Cisco Talos (VRT) Update for Sourcefire 3D System

* Talos combines our security experts from TRAC, SecApps, and VRT teams.

Date: 2017-12-19

This SRU number: 2017-12-18-001
Previous SRU number: 2017-12-14-001

Applies to:

This SEU number: 1773
Previous SEU: 1771

Applies to:

This is the complete list of rules modified in SRU 2017-12-18-001 and SEU 1773.

The format of the file is:

GID - SID - Rule Group - Rule Message - Policy State

The Policy State refers to each default Sourcefire policy, Connectivity, Balanced and Security.

The default passive policy state is the same as the Balanced policy state with the exception of alert being used instead of drop.

Note: Unless stated explicitly, the rules are for the series of products listed above.

Updated Rules:

High Priority
GIDSIDRule GroupRule MessagePolicy State
Con.Bal.Sec.
117363FILE-OTHERApple OSX Finder DMG volume name memory corruption attemptoffoffoff
119006SERVER-OTHERHP Data Protector Express DtbClsLogin buffer overflow attemptoffoffoff
119618FILE-OTHERMultiple products dwmapi.dll dll-load exploit attemptoffoffoff
119620FILE-OTHERMultiple products dwmapi.dll dll-load exploit attemptoffoffoff
121048DELETEDBLACKLIST DNS request for known malware domain prettylikeher.com - Sykipotoffoffoff
121049DELETEDBLACKLIST DNS request for known malware domain mysundayparty.com - Sykipotoffoffoff
123020DELETEDBLACKLIST DNS request for known malware domain traffic-spot.com - Flameoffoffoff
123021DELETEDBLACKLIST DNS request for known malware domain traffic-spot.biz - Flameoffoffoff
123024DELETEDBLACKLIST DNS request for known malware domain autosync.info - Flameoffoffoff
123025DELETEDBLACKLIST DNS request for known malware domain dnslocation.info - Flameoffoffoff
123026DELETEDBLACKLIST DNS request for known malware domain dnsmask.info - Flameoffoffoff
123027DELETEDBLACKLIST DNS request for known malware domain dnsportal.info - Flameoffoffoff
123028DELETEDBLACKLIST DNS request for known malware domain dnsupdate.info - Flameoffoffoff
123030DELETEDBLACKLIST DNS request for known malware domain localgateway.info - Flameoffoffoff
123034DELETEDBLACKLIST DNS request for known malware domain pingserver.info - Flameoffoffoff
123036DELETEDBLACKLIST DNS request for known malware domain syncdomain.info - Flameoffoffoff
123799DELETEDBLACKLIST DNS request for known malware domain guest-access.net - Gauss offoffoff
123800DELETEDBLACKLIST DNS request for known malware domain dotnetadvisor.info - Gauss offoffoff
123801DELETEDBLACKLIST DNS request for known malware domain bestcomputeradvisor.com - Gauss offoffoff
123802DELETEDBLACKLIST DNS request for known malware domain datajunction.org - Gauss offoffoff
123803DELETEDBLACKLIST DNS request for known malware domain secuurity.net - Gauss offoffoff
123804DELETEDBLACKLIST DNS request for known malware domain gowin7.com - Gauss offoffoff
124034DELETEDBLACKLIST DNS request for known malware domain jebena.ananikolic.su - Malware.HPsus/Palevo-Boffoffoff
124146DELETEDBLACKLIST DNS request for known malware domain reslove-dns.com - Dorifeloffoffoff
125309FILE-OTHERAdobe Audition Session file stack buffer overflow attemptoffoffoff
125310FILE-OTHERAdobe Audition Session file stack buffer overflow attemptoffoffoff
125554DELETEDBLACKLIST DNS request for known malware domain linuxrepository.org - UNIX.Trojan.SSHDooroffoffoff
125555DELETEDBLACKLIST DNS request for known malware domain openssh.info - UNIX.Trojan.SSHDooroffoffoff
125624DELETEDBLACKLIST DNS request for known malware domain updete.servehttp.com - Win.Trojan.Jimpimeoffoffoff
125684DELETEDBLACKLIST DNS request for known malware domain bahufykyby.infooffoffoff
125685DELETEDBLACKLIST DNS request for known malware domain basewibuxenagip.infooffoffoff
125686DELETEDBLACKLIST DNS request for known malware domain cefimoqicy.infooffoffoff
125687DELETEDBLACKLIST DNS request for known malware domain cohehonyhe.infooffoffoff
125688DELETEDBLACKLIST DNS request for known malware domain covyqileju.infooffoffoff
125689DELETEDBLACKLIST DNS request for known malware domain decogonuwy.infooffoffoff
125690DELETEDBLACKLIST DNS request for known malware domain degupydoka.infooffoffoff
125691DELETEDBLACKLIST DNS request for known malware domain diconybomo.infooffoffoff
125692DELETEDBLACKLIST DNS request for known malware domain dixegocixa.infooffoffoff
