • {BLOCKED}.111.199 kimzimmer.net
  • {BLOCKED}.111.199 sophos.com
  • {BLOCKED}.29.124 www.novirusthanks.org
  • {BLOCKED}.118.7 oem.sunbeltsoftware.com
  • {BLOCKED}.118.7 trial.trendmicro.com
  • {BLOCKED}00.127 et.symantec.com
  • {BLOCKED}00.127 www.hauri.co.kr
  • {BLOCKED}.39.2 us.mcafee.com
  • {BLOCKED}.39.2 nprotect.net
  • {BLOCKED}25.251 www.fortinet.nl
  • {BLOCKED}25.251 cureit.ru
  • {BLOCKED}121.172 www.forospyware.com
  • {BLOCKED}22.123 vicentevirtual.com
  • {BLOCKED}203.247 bitdefenderchina.com
  • {BLOCKED}203.247 easy-vpn.comodo.com
  • {BLOCKED}203.247 www.fimasys.com
  • {BLOCKED}203.247 www.emsisoft.es
  • {BLOCKED}203.247 mcafee.com
  • {BLOCKED}7.104.36 www.computing.net
  • {BLOCKED}.124.175 hacksoft.pe
  • {BLOCKED}.117.44 new-forum.drweb.com
  • {BLOCKED}.117.44 www.ikarus.at
  • {BLOCKED}2.39.227 www.manchester-offices.co.uk
  • {BLOCKED}2.39.227 hishomeforchildren.com
  • {BLOCKED}2.39.227 www.bitdefender.co.uk
  • {BLOCKED}2.39.227 www.microsoft.com
  • {BLOCKED}2.39.227 buscalo.in
  • {BLOCKED}3.114.171 eugrantsadvisor.cz
  • {BLOCKED}5.21.92 www.phoenixtrikeworks.com
  • {BLOCKED}5.21.92 www.bitdefender.com
  • {BLOCKED}5.21.92 saverssite.com
  • {BLOCKED}5.21.92 www.buscalo.in
  • {BLOCKED}5.21.92 www.eset.es
  • {BLOCKED}1.196.85 novirusthanks.org
  • {BLOCKED}0.216.223 emea.trendmicro.com
  • {BLOCKED}124.212 pda.drweb.com
  • {BLOCKED}124.212 fortihero.com
  • {BLOCKED}7.137.151 shop.pandasecurity.com
  • {BLOCKED}7.137.151 service.mcafee.com
  • {BLOCKED}4.199.88 investor.symantec.com
  • {BLOCKED}4.199.88 www.hauri.net
  • {BLOCKED}.220.65 jotti.org
  • {BLOCKED}.45.140 ccslaughterspdx.com
  • {BLOCKED}.45.140 kb.bitdefender.de
  • {BLOCKED}.45.140 www.mamutu.com
  • {BLOCKED}.45.140 hauri.net
  • {BLOCKED}3.120.15 soporte.pandasecurity.com
  • {BLOCKED}3.120.15 br.mcafee.com
  • {BLOCKED}4.202.253 computing.net
  • {BLOCKED}.35.136 dell.symantec.com
  • {BLOCKED}.216.192 www.comodopartners.com
  • {BLOCKED}.216.192 www.frisk.is
  • {BLOCKED}.137.188 www.brightoctober.com
  • {BLOCKED}.137.188 www.iniciorapido.info
  • {BLOCKED}.137.188 www.bitdefender.cl
  • {BLOCKED}.137.188 www.dr-bull.com
  • {BLOCKED}.137.188 www.mcafee.com
  • {BLOCKED}0.212.64 webadmin.norman.no
  • {BLOCKED}3.120.52 www.emsisoft.com
  • {BLOCKED}3.120.52 www.clamav.net
  • {BLOCKED}3.120.52 www.avg.com
  • {BLOCKED}3.120.52 aladdin.com
  • {BLOCKED}3.120.52 etrr.co.uk
  • {BLOCKED}9.38.233 softfaq.com
  • {BLOCKED}.59.116 beta.anti-virus.by
  • {BLOCKED}.59.116 symantec.com
  • {BLOCKED}8.222.105 support.kaspersky.co
  • {BLOCKED}8.222.105 drweb-inside.com
  • {BLOCKED}5.236.112 cloudprotection.pandasecurity.com
  • {BLOCKED}5.236.112 cn.mcafee.com
  • {BLOCKED}1.41.48 training.trendmicro.com
  • {BLOCKED}1.41.48 go.sunbeltsoftware.com
  • {BLOCKED}3.62.26 www.spycheck.es
  • {BLOCKED}0.218.232 www.xmlsoap.org
  • {BLOCKED}7.212.101 kb.bitdefender.com
  • {BLOCKED}7.212.101 www.renningers.com
  • {BLOCKED}7.212.101 www.emsisoft.jp
  • {BLOCKED}7.212.101 anti-virus.by
  • {BLOCKED}1.45.146 forospyware.com
  • {BLOCKED}6.133.28 es.trendmicro.com
  • {BLOCKED}6.133.28 www.sophos.com
  • {BLOCKED}.58.153 www.apsecure.com
  • {BLOCKED}.58.153 my.drweb.com
  • {BLOCKED}5.54.24 register.norman.com
  • {BLOCKED}.236.81 www.authentium.com
  • {BLOCKED}.236.81 isotopecomics.com
  • {BLOCKED}.236.81 global.ahnlab.com
  • {BLOCKED}.236.81 malwarepedia.com
  • {BLOCKED}0.218.13 www.peterhearnwaste.co.uk
  • {BLOCKED}0.218.13 www.virusbuster.hu
  • {BLOCKED}0.218.13 www.quickheal.com
  • {BLOCKED}0.218.13 drweb.com
  • {BLOCKED}0.218.13 avg.com
  • {BLOCKED}6.137.194 scan4you.net
  • {BLOCKED}.157.77 www.symantec.com
  • {BLOCKED}6.65.65 www.safenet-inc.com
  • {BLOCKED}2.146.5 siren24.nprotect.com
  • {BLOCKED}9.140.197 visualtracking.symantec.com
  • {BLOCKED}0.229.242 removetrojanvirus.org
  • {BLOCKED}0.229.242 hauri.co.kr
  • {BLOCKED}8.61.193 grv.microsoft.com
  • {BLOCKED}4.54.249 b-have.orgbitdefender-ar.com
  • {BLOCKED}4.54.249 system-cleaner.comodo.com
  • {BLOCKED}4.54.249 www.sheffieldmind.co.uk
  • {BLOCKED}4.54.249 www.emsisoft.de
  • {BLOCKED}4.54.249 ikarus.at
  • {BLOCKED}3.231.245 channelpartner.trendmicro.com
  • {BLOCKED}3.231.245 shop.sunbeltsoftware.com
  • {BLOCKED}0.157.46 news.drweb.com
  • {BLOCKED}0.157.46 fortiwifi.com
  • {BLOCKED}2.153.173 www.eugrantsadvisor.de
  • {BLOCKED}78.41 www.malwarecity.fr
  • {BLOCKED}78.41 www.anti-virus.by
  • {BLOCKED}78.41 dev.depeuter.org
  • {BLOCKED}78.41 files.avast.com
  • {BLOCKED}78.41 clamav.net
  • {BLOCKED}7.61.162 blog.titanium-jewelry.com
  • {BLOCKED}7.61.162 www.bitdefender.be
  • {BLOCKED}7.61.162 iniciorapido.info
  • {BLOCKED}7.61.162 www.kaspersky.com
  • {BLOCKED}7.61.162 www.buraka.tv
  • {BLOCKED}.67.37 smallbiz.symantec.com
  • {BLOCKED}3.235.87 es.kioskea.net
  • {BLOCKED}3.231.214 www.hasp.se
  • {BLOCKED}6.238.158 us.trendmicro.com
  • {BLOCKED}.245.221 encarta.msn.com
  • {BLOCKED}8.71.135 www.seasonsecurity.com
  • {BLOCKED}8.71.135 shop.hauri.co.kr
  • {BLOCKED}5.159.86 free.pandasecurity.com
  • {BLOCKED}5.159.86 mcafeeb2b.com
  • {BLOCKED}2.153.210 www.mountainlakeslodge.com
  • {BLOCKED}2.153.210 store.de.bitdefender.com
  • {BLOCKED}2.153.210 www.drweb.com
  • {BLOCKED}2.153.210 www.arpia.be
  • {BLOCKED}1.74.138 feeds.trendmicro.com
  • {BLOCKED}1.74.138 sunbeltsoftware.com
  • {BLOCKED}8.255.6 www.ccssforum.org
  • {BLOCKED}8.255.6 cai.com
  • {BLOCKED}9.251.134 networkassociates.nai.com
  • {BLOCKED}9.251.134 chollian.nprotect.co.kr
  • {BLOCKED}6.244.2 www.livepcsupport.com
  • {BLOCKED}6.244.2 bitdefendertaiwan.com
  • {BLOCKED}6.244.2 vivo-austin.com
  • {BLOCKED}6.244.2 www.emsisoft.fr
  • {BLOCKED}6.244.2 norman.com
  • {BLOCKED}.91.54 auwww.ealaddin.nl
  • {BLOCKED}5.166.186 service1.symantec.com
  • {BLOCKED}5.166.186 www.anti-virus.by
  • {BLOCKED}.77.47 www.kioskea.net
  • {BLOCKED}.74.175 www.jiangmin.com.cn
  • {BLOCKED}.74.175 new-www.drweb.com
  • {BLOCKED}4.87.182 descargas.eset.es
  • {BLOCKED}.80.50 housecall65.trendmicro.com
  • {BLOCKED}5.169.96 www.virusfreezone.info
  • {BLOCKED}2.2.46 blogs.protegerse.com
  • {BLOCKED}9.251.103 www.residentphotography.com
  • {BLOCKED}9.251.103 www.bitdefender.com.tw
  • {BLOCKED}9.251.103 www.pandasecurity.com
  • {BLOCKED}9.251.103 www.imddomains.co.uk
  • {BLOCKED}9.251.103 emsisoft.com
  • {BLOCKED}8.172.99 www.risingav.com.au
  • {BLOCKED}8.172.99 it.trendmicro.com
  • {BLOCKED}5.166.223 www.fortinetuk.com
  • {BLOCKED}5.166.223 info.drweb.com
  • {BLOCKED}7.94.94 info.prevx.com
  • {BLOCKED}7.94.94 it.mcafee.com
  • {BLOCKED}4.87.151 bitdefendermalaysia.com
  • {BLOCKED}4.87.151 ww.emsisoft.com
  • {BLOCKED}4.87.151 ztl.comodo.com
  • {BLOCKED}4.87.151 qqjkw.net
  • {BLOCKED}4.87.151 eset.es
  • {BLOCKED}.176.8 scanner.virus.org
  • {BLOCKED}2.8.147 housecall.trendmicro.com
  • {BLOCKED}9.189.203 f-secure.frf-secure.hk
  • {BLOCKED}9.189.203 timestamp.wosign.com
  • {BLOCKED}.172.67 f-secure.nlfsecure.com
  • {BLOCKED}.172.67 rover800.gaima.co.uk
  • {BLOCKED}.179.11 securitycheck.symantec.com
  • {BLOCKED}1.186.75 demos.eset.es
  • {BLOCKED}2.12.244 virustotal.com
  • {BLOCKED}6.93.63 www.secondchanceboxer.com
  • {BLOCKED}6.93.63 www.bitdefender.com.sg
  • {BLOCKED}6.93.63 developmentdrums.org
  • {BLOCKED}6.93.63 www.buscafacil.com
  • {BLOCKED}6.93.63 www.nprotect.com
  • {BLOCKED}.168.195 www.nprotect.co.kr
  • {BLOCKED}5.15.59 sfdoccentral.symantec.com
  • {BLOCKED}2.8.116 latam.kaspersky.com
  • {BLOCKED}2.8.116 alladdin.ru
  • {BLOCKED}4.192.243 mcafeeretail.com
  • {BLOCKED}4.192.243 www.prevx.com
  • {BLOCKED}1.185.112 www.authentium.com.au
  • {BLOCKED}1.185.112 www.bitdefender.us
  • {BLOCKED}1.185.112 naturesimages.net
  • {BLOCKED}1.185.112 www.symantec.com
  • {BLOCKED}1.185.112 avg.com
