Analysis Date2015-01-06 11:23:47
MD5b3a2add36f28dad15b6901eca370af87
SHA155a4f10211403d2bff5249305931ab8497ed7325

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: a70f9751cc880b92b392f3eb43f06033 sha1: d89c734c9d7a4f495c8379dad6aded41312c6593 size: 1536
Section.rdata md5: 167d7a4a3a352ea1a8ece0ebee1efbc9 sha1: a6e926f8a762c98a66b1317b3ba1be9adfabc903 size: 512
Section.data md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: 9e7a65a839d98126b5ca8f120f95077d sha1: bff7948a0730c793f8cf9ca48e5272a353e31ed4 size: 52736
Timestamp2005-03-14 11:35:59
PEhash9c9312da9f15befc3be951a41d697dcfd58cd353
IMPhash7cf33dbcc97a5d248ee091612bec120e
AV360 Safeno_virus
AVAd-AwareGen:Variant.Kazy.190346
AVAlwil (avast)Kryptik-MEY [Trj]
AVArcabit (arcavir)Gen:Variant.Kazy.190346
AVAuthentiumW32/Trojan.ROYM-5986
AVAvira (antivir)TR/Dropper.Gen
AVBullGuardGen:Variant.Kazy.190346
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)TrojanDownloader.Cutwail.r4
AVClamAVno_virus
AVDr. WebBackDoor.Bulknet.958
AVEmsisoftGen:Variant.Kazy.190346
AVEset (nod32)Win32/Kryptik.BECW
AVFortinetW32/KRYPTK.SMO2!tr
AVFrisk (f-prot)no_virus
AVF-SecureGen:Variant.Kazy.190346
AVGrisoft (avg)Win32/Heur
AVIkarusTrojan.Crypt
AVK7Trojan ( 004426ef1 )
AVKasperskyTrojan.Win32.Cutwail.epf
AVMalwareBytesno_virus
AVMcafeeRDN/Downloader.a!th
AVMicrosoft Security EssentialsTrojanDownloader:Win32/Cutwail.BS
AVMicroWorld (escan)Gen:Variant.Kazy.190346
AVRisingno_virus
AVSophosno_virus
AVSymantecTrojan.Pandex!gen3
AVTrend MicroTROJ_KRYPTK.SMO2
AVVirusBlokAda (vba32)BScope.Trojan.Pushdo

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\bobyfiboznig ➝
C:\Documents and Settings\Administrator\bobyfiboznig.exe
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\AppManagement ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\insightbb[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\pink.livedoor[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\primusonline.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\flemingc.on[1].htm
Creates FileC:\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500\a18ca4003deb042bbee7a40f15e1970b_666939c9-243b-475e-9504-51724db22670
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\in[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\indiatimes[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\uswest[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\aol[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\tigers-net[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\fluor[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\optonline[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\correoweb[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\indiatimes[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\backaviation[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\supanet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\primus.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\zdnetonebox[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\wanadoo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\chickensys[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\eastlink[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\williams[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\oregonstate[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\deja[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\oregonstate[1].htm
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\mediom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sgi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\class-ic[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\bailliegifford[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\iupui[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\primus.com[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\class-ic[3].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\licensedtokill[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\blackplanet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\axelero[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\health[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\merck[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\vwr-inc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\bailliegifford[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\lyuchta[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\williams[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\knology[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\clarksville[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\military[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\clarksville[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\intuit[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\in[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\sol[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\hustler[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\wanadoo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\deloitte[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\tellmeimcute[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\vianet.com[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\motivators[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ukr[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\embarqmail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\terra[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\lse.ac[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\robvivian[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\vianet.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\karoo.