125693DELETEDBLACKLIST DNS request for known malware domain favomavene.infooffoffoff
125694DELETEDBLACKLIST DNS request for known malware domain fegufidaty.infooffoffoff
125695DELETEDBLACKLIST DNS request for known malware domain fenemusemy.infooffoffoff
125696DELETEDBLACKLIST DNS request for known malware domain fihyqukapy.infooffoffoff
125697DELETEDBLACKLIST DNS request for known malware domain fokizireheceduf.infooffoffoff
125698DELETEDBLACKLIST DNS request for known malware domain fyzuvejemuxoqiw.infooffoffoff
125699DELETEDBLACKLIST DNS request for known malware domain gecadutolu.infooffoffoff
125700DELETEDBLACKLIST DNS request for known malware domain gybejajehekyfet.infooffoffoff
125701DELETEDBLACKLIST DNS request for known malware domain hiveqemyrehinex.infooffoffoff
125702DELETEDBLACKLIST DNS request for known malware domain kyqehurevynyryk.infooffoffoff
125703DELETEDBLACKLIST DNS request for known malware domain lofyjisoxo.infooffoffoff
125704DELETEDBLACKLIST DNS request for known malware domain loqytylukykiruf.infooffoffoff
125705DELETEDBLACKLIST DNS request for known malware domain lujuhijalu.infooffoffoff
125706DELETEDBLACKLIST DNS request for known malware domain luxohygity.infooffoffoff
125707DELETEDBLACKLIST DNS request for known malware domain moqawowyti.infooffoffoff
125708DELETEDBLACKLIST DNS request for known malware domain musututefu.infooffoffoff
125709DELETEDBLACKLIST DNS request for known malware domain mysotonego.infooffoffoff
125710DELETEDBLACKLIST DNS request for known malware domain negenezepu.infooffoffoff
125711DELETEDBLACKLIST DNS request for known malware domain pyziviziny.infooffoffoff
125712DELETEDBLACKLIST DNS request for known malware domain qecytylohozariw.infooffoffoff
125713DELETEDBLACKLIST DNS request for known malware domain qokimusanyveful.infooffoffoff
125714DELETEDBLACKLIST DNS request for known malware domain qudevyfiqa.infooffoffoff
125715DELETEDBLACKLIST DNS request for known malware domain radohowexehedun.infooffoffoff
125716DELETEDBLACKLIST DNS request for known malware domain relusibeci.infooffoffoff
125717DELETEDBLACKLIST DNS request for known malware domain rulerykozu.infooffoffoff
125718DELETEDBLACKLIST DNS request for known malware domain sygonugeze.infooffoffoff
125719DELETEDBLACKLIST DNS request for known malware domain taqyhucoka.infooffoffoff
125720DELETEDBLACKLIST DNS request for known malware domain tebejoturu.infooffoffoff
125721DELETEDBLACKLIST DNS request for known malware domain vesufopodu.infooffoffoff
125722DELETEDBLACKLIST DNS request for known malware domain vujygijehu.infooffoffoff
125723DELETEDBLACKLIST DNS request for known malware domain vyzefykeno.infooffoffoff
125724DELETEDBLACKLIST DNS request for known malware domain wezadifiha.infooffoffoff
125725DELETEDBLACKLIST DNS request for known malware domain xatawihuvo.infooffoffoff
125726DELETEDBLACKLIST DNS request for known malware domain xohuhynevepeqyv.infooffoffoff
125727DELETEDBLACKLIST DNS request for known malware domain zuhokasyku.infooffoffoff
125728DELETEDBLACKLIST DNS request for known malware domain zykuxykevu.infooffoffoff
125730DELETEDBLACKLIST DNS request for known malware domain allsearchforyou.inoffoffoff
125739DELETEDBLACKLIST DNS request for known malware domain facesystem.inoffoffoff
125741DELETEDBLACKLIST DNS request for known malware domain famouspeopleinformation.comoffoffoff
125762DELETEDBLACKLIST DNS request for known malware domain superstarsinfo.comoffoffoff
125763DELETEDBLACKLIST DNS request for known malware domain winnerfree.comoffoffoff
126396DELETEDBLACKLIST DNS request for known malware domain suppp.cantvenlinea.biz - Bitcoin Miner uploadoffoffoff
126401DELETEDBLACKLIST DNS request for known malware domain gigasbh.org - Win.Trojan.Dorkbotoffoffoff
126402DELETEDBLACKLIST DNS request for known malware domain xixbh.com - Win.Trojan.Dorkbotoffoffoff
126405DELETEDBLACKLIST DNS request for known malware domain xixbh.net - Win.Trojan.Dorkbotoffoffoff
126554DELETEDBLACKLIST DNS request for known malware domain d1js21szq85hyn.cloudfront.net - Win.Adware.BProtectoroffoffoff
126583DELETEDBLACKLIST DNS request for known malware domain msnsolution.nicaze.net - Genome Trojanoffoffoff
126589DELETEDBLACKLIST DNS request for known malware domain theimageparlour.net - Vobfus wormoffoffoff
126718DELETEDBLACKLIST DNS request for known malware domain - Backdoor Rbotoffoffoff