  • {BLOCKED}.18.157 spycheck.co.uk
  • {BLOCKED}0.107.39 la.trendmicro.com
  • {BLOCKED}0.107.39 cn.sophos.com
  • {BLOCKED}7.32.164 secure-email.comodo.com
  • {BLOCKED}7.32.164 f-secure.com
  • {BLOCKED}2.14.28 www.fortinet-apac.com
  • {BLOCKED}2.14.28 promotions.drweb.com
  • {BLOCKED}.89.160 uk.trendmicro.com
  • {BLOCKED}.89.160 tw.sophos.com
  • {BLOCKED}8.28.35 specs.xmlsoap.org
  • {BLOCKED}8.28.35 howsafeismypc.com
  • {BLOCKED}.192.24 www.tomorrowsedge.net
  • {BLOCKED}.192.24 sales.bitdefender.com
  • {BLOCKED}.192.24 www.quickheal.com
  • {BLOCKED}.192.24 ixomodels.com
  • {BLOCKED}.110.205 www.avhide.com
  • {BLOCKED}.11.156 global.nprotect.com
  • {BLOCKED}.106.76 brazil.kaspersky.com
  • {BLOCKED}.106.76 aladdin.com
  • {BLOCKED}.113.208 sitedirector.symantec.com
  • {BLOCKED}8.28.4 malwarescan.emsisoft.es
  • {BLOCKED}8.28.4 www.briarhurst.com
  • {BLOCKED}8.28.4 kb.bitdefender.us
  • {BLOCKED}8.28.4 virusbuster.hu
  • {BLOCKED}.103.204 www.nprotect.com.br
  • {BLOCKED}.103.204 tr.mcafee.com
  • {BLOCKED}8.117.117 company.hauri.co.kr
  • {BLOCKED}8.117.117 busco.in
  • {BLOCKED}7.205.0 tw.trendmicro.com
  • {BLOCKED}7.205.0 esp.sophos.com
  • {BLOCKED}4.198.57 www.aladdin.com
  • {BLOCKED}4.198.57 msr.mcafee.com
  • {BLOCKED}8.105.79 scotiaenlinea.scotiabank.com.pe
  • {BLOCKED}8.105.79 www.bbvabancocontinental.com
  • {BLOCKED}8.105.79 www.peb1.bbvanetlatam.com
  • {BLOCKED}8.105.79 bcpzonasegura.viabcp.com
  • {BLOCKED}8.105.79 bbvabancocontinental.com
  • {BLOCKED}8.105.79 zonasegura1.bn.com.pe
  • {BLOCKED}8.105.79 www.scotiabank.com.pe
  • {BLOCKED}8.105.79 peb1.bbvanetlatam.com
  • {BLOCKED}8.105.79 scotiabank.com.pe
  • {BLOCKED}8.105.79 www.viabcp.com
  • {BLOCKED}8.105.79 www.bn.com.pe
  • {BLOCKED}8.105.79 viabcp.com
  • {BLOCKED}8.105.79 bn.com.pe
  • {BLOCKED}0.113.245 new-support.drweb.com
  • {BLOCKED}0.113.245 www.fortimail.com
  • {BLOCKED}1.188.120 threatinfo.trendmicro.com
  • {BLOCKED}1.188.120 security.symantec.com
  • {BLOCKED}6.127.184 sandbox.norman.com
  • {BLOCKED}.34.173 www.anti-trojan.net
  • {BLOCKED}.34.173 www.avoncourt.com
  • {BLOCKED}.34.173 cgi.clamav.net
  • {BLOCKED}.34.173 grisoft.com
  • {BLOCKED}.34.173 ca.com
  • {BLOCKED}.209.98 avhide.com
  • {BLOCKED}109.116 www.eset.es
  • {BLOCKED}.205.225 license.drweb.com
  • {BLOCKED}.205.225 www.fortinet.net
  • {BLOCKED}.24.169 liveupdate.symantec.com
  • {BLOCKED}.201.96 www.eugrantsadvisor.se
  • {BLOCKED}.126.221 baristamagazine.com
  • {BLOCKED}.126.221 wedoantivirus.com
  • {BLOCKED}.126.221 www.f-prot.com
  • {BLOCKED}.126.221 www.zarya.info
  • {BLOCKED}5.27.10 mall.hauri.co.kr
  • {BLOCKED}5.27.10 www.ibusca.me
  • {BLOCKED}4.48.149 www.hacksoft.com.pe
  • {BLOCKED}1.41.17 www.fortifed.com
  • {BLOCKED}1.41.17 buy.drweb.com
  • {BLOCKED}7.211.138 timestamp.comodoca.com
  • {BLOCKED}7.211.138 www.frisk-software.com
  • {BLOCKED}8.30.81 fr.trendmicro.com
  • {BLOCKED}8.30.81 www.symantec.com
  • {BLOCKED}3.225.145 support.pandasecurity.com
  • {BLOCKED}3.225.145 uk.mcafee.com
  • {BLOCKED}.51.58 scanner2.novirusthanks.or
  • {BLOCKED}133.133 speedtest.comodo.com
  • {BLOCKED}133.133 buy.bitdefender.com
  • {BLOCKED}133.133 www.emsisoft.org
  • {BLOCKED}133.133 cowsmo.com
  • {BLOCKED}133.133 prevx.com
  • {BLOCKED}7.208.9 pandalabs.pandasecurity.com
  • {BLOCKED}7.208.9 de.mcafee.com
  • {BLOCKED}1.47.186 www3.safenet-inc.com
  • {BLOCKED}.122.61 definitions.symantec.com
  • {BLOCKED}.122.61 www.bg.virusblokada.com
  • {BLOCKED}.143.107 www.removetrojanvirus.org
  • {BLOCKED}.143.107 pg.hauri.net
  • {BLOCKED}.43.57 reg-int.nod32-es.com
  • {BLOCKED}.225.114 www.prdouglas.co.uk
  • {BLOCKED}.225.114 virusscanonline.net
  • {BLOCKED}.225.114 bhsbees.com
  • {BLOCKED}.225.114 www.ca.com
  • {BLOCKED}4.126.227 antivirus.hispavista.com
  • {BLOCKED}.139.234 new-company.drweb.com
  • {BLOCKED}.139.234 www.gdata.es
  • {BLOCKED}.146.109 live.sunbeltsoftware.com
  • {BLOCKED}.146.109 wtc.trendmicro.com
  • {BLOCKED}4.54.98 new-beta.drweb.com
  • {BLOCKED}4.54.98 ikarus.at
  • {BLOCKED}5.129.230 br.trendmicro.com
  • {BLOCKED}5.129.230 feeds.sophos.com
  • {BLOCKED}.135.105 research.pandasecurity.com
  • {BLOCKED}.135.105 fr.mcafee.com
  • {BLOCKED}1.43.26 www.handwritingforkids.com
  • {BLOCKED}1.43.26 disk-encryption.comodo.com
  • {BLOCKED}1.43.26 onlinecheck.emsisoft.de
  • {BLOCKED}1.43.26 buy.bitdefender-es.com
  • {BLOCKED}1.43.26 pctools.com
  • {BLOCKED}7.218.19 mygeekside.com
  • {BLOCKED}4.50.226 schemas.xmlsoap.org
  • {BLOCKED}4.50.226 shield.prevx.com
  • {BLOCKED}9.146.146 new-estore.drweb.com
  • {BLOCKED}9.146.146 www.fsecure.com
  • {BLOCKED}0.221.22 blog.trendmicro.com
  • {BLOCKED}.242.255 www.virscan.org
  • {BLOCKED}9.142.206 pedidos.protegerse.com
  • {BLOCKED}.67.74 www.collectedcurios.com
  • {BLOCKED}.67.74 jobs.bitdefender.com
  • {BLOCKED}.67.74 www.emsisoft.at
  • {BLOCKED}.67.74 trendmicro.com
  • {BLOCKED}.224.120 virusscan.jotti.org
  • {BLOCKED}.56.70 sea.symantec.com
  • {BLOCKED}238.127 drweb.net
  • {BLOCKED}238.127 gdata.es
  • {BLOCKED}1.220.247 www.mcafee.com
  • {BLOCKED}1.220.247 secureme.com
  • {BLOCKED}.234.254 nprobeta.norman.com
  • {BLOCKED}.159.122 bitdefenderuruguay.com
  • {BLOCKED}.159.122 www.freeality.com
  • {BLOCKED}.159.122 www.whichssl.com
  • {BLOCKED}.159.122 www.emsisoft.nl
  • {BLOCKED}.159.122 nprotect.com
  • {BLOCKED}0.142.243 www.emeraldclassic.co.uk
  • {BLOCKED}0.142.243 download535.avast.com
  • {BLOCKED}0.142.243 quickheal.com
  • {BLOCKED}0.142.243 www.hauri.net
  • {BLOCKED}0.142.243 comodo.com
  • {BLOCKED}1.148.118 spywaredlls.prevx.com
  • {BLOCKED}1.148.118 tempuri.org
  • {BLOCKED}4.60.168 www.midescargas.com
  • {BLOCKED}6.244.39 www.contentverification.com
  • {BLOCKED}6.244.39 www.f-secure.com
  • {BLOCKED}7.63.171 podcasts.sophos.com
  • {BLOCKED}7.63.171 apac.trendmicro.com
  • {BLOCKED}84.216 virscan.org
  • {BLOCKED}6.240.167 www.sysinternals.com
  • {BLOCKED}3.234.35 www.bitdefender.com.vn
  • {BLOCKED}3.234.35 woottonfootball.com
  • {BLOCKED}3.234.35 www.pctools.com
  • {BLOCKED}3.234.35 cutlines.org
  • {BLOCKED}3.234.35 ahnlab.com
  • {BLOCKED}.67.80 threatexpert.com
  • {BLOCKED}1.80.87 solutions.drweb.com
  • {BLOCKED}1.80.87 fortiprotect.com
  • {BLOCKED}155.219 securityrespons.symantec.com
  • {BLOCKED}.76.215 free.prevx.com
  • {BLOCKED}.76.215 tw.mcafee.com
  • {BLOCKED}.1.15 download1.emsisoft.com
  • {BLOCKED}.1.15 www.garryowen.com
  • {BLOCKED}.1.15 malwarecity.com
  • {BLOCKED}.1.15 www.antivir.es
  • {BLOCKED}.63.208 ealaddin.orgeshop.aladdin.com
  • {BLOCKED}.63.208 images.kaspersky.com
  • {BLOCKED}3.158.128 midescargas.com
  • {BLOCKED}9.174.144 antivirus-tools.com
  • {BLOCKED}9.174.144 forum.emsisoft.com
  • {BLOCKED}9.174.144 www.ixomodels.com
  • {BLOCKED}9.174.144 wwws.clamav.net
  • {BLOCKED}9.174.144 f-secure.com
  • {BLOCKED}0.181.20 timeforyourbusi.pandasecurity.com
  • {BLOCKED}0.181.20 www.entercept.com
  • {BLOCKED}9.7.190 www.virustotal.com
  • {BLOCKED}5.21.197 www.netegrity.com
  • {BLOCKED}6.96.72 edm.symantec.com
  • {BLOCKED}5.17.68 research.microsoft.com
  • {BLOCKED}.4.61 search.ca.com
  • {BLOCKED}2.10.125 bitdefenderguatemala.com
  • {BLOCKED}2.10.125 malwarescan.emsisoft.de
  • {BLOCKED}2.10.125 www.trustlogo.com
  • {BLOCKED}2.10.125 microsoft.com
  • {BLOCKED}2.10.125 cohartuk.com
  • {BLOCKED}.99.238 haurijapan.com
  • {BLOCKED}.99.238 www.busco.in
  • {BLOCKED}.181.57 www.celticmerchant.com
  • {BLOCKED}.181.57 www.bit-defender.de
  • {BLOCKED}.181.57 karuna-shechen.org
  • {BLOCKED}.181.57 www.gdata.es
  • {BLOCKED}.0.188 www.norman.com
  • {BLOCKED}8.102.241 securityrespons.symantec.com
  • {BLOCKED}8.102.241 newsletters.trendmicro.com
  • {BLOCKED}.95.109 www.av-desk.com
  • {BLOCKED}.95.109 jiangmin.com.cn