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\tiscali[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\orst[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\gcsu[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\penn[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\supernet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\reactionsearch[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\intelnet.net[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\yahoo.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\supernet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\posten[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\juno[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\duluth[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\pink.livedoor[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\myway[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\madrid[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\yahoo.co[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\alumni.ubc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\terra[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\srcaccess[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\fit.za[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\eastlink[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\people[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\chickensys[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\proftools[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\planet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ntl[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\myspace[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\world-net.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\wiredsolutions[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cablelan[1].htm
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\gamil[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\primeline[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\class-ic[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dreamwiz[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\backaviation[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\waupacafoundry[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\mediom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\jwu[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\madrid[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\cybertron[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\club-internet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\insightbb[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\lineone[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\mckessonhboc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\iprimus.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\intuit[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\intelnet.net[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\bailliegifford[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\motivators[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\citigroup[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\alumni.ubc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\clarksville[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\stc.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\backaviation[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\in[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\wagged[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\croeso[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\fit.za[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\gmx[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\bailliegifford[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mountainmax[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\fit.za[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ncable.net[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\brick[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\yahoo.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\gcsu[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\sandiegoinsider[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\madrid[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\the-beach[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\aol[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\cableone[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\myway[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\potamkinmitsubishi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\cybertron[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\t-mobel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\eastlink[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\o2.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\orst[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\uswest[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\aol[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\hawaii.rr[1].htm
Creates FileC:\Documents and Settings\Administrator\bobyfiboznig.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\claret[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\licensedtokill[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\t-mobel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\waupacafoundry[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\tigers-net[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\fit.za[2].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\intuit[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\waupacafoundry[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\mediom[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\indiatimes[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\class-ic[3].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\licensedtokill[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\backaviation[2].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\gcsu[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\madrid[2].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\in[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\in[2].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\yahoo.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\motivators[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\class-ic[2].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\tigers-net[1].htm