126781DELETEDBLACKLIST DNS request for known malware domain vseforyou.ru - Cridex Trojanoffoffoff
126914DELETEDBLACKLIST DNS request for known malware domain goliyonzo.pw - BackDoor Cometoffoffoff
126915DELETEDBLACKLIST DNS request for known malware domain zalil.ru - Kazy Trojanoffoffoff
126917DELETEDBLACKLIST DNS request for known malware domain bigmack.opendns.be - Palevo Botnetoffoffoff
126918DELETEDBLACKLIST DNS request for known malware domain trafficconverter.biz - ChronoPayoffoffoff
126920DELETEDBLACKLIST DNS request for known malware domain kukutrustnet777.info - W32.Salityoffoffoff
127180DELETEDBLACKLIST DNS request for known malware domain twinkcam.net - W32/Kryptikoffoffoff
127181DELETEDBLACKLIST DNS request for known malware domain cinnamyn.com - W32/Kryptikoffoffoff
127247DELETEDBLACKLIST DNS request for known malware domain restless.su - Gamarue Trojanoffoffoff
127535DELETEDBLACKLIST DNS request for known malware domain mainenbha.com - Win.Kraziomel Trojanoffoffoff
127537DELETEDBLACKLIST DNS request for known malware domain ohtheigh.cc - Foreign-R Trojanoffoffoff
127561DELETEDBLACKLIST DNS request for known malware domain myimpactblog.com - Win.Trojan.Fareitoffoffoff
127563DELETEDBLACKLIST DNS request for known malware domain keurslager-demeulder.be - Win.Trojan.Fareitoffoffoff
127564DELETEDBLACKLIST DNS request for known malware domain ftp.sigmasolutions.gr - Win.Trojan.Fareitoffoffoff
127625DELETEDBLACKLIST DNS request for known malware domain documents.myPicture.infooffoffoff
127626DELETEDBLACKLIST DNS request for known malware domain ftp.documents.myPicture.infooffoffoff
127627DELETEDBLACKLIST DNS request for known malware domain info.xxuz.comoffoffoff
127628DELETEDBLACKLIST DNS request for known malware domain www.documents.myPicture.infooffoffoff
127632DELETEDBLACKLIST DNS request for known malware domain hidatabase.cn - Worm.Sillyoffoffoff
127707DELETEDBLACKLIST DNS request for known malware domain www.wolfvr.comoffoffoff
127812DELETEDBLACKLIST DNS request for known malware domain rr.nuoffoffoff
127946DELETEDBLACKLIST DNS request for known malware domain kitchenwalla.comoffoffoff
127972DELETEDBLACKLIST DNS request for known malware domain tohk5ja.ccoffoffoff
127973DELETEDBLACKLIST DNS request for known malware domain nmbc.ccoffoffoff
127978DELETEDBLACKLIST DNS request for known malware domain statinfo.ccoffoffoff
127979DELETEDBLACKLIST DNS request for known malware domain wsysinfonet.suoffoffoff
128058DELETEDBLACKLIST DNS request for known malware domain erwbtkidthetcwerc.comoffoffoff
128059DELETEDBLACKLIST DNS request for known malware domain rterybrstutnrsbberve.comoffoffoff
128060DELETEDBLACKLIST DNS request for known malware domain rvbwtbeitwjeitv.comoffoffoff
128085DELETEDBLACKLIST DNS request for known malware domain kartmanscript.comoffoffoff
128104DELETEDBLACKLIST DNS request for known malware domain hy.micrsofts.comoffoffoff
128167DELETEDBLACKLIST DNS request for known malware domain eilahcha.ccoffoffoff
128169DELETEDBLACKLIST DNS request for known malware domain wownthing.ccoffoffoff
128171DELETEDBLACKLIST DNS request for known malware domain guodeira.ccoffoffoff
128172DELETEDBLACKLIST DNS request for known malware domain wahemah.ccoffoffoff
128174DELETEDBLACKLIST DNS request for known malware domain ahthuvuz.ccoffoffoff
128176DELETEDBLACKLIST DNS request for known malware domain oonucoog.ccoffoffoff
128177DELETEDBLACKLIST DNS request for known malware domain sysinfo.ccoffoffoff
128180DELETEDBLACKLIST DNS request for known malware domain aenaethi.ccoffoffoff
128182DELETEDBLACKLIST DNS request for known malware domain zstats.ccoffoffoff
128183DELETEDBLACKLIST DNS request for known malware domain xstats.ccoffoffoff
128186DELETEDBLACKLIST DNS request for known malware domain eegeingo.ccoffoffoff
128188DELETEDBLACKLIST DNS request for known malware domain bo0keego.ccoffoffoff
128193DELETEDBLACKLIST DNS request for known malware domain- Win.Vobfus worm variantoffoffoff
128253DELETEDBLACKLIST DNS request for known malware domain ircd.myz.infooffoffoff
128283DELETEDBLACKLIST DNS request for known malware domain chickenkiller.comoffoffoff
128293DELETEDBLACKLIST DNS request www.xiaopijia.com - Backdoor.Yaddosoffoffoff
128294DELETEDBLACKLIST DNS request www.akwm139.com - Backdoor.Yaddosoffoffoff
128295DELETEDBLACKLIST DNS request www.1860tour.com - Backdoor.Yaddosoffoffoff