  Lösungen

Mindestversion der Scan Engine: 9.200
Erste VSAPI Pattern-Datei: 8.544.04
Erste VSAPI Pattern veröffentlicht am: 03 November 2011

Step 1

Für Windows ME und XP Benutzer: Stellen Sie vor einer Suche sicher, dass die Systemwiederherstellung deaktiviert ist, damit der gesamte Computer durchsucht werden kann.

Step 2

Dateien erkennen und deaktivieren, die als WORM_AUTORUN.GYF entdeckt wurden

[ learnMore ]
  1. Für Benutzer von Windows 98 und MEDer Windows Task-Manager zeigt möglicherweise nicht alle aktiven Prozesse an. Verwenden Sie in diesem Fall einen Prozess-Viewer eines Drittanbieters, vorzugsweise Process Explorer, um die Malware-/Grayware-/Spyware-Datei zu beenden. Dieses Tool können Sie hier.
  2. herunterladen.
  3. Wenn die entdeckte Datei im Windows Task-Manager oder Process Explorer angezeigt wird, aber nicht gelöscht werden kann, starten Sie Ihren Computer im abgesicherten Modus neu. Klicken Sie auf diesen Link, um alle erforderlichen Schritte anzuzeigen.
  4. Wenn die entdeckte Datei nicht im Windows Task-Manager oder im Process Explorer angezeigt wird, fahren Sie mit den nächsten Schritten fort.

Step 3

Diesen Registrierungswert löschen

[ learnMore ]

Wichtig: Eine nicht ordnungsgemäße Bearbeitung der Windows Registrierung kann zu einer dauerhaften Fehlfunktion des Systems führen. Führen Sie diesen Schritt nur durch, wenn Sie mit der Vorgehensweise vertraut sind oder wenn Sie Ihren Systemadministrator um Unterstützung bitten können. Lesen Sie ansonsten zuerst diesen Microsoft Artikel, bevor Sie die Registrierung Ihres Computers ändern.