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates Mutexbobyfiboznig
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSchickensys.com
Winsock DNSjuno.net
Winsock DNSworld-net.co.nz
Winsock DNSmotivators.com
Winsock DNSorst.edu
Winsock DNSbackaviation.com
Winsock DNStugqicirvi.kz
Winsock DNSoregonstate.edu
Winsock DNSschoolsports.com
Winsock DNSlyuchta.org
Winsock DNSmerck.com
Winsock DNSncable.net.au
Winsock DNSproftools.lt
Winsock DNSlineone.net
Winsock DNSwilbursmith.com
Winsock DNSqotojaqoq.kz
Winsock DNSuswest.com
Winsock DNSyahoo.co.jp
Winsock DNSlicensedtokill.com
Winsock DNScybertron.com
Winsock DNStigers-net.com
Winsock DNSterra.cl
Winsock DNSgeirirhux.kz
Winsock DNSinsightbb.com
Winsock DNSbrick.net
Winsock DNSwilliams.edu
Winsock DNSclaret.org
Winsock DNSsovifowup.kz
Winsock DNSluxpobubuxge.kz
Winsock DNSmediom.com
Winsock DNSindiatimes.com
Winsock DNScroeso.com
Winsock DNSmilitary.com
Winsock DNSmyspace.com
Winsock DNSknology.net
Winsock DNSt-mobel.com
Winsock DNSrodeoxoli.kz
Winsock DNSvwr-inc.com
Winsock DNSfluor.com
Winsock DNSgupwupcear.kz
Winsock DNSintuit.com
Winsock DNScuprodeoxa.kz
Winsock DNShawaii.rr.com
Winsock DNSclub-internet.fr
Winsock DNSdeloitte.com
Winsock DNSsrcaccess.net
Winsock DNScablelan.net
Winsock DNSzdnetonebox.com
Winsock DNSsupernet.net
Winsock DNSntl.com
Winsock DNSprimusonline.com.au
Winsock DNSeastlink.ca
Winsock DNSneorilfozc.kz
Winsock DNSmountainmax.net
Winsock DNStellmeimcute.com
Winsock DNSclarksville.com
Winsock DNSboxoqqean.kz
Winsock DNSwagged.com
Winsock DNSkaroo.co.uk
Winsock DNSrobvivian.com
Winsock DNShealth.com
Winsock DNSfupreofaxokl.kz
Winsock DNSvianet.com.mx
Winsock DNSthe-wild-west.com
Winsock DNSsupanet.com
Winsock DNSpotamkinmitsubishi.com
Winsock DNSmckessonhboc.com
Winsock DNSfit.za.net
Winsock DNScableone.net
Winsock DNSoptonline.net
Winsock DNSnafbeicalilc.kz
Winsock DNSmyway.com
Winsock DNSvagodetir.kz
Winsock DNSblackplanet.com
Winsock DNSiprimus.com.au
Winsock DNSfivuxrefu.kz
Winsock DNSdeja.com
Winsock DNSgmx.com
Winsock DNSembarqmail.com
Winsock DNSrirwewusan.kz
Winsock DNScorreoweb.com
Winsock DNSwicfilcohuxs.kz
Winsock DNSgrandertome.ru
Winsock DNSgamil.com
Winsock DNSo2.co.uk
Winsock DNScitigroup.com
Winsock DNSthe-beach.net
Winsock DNSprimeline.com
Winsock DNSpenn.com
Winsock DNSreactionsearch.com
Winsock DNSquixnet.net
Winsock DNSplanet.nl
Winsock DNSukr.net
Winsock DNSbailliegifford.com
Winsock DNSrilqaftinoxa.kz
Winsock DNStiscali.it
Winsock DNSclass-ic.com
Winsock DNSstc.com.sa
Winsock DNSwanadoo.es
Winsock DNSmuscanet.com
Winsock DNSmadrid.com
Winsock DNSlse.ac.uk
Winsock DNSuafortsmith.edu
Winsock DNSduluth.com
Winsock DNSwaupacafoundry.com
Winsock DNSjeacigugvu.kz
Winsock DNSvijanneikaf.kz
Winsock DNShappemail.com
Winsock DNSiupui.edu
Winsock DNSdubutugbojo.kz
Winsock DNSbriansmail.com
Winsock DNSaxelero.hu
Winsock DNSalumni.ubc.ca
Winsock DNSposten.se
Winsock DNSpink.livedoor.com
Winsock DNSsol.dk
Winsock DNSroxuxukas.kz
Winsock DNSdreamwiz.com
Winsock DNSsandiegoinsider.com
Winsock DNSprimus.com.au
Winsock DNShustler.com
Winsock DNSjwu.edu
Winsock DNSintelnet.net.gt
Winsock DNSwiredsolutions.net
Winsock DNSsgi.net
Winsock DNSmosivoktasu.kz
Winsock DNSaol.de
Winsock DNSin.com
Winsock DNSpeople.com
Winsock DNSgcsu.edu
Winsock DNSflemingc.on.ca

Network Details:

DNSfluor.com
Type: A
162.209.113.138
DNSfluor.com
Type: A
166.78.225.151
DNSknology.net
Type: A
64.29.151.81
DNSsrcaccess.net
Type: A
69.49.208.29
DNStellmeimcute.com
Type: A
69.172.201.208
DNSmilitary.com
Type: A
173.239.76.193
DNSono.com
Type: A
62.42.230.17
DNSchat4all.org
Type: A
54.214.245.179
DNSunison.ie
Type: A
217.78.15.211
DNScybertron.com
Type: A
69.72.227.22
DNSgmx.com
Type: A
74.208.5.85
DNScablelan.net
Type: A
50.21.229.37
DNSalumni.ubc.ca
Type: A
142.103.166.167
DNSaol.de
Type: A
207.200.74.38
DNSaol.de
Type: A
64.12.79.57
DNSaol.de
Type: A
64.12.89.186
DNSaol.de
Type: A
149.174.107.97
DNSaol.de
Type: A
149.174.110.102
DNSsol.dk
Type: A
87.98.187.176
DNSbailliegifford.com
Type: A
80.75.68.131
DNSt-mobel.com
Type: A
69.170.135.92
DNStiscali.it
Type: A
213.205.32.10
DNSjuno.net
Type: A
64.136.53.169
DNSjuno.net
Type: A
64.136.45.169
DNSprimusonline.com.au
Type: A
203.134.30.5
DNSprimusonline.com.au
Type: A
211.27.226.8
DNSpink.livedoor.com
Type: A
125.6.144.14
DNSbrick.net
Type: A
209.145.128.4
DNSclarksville.com
Type: A
216.127.145.217
DNSplanet.nl
Type: A
213.75.28.140
DNSmadrid.com
Type: A
193.27.78.221
DNSorst.edu
Type: A
128.193.4.112
DNSfit.za.net
Type: A
72.20.110.40
DNScroeso.com
Type: A
104.28.0.49
DNScroeso.com
Type: A
104.28.1.49
DNSeastlink.ca
Type: A
24.222.14.12
DNSrobvivian.com
Type: A
107.20.196.200
DNSiupui.edu
Type: A
129.79.78.166
DNSiupui.edu
Type: A
129.79.78.167
DNSmyway.com
Type: A
74.113.233.77
DNSstc.com.sa
Type: A
212.118.156.22
DNShawaii.rr.com
Type: A
24.165.45.220
DNSlicensedtokill.com
Type: A
209.15.13.134
DNSchickensys.com
Type: A
104.28.17.35
DNSchickensys.com
Type: A
104.28.16.35
DNSmountainmax.net
Type: A
65.38.128.10
DNSntl.com
Type: A
92.238.96.13
DNSprimus.com.au
Type: A
202.136.40.35
DNSsupernet.net
Type: A
199.44.84.4
DNSindiatimes.com
Type: A
223.165.27.13
DNScorreoweb.com
Type: A
209.15.13.134
DNSkaroo.co.uk
Type: A
87.102.50.138
DNSyahoo.co.jp
Type: A
183.79.135.206
DNSyahoo.co.jp
Type: A
182.22.59.229
DNSterra.cl
Type: A
208.70.188.13