128296DELETEDBLACKLIST DNS request ghjgf.info - Backdoor.Yaddosoffoffoff
128327DELETEDBLACKLIST DNS request for known malware domain 8800.orgoffoffoff
128400DELETEDBLACKLIST DNS request for known malware domain tx.com.cnoffoffoff
128404DELETEDBLACKLIST DNS request for known malware domain goobzo.com - Kazy Trojanoffoffoff
128539DELETEDBLACKLIST DNS request for known malware domain lovesyr.sytes.net - Win.Worm Dunhihioffoffoff
128828DELETEDBLACKLIST DNS request for known malware domain download.freepds.comoffoffoff
128829DELETEDBLACKLIST DNS request for known malware domain www.freepds.comoffoffoff
128892DELETEDBLACKLIST DNS request for known malware domain hi.mybro.bizoffoffoff
128952DELETEDBLACKLIST DNS request to suspicious domain ns0.pollosm.me.uk - Win.Trojan.Bunitu.Goffoffoff
128953DELETEDBLACKLIST DNS request to suspicious domain ns1.pollosm.me.uk - Win.Trojan.Bunitu.Goffoffoff
128959DELETEDBLACKLIST DNS request for known malware domain fenhelua.comoffoffoff
129015DELETEDBLACKLIST DNS request for known malware domain comebacktopapa.xicp.netoffoffoff
129080DELETEDBLACKLIST DNS request for known malware ftp.nirnbuzz.ugig.iroffoffoff
129083DELETEDBLACKLIST DNS request for known malware domain a01.jackposegood.infooffoffoff
129107DELETEDBLACKLIST DNS request for known malware domain 666t.comoffoffoff
129126DELETEDBLACKLIST DNS request for known malware domain jiang-zem.in - Win.Trojan.Zeusoffoffoff
129132DELETEDBLACKLIST DNS request for known malware domain www.moderntip.com.troffoffoff
129144DELETEDBLACKLIST DNS request for known malware domain wut.mophecfbr.comoffoffoff
129151DELETEDBLACKLIST DNS request for known malware domain yomboum.comlu.comoffoffoff
129171DELETEDBLACKLIST DNS request for known malware domain yourssagregator.comlu.comoffoffoff
129172DELETEDBLACKLIST DNS request for known malware domain lovecatalog.comlu.comoffoffoff
129173DELETEDBLACKLIST DNS request for known malware domain allnewsmedia.webatu.comoffoffoff
129177DELETEDBLACKLIST DNS request for known malware CNC domain netbar.asys.usoffoffoff
129178DELETEDBLACKLIST DNS request for known malware domain www.sxpfxb.comoffoffoff
129262DELETEDBLACKLIST DNS request for known malware domain bog5151.zapto.org - Win.Trojan.Dunihioffoffoff
129263DELETEDBLACKLIST DNS request for known malware domain kara.no-ip.info - Win.Trojan.Dunihioffoffoff
129290DELETEDBLACKLIST DNS request for known malware CNC domain 003mxs.euoffoffoff
129298DELETEDBLACKLIST DNS request for known malware domain ent.wikaba.comoffoffoff
129303DELETEDBLACKLIST DNS request for known malware CNC domain trasbaiana.web102.f1.k8.com.broffoffoff
129342DELETEDBLACKLIST DNS request for known malware CNC domain 55l1.3322.orgoffoffoff
129343DELETEDBLACKLIST DNS request for known malware CNC domain 14.7k.ccoffoffoff
129350DELETEDBLACKLIST DNS request for known malware CNC domain downcompile.3322.orgoffoffoff
129355DELETEDBLACKLIST DNS request for known malware domain - compare-free.comoffoffoff
129373DELETEDBLACKLIST DNS request for known malware domain loveisland.comoffoffoff
129429DELETEDBLACKLIST DNS request for known malware domain www.kreamnnd.comoffoffoff
129432DELETEDBLACKLIST DNS request for known malware domain plano.altervista.orgoffoffoff
129492DELETEDBLACKLIST DNS request for known malware domain korivind.se - Linux.Backdoor.Tsunamioffoffoff
129564DELETEDBLACKLIST DNS request for known malware domain suportando.sytes.net - Win.Trojan.Banker.AALVoffoffoff
129567DELETEDBLACKLIST DNS request for known malware domain antiq.scifi.ro - Linux.Backdoor.Shellbotoffoffoff
129568DELETEDBLACKLIST DNS request for known malware domain funny.evils.in - Linux.Backdoor.Shellbotoffoffoff
129653DELETEDBLACKLIST DNS request for known malware CNC domain srf.im - Win.Trojan.Truadooffoffoff
129656DELETEDBLACKLIST DNS request for known malware domain javaupdate.flashserv.net - Adobe 0day C&Coffoffoff
129657DELETEDBLACKLIST DNS request for known malware domain sales.eu5.org - Adobe 0day C&Coffoffoff
129658DELETEDBLACKLIST DNS request for known malware domain thirdbase.bugs3.com - Adobe 0day C&Coffoffoff
129659DELETEDBLACKLIST DNS request for known malware domain www.mobilitysvc.com - Adobe 0day C&Coffoffoff
129739DELETEDBLACKLIST DNS request for known malware CNC domain hingston2.eu - Win.Trojan.Sarvdapoffoffoff