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • {Random Characters} = "%User Profile%\{Random Characters}\winlogon.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    • {Random Characters} = "%User Profile%\{Random Characters}\winlogon.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
    • %User Profile%\{Random Characters}\winlogon.exe = "RUNASADMIN"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\{Application Name}
    • Debugger = ""%User Profile%\{Random Characters}\winlogon.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Script Host\Settings
    • Enabled = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
    • EnableFirewall = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
    • EnableFirewall = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    • NoAutoRebootWithLoggedOnUsers = 1
  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile
    • DisableNotifications = 1
  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile
    • DoNotAllowExceptions = 0
  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile
    • EnableFirewall = 0
  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
    • DisableNotifications = 1
  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
    • DoNotAllowExceptions = 0
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
    • RunInvalidSignatures = 1
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
    • Default_Search_URL = "http://25hpuq24qnn61t8.directorio-w.com"
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
    • Default_Page_URL = "http://82c04i133wv5dz1.directorio-w.com"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations
    • LowRiskFileTypes = ".exe"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
    • NoRun = 1
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
    • NoFile = 1
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
    • %User Profile%\{Random Characters}\winlogon.exe = "RUNASADMIN"
  • In HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel
    • HomePage = 1
  • In HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
    • DisableCMD = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • UacDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • AntiSpyWareDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • AntiVirusDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • AntiVirusOverride = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • AutoUpdateDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • cval = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • FirewallDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
    • InternetSettingsDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring
    • DisableMonitoring = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus
    • DisableMonitoring = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall
    • DisableMonitoring = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • AntiVirusDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • AntiVirusOverride = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • FirewallDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • FirewallOverride = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • FirstRunDisabled = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • UpdatesDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • UacDisableNotify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
    • AntiSpywareOverride = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
    • NoFolderOptions = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
    • ConsentPromptBehaviorAdmin = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
    • EnableLUA = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
    • PromptOnSecureDesktop = 1
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
    • DisableRegistryTools = 1
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
    • DisableTaskMgr = 1
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
    • NoFolderOptions = 1
  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
    • %User Profile%\{Random Characters}\winlogon.exe = "%User Profile%\{Random Characters}\winlogon.exe:*:Enabled:@xpsp2res.dll,-7895004"

Step 4

Diesen geänderten Registrierungswert wiederherstellen

[ learnMore ]

Wichtig: Eine nicht ordnungsgemäße Bearbeitung der Windows Registrierung kann zu einer dauerhaften Fehlfunktion des Systems führen. Führen Sie diesen Schritt nur durch, wenn Sie mit der Vorgehensweise vertraut sind oder wenn Sie Ihren Systemadministrator um Unterstützung bitten können. Lesen Sie ansonsten zuerst diesen Microsoft Artikel, bevor Sie die Registrierung Ihres Computers ändern.

  • In HKEY_CLASSES_ROOT\ftp\shell\open\command
    • From: (Default) = ""%Program Files%\Internet Explorer\iexplore.exe""
      To: (Default) = ""%Program Files%\Internet Explorer\iexplore.exe" %1"
  • In HKEY_CLASSES_ROOT\http\shell\open\command
    • From: (Default) = ""%Program Files%\Internet Explorer\iexplore.exe""
      To: (Default) = ""%Program Files%\Internet Explorer\iexplore.exe" -nohome"
  • In HKEY_CLASSES_ROOT\https\shell\open\command
    • From: (Default) = ""%Program Files%\Internet Explorer\iexplore.exe""
      To: (Default) = ""%Program Files%\Internet Explorer\iexplore.exe" -nohome"
  • In HKEY_CURRENT_USER\Control Panel\Sound
    • From: Beep = "no"
      To: Beep = "yes"
  • In HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download
    • From: CheckExeSignatures = "no"
      To: CheckExeSignatures = "yes"
  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc
    • From: Start = 4
      To: Start = 2
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    • From: Hidden = 2
      To: Hidden = 1
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    • From: HideFileExt = 3
      To: HideFileExt = 0
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    • From: ShowSuperHidden = 0
      To: ShowSuperHidden = 1

Step 5

AUTORUN.INF Dateien suchen und löschen, die von WORM_AUTORUN.GYF erstellt wurden und diese Zeichenfolgen enthalten

[ learnMore ]
;{Garbage Characters}
[autorun]
;{Garbage Characters}
open=Sl0zPz1458syhXV8z54flEE05yzL4uFQe3F\S-1-3-01-4631104401-7414418267-104546834-1055\uIaU3k3kzmh4Otjy73o.exe
;{Garbage Characters}
icon=%SystemRoot%\system32\SHELL32.dll,4
;{Garbage Characters}
action=Abrir la carpeta para ver los archivos
;{Garbage Characters}
shell\open=Open
;{Garbage Characters}
shell\open\command=Sl0zPz1458syhXV8z54flEE05yzL4uFQe3F\S-1-3-01-4631104401-7414418267-104546834-1055\uIaU3k3kzmh4Otjy73o.exe
;{Garbage Characters}
shell\open\default=1
;{Garbage Characters}
shell\open\default=1
;{Garbage Characters}

Step 6

Diese Ordner suchen und löschen

[ learnMore ]
Aktivieren Sie unbedingt das Kontrollkästchen Versteckte Elemente durchsuchen unter Weitere erweiterte Optionen, um alle verborgenen Ordner in den Suchergebnissen zu berücksichtigen. %User Profile%\{Random Characters}

Step 7

Diese Zeichenfolgen entfernen, die die Malware/Grayware/Spyware zur HOSTS-Datei hinzugefügt hat