DNSwilliams.edu
Type: A
137.165.6.26
DNSin.com
Type: A
123.108.40.13
DNSwaupacafoundry.com
Type: A
71.13.131.168
DNSpenn.com
Type: A
207.69.200.190
DNSpenn.com
Type: A
207.69.200.191
DNSwagged.com
Type: A
184.106.55.45
DNSuswest.com
Type: A
155.70.41.27
DNShustler.com
Type: A
69.50.140.94
DNSintuit.com
Type: A
206.108.40.108
DNSgcsu.edu
Type: A
168.16.211.192
DNSoregonstate.edu
Type: A
128.193.4.112
DNSbackaviation.com
Type: A
193.23.116.131
DNSjwu.edu
Type: A
192.225.208.17
DNSdreamwiz.com
Type: A
183.111.184.235
DNSdreamwiz.com
Type: A
183.111.184.239
DNSmyspace.com
Type: A
216.178.46.224
DNSlyuchta.org
Type: A
50.116.32.177
DNSlse.ac.uk
Type: A
185.18.137.102
DNSembarqmail.com
Type: A
69.168.97.85
DNSoptonline.net
Type: A
66.54.17.31
DNSsgi.net
Type: A
209.166.171.92
DNSintelnet.net.gt
Type: A
200.6.192.206
DNSclub-internet.fr
Type: A
80.125.163.172
DNSsandiegoinsider.com
Type: A
68.1.17.9
DNSlineone.net
Type: A
212.74.99.30
DNSmotivators.com
Type: A
207.97.205.32
DNSzdnetonebox.com
Type: A
216.239.120.238
DNSmerck.com
Type: A
155.91.16.2
DNSinsightbb.com
Type: A
74.128.18.45
DNSinsightbb.com
Type: A
74.128.18.37
DNSmckessonhboc.com
Type: A
143.112.128.124
DNSmediom.com
Type: A
199.243.212.203
DNStigers-net.com
Type: A
210.171.0.80
DNSvianet.com.mx
Type: A
37.152.88.98
DNScitigroup.com
Type: A
192.193.219.58
DNScitigroup.com
Type: A
192.193.103.222
DNScableone.net
Type: A
24.116.1.80
DNSdeloitte.com
Type: A
170.194.156.208
DNSflemingc.on.ca
Type: A
192.197.148.244
DNSreactionsearch.com
Type: A
50.57.88.236
DNSukr.net
Type: A
212.42.76.253
DNSukr.net
Type: A
212.42.76.252
DNSproftools.lt
Type: A
92.61.39.207
DNSclass-ic.com
Type: A
72.52.218.25
DNShealth.com
Type: A
216.146.46.11
DNShealth.com
Type: A
216.146.46.10
DNSo2.co.uk
Type: A
82.132.141.84
DNSpotamkinmitsubishi.com
Type: A
67.192.6.123
DNSsupanet.com
Type: A
213.40.190.200
DNSpeople.com
Type: A
216.146.46.10
DNSpeople.com
Type: A
216.146.46.11
DNSduluth.com
Type: A
12.28.104.123
DNSwiredsolutions.net
Type: A
209.15.202.77
DNSdeja.com
Type: A
173.194.121.49
DNSdeja.com
Type: A
173.194.121.50
DNSdeja.com
Type: A
173.194.121.51
DNSdeja.com
Type: A
173.194.121.52
DNSdeja.com
Type: A
173.194.121.48
DNSncable.net.au
Type: A
203.208.88.59
DNSposten.se
Type: A
147.14.11.241
DNSwanadoo.es
Type: A
62.37.237.16
DNSwanadoo.es
Type: A
62.37.237.15
DNSteacher.com
Type: A
50.31.210.85
DNShoymail.com
Type: A
207.46.31.61
DNShoymail.com
Type: A
65.55.39.12
DNSclaret.org
Type: A
87.106.135.102
DNSaxelero.hu
Type: A
84.2.42.204
DNSvwr-inc.com
Type: A
23.110.104.251
DNSprimeline.com
Type: A
69.74.231.232
DNSthe-beach.net
Type: A
64.8.70.102
DNSblackplanet.com
Type: A
54.84.41.73
DNSiprimus.com.au
Type: A
202.136.40.35
DNSgamil.com
Type: A
50.97.173.24
DNSworld-net.co.nz
Type: A
202.169.206.9
DNSbriansmail.com
Type: A
127.0.0.1
DNSmuscanet.com
Type: A
DNSthe-wild-west.com
Type: A
DNSwilbursmith.com
Type: A
DNSschoolsports.com
Type: A
DNSquixnet.net
Type: A
DNSgrandertome.ru
Type: A
DNStugqicirvi.kz
Type: A
DNShappemail.com
Type: A
DNSfivuxrefu.kz
Type: A
DNSuafortsmith.edu
Type: A
DNSwicfilcohuxs.kz
Type: A
DNSrirwewusan.kz
Type: A
DNSluxpobubuxge.kz
Type: A
DNSqotojaqoq.kz
Type: A
DNSgeirirhux.kz
Type: A
DNSrodeoxoli.kz
Type: A
DNSnafbeicalilc.kz
Type: A
DNSneorilfozc.kz
Type: A
DNSgupwupcear.kz
Type: A
DNSroxuxukas.kz
Type: A
DNSdubutugbojo.kz
Type: A
DNSjeacigugvu.kz
Type: A
DNSfupreofaxokl.kz
Type: A
DNSvagodetir.kz
Type: A
DNScuprodeoxa.kz
Type: A
DNSmosivoktasu.kz
Type: A
DNSrilqaftinoxa.kz
Type: A
DNSsovifowup.kz
Type: A
DNSvijanneikaf.kz
Type: A
DNSboxoqqean.kz
Type: A
HTTP POSThttp://cybertron.com/?ptrxcz_o9To8To8Sm7Rl6Qk8mvpEZuEYyQl9W
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://knology.net/?ptrxcz_vRpATo8Sm6Qk5Oi3Ng1LfzJdyHbwGZ
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gmx.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cablelan.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://alumni.ubc.ca/?ptrxcz_g1Lf0KdyIcxHbwGavFCawXsBXtGavG
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aol.de/?ptrxcz_jEdxHauDXrATPVxHbxHbwGawGavFZu
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sol.dk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bailliegifford.com/?ptrxcz_SZ2Oi3pDXsCVqATo8RzsGayIcxHbvF
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://t-mobel.com/?ptrxcz_VqAUo8Hg4Koh7RmAJiecCYtDXsCWqT
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tiscali.it/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bailliegifford.com/?ptrxcz_AVGsCWsCWrBVqAUq3ZxHcx3VrBVrBV
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://military.com/?ptrxcz_3uAdzKe0Kf0Kf1Lg1Lg1Mh2NiqjAWr
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://juno.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://primusonline.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pink.livedoor.com/?ptrxcz_3Oj4Pj4Pj4Oi4Oi3Ni3NimCXcDZvFa
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://brick.net/?ptrxcz_LfzDYtDXtD4UqBZTvFZt4pFf5VvHbw
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://clarksville.com/?ptrxcz_sDXtDdd06Sm7Sm8So8SoCWrBVqAUpC
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://clarksville.com/?ptrxcz_0KeyIcxHavFZuEYsZ9UqAUqAUpAUpA
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://planet.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://madrid.com/?ptrxcz_Tp9Sm7Qj4Ng1KdxHauEXrBUo7Rk4Oh
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://orst.edu/?ptrxcz_Pk5Pi3Nh1Lf0JdyIbwGauEYtCWrBVp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fit.za.net/?ptrxcz_8JtEYwIcxHbwHdyJ5UqAUocyIdyIcx
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://croeso.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://eastlink.ca/?ptrxcz_yIcxG8YvFby4Wsp0Qk5Pj4OXuEYtEY
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://robvivian.com/?ptrxcz_p9To8Sm7RsFZu7zQl7Qk5SEe6VwMh3