129761DELETEDBLACKLIST DNS request for known malware domain appleupdt.com - Win.Trojan.Caretooffoffoff
129762DELETEDBLACKLIST DNS request for known malware domain carrus.gotdns.com - Win.Trojan.Caretooffoffoff
129763DELETEDBLACKLIST DNS request for known malware domain cherry1962.dyndns.org - Win.Trojan.Caretooffoffoff
129764DELETEDBLACKLIST DNS request for known malware domain ctronlinenews.dyndns.tv - Win.Trojan.Caretooffoffoff
129765DELETEDBLACKLIST DNS request for known malware domain dfup.selfip.org - Win.Trojan.Caretooffoffoff
129766DELETEDBLACKLIST DNS request for known malware domain fast8.homeftp.org - Win.Trojan.Caretooffoffoff
129767DELETEDBLACKLIST DNS request for known malware domain gx5639.dyndns.tv - Win.Trojan.Caretooffoffoff
129768DELETEDBLACKLIST DNS request for known malware domain helpcenter1it6238.cz.cc - Win.Trojan.Caretooffoffoff
129771DELETEDBLACKLIST DNS request for known malware domain mango66.dyndns.org - Win.Trojan.Caretooffoffoff
129772DELETEDBLACKLIST DNS request for known malware domain msupdt.com - Win.Trojan.Caretooffoffoff
129773DELETEDBLACKLIST DNS request for known malware domain nav1002.ath.cx - Win.Trojan.Caretooffoffoff
129774DELETEDBLACKLIST DNS request for known malware domain nthost.shacknet.nu - Win.Trojan.Caretooffoffoff
129775DELETEDBLACKLIST DNS request for known malware domain oco-231-ms.xns01.com - Win.Trojan.Caretooffoffoff
129776DELETEDBLACKLIST DNS request for known malware domain pininfarina.dynalias.com - Win.Trojan.Caretooffoffoff
129777DELETEDBLACKLIST DNS request for known malware domain pl400.dyndns.org - Win.Trojan.Caretooffoffoff
129778DELETEDBLACKLIST DNS request for known malware domain prosoccer1.dyndns.info - Win.Trojan.Caretooffoffoff
129780DELETEDBLACKLIST DNS request for known malware domain ricush.ath.cx - Win.Trojan.Caretooffoffoff
129781DELETEDBLACKLIST DNS request for known malware domain services.serveftp.org - Win.Trojan.Caretooffoffoff
129782DELETEDBLACKLIST DNS request for known malware domain sv.serveftp.org - Win.Trojan.Caretooffoffoff
129783DELETEDBLACKLIST DNS request for known malware domain swupdt.com - Win.Trojan.Caretooffoffoff
129784DELETEDBLACKLIST DNS request for known malware domain takami.podzone.net - Win.Trojan.Caretooffoffoff
129785DELETEDBLACKLIST DNS request for known malware domain tunga.homedns.org - Win.Trojan.Caretooffoffoff
129786DELETEDBLACKLIST DNS request for known malware domain wqq.dyndns.org - Win.Trojan.Caretooffoffoff
129787DELETEDBLACKLIST DNS request for known malware domain wwnav.selfip.net - Win.Trojan.Caretooffoffoff
129818DELETEDBLACKLIST DNS request for known malware domain wxyz.mesjunio.com - Win.Trojan.Lurkoffoffoff
129832DELETEDBLACKLIST DNS request for known malware domain hattouma12.no-ip.biz - Win.Trojan.Dunihioffoffoff
129833DELETEDBLACKLIST DNS request for known malware domain sidisalim.myvnc.com - Win.Trojan.Dunihioffoffoff
129868DELETEDBLACKLIST DNS request for known malware domain www.rekurigo.com - Win.Trojan.Napolaroffoffoff
129872DELETEDBLACKLIST DNS request for known malware CNC domain intertechsupport.net - Win.Trojan.Hanoveoffoffoff
129892DELETEDBLACKLIST DNS request for known malware CNC domain gsndomain.ddns.us - Win.Trojan.Pyteconteoffoffoff
129900DELETEDBLACKLIST DNS request for known malware CNC domain up.ok789111.com - Win.Trojan.Comowbaoffoffoff
129906DELETEDBLACKLIST DNS request for known malware domain 45g5bh.tradingcenter.biz - Win.Trojan.Madnedosoffoffoff
129912DELETEDBLACKLIST DNS request for known malware domain hmpcorcv.vicp.net - Win.Trojan.Zmcwinsvcoffoffoff
129913DELETEDBLACKLIST DNS request for known malware domain picpvicp.3322.org - Win.Trojan.Zmcwinsvcoffoffoff
129919DELETEDBLACKLIST DNS request for known malware domain luotuozhizhu.blog.163.com - Win.Trojan.ZhiZhuoffoffoff
129974DELETEDBLACKLIST DNS request for known malware domain yourdomainnames.myddns.com - Win.Svekifc.Aoffoffoff
129986DELETEDBLACKLIST DNS request for known malware domain godson355.vicp.cc - Win.Trojan.Meacoffoffoff
129994DELETEDBLACKLIST DNS request for known malware domain neuro.dyndns-at-home.com - Win.Trojan.Horsumoffoffoff
129995DELETEDBLACKLIST DNS request for known malware domain yelp.webhop.org - Win.Trojan.Horsumoffoffoff
129996DELETEDBLACKLIST DNS request for known malware domain foursquare.dyndns.tv - Win.Trojan.Horsumoffoffoff