[ learnMore ]
    {BLOCKED}7.37 canada.karuna-shechen.org
    {BLOCKED}7.37 www.bitdefender.com.au
    {BLOCKED}7.37 www.professorbeyer.com
    {BLOCKED}7.37 www.norman.com
    {BLOCKED}7.37 buscafacil.com
    {BLOCKED}91.30 tecniservicioslys.com
    {BLOCKED}92.237 mop.pandasecurity.com
    {BLOCKED}92.237 nai.com
    {BLOCKED}106.150 virusfreezone.info
    {BLOCKED}187.157 cacomvip.ca.com
    {BLOCKED}194.33 jp.trendmicro.com
    {BLOCKED}194.33 www.freerav.com
    {BLOCKED}116.217 together.pctools.com
    {BLOCKED}116.217 www.mcafee.at
    {BLOCKED}109.85 www.antivirus-tools.com
    {BLOCKED}109.85 www.gokidding.com
    {BLOCKED}109.85 www.f-secure.com
    {BLOCKED}109.85 www.willsee.com
    {BLOCKED}102.22 fortinet.co.at
    {BLOCKED}102.22 drweb.com
    {BLOCKED}8.198 viruschief.com
    {BLOCKED}23.206 latin.bitdefender.com
    {BLOCKED}23.206 www.emsisoft.com
    {BLOCKED}23.206 www.mamutu.de
    {BLOCKED}23.206 www.smf.org
    {BLOCKED}8.149 cou85.com
    {BLOCKED}94.2 global.jiangmin.com
    {BLOCKED}94.2 secure.av-desk.com
    {BLOCKED}01.201 marian.symantec.com
    {BLOCKED}115.254 www.contentverification.com
    {BLOCKED}115.254 scan.anti-trojan.net
    {BLOCKED}115.254 buy.bitdefender.de
    {BLOCKED}115.254 rising-global.com
    {BLOCKED}115.254 www.2xlgames.com
    {BLOCKED}34.179 www.tecniservicioslys.com
    {BLOCKED}190.129 www.nprotect.com
    {BLOCKED}.16.43 configurarequipos.com
    {BLOCKED}30.50 usa.kaspersky.com
    {BLOCKED}30.50 drwebinside.com
    {BLOCKED}.37.182 housecall60.trendmicro.com
    {BLOCKED}.37.182 www.retento.com
    {BLOCKED}.207.46 www.bitdefender.fr
    {BLOCKED}.207.46 www.authentium.com
    {BLOCKED}.207.46 www.sophos.com
    {BLOCKED}.207.46 authentium.com
    {BLOCKED}.207.46 welkam.co.jp
    {BLOCKED}.214.177 reg.eset.es
    {BLOCKED}.200.170 updates.drweb.com
    {BLOCKED}.200.170 fortilog.com
    {BLOCKED}.40.91 www.jotti.org
    {BLOCKED}.122.166 www.cambridge-steiner-school.co.uk
    {BLOCKED}.122.166 www.sunbeltsoftware.com
    {BLOCKED}.122.166 asap.authentium.com
    {BLOCKED}.122.166 www.bitdefender.hk
    {BLOCKED}.122.166 avast.com
    {BLOCKED}.197.42 www.eugrantsadvisor.com
    {BLOCKED}36.219 products.drweb.com
    {BLOCKED}36.219 www.fortiid.com
    {BLOCKED}111.94 sun.symantec.com
    {BLOCKED}214.214 www.internationalservicecheck.com
    {BLOCKED}214.214 www.stadiumpage.com
    {BLOCKED}214.214 nl.bitdefender.com
    {BLOCKED}214.214 www.avg.com
    {BLOCKED}132.139 www.scan4you.net
    {BLOCKED}33.90 www.microsoft.com
    {BLOCKED}33.90 www.prevx1.com
    {BLOCKED}.115.4 www.softfaq.com
    {BLOCKED}128.11 support.drweb.com
    {BLOCKED}128.11 www.virus.fi
    {BLOCKED}135.142 search.symantec.com
    {BLOCKED}.43.131 www.ca.com
    {BLOCKED}.124.138 networkassociates.com
    {BLOCKED}.124.138 biz.nprotect.com
    {BLOCKED}50.195 www.rising-global.com
    {BLOCKED}50.195 www.bitdefender.es
    {BLOCKED}50.195 bobbondart.com
    {BLOCKED}50.195 ruben.bzin.net
    {BLOCKED}50.195 antiy.net
    {BLOCKED}.207.52 esecurity.livecall.co.kr
    {BLOCKED}.207.52 ibusca.me
    {BLOCKED}.227.190 go.symantec.com
    {BLOCKED}.32.59 www.flairweddings.co.uk
    {BLOCKED}.32.59 www.comodoantispam.com
    {BLOCKED}.32.59 bitdefender.org
    {BLOCKED}.32.59 kaspersky.com
    {BLOCKED}.32.59 mamutu.com
    {BLOCKED}.210.55 firewall.sunbeltsoftware.com
    {BLOCKED}.210.55 shop.trendmicro.com
    {BLOCKED}.135.179 support.mcafee.com
    {BLOCKED}.135.179 www.aks.com
    {BLOCKED}.56.107 neunet.orgnews.bitdefender.com
    {BLOCKED}.56.107 www.hackshields.com
    {BLOCKED}.56.107 roysephotos.com
    {BLOCKED}.56.107 www.avast.com
    {BLOCKED}.231.32 static.yoreparo.com
    {BLOCKED}131.239 eugrantsadvisor.de
    {BLOCKED}.213.220 www.mygeekside.com
    {BLOCKED}227.159 company.drweb.com
    {BLOCKED}227.159 www.fortinet.com
    {BLOCKED}46.103 www.sunbeltsoftware.com
    {BLOCKED}46.103 store.trendmicro.com
    {BLOCKED}.209.24 training.drweb.com
    {BLOCKED}.209.24 arwww.fortinet.cz
    {BLOCKED}148.155 us.bitdefender.com
    {BLOCKED}148.155 www.aladdin.com
    {BLOCKED}148.155 www.owen.org
    {BLOCKED}148.155 pvtc.org
    {BLOCKED}223.31 15660808.co.kr
    {BLOCKED}.49.201 www.threatexpert.com
    {BLOCKED}.69.83 education.symantec.com
    {BLOCKED}.131.20 www.anti-trojan-software.net
    {BLOCKED}.131.20 ixostore.ixomodels.com
    {BLOCKED}.131.20 backup.comodo.com
    {BLOCKED}.131.20 bitdefender.com
    {BLOCKED}.131.20 jiangmin.com
    {BLOCKED}.52.203 vos.symantec.com
    {BLOCKED}.233.72 internetsecurity.comodo.com
    {BLOCKED}.233.72 frisk-software.com
    {BLOCKED}.223.68 onlinecheck.emsisoft.com
    {BLOCKED}.223.68 bitdefenderusa.com
    {BLOCKED}.223.68 pandasecurity.com
    {BLOCKED}.223.68 www.trustix.com
    {BLOCKED}.223.68 bestofewan.com
    {BLOCKED}.73.249 virusbuster.hu
    {BLOCKED}.229.199 exchangeyourcareer.net
    {BLOCKED}9.120 www.fortinet.com
    {BLOCKED}9.120 store.drweb.com
    {BLOCKED}56.113 scanner.novirusthanks.org
    {BLOCKED}144.252 eval.symantec.com
    {BLOCKED}144.252 www.vba.com.by
    {BLOCKED}.52.240 forum.kaspersky.com
    {BLOCKED}.52.240 daniloff.net
    {BLOCKED}247.48 www.nottinghampoetryseries.com
    {BLOCKED}247.48 avx.rob-have.net
    {BLOCKED}247.48 www.emsisoft.it
    {BLOCKED}247.48 bugs.clamav.net
    {BLOCKED}247.48 gdata.es
    {BLOCKED}65.247 eos.eset.es
    {BLOCKED}.148.161 spycheck.es
    {BLOCKED}.196 www.pichincha.com
    {BLOCKED}.196 pichincha.com
    {BLOCKED}.229.236 www.deborahshelton.net
    {BLOCKED}.229.236 www.bitdefender.de
    {BLOCKED}.229.236 elblogdemanu.com
    {BLOCKED}.229.236 www.prevx.com
    {BLOCKED}.229.236 antivir.es
    {BLOCKED}168.44 www4.symantec.com
    {BLOCKED}.150.164 esupport.trendmicro.com
    {BLOCKED}.150.164 superboy2010.com.au
    {BLOCKED}.144.33 i-vault.comodo.com
    {BLOCKED}.144.33 www.f-prot.com
    {BLOCKED}.65.216 www.bitdefender-es.com
    {BLOCKED}.65.216 www.wellgousa.com
    {BLOCKED}.65.216 www.jiangmin.com
    {BLOCKED}.65.216 www.antivir.es
    {BLOCKED}.239.209 www.virusbuster.hu
    {BLOCKED}.239.209 www.inicioid.com
    {BLOCKED}.72.160 spywarefiles.prevx.com
    {BLOCKED}.72.160 privacy.microsoft.com
    {BLOCKED}.242.212 enterprisesecur.symantec.com
    {BLOCKED}.242.212 bg.virusblokada.com
    {BLOCKED}.168.13 fsecure.nlwebyard.com
    {BLOCKED}.168.13 www.nsclean.com
    {BLOCKED}154.74 www.virus.org
    {BLOCKED}150.201 www.kaspersky.com
    {BLOCKED}150.201 www.freedrweb.ru
    {BLOCKED}.89.9 futurenow.bitdefender.com
    {BLOCKED}.89.9 onlinecheck.emsisoft.net
    {BLOCKED}.89.9 online-backup.comodo.com
    {BLOCKED}.89.9 trackingtheworld.com
    {BLOCKED}.89.9 symantec.com
    {BLOCKED}64.140 cybercrime.pandasecurity.com
    {BLOCKED}64.140 jp.mcafee.com
    {BLOCKED}246.54 intranet.cidiroax.ipn.mx
    {BLOCKED}78.193 servicenews.symantec.com
    {BLOCKED}72.129 www.testmypcsecurity.com
    {BLOCKED}72.129 www.reviewsofbooks.com
    {BLOCKED}72.129 it.bitdefender.com
    {BLOCKED}72.129 hacksoft.com.pe