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://iupui.edu/?ptrxcz_bxHr8g1Mgd3Nh27Sm7Rl7Rl6Qk5Pj4
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://myway.com/?ptrxcz_m8Sm7Rk5Pj4Oi3Ng1Lf0KeyIcxHbwG
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://stc.com.sa/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hawaii.rr.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://licensedtokill.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://chickensys.com/?ptrxcz_ZvEYsCWrm8Sm6Qk5Oi3Nh1PsKezJcx
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aol.de/?ptrxcz_Oi2Qj7Qk5Pj4OhTtCWqAUo8SpBXxJf
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mountainmax.net/?ptrxcz_wGaSJvGApHbwGZuEYtCHj5Pk5Pj5Pj
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ntl.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://primus.com.au/?ptrxcz_2Mg0KdyHbvFYsCVq9Tm7Qk4Nh1LezI
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://primus.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://supernet.net/?ptrxcz_bwHavzRd7UqAUp9To8Tom8aHf1LTb4
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://myway.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://indiatimes.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://correoweb.com/?ptrxcz_CdzJdyIcxFKj4NGf0Lf0KezJdyIcxH
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://karoo.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://yahoo.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://terra.cl/?ptrxcz_RmYltFZuDXsCVqAUo8Sl6QkYxHcxJd
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://srcaccess.net/?ptrxcz_ezJcxGZtDWtmIeyJSqAUqDcxHb0xHP
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://williams.edu/?ptrxcz_k6Rl6Pj4Oi3Nh2Mf0KezJdyIcyMgMg
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://in.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://waupacafoundry.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://penn.com/?ptrxcz_o9XsCWrBVqAUpvLg1Lf0KezJdyIcxH
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fluor.com/?ptrxcz_VuFZuDXsCVqAUo8Sl6Qk4Oi3Mg1Lez
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wagged.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://madrid.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://uswest.com/?ptrxcz_Mg1LezJdyINj4Nh7To8RpAUpBXrEZu
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hustler.com/?ptrxcz_2Mg1KIh2Mf0JdyHavEYsCVq9Tm7Qk4
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://intuit.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cybertron.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://licensedtokill.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gcsu.edu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://alumni.ubc.ca/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://yahoo.co.jp/?ptrxcz_9UqDpBVrAUo766e0KKi5Qk6QkX2OrQ
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oregonstate.edu/?ptrxcz_ezJcZvFZtDXvEYsBVsB6VsPl61cAVr
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://backaviation.com/?ptrxcz_xLf9c0K7tMk7Rm7Rl6QyQk6Qk5Rla0
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jwu.edu/?ptrxcz_oDXs1Mg1Lf0KdyIbRp9To8S3UqAUp9
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dreamwiz.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://myspace.com/?ptrxcz_wHcxHcxHcxHcxHbxHbxHbwHc1Mg2EZ
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lyuchta.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gcsu.edu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lse.ac.uk/?ptrxcz_TtHkXxIcxGavFZuEXsCWf1Mf0KezJd
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://embarqmail.com/?ptrxcz_h3Nh2jjBboCWrBVrBVrBZuxJdyJdyI
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://optonline.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fit.za.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sgi.net/?ptrxcz_li8So8Rl5Pi3MgQWx80Pk5Pj4NyZwG
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://intelnet.net.gt/?ptrxcz_zRm7Rl6Pj4Oi2Mg1LfzJe4TwSqAVrC
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://club-internet.fr/?ptrxcz_kQ3Oi31Qz5Vc1Lf1UNi2Mf0KdyHbvF
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sandiegoinsider.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lineone.net/?ptrxcz_Oj3Nh1Li2qOi2M80tvKe0Kef5QOtEY
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://motivators.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zdnetonebox.com/?ptrxcz_l6QDcxHbwGZuEYsg9VrBVjCWrBVq9T
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://intuit.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bailliegifford.com/?ptrxcz_To8Sm6Qk45VrBVqBVqAVqAUqAUpAUp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://merck.com/?ptrxcz_m7Rl5Pi3Mic53To8Rl5Pi3MgEh2Mg1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://insightbb.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://clarksville.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mckessonhboc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oregonstate.edu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mediom.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://terra.cl/?ptrxcz_yJdyIcwHavGZuEYsx2RDe26VrNkhOl
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tigers-net.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vianet.com.mx/?ptrxcz_AKqAVp9Uo9Sm7RWzcj8YtEYtDXsCXc
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://citigroup.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cableone.net/?ptrxcz_4WsrDWrCVqAUp9To8SNi3Nh2Mg1Lf0
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://deloitte.com/?ptrxcz_avFZuEYtDXsBVqAUp9To7Rl6QBec2M
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://intelnet.net.gt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://flemingc.on.ca/?ptrxcz_YWtCWqATo7Qk4Oh2LfzJcwGZuDXrAU