129997DELETEDBLACKLIST DNS request for known malware domain tripadvisor.dyndns.info - Win.Trojan.Horsumoffoffoff
130039DELETEDBLACKLIST DNS request for known malware domain krimpsquail.zapto.org - Win.Trojan.Darkkometoffoffoff
130056DELETEDBLACKLIST DNS request for known malware domain godheaven.3322.org - Win.Trojan.Peronspyoffoffoff
130059DELETEDBLACKLIST DNS request for known malware domain adobeincorp.com - Win.Trojan.Coreshoffoffoff
130069DELETEDBLACKLIST DNS request for known malware domain smsgrabber.url.ph - Android iBanking/Spy.49offoffoff
130089DELETEDBLACKLIST DNS request for known malware domain v00d00.org - Win.Trojan.Otlardoffoffoff
130170DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain arctic-zone.bbsindex.comoffoffoff
130171DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain cars-online.zapto.orgoffoffoff
130172DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain eunews-online.zapto.orgoffoffoff
130173DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain fifa-rules.25u.comoffoffoff
130175DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain franceonline.sytes.netoffoffoff
130176DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain freeutils.3utilities.comoffoffoff
130177DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain health-everyday.faqserv.comoffoffoff
130178DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain nhl-blog.servegame.comoffoffoff
130179DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain olympik-blog.4dq.comoffoffoff
130180DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain pockerroom.servebeer.comoffoffoff
130182DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain scandinavia-facts.sytes.netoffoffoff
130183DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain sportmusic.servemp3.comoffoffoff
130184DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain stockholm-blog.hopto.orgoffoffoff
130185DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain supernews.sytes.netoffoffoff
130186DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain sweeden-history.zapto.orgoffoffoff
130187DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain tiger.got-game.orgoffoffoff
130190DELETEDBLACKLIST DNS Uroburos rootkit request for known malware domain wintersport.sytes.netoffoffoff
130275DELETEDBLACKLIST DNS request for known malware domain skyslisten.com - Win.Backdoor.Slothoffoffoff
130303DELETEDBLACKLIST DNS request for known malware domain mcsup.cc - Win.Trojan.Noctaboroffoffoff
130321DELETEDBLACKLIST DNS request for known malware domain printlux.by - Win.Trojan.Drawnetzoffoffoff
130322DELETEDBLACKLIST DNS request for known malware domain tobiasteka.hu - Win.Trojan.Drawnetzoffoffoff
130481DELETEDBLACKLIST DNS request for known malware domain titan2014.sytes.net - Win.Trojan.Zbot/Bublikoffoffoff
130544DELETEDBLACKLIST DNS request for known malware domain eimqqakugeccgwak.org - Win.Trojan.Ramdooffoffoff
130546DELETEDBLACKLIST DNS request for known malware domain uogwoigiuweyccsw.org - Win.Trojan.Ramdooffoffoff
130772DELETEDBLACKLIST DNS request for known malware domain universal2010.no-ip.org - Win.Worm.Dunihioffoffoff
130813DELETEDBLACKLIST DNS request for known malware domain androld666.com - Andr.Trojan.Oldbootoffoffoff
130824DELETEDBLACKLIST DNS request for known malware domain betterbrowse.net - Win.Trojan.Mudropoffoffoff
130825DELETEDBLACKLIST DNS request for known malware domain browsemark.net - Win.Trojan.Mudropoffoffoff
130826DELETEDBLACKLIST DNS request for known malware domain browsesmart.net - Win.Trojan.Mudropoffoffoff
130827DELETEDBLACKLIST DNS request for known malware domain diamondata.net - Win.Trojan.Mudropoffoffoff
130828DELETEDBLACKLIST DNS request for known malware domain grabmyrez.co - Win.Trojan.Mudropoffoffoff
130829DELETEDBLACKLIST DNS request for known malware domain jotzey.net - Win.Trojan.Mudropoffoffoff
130830DELETEDBLACKLIST DNS request for known malware domain kozaka.net - Win.Trojan.Mudropoffoffoff
130831DELETEDBLACKLIST DNS request for known malware domain lemurleap.info - Win.Trojan.Mudropoffoffoff
130832DELETEDBLACKLIST DNS request for known malware domain luckyleap.net - Win.Trojan.Mudropoffoffoff
130833DELETEDBLACKLIST DNS request for known malware domain megabrowse.biz - Win.Trojan.Mudropoffoffoff
130834DELETEDBLACKLIST DNS request for known malware domain outobox.net - Win.Trojan.Mudropoffoffoff