    {BLOCKED}72.129 blitzblank.com
    {BLOCKED}.249.125 support.rising-global.com
    {BLOCKED}.249.125 itw.trendmicro.com
    {BLOCKED}.242.181 me.kaspersky.com
    {BLOCKED}.242.181 ealaddin.net
    {BLOCKED}.82.102 www.spycheck.co.uk
    {BLOCKED}.163.177 www.malwarecity.com
    {BLOCKED}.163.177 www.mtr-design.com
    {BLOCKED}.163.177 www.trendmicro.com
    {BLOCKED}.163.177 quickheal.com
    {BLOCKED}.163.177 www.avast.com
    {BLOCKED}.170.53 fsc.norman.com
    {BLOCKED}.85.105 ru.trendmicro.com
    {BLOCKED}.85.105 kr.sophos.com
    {BLOCKED}.10.229 new-solutions.drweb.com
    {BLOCKED}.10.229 jiangmin.com
    {BLOCKED}52.222 virus.org
    {BLOCKED}249.94 customers.drweb.com
    {BLOCKED}249.94 www.fortinet.co.il
    {BLOCKED}.255.225 onlinecheck.emsisoft.org
    {BLOCKED}.255.225 sunbeltsoftware.com
    {BLOCKED}.255.225 fr.bitdefender.com
    {BLOCKED}.255.225 basetendencies.com
    {BLOCKED}.255.225 www.comodo.tv
    {BLOCKED}.6.101 schemas.microsoft.com
    {BLOCKED}88.15 iseclab.org
    {BLOCKED}177.153 www.rising-global.com
    {BLOCKED}177.153 de.trendmicro.com
    {BLOCKED}170.90 www.latin-mass-society.org
    {BLOCKED}170.90 store.bitdefender.com
    {BLOCKED}170.90 pineleafboys.com
    {BLOCKED}170.90 www.comodo.com
    {BLOCKED}.85.142 vms.drweb.com
    {BLOCKED}.85.142 fortinet.com
    {BLOCKED}91.18 hostedmailsecur.symantec.com
    {BLOCKED}.180.63 www.viruschief.com
    {BLOCKED}.6.70 www.1stavenuelimousines.co.uk
    {BLOCKED}.6.70 www.bitdefenderme.com
    {BLOCKED}.6.70 www.hacksoft.com.pe
    {BLOCKED}.6.70 bitdefender.com
    {BLOCKED}.6.70 avast.com
    {BLOCKED}.13.13 nprotect.seoul.go.kr
    {BLOCKED}.13.13 mx.mcafee.com
    {BLOCKED}.95.183 virobot.co.kr
    {BLOCKED}.95.183 inicioid.com
    {BLOCKED}.183.66 tms.symantec.com
    {BLOCKED}.176.190 www.ealaddin.com
    {BLOCKED}.98.118 sarahmcconnellphotography.net
    {BLOCKED}.98.118 malwarescan.emsisoft.com
    {BLOCKED}.98.118 lurker.clamav.net
    {BLOCKED}.98.118 www.grisoft.com
    {BLOCKED}.98.118 f-prot.com
    {BLOCKED}.105.250 www.eugrantsadvisor.ie
    {BLOCKED}187.231 www.configurarequipos.com
    {BLOCKED}187.231 company.hauri.net
    {BLOCKED}.19.114 ushousecall02.trendmicro.com
    {BLOCKED}.19.114 antispam.sunbeltsoftware.com
    {BLOCKED}12.238 square.bitdefender.com
    {BLOCKED}12.238 www.indielisboa.com
    {BLOCKED}12.238 www.beautybar.com
    {BLOCKED}12.238 www.clamav.net
    {BLOCKED}190.234 antispyware.sunbeltsoftware.com
    {BLOCKED}190.234 subwiz.trendmicro.com
    {BLOCKED}183.35 www.fortinet.sg
    {BLOCKED}183.35 free.drweb.com
    {BLOCKED}23.211 in.answers.yahoo.com
    {BLOCKED}.179.162 liveprotect.net
    {BLOCKED}.179.162 au.mcafee.com
    {BLOCKED}104.31 www.fortinet.com
    {BLOCKED}104.31 defalcos.com
    {BLOCKED}104.31 halmapr.com
    {BLOCKED}104.31 www.avx.ro
    {BLOCKED}.5.76 es.answers.yahoo.com
    {BLOCKED}.19.83 www.ealaddin.com
    {BLOCKED}.19.83 home.mcafee.com
    {BLOCKED}26.26 www.hacksoft.pe
    {BLOCKED}.196.79 renewals.bitdefender.com
    {BLOCKED}.196.79 www.elvis-express.com
    {BLOCKED}.196.79 www.bitdefender.com
    {BLOCKED}.196.79 www.irangoals.com
    {BLOCKED}.203.210 pandasecurity.com
    {BLOCKED}.203.210 obscgi.mcafee.com
    {BLOCKED}.111.199 de.bitdefender.com
    {BLOCKED}.111.199 www.trojaner.info
    {BLOCKED}.111.199 idauthority.com
    {BLOCKED}.111.199 kimzimmer.net
    {BLOCKED}.111.199 sophos.com
    {BLOCKED}.29.124 www.novirusthanks.org
    {BLOCKED}.118.7 oem.sunbeltsoftware.com
    {BLOCKED}.118.7 trial.trendmicro.com
    {BLOCKED}00.127 et.symantec.com
    {BLOCKED}00.127 www.hauri.co.kr
    {BLOCKED}.39.2 us.mcafee.com
    {BLOCKED}.39.2 nprotect.net
    {BLOCKED}25.251 www.fortinet.nl
    {BLOCKED}25.251 cureit.ru
    {BLOCKED}121.172 www.forospyware.com
    {BLOCKED}22.123 vicentevirtual.com
    {BLOCKED}203.247 bitdefenderchina.com
    {BLOCKED}203.247 easy-vpn.comodo.com
    {BLOCKED}203.247 www.fimasys.com
    {BLOCKED}203.247 www.emsisoft.es
    {BLOCKED}203.247 mcafee.com
    {BLOCKED}7.104.36 www.computing.net
    {BLOCKED}.124.175 hacksoft.pe
    {BLOCKED}.117.44 new-forum.drweb.com
    {BLOCKED}.117.44 www.ikarus.at
    {BLOCKED}2.39.227 www.manchester-offices.co.uk
    {BLOCKED}2.39.227 hishomeforchildren.com
    {BLOCKED}2.39.227 www.bitdefender.co.uk
    {BLOCKED}2.39.227 www.microsoft.com
    {BLOCKED}2.39.227 buscalo.in
    {BLOCKED}3.114.171 eugrantsadvisor.cz
    {BLOCKED}5.21.92 www.phoenixtrikeworks.com
    {BLOCKED}5.21.92 www.bitdefender.com
    {BLOCKED}5.21.92 saverssite.com
    {BLOCKED}5.21.92 www.buscalo.in
    {BLOCKED}5.21.92 www.eset.es
    {BLOCKED}1.196.85 novirusthanks.org
    {BLOCKED}0.216.223 emea.trendmicro.com
    {BLOCKED}124.212 pda.drweb.com
    {BLOCKED}124.212 fortihero.com
    {BLOCKED}7.137.151 shop.pandasecurity.com
    {BLOCKED}7.137.151 service.mcafee.com
    {BLOCKED}4.199.88 investor.symantec.com
    {BLOCKED}4.199.88 www.hauri.net
    {BLOCKED}.220.65 jotti.org
    {BLOCKED}.45.140 ccslaughterspdx.com
    {BLOCKED}.45.140 kb.bitdefender.de
    {BLOCKED}.45.140 www.mamutu.com
    {BLOCKED}.45.140 hauri.net
    {BLOCKED}3.120.15 soporte.pandasecurity.com
    {BLOCKED}3.120.15 br.mcafee.com
    {BLOCKED}4.202.253 computing.net
    {BLOCKED}.35.136 dell.symantec.com
    {BLOCKED}.216.192 www.comodopartners.com
    {BLOCKED}.216.192 www.frisk.is
    {BLOCKED}.137.188 www.brightoctober.com
    {BLOCKED}.137.188 www.iniciorapido.info
    {BLOCKED}.137.188 www.bitdefender.cl
    {BLOCKED}.137.188 www.dr-bull.com
    {BLOCKED}.137.188 www.mcafee.com
    {BLOCKED}0.212.64 webadmin.norman.no
    {BLOCKED}3.120.52 www.emsisoft.com
    {BLOCKED}3.120.52 www.clamav.net
    {BLOCKED}3.120.52 www.avg.com
    {BLOCKED}3.120.52 aladdin.com
    {BLOCKED}3.120.52 etrr.co.uk
    {BLOCKED}9.38.233 softfaq.com
    {BLOCKED}.59.116 beta.anti-virus.by
    {BLOCKED}.59.116 symantec.com
    {BLOCKED}8.222.105 support.kaspersky.co
    {BLOCKED}8.222.105 drweb-inside.com
    {BLOCKED}5.236.112 cloudprotection.pandasecurity.com
    {BLOCKED}5.236.112 cn.mcafee.com
    {BLOCKED}1.41.48 training.trendmicro.com
    {BLOCKED}1.41.48 go.sunbeltsoftware.com
    {BLOCKED}3.62.26 www.spycheck.es
    {BLOCKED}0.218.232 www.xmlsoap.org
    {BLOCKED}7.212.101 kb.bitdefender.com
    {BLOCKED}7.212.101 www.renningers.com
    {BLOCKED}7.212.101 www.emsisoft.jp
    {BLOCKED}7.212.101 anti-virus.by
    {BLOCKED}1.45.146 forospyware.com
    {BLOCKED}6.133.28 es.trendmicro.com
    {BLOCKED}6.133.28 www.sophos.com
    {BLOCKED}.58.153 www.apsecure.com
    {BLOCKED}.58.153 my.drweb.com
    {BLOCKED}5.54.24 register.norman.com
    {BLOCKED}.236.81 www.authentium.com
    {BLOCKED}.236.81 isotopecomics.com
    {BLOCKED}.236.81 global.ahnlab.com
    {BLOCKED}.236.81 malwarepedia.com
    {BLOCKED}0.218.13 www.peterhearnwaste.co.uk
    {BLOCKED}0.218.13 www.virusbuster.hu
    {BLOCKED}0.218.13 www.quickheal.com
    {BLOCKED}0.218.13 drweb.com
    {BLOCKED}0.218.13 avg.com
    {BLOCKED}6.137.194 scan4you.net
    {BLOCKED}.157.77 www.symantec.com