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bailliegifford.com/?ptrxcz_Xt0Mg1LfzJdk9WrBWrBVqBVqAVqd3N
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://madrid.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://backaviation.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://uswest.com/?ptrxcz_dyIcxGavFYtDJl6Qk4Oi3Mg4Qk5KtM
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://in.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://reactionsearch.com/?ptrxcz_Pk5Oi2Mf0JcxGauDXrBUp8Rl69Up8R
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://orst.edu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ukr.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://in.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://supernet.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fit.za.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://proftools.lt/?ptrxcz_0LfzJcwGZtDXsGL7c7XwHf0Lg1Lf0L
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://t-mobel.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://class-ic.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://class-ic.com/?ptrxcz_FavGdawGawGavFZuEYtDXsCWrBVqAT
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://health.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://o2.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://chickensys.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://potamkinmitsubishi.com/?ptrxcz_wKf0KezJdb2NhTMg1Lf05VqATo8Rl5
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://williams.edu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://supanet.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://people.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pink.livedoor.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tigers-net.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://duluth.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wiredsolutions.net/?ptrxcz_ZwGavFavFZuEZb6Rl6Qk5Pj4Oi3Nh2
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://eastlink.ca/?ptrxcz_qAUp8Upvi7Qk5Oi2Mf0JcxGZuDXrBU
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://deja.com/?ptrxcz_Sm6Qj4zKeyIbwFZtDWqATo7Qk4Oh2O
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ncable.net.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://posten.se/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wanadoo.es/?ptrxcz_f3Nh2LfzJcxGauEXsBVp9Sm6Qj4Nh1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://class-ic.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://motivators.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tellmeimcute.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://axelero.hu/?ptrxcz_wHHg1OhEj5yQk50To7Qj3MftJdxGZu
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vwr-inc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://yahoo.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://class-ic.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wanadoo.es/?ptrxcz_shX8V0Sm7Rl6QBcGbwGavEYtDXsBKg
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://backaviation.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://eastlink.ca/?ptrxcz_zuLlCbxHbvFZuEYsCWrBVp9To8Sl6Q
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://insightbb.com/?ptrxcz_g1Lg0KezJdxHbwGavFYtDXsCWPo9Mr
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://primeline.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://indiatimes.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aol.de/?ptrxcz_VqAPwvJezIcxHbwsGx0Lc5Pj4Oii4P
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vianet.com.mx/?ptrxcz_bxHavFZtDXrBVp9ToDZqk7Rl6Qk4Oi
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://waupacafoundry.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mediom.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://the-beach.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://blackplanet.com/?ptrxcz_IkBc2Nh2Mh2Mg1BmEh3Oi3Nh2Mg1Lf
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://iprimus.com.au/?ptrxcz_So7Qk4ToW0Lf0KFe0DPi3MfzJyRl6Q
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gamil.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://world-net.co.nz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://claret.org/?ptrxcz_To7Qk4Nh2LNrBVqATo8GbxHbwGavFZ
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Flows TCP192.168.1.1:1044 ➝ 217.78.15.211:25
Flows TCP192.168.1.1:1045 ➝ 54.214.245.179:25
Flows TCP192.168.1.1:1038 ➝ 69.172.201.208:25
Flows TCP192.168.1.1:1039 ➝ 64.29.151.81:25
Flows TCP192.168.1.1:1041 ➝ 62.42.230.17:25
Flows TCP192.168.1.1:1040 ➝ 69.49.208.29:25
Flows TCP192.168.1.1:1042 ➝ 173.239.76.193:25
Flows TCP192.168.1.1:1043 ➝ 162.209.113.138:25
Flows TCP192.168.1.1:1046 ➝ 69.72.227.22:80
Flows TCP192.168.1.1:1047 ➝ 64.29.151.81:80
Flows TCP192.168.1.1:1048 ➝ 74.208.5.85:80
Flows TCP192.168.1.1:1049 ➝ 50.21.229.37:80
Flows TCP192.168.1.1:1050 ➝ 142.103.166.167:80
Flows TCP192.168.1.1:1051 ➝ 207.200.74.38:80
Flows TCP192.168.1.1:1052 ➝ 87.98.187.176:80
Flows TCP192.168.1.1:1053 ➝ 80.75.68.131:80
Flows TCP192.168.1.1:1054 ➝ 69.170.135.92:80
Flows TCP192.168.1.1:1055 ➝ 213.205.32.10:80
Flows TCP192.168.1.1:1056 ➝ 80.75.68.131:80
Flows TCP192.168.1.1:1057 ➝ 173.239.76.193:80
Flows TCP192.168.1.1:1058 ➝ 64.136.53.169:80
Flows TCP192.168.1.1:1059 ➝ 203.134.30.5:80
Flows TCP192.168.1.1:1060 ➝ 125.6.144.14:80
Flows TCP192.168.1.1:1061 ➝ 209.145.128.4:80
Flows TCP192.168.1.1:1062 ➝ 216.127.145.217:80
Flows TCP192.168.1.1:1063 ➝ 216.127.145.217:80
Flows TCP192.168.1.1:1064 ➝ 213.75.28.140:80
Flows TCP192.168.1.1:1065 ➝ 193.27.78.221:80
Flows TCP192.168.1.1:1066 ➝ 128.193.4.112:80
Flows TCP192.168.1.1:1067 ➝ 72.20.110.40:80
Flows TCP192.168.1.1:1068 ➝ 104.28.0.49:80
Flows TCP192.168.1.1:1069 ➝ 24.222.14.12:80
Flows TCP192.168.1.1:1070 ➝ 107.20.196.200:80