130835DELETEDBLACKLIST DNS request for known malware domain plurpush.net - Win.Trojan.Mudropoffoffoff
130836DELETEDBLACKLIST DNS request for known malware domain qualitink.net - Win.Trojan.Mudropoffoffoff
130837DELETEDBLACKLIST DNS request for known malware domain saltarsmart.biz - Win.Trojan.Mudropoffoffoff
130838DELETEDBLACKLIST DNS request for known malware domain secretsauce.biz - Win.Trojan.Mudropoffoffoff
130839DELETEDBLACKLIST DNS request for known malware domain serialtrunc.com - Win.Trojan.Mudropoffoffoff
130840DELETEDBLACKLIST DNS request for known malware domain towertilt.com - Win.Trojan.Mudropoffoffoff
130841DELETEDBLACKLIST DNS request for known malware domain websparkle.biz - Win.Trojan.Mudropoffoffoff
130842DELETEDBLACKLIST DNS request for known malware domain wisenwizard.net - Win.Trojan.Mudropoffoffoff
130891DELETEDBLACKLIST DNS request for known malware domain bedircati.comoffoffoff
130899DELETEDBLACKLIST DNS request for known malware domain aim-cs.ruoffoffoff
130916DELETEDBLACKLIST DNS request for known malware domain secure-login.homeftp.net - Win.Worm.Phelshapoffoffoff
130952DELETEDBLACKLIST DNS request for known malware CNC domain ns1.dnsfor0.com - Win.Trojan.Symmioffoffoff
130980DELETEDBLACKLIST DNS request for known malware domain plugin.92taojin.com - Win.Trojan.Karnosoffoffoff
131003DELETEDBLACKLIST DNS request for known malware domain knightmemory.com - Win.Trojan.Nethiefoffoffoff
131034DELETEDBLACKLIST DNS request for known malware domain www.casting.diamondhostess.hu- Win.Trojan.SpyBankeroffoffoff
131035DELETEDBLACKLIST DNS request for known malware domain www.uslugi-ryazan.ru - Win.Trojan.SpyBankeroffoffoff
131054DELETEDBLACKLIST DNS request for known malware domain site1379390026.hospedagemdesites.ws - Win.Trojan.Banloadoffoffoff
131060DELETEDBLACKLIST DNS request for known malware domain claudia.tipido.net - Win.Trojan.Exponeoffoffoff
131061DELETEDBLACKLIST DNS request for known malware domain cornelia1.funpic.de - Win.Trojan.Exponeoffoffoff
131065DELETEDBLACKLIST DNS request for known malware domain odvez.to - Win.Trojan.Tobinloadoffoffoff
131078DELETEDBLACKLIST DNS request for known malware domain exactlyfind.com - Win.Trojan.Alurewooffoffoff
131107DELETEDBLACKLIST DNS request for known malware domain blackshades.ru - Win.Trojan.Blackshadesoffoffoff
131117DELETEDBLACKLIST DNS request for known malware domain download.ustechsupport.comoffoffoff
131134DELETEDBLACKLIST DNS request for known malware domain obamasu.webs.com - Win.Trojan.Deedeviloffoffoff
131137DELETEDBLACKLIST DNS request for known malware domain aisgolf.com - Win.Trojan.Sloftoffoffoff
131138DELETEDBLACKLIST DNS request for known malware domain dudicalworld.com - Win.Trojan.Sloftoffoffoff
131139DELETEDBLACKLIST DNS request for known malware domain fourchette-des-arenes.com - Win.Trojan.Sloftoffoffoff
131140DELETEDBLACKLIST DNS request for known malware domain nyescortsasianoutcall.com - Win.Trojan.Sloftoffoffoff
131141DELETEDBLACKLIST DNS request for known malware domain trinity-electric-inc.com - Win.Trojan.Sloftoffoffoff
131151DELETEDBLACKLIST DNS request for known malware domain code.aggipulla.com - Win.Trojan.Fareitoffoffoff
131153DELETEDBLACKLIST DNS request for known malware domain group.aggipulla.com - Win.Trojan.Fareitoffoffoff
131154DELETEDBLACKLIST DNS request for known malware domain hotel.aggipulla.com - Win.Trojan.Fareitoffoffoff
131156DELETEDBLACKLIST DNS request for known malware domain smart.aggipulla.com - Win.Trojan.Fareitoffoffoff
131163DELETEDBLACKLIST DNS request for known malware domain c1.downlloaddatamy.infooffoffoff
131164DELETEDBLACKLIST DNS request for known malware domain i1.megagetnews.netoffoffoff
131169DELETEDBLACKLIST DNS request for known malware domain lvpconveyors.co.uk - Win.Trojan.Cryptodefenceoffoffoff
131170DELETEDBLACKLIST DNS request for known malware domain technopoleci.com - Win.Trojan.Cryptodefenceoffoffoff
131175DELETEDBLACKLIST DNS request for known malware domain zelvesz.2u.se - Win.Trojan.Tempestoffoffoff
131186DELETEDBLACKLIST DNS request for known malware domain kentawp.3322.org - Win.Trojan.Guiseoffoffoff
131187DELETEDBLACKLIST DNS request for known malware domain sarkaricareer.com - Win.Trojan.Scarpnexoffoffoff
131226DELETEDBLACKLIST DNS request for known malware domain 143biz.cc.md-14.webhostbox.net - Win.Trojan.Sorayaoffoffoff