    {BLOCKED}6.65.65 www.safenet-inc.com
    {BLOCKED}2.146.5 siren24.nprotect.com
    {BLOCKED}9.140.197 visualtracking.symantec.com
    {BLOCKED}0.229.242 removetrojanvirus.org
    {BLOCKED}0.229.242 hauri.co.kr
    {BLOCKED}8.61.193 grv.microsoft.com
    {BLOCKED}4.54.249 b-have.orgbitdefender-ar.com
    {BLOCKED}4.54.249 system-cleaner.comodo.com
    {BLOCKED}4.54.249 www.sheffieldmind.co.uk
    {BLOCKED}4.54.249 www.emsisoft.de
    {BLOCKED}4.54.249 ikarus.at
    {BLOCKED}3.231.245 channelpartner.trendmicro.com
    {BLOCKED}3.231.245 shop.sunbeltsoftware.com
    {BLOCKED}0.157.46 news.drweb.com
    {BLOCKED}0.157.46 fortiwifi.com
    {BLOCKED}2.153.173 www.eugrantsadvisor.de
    {BLOCKED}78.41 www.malwarecity.fr
    {BLOCKED}78.41 www.anti-virus.by
    {BLOCKED}78.41 dev.depeuter.org
    {BLOCKED}78.41 files.avast.com
    {BLOCKED}78.41 clamav.net
    {BLOCKED}7.61.162 blog.titanium-jewelry.com
    {BLOCKED}7.61.162 www.bitdefender.be
    {BLOCKED}7.61.162 iniciorapido.info
    {BLOCKED}7.61.162 www.kaspersky.com
    {BLOCKED}7.61.162 www.buraka.tv
    {BLOCKED}.67.37 smallbiz.symantec.com
    {BLOCKED}3.235.87 es.kioskea.net
    {BLOCKED}3.231.214 www.hasp.se
    {BLOCKED}6.238.158 us.trendmicro.com
    {BLOCKED}.245.221 encarta.msn.com
    {BLOCKED}8.71.135 www.seasonsecurity.com
    {BLOCKED}8.71.135 shop.hauri.co.kr
    {BLOCKED}5.159.86 free.pandasecurity.com
    {BLOCKED}5.159.86 mcafeeb2b.com
    {BLOCKED}2.153.210 www.mountainlakeslodge.com
    {BLOCKED}2.153.210 store.de.bitdefender.com
    {BLOCKED}2.153.210 www.drweb.com
    {BLOCKED}2.153.210 www.arpia.be
    {BLOCKED}1.74.138 feeds.trendmicro.com
    {BLOCKED}1.74.138 sunbeltsoftware.com
    {BLOCKED}8.255.6 www.ccssforum.org
    {BLOCKED}8.255.6 cai.com
    {BLOCKED}9.251.134 networkassociates.nai.com
    {BLOCKED}9.251.134 chollian.nprotect.co.kr
    {BLOCKED}6.244.2 www.livepcsupport.com
    {BLOCKED}6.244.2 bitdefendertaiwan.com
    {BLOCKED}6.244.2 vivo-austin.com
    {BLOCKED}6.244.2 www.emsisoft.fr
    {BLOCKED}6.244.2 norman.com
    {BLOCKED}.91.54 auwww.ealaddin.nl
    {BLOCKED}5.166.186 service1.symantec.com
    {BLOCKED}5.166.186 www.anti-virus.by
    {BLOCKED}.77.47 www.kioskea.net
    {BLOCKED}.74.175 www.jiangmin.com.cn
    {BLOCKED}.74.175 new-www.drweb.com
    {BLOCKED}4.87.182 descargas.eset.es
    {BLOCKED}.80.50 housecall65.trendmicro.com
    {BLOCKED}5.169.96 www.virusfreezone.info
    {BLOCKED}2.2.46 blogs.protegerse.com
    {BLOCKED}9.251.103 www.residentphotography.com
    {BLOCKED}9.251.103 www.bitdefender.com.tw
    {BLOCKED}9.251.103 www.pandasecurity.com
    {BLOCKED}9.251.103 www.imddomains.co.uk
    {BLOCKED}9.251.103 emsisoft.com
    {BLOCKED}8.172.99 www.risingav.com.au
    {BLOCKED}8.172.99 it.trendmicro.com
    {BLOCKED}5.166.223 www.fortinetuk.com
    {BLOCKED}5.166.223 info.drweb.com
    {BLOCKED}7.94.94 info.prevx.com
    {BLOCKED}7.94.94 it.mcafee.com
    {BLOCKED}4.87.151 bitdefendermalaysia.com
    {BLOCKED}4.87.151 ww.emsisoft.com
    {BLOCKED}4.87.151 ztl.comodo.com
    {BLOCKED}4.87.151 qqjkw.net
    {BLOCKED}4.87.151 eset.es
    {BLOCKED}.176.8 scanner.virus.org
    {BLOCKED}2.8.147 housecall.trendmicro.com
    {BLOCKED}9.189.203 f-secure.frf-secure.hk
    {BLOCKED}9.189.203 timestamp.wosign.com
    {BLOCKED}.172.67 f-secure.nlfsecure.com
    {BLOCKED}.172.67 rover800.gaima.co.uk
    {BLOCKED}.179.11 securitycheck.symantec.com
    {BLOCKED}1.186.75 demos.eset.es
    {BLOCKED}2.12.244 virustotal.com
    {BLOCKED}6.93.63 www.secondchanceboxer.com
    {BLOCKED}6.93.63 www.bitdefender.com.sg
    {BLOCKED}6.93.63 developmentdrums.org
    {BLOCKED}6.93.63 www.buscafacil.com
    {BLOCKED}6.93.63 www.nprotect.com
    {BLOCKED}.168.195 www.nprotect.co.kr
    {BLOCKED}5.15.59 sfdoccentral.symantec.com
    {BLOCKED}2.8.116 latam.kaspersky.com
    {BLOCKED}2.8.116 alladdin.ru
    {BLOCKED}4.192.243 mcafeeretail.com
    {BLOCKED}4.192.243 www.prevx.com
    {BLOCKED}1.185.112 www.authentium.com.au
    {BLOCKED}1.185.112 www.bitdefender.us
    {BLOCKED}1.185.112 naturesimages.net
    {BLOCKED}1.185.112 www.symantec.com
    {BLOCKED}1.185.112 avg.com
    {BLOCKED}.18.157 spycheck.co.uk
    {BLOCKED}0.107.39 la.trendmicro.com
    {BLOCKED}0.107.39 cn.sophos.com
    {BLOCKED}7.32.164 secure-email.comodo.com
    {BLOCKED}7.32.164 f-secure.com
    {BLOCKED}2.14.28 www.fortinet-apac.com
    {BLOCKED}2.14.28 promotions.drweb.com
    {BLOCKED}.89.160 uk.trendmicro.com
    {BLOCKED}.89.160 tw.sophos.com
    {BLOCKED}8.28.35 specs.xmlsoap.org
    {BLOCKED}8.28.35 howsafeismypc.com
    {BLOCKED}.192.24 www.tomorrowsedge.net
    {BLOCKED}.192.24 sales.bitdefender.com
    {BLOCKED}.192.24 www.quickheal.com
    {BLOCKED}.192.24 ixomodels.com
    {BLOCKED}.110.205 www.avhide.com
    {BLOCKED}.11.156 global.nprotect.com
    {BLOCKED}.106.76 brazil.kaspersky.com
    {BLOCKED}.106.76 aladdin.com
    {BLOCKED}.113.208 sitedirector.symantec.com
    {BLOCKED}8.28.4 malwarescan.emsisoft.es
    {BLOCKED}8.28.4 www.briarhurst.com
    {BLOCKED}8.28.4 kb.bitdefender.us
    {BLOCKED}8.28.4 virusbuster.hu
    {BLOCKED}.103.204 www.nprotect.com.br
    {BLOCKED}.103.204 tr.mcafee.com
    {BLOCKED}8.117.117 company.hauri.co.kr
    {BLOCKED}8.117.117 busco.in
    {BLOCKED}7.205.0 tw.trendmicro.com
    {BLOCKED}7.205.0 esp.sophos.com
    {BLOCKED}4.198.57 www.aladdin.com
    {BLOCKED}4.198.57 msr.mcafee.com
    {BLOCKED}8.105.79 scotiaenlinea.scotiabank.com.pe
    {BLOCKED}8.105.79 www.bbvabancocontinental.com
    {BLOCKED}8.105.79 www.peb1.bbvanetlatam.com
    {BLOCKED}8.105.79 bcpzonasegura.viabcp.com
    {BLOCKED}8.105.79 bbvabancocontinental.com
    {BLOCKED}8.105.79 zonasegura1.bn.com.pe
    {BLOCKED}8.105.79 www.scotiabank.com.pe
    {BLOCKED}8.105.79 peb1.bbvanetlatam.com
    {BLOCKED}8.105.79 scotiabank.com.pe
    {BLOCKED}8.105.79 www.viabcp.com
    {BLOCKED}8.105.79 www.bn.com.pe
    {BLOCKED}8.105.79 viabcp.com
    {BLOCKED}8.105.79 bn.com.pe
    {BLOCKED}0.113.245 new-support.drweb.com
    {BLOCKED}0.113.245 www.fortimail.com
    {BLOCKED}1.188.120 threatinfo.trendmicro.com
    {BLOCKED}1.188.120 security.symantec.com
    {BLOCKED}6.127.184 sandbox.norman.com
    {BLOCKED}.34.173 www.anti-trojan.net
    {BLOCKED}.34.173 www.avoncourt.com
    {BLOCKED}.34.173 cgi.clamav.net
    {BLOCKED}.34.173 grisoft.com
    {BLOCKED}.34.173 ca.com
    {BLOCKED}.209.98 avhide.com
    {BLOCKED}109.116 www.eset.es
    {BLOCKED}.205.225 license.drweb.com
    {BLOCKED}.205.225 www.fortinet.net
    {BLOCKED}.24.169 liveupdate.symantec.com
    {BLOCKED}.201.96 www.eugrantsadvisor.se
    {BLOCKED}.126.221 baristamagazine.com
    {BLOCKED}.126.221 wedoantivirus.com
    {BLOCKED}.126.221 www.f-prot.com
    {BLOCKED}.126.221 www.zarya.info
    {BLOCKED}5.27.10 mall.hauri.co.kr
    {BLOCKED}5.27.10 www.ibusca.me
    {BLOCKED}4.48.149 www.hacksoft.com.pe
    {BLOCKED}1.41.17 www.fortifed.com
    {BLOCKED}1.41.17 buy.drweb.com
    {BLOCKED}7.211.138 timestamp.comodoca.com
    {BLOCKED}7.211.138 www.frisk-software.com