Flows TCP192.168.1.1:1071 ➝ 129.79.78.166:80
Flows TCP192.168.1.1:1072 ➝ 74.113.233.77:80
Flows TCP192.168.1.1:1073 ➝ 212.118.156.22:80
Flows TCP192.168.1.1:1074 ➝ 24.165.45.220:80
Flows TCP192.168.1.1:1075 ➝ 209.15.13.134:80
Flows TCP192.168.1.1:1076 ➝ 104.28.17.35:80
Flows TCP192.168.1.1:1077 ➝ 207.200.74.38:80
Flows TCP192.168.1.1:1078 ➝ 65.38.128.10:80
Flows TCP192.168.1.1:1079 ➝ 92.238.96.13:80
Flows TCP192.168.1.1:1080 ➝ 202.136.40.35:80
Flows TCP192.168.1.1:1081 ➝ 202.136.40.35:80
Flows TCP192.168.1.1:1082 ➝ 199.44.84.4:80
Flows TCP192.168.1.1:1083 ➝ 74.113.233.77:80
Flows TCP192.168.1.1:1084 ➝ 223.165.27.13:80
Flows TCP192.168.1.1:1085 ➝ 209.15.13.134:80
Flows TCP192.168.1.1:1086 ➝ 87.102.50.138:80
Flows TCP192.168.1.1:1087 ➝ 183.79.135.206:80
Flows TCP192.168.1.1:1088 ➝ 208.70.188.13:80
Flows TCP192.168.1.1:1089 ➝ 69.49.208.29:80
Flows TCP192.168.1.1:1090 ➝ 137.165.6.26:80
Flows TCP192.168.1.1:1091 ➝ 123.108.40.13:80
Flows TCP192.168.1.1:1092 ➝ 71.13.131.168:80
Flows TCP192.168.1.1:1093 ➝ 207.69.200.190:80
Flows TCP192.168.1.1:1094 ➝ 162.209.113.138:80
Flows TCP192.168.1.1:1095 ➝ 184.106.55.45:80
Flows TCP192.168.1.1:1096 ➝ 193.27.78.221:80
Flows TCP192.168.1.1:1097 ➝ 155.70.41.27:80
Flows TCP192.168.1.1:1098 ➝ 69.50.140.94:80
Flows TCP192.168.1.1:1099 ➝ 206.108.40.108:80
Flows TCP192.168.1.1:1100 ➝ 69.72.227.22:80
Flows TCP192.168.1.1:1101 ➝ 209.15.13.134:80
Flows TCP192.168.1.1:1102 ➝ 168.16.211.192:80
Flows TCP192.168.1.1:1103 ➝ 142.103.166.167:80
Flows TCP192.168.1.1:1104 ➝ 183.79.135.206:80
Flows TCP192.168.1.1:1105 ➝ 128.193.4.112:80
Flows TCP192.168.1.1:1106 ➝ 193.23.116.131:80
Flows TCP192.168.1.1:1107 ➝ 192.225.208.17:80
Flows TCP192.168.1.1:1108 ➝ 183.111.184.235:80
Flows TCP192.168.1.1:1109 ➝ 216.178.46.224:80
Flows TCP192.168.1.1:1110 ➝ 50.116.32.177:80
Flows TCP192.168.1.1:1111 ➝ 168.16.211.192:80
Flows TCP192.168.1.1:1112 ➝ 185.18.137.102:80
Flows TCP192.168.1.1:1113 ➝ 69.168.97.85:80
Flows TCP192.168.1.1:1114 ➝ 66.54.17.31:80
Flows TCP192.168.1.1:1115 ➝ 72.20.110.40:80
Flows TCP192.168.1.1:1116 ➝ 209.166.171.92:80
Flows TCP192.168.1.1:1117 ➝ 200.6.192.206:80
Flows TCP192.168.1.1:1118 ➝ 80.125.163.172:80
Flows TCP192.168.1.1:1119 ➝ 68.1.17.9:80
Flows TCP192.168.1.1:1120 ➝ 212.74.99.30:80
Flows TCP192.168.1.1:1121 ➝ 207.97.205.32:80
Flows TCP192.168.1.1:1122 ➝ 216.239.120.238:80
Flows TCP192.168.1.1:1123 ➝ 206.108.40.108:80
Flows TCP192.168.1.1:1124 ➝ 80.75.68.131:80
Flows TCP192.168.1.1:1125 ➝ 155.91.16.2:80
Flows TCP192.168.1.1:1126 ➝ 74.128.18.45:80
Flows TCP192.168.1.1:1127 ➝ 216.127.145.217:80
Flows TCP192.168.1.1:1128 ➝ 143.112.128.124:80
Flows TCP192.168.1.1:1129 ➝ 128.193.4.112:80
Flows TCP192.168.1.1:1130 ➝ 199.243.212.203:80
Flows TCP192.168.1.1:1131 ➝ 208.70.188.13:80
Flows TCP192.168.1.1:1132 ➝ 210.171.0.80:80
Flows TCP192.168.1.1:1133 ➝ 37.152.88.98:80
Flows TCP192.168.1.1:1134 ➝ 192.193.219.58:80
Flows TCP192.168.1.1:1135 ➝ 24.116.1.80:80
Flows TCP192.168.1.1:1136 ➝ 170.194.156.208:80
Flows TCP192.168.1.1:1137 ➝ 200.6.192.206:80
Flows TCP192.168.1.1:1138 ➝ 192.197.148.244:80
Flows TCP192.168.1.1:1139 ➝ 80.75.68.131:80
Flows TCP192.168.1.1:1140 ➝ 193.27.78.221:80
Flows TCP192.168.1.1:1141 ➝ 193.23.116.131:80
Flows TCP192.168.1.1:1142 ➝ 155.70.41.27:80
Flows TCP192.168.1.1:1143 ➝ 123.108.40.13:80
Flows TCP192.168.1.1:1144 ➝ 50.57.88.236:80
Flows TCP192.168.1.1:1145 ➝ 128.193.4.112:80
Flows TCP192.168.1.1:1146 ➝ 212.42.76.253:80
Flows TCP192.168.1.1:1147 ➝ 123.108.40.13:80
Flows TCP192.168.1.1:1148 ➝ 199.44.84.4:80
Flows TCP192.168.1.1:1149 ➝ 72.20.110.40:80
Flows TCP192.168.1.1:1150 ➝ 92.61.39.207:80
Flows TCP192.168.1.1:1151 ➝ 69.170.135.92:80
Flows TCP192.168.1.1:1152 ➝ 72.52.218.25:80
Flows TCP192.168.1.1:1153 ➝ 72.52.218.25:80
Flows TCP192.168.1.1:1154 ➝ 216.146.46.11:80
Flows TCP192.168.1.1:1155 ➝ 82.132.141.84:80
Flows TCP192.168.1.1:1156 ➝ 104.28.17.35:80
Flows TCP192.168.1.1:1157 ➝ 67.192.6.123:80
Flows TCP192.168.1.1:1158 ➝ 137.165.6.26:80
Flows TCP192.168.1.1:1159 ➝ 213.40.190.200:80
Flows TCP192.168.1.1:1160 ➝ 216.146.46.10:80
Flows TCP192.168.1.1:1161 ➝ 125.6.144.14:80
Flows TCP192.168.1.1:1162 ➝ 210.171.0.80:80
Flows TCP192.168.1.1:1163 ➝ 12.28.104.123:80
Flows TCP192.168.1.1:1164 ➝ 209.15.202.77:80
Flows TCP192.168.1.1:1165 ➝ 24.222.14.12:80
Flows TCP192.168.1.1:1166 ➝ 173.194.121.49:80
Flows TCP192.168.1.1:1167 ➝ 203.208.88.59:80
Flows TCP192.168.1.1:1168 ➝ 147.14.11.241:80
Flows TCP192.168.1.1:1169 ➝ 62.37.237.16:80
Flows TCP192.168.1.1:1171 ➝ 213.40.190.200:25
Flows TCP192.168.1.1:1170 ➝ 69.172.201.208:25
Flows TCP192.168.1.1:1172 ➝ 207.97.205.32:25
Flows TCP192.168.1.1:1173 ➝ 209.15.202.77:25
Flows TCP192.168.1.1:1174 ➝ 50.31.210.85:25
Flows TCP192.168.1.1:1175 ➝ 69.50.140.94:25
Flows TCP192.168.1.1:1177 ➝ 87.106.135.102:25
Flows TCP192.168.1.1:1176 ➝ 207.46.31.61:25
Flows TCP192.168.1.1:1178 ➝ 72.52.218.25:80
Flows TCP192.168.1.1:1179 ➝ 207.97.205.32:80
Flows TCP192.168.1.1:1180 ➝ 69.172.201.208:80
Flows TCP192.168.1.1:1181 ➝ 84.2.42.204:80
Flows TCP192.168.1.1:1182 ➝ 23.110.104.251:80
Flows TCP192.168.1.1:1183 ➝ 183.79.135.206:80
Flows TCP192.168.1.1:1184 ➝ 72.52.218.25:80
Flows TCP192.168.1.1:1185 ➝ 62.37.237.16:80
Flows TCP192.168.1.1:1186 ➝ 193.23.116.131:80
Flows TCP192.168.1.1:1187 ➝ 24.222.14.12:80
Flows TCP192.168.1.1:1188 ➝ 74.128.18.45:80
Flows TCP192.168.1.1:1189 ➝ 69.74.231.232:80
Flows TCP192.168.1.1:1190 ➝ 223.165.27.13:80
Flows TCP192.168.1.1:1191 ➝ 207.200.74.38:80
Flows TCP192.168.1.1:1192 ➝ 37.152.88.98:80
Flows TCP192.168.1.1:1193 ➝ 71.13.131.168:80
Flows TCP192.168.1.1:1194 ➝ 199.243.212.203:80
Flows TCP192.168.1.1:1195 ➝ 64.8.70.102:80
Flows TCP192.168.1.1:1196 ➝ 54.84.41.73:80
Flows TCP192.168.1.1:1197 ➝ 202.136.40.35:80
Flows TCP192.168.1.1:1198 ➝ 50.97.173.24:80
Flows TCP192.168.1.1:1199 ➝ 202.169.206.9:80
Flows TCP192.168.1.1:1200 ➝ 87.106.135.102:80

Raw Pcap

Strings
.'
....

),	>
040904e4
040904E4
[0] No Error
1.0.0.0
[10004] Interrupted system call
[10009] Bad file number
[10013] Permission denied
[10014] Bad address
[10022] Invalid argument
[10024] Too many open files
[10035] Operation would block![10036] Operation now in progress%[10037] Operation already in progress&[10038] Socket operation on non-socket$[10039] Destination address required
[10040] Message too long&[10041] Protocol wrong type for socket
[10042] Bad protocol option
[10043] Protocol not supported![10044] Socket type not supported)[10045] Operation not supported on socket%[10046] Protocol family not supported7[10047] Address family not supported by protocol family
[10048] Address already in use&[10049] Can't assign requested address
[10050] Network is down
[10051] Network is unreachable'[10052] Net dropped connection or reset([10053] Software caused connection abort [10054] Connection reset by peer![10055] No buffer space available#[10056] Socket is already connected
[10057] Socket is not connected([10058] Can't send after socket shutdown)[10059] Too many references, can't splice
[10060] Connection timed out
[10061] Connection refused)[10062] Too many levels of symbolic links
[10063] File name too long
[10064] Host is down
[10065] No Route to Host
[10066] Directory not empty
[10067] Too many processes
[10068] Too many users
[10069] Disc Quota Exceeded
[10070] Stale NFS file handle)[10071] Too many levels of remote in path
([10091] Network SubSystem is unavailable([10092] WINSOCK DLL Version out of range
 1996,98 Inprise Corporation
 1998-2001 Borland Software Corporation
 1999 Inprise Corporation
6, 10, 0, 0
7.0.1.219
A-	=
ABOUT
About OWL Chess
Advantage Data Architect
ALT+BkSp
ARC32.EXE
&Arrange
Bishop
&Black
 "Black" Square
BorBtn
bordlg
BorDlg
BORDLG
Borland International, Inc.
Borland Software Corporation
Borland Type Library Exporter
Borland WSDL Import Utility
BorShade
Button
&Cancel
C&ancel
CHESS
ChessIcon
&Clear
Client/Server Suite
&Colors...
COLORSDIALOG
Comments
CompanyName
Copyright 
Copyright (C) 1992
CTRL+BkSp
DclInetXCustom
&Default
DELPHI32
Delphi-32 Development Environment
DELPHI32.EXE
Delphi InternetExpress Custom Components
&Demo mode
 &Directories:
 Directory:
&Display
&Done
&Drag
&Easy
&Edit
E&xit
Extended Systems, Inc
 Extended Systems, Inc. 1997-2001
FileDescription
 File&name:
 &Files:
FileVersion
File Version
&Game
&Hint
INetXCustom
&Infinite
Inprise Corporation
InternalName
j,	>
:<J	
:+J	
:	J	
Knight
LegalCopyright
LegalTrademarks
&Level
MAINICON
&Matching
M&ateSearch
:MJ	
&Movement
&New
Object Windows 
&Options
OriginalFilename
OWL Chess
OWL Chess Error
Pawn
PIECEVALUEDLG
&Piece Values...
Piece Values
&Play
Play again?
&PlySearch...
PrivateBuild
ProductName
ProductVersion
Queen
R9FY
&Redo
&Restore...
Restore Game
&Reverse board
Rook
&Save
Save &as...
Save Game As
SD_FILEOPEN
SD_FILESAVE
SD_INPUTDIALOG
&Select
Set Square Colors
&Show BestLine
&Sound
SpecialBuild
&Stop
StringFileInfo
TCHESSEDITMENU
TCHESSMENU
TCHESSTHINKMENU
Text
&Time per move...
T&otal Time...
Translation
&Turn
&Two player
&Undo
U=@R
VarFileInfo
VS_VERSION_INFO
&White
 "White" Square
WSDLIMP
WSDLIMP.EXE
2gwE3h1
3ol0d9_
(5-O-pY
[=5t/Q
62	an5
6m}$|F"
7-W(mY
?871;`e
8dgz[(
8:{uMi
&_9P@p
&]A8-Ld
A,&j\;\Y6
}.-b[m:
Cj,/$ n
]cq%]-
cQv{/!
CreateWindowExA
DDDDHw
DDDHxy
DefWindowProcA
'>DibW0
DispatchMessageA
DWXhz/E
e"~!E|z
'ES+mP
!,f7DR
;f9KPQ
fffff`
fgfOr)r
{f%.J.
FM0|[;
FvMBPE
gdi32.dll
GetMessageA
GetModuleHandleA
GetObjectA
GetProcAddress
GetVersion
ikqSW^
Jt.3&N
];jU>&gD
KatzenWatzen
kernel32.dll
KillTimer
K^jcH?
Ko]Lu.~T
?lg_tF
LLLLGw
LLLLLL
LLLLLL@
LLLLLLL
LLLLxw
LoadCursorA
LoadIconA
LoadImageA
M9?/P-[Q
NX$o|>
OQqJ*6
-/ozGm
P9=iXs
pfffffff
PostQuitMessage
q@a}]X
qcY{N3
qDMw.|CcV
q(p.;s
Q'WF)lA
.rdata
RegisterClassExA
RWsxa+
s9;$qc
SetTimer
ShowWindow
Sorcererrenovation_08143_24
tc%.&H
tD!z3o
!This program cannot be run in DOS mode.
TranslateMessage
~Uag9S
u/>P}4
user32.dll
uu.W h
UX'Sq6K
va`QcO
X<Jg5U>
Xnq+HZ
y-IUPwY