131227DELETEDBLACKLIST DNS request for known malware domain blog.wordpress-catalog.com - Win.Trojan.Sorayaoffoffoff
131233DELETEDBLACKLIST DNS request for known malware domain ayool.no-ip.org - Win.Trojan.Nuckamoffoffoff
131239DELETEDBLACKLIST DNS request for known malware domain arearugshopper.com - Win.Downloader.Upatreoffoffoff
131247DELETEDBLACKLIST DNS request for known malware domain artem.sataev.com - HAVEX RAToffoffoff
131248DELETEDBLACKLIST DNS request for known malware domain mahsms.ir - HAVEX RAToffoffoff
131249DELETEDBLACKLIST DNS request for known malware domain pekanin.freevar.com - HAVEX RAToffoffoff
131250DELETEDBLACKLIST DNS request for known malware domain simpsons.freesexycomics.com - HAVEX RAToffoffoff
131251DELETEDBLACKLIST DNS request for known malware domain swissitaly.com - HAVEX RAToffoffoff
131252DELETEDBLACKLIST DNS request for known malware domain toons.freesexycomics.com - HAVEX RAToffoffoff
131253DELETEDBLACKLIST DNS request for known malware domain www.pc-service-fm.de - HAVEX RAToffoffoff
131257DELETEDBLACKLIST DNS request for known malware domain rc1.arkinixik.net - Win.Trojan.Destoplugoffoffoff
131263DELETEDBLACKLIST DNS request for known malware domain ac-shippingllc.com - Win.Trojan.Caphawoffoffoff
131264DELETEDBLACKLIST DNS request for known malware domain dza.cc - Win.Trojan.Caphawoffoffoff
131265DELETEDBLACKLIST DNS request for known malware domain elg.cc - Win.Trojan.Caphawoffoffoff
131266DELETEDBLACKLIST DNS request for known malware domain gdm.cc - Win.Trojan.Caphawoffoffoff
131267DELETEDBLACKLIST DNS request for known malware domain irm.cc - Win.Trojan.Caphawoffoffoff
131268DELETEDBLACKLIST DNS request for known malware domain uab.cc - Win.Trojan.Caphawoffoffoff
131269DELETEDBLACKLIST DNS request for known malware domain honkytonk69.tk.hostinghood.com - Win.Trojan.Vectecoinoffoffoff
131287DELETEDBLACKLIST DNS request for known malware domain dc186.gulfup.com - Win.Downloader.Bladabindioffoffoff
131318DELETEDBLACKLIST DNS request for known malware domain vividl.comze.com - Win.Trojan.Zedivoffoffoff
131325FILE-OTHERApple OSX Finder DMG volume name memory corruption attemptoffoffoff
131326DELETEDBLACKLIST DNS request for known malware domain a1.p2ptool.com - Win.Trojan.Rofinoffoffoff
131327DELETEDBLACKLIST DNS request for known malware domain plus.zzinfor.cn - Win.Trojan.Rofinoffoffoff
131357DELETEDBLACKLIST DNS request for known malware domain gjjb.flnet.org - Win.Trojan.Httneilcoffoffoff
131358DELETEDBLACKLIST DNS request for known malware domain lehnjb.epac.to - Win.Trojan.Httneilcoffoffoff
131423DELETEDBLACKLIST DNS request for known malware domain indo.msname.orgoffoffoff
131444DELETEDBLACKLIST DNS request for known malware domain dominicanajoker.com - Win.Trojan.CryptoWalloffoffoff
131445DELETEDBLACKLIST DNS request for known malware domain likeyoudominicana.com - Win.Trojan.CryptoWalloffoffoff
131464DELETEDBLACKLIST DNS request for known malware domain disk57.com - Win.Trojan.Andromoffoffoff
131472DELETEDBLACKLIST DNS request for known malware domain nanoseklo.net - Win.Trojan.HW32offoffoff
131515DELETEDBLACKLIST DNS request for known malware domain oguhtell.ch - Andr.Trojan.Emmentaloffoffoff
131517DELETEDBLACKLIST DNS request for known malware domain security-apps.net - Andr.Trojan.Emmentaloffoffoff
131518DELETEDBLACKLIST DNS request for known malware domain tc-zo.ch - Andr.Trojan.Emmentaloffoffoff
131600DELETEDBLACKLIST DNS reverse lookup response for known malware domain spheral.ru - Win.Trojan.Gluptebaoffoffoff
131601DELETEDBLACKLIST DNS request for known malware domain .bayandovmeci.com - Win.Trojan.Gluptebaoffoffoff
131639DELETEDBLACKLIST DNS request for known malware domain hslh.sytes.net - Win.Worm.Jenxcusoffoffoff
131653DELETEDBLACKLIST DNS request for known malware domain amigobin.cdnmail.ruoffoffoff
131654DELETEDBLACKLIST DNS request for known malware domain brasicerer1976.co.vuoffoffoff
131659DELETEDBLACKLIST DNS request for known malware domain leicaresbe1976.co.vuoffoffoff
131660DELETEDBLACKLIST DNS request for known malware domain ltc.give-me-coins.comoffoffoff
131661DELETEDBLACKLIST DNS request for known malware domain quidisnagend1983.co.vuoffoffoff
131662DELETEDBLACKLIST DNS request for known malware domain sputnikmailru.cdnmail.ruoffoffoff
131663DELETEDBLACKLIST DNS request for known malware domain tioracudi1977.co.vuoffoffoff