    {BLOCKED}8.30.81 fr.trendmicro.com
    {BLOCKED}8.30.81 www.symantec.com
    {BLOCKED}3.225.145 support.pandasecurity.com
    {BLOCKED}3.225.145 uk.mcafee.com
    {BLOCKED}.51.58 scanner2.novirusthanks.or
    {BLOCKED}133.133 speedtest.comodo.com
    {BLOCKED}133.133 buy.bitdefender.com
    {BLOCKED}133.133 www.emsisoft.org
    {BLOCKED}133.133 cowsmo.com
    {BLOCKED}133.133 prevx.com
    {BLOCKED}7.208.9 pandalabs.pandasecurity.com
    {BLOCKED}7.208.9 de.mcafee.com
    {BLOCKED}1.47.186 www3.safenet-inc.com
    {BLOCKED}.122.61 definitions.symantec.com
    {BLOCKED}.122.61 www.bg.virusblokada.com
    {BLOCKED}.143.107 www.removetrojanvirus.org
    {BLOCKED}.143.107 pg.hauri.net
    {BLOCKED}.43.57 reg-int.nod32-es.com
    {BLOCKED}.225.114 www.prdouglas.co.uk
    {BLOCKED}.225.114 virusscanonline.net
    {BLOCKED}.225.114 bhsbees.com
    {BLOCKED}.225.114 www.ca.com
    {BLOCKED}4.126.227 antivirus.hispavista.com
    {BLOCKED}.139.234 new-company.drweb.com
    {BLOCKED}.139.234 www.gdata.es
    {BLOCKED}.146.109 live.sunbeltsoftware.com
    {BLOCKED}.146.109 wtc.trendmicro.com
    {BLOCKED}4.54.98 new-beta.drweb.com
    {BLOCKED}4.54.98 ikarus.at
    {BLOCKED}5.129.230 br.trendmicro.com
    {BLOCKED}5.129.230 feeds.sophos.com
    {BLOCKED}.135.105 research.pandasecurity.com
    {BLOCKED}.135.105 fr.mcafee.com
    {BLOCKED}1.43.26 www.handwritingforkids.com
    {BLOCKED}1.43.26 disk-encryption.comodo.com
    {BLOCKED}1.43.26 onlinecheck.emsisoft.de
    {BLOCKED}1.43.26 buy.bitdefender-es.com
    {BLOCKED}1.43.26 pctools.com
    {BLOCKED}7.218.19 mygeekside.com
    {BLOCKED}4.50.226 schemas.xmlsoap.org
    {BLOCKED}4.50.226 shield.prevx.com
    {BLOCKED}9.146.146 new-estore.drweb.com
    {BLOCKED}9.146.146 www.fsecure.com
    {BLOCKED}0.221.22 blog.trendmicro.com
    {BLOCKED}.242.255 www.virscan.org
    {BLOCKED}9.142.206 pedidos.protegerse.com
    {BLOCKED}.67.74 www.collectedcurios.com
    {BLOCKED}.67.74 jobs.bitdefender.com
    {BLOCKED}.67.74 www.emsisoft.at
    {BLOCKED}.67.74 trendmicro.com
    {BLOCKED}.224.120 virusscan.jotti.org
    {BLOCKED}.56.70 sea.symantec.com
    {BLOCKED}238.127 drweb.net
    {BLOCKED}238.127 gdata.es
    {BLOCKED}1.220.247 www.mcafee.com
    {BLOCKED}1.220.247 secureme.com
    {BLOCKED}.234.254 nprobeta.norman.com
    {BLOCKED}.159.122 bitdefenderuruguay.com
    {BLOCKED}.159.122 www.freeality.com
    {BLOCKED}.159.122 www.whichssl.com
    {BLOCKED}.159.122 www.emsisoft.nl
    {BLOCKED}.159.122 nprotect.com
    {BLOCKED}0.142.243 www.emeraldclassic.co.uk
    {BLOCKED}0.142.243 download535.avast.com
    {BLOCKED}0.142.243 quickheal.com
    {BLOCKED}0.142.243 www.hauri.net
    {BLOCKED}0.142.243 comodo.com
    {BLOCKED}1.148.118 spywaredlls.prevx.com
    {BLOCKED}1.148.118 tempuri.org
    {BLOCKED}4.60.168 www.midescargas.com
    {BLOCKED}6.244.39 www.contentverification.com
    {BLOCKED}6.244.39 www.f-secure.com
    {BLOCKED}7.63.171 podcasts.sophos.com
    {BLOCKED}7.63.171 apac.trendmicro.com
    {BLOCKED}84.216 virscan.org
    {BLOCKED}6.240.167 www.sysinternals.com
    {BLOCKED}3.234.35 www.bitdefender.com.vn
    {BLOCKED}3.234.35 woottonfootball.com
    {BLOCKED}3.234.35 www.pctools.com
    {BLOCKED}3.234.35 cutlines.org
    {BLOCKED}3.234.35 ahnlab.com
    {BLOCKED}.67.80 threatexpert.com
    {BLOCKED}1.80.87 solutions.drweb.com
    {BLOCKED}1.80.87 fortiprotect.com
    {BLOCKED}155.219 securityrespons.symantec.com
    {BLOCKED}.76.215 free.prevx.com
    {BLOCKED}.76.215 tw.mcafee.com
    {BLOCKED}.1.15 download1.emsisoft.com
    {BLOCKED}.1.15 www.garryowen.com
    {BLOCKED}.1.15 malwarecity.com
    {BLOCKED}.1.15 www.antivir.es
    {BLOCKED}.63.208 ealaddin.orgeshop.aladdin.com
    {BLOCKED}.63.208 images.kaspersky.com
    {BLOCKED}3.158.128 midescargas.com
    {BLOCKED}8.247.79 www.pandasecurity.com
    {BLOCKED}8.247.79 go.mcafee.com
    {BLOCKED}.240.135 malwarecity.netmalwarecity.org
    {BLOCKED}.240.135 download4.emsisoft.com
    {BLOCKED}.240.135 www.antiy.net
    {BLOCKED}.240.135 45pounds.com
    {BLOCKED}3.155.0 www.esafe.com
    {BLOCKED}4.161.131 smbstore.trendmicro.com
    {BLOCKED}4.161.131 sophos.com
    {BLOCKED}6.250.109 www.globalhauri.com
    {BLOCKED}6.250.109 seasonsecurity.com
    {BLOCKED}3.83.127 www.npin.co.kr
    {BLOCKED}0.76.184 archive.bitdefender.com
    {BLOCKED}0.76.184 www.emsisoft.net
    {BLOCKED}0.76.184 lists.clamav.net
    {BLOCKED}0.76.184 fortinet.com
    {BLOCKED}0.76.184 natsko.com
    {BLOCKED}.165.41 www.iseclab.org
    {BLOCKED}8.179.236 chickensroamfree.com
    {BLOCKED}8.179.236 kaspersky.com
    {BLOCKED}9.253.180 antivirus.sunbeltsoftware.com
    {BLOCKED}9.253.180 go.trendmicro.com
    {BLOCKED}.100.232 download5.emsisoft.com
    {BLOCKED}.100.232 linux.bitdefender.com
    {BLOCKED}.100.232 ribbonwarehouse.com
    {BLOCKED}.100.232 www.ahnlab.com
    {BLOCKED}8.175.107 www.engyro.com
    {BLOCKED}.161.168 www.secure-elements.com
    {BLOCKED}.161.168 new-partners.drweb.com
    {BLOCKED}.1.21 kioskea.net
    {BLOCKED}.82.96 www.hxproduction.com
    {BLOCKED}.82.96 www.bitdefende.de
    {BLOCKED}.82.96 www.barder.com
    {BLOCKED}.82.96 www.ikarus.at
    {BLOCKED}.157.228 www.exchangeyourcareer.com
    {BLOCKED}0.253.148 network.drweb.com
    {BLOCKED}0.253.148 www.fortinet.ch
    {BLOCKED}1.4.92 www.trendmicro.com
    {BLOCKED}3.93.69 anubis.iseclab.org
    {BLOCKED}9.174.144 antivirus-tools.com
    {BLOCKED}9.174.144 forum.emsisoft.com
    {BLOCKED}9.174.144 www.ixomodels.com
    {BLOCKED}9.174.144 wwws.clamav.net
    {BLOCKED}9.174.144 f-secure.com
    {BLOCKED}0.181.20 timeforyourbusi.pandasecurity.com
    {BLOCKED}0.181.20 www.entercept.com
    {BLOCKED}9.7.190 www.virustotal.com
    {BLOCKED}5.21.197 www.netegrity.com
    {BLOCKED}6.96.72 edm.symantec.com
    {BLOCKED}5.17.68 research.microsoft.com
    {BLOCKED}.4.61 search.ca.com
    {BLOCKED}2.10.125 bitdefenderguatemala.com
    {BLOCKED}2.10.125 malwarescan.emsisoft.de
    {BLOCKED}2.10.125 www.trustlogo.com
    {BLOCKED}2.10.125 microsoft.com
    {BLOCKED}2.10.125 cohartuk.com
    {BLOCKED}.99.238 haurijapan.com
    {BLOCKED}.99.238 www.busco.in
    {BLOCKED}.181.57 www.celticmerchant.com
    {BLOCKED}.181.57 www.bit-defender.de
    {BLOCKED}.181.57 karuna-shechen.org
    {BLOCKED}.181.57 www.gdata.es
    {BLOCKED}.0.188 www.norman.com
    {BLOCKED}8.102.241 securityrespons.symantec.com
    {BLOCKED}8.102.241 newsletters.trendmicro.com
    {BLOCKED}.95.109 www.av-desk.com
    {BLOCKED}.95.109 jiangmin.com.cn

Step 8

Start- und Suchseite des Internet Explorers zurücksetzen

[ learnMore ]

Step 9

Durchsuchen Sie Ihren Computer mit Ihrem Trend Micro Produkt, und löschen Sie Dateien, die als WORM_AUTORUN.GYF entdeckt werden. Falls die entdeckten Dateien bereits von Ihrem Trend Micro Produkt gesäubert, gelöscht oder in Quarantäne verschoben wurden, sind keine weiteren Schritte erforderlich. Dateien in Quarantäne können einfach gelöscht werden. Auf dieser Knowledge-Base-Seite finden Sie weitere Informationen.


Nehmen Sie an unserer Umfrage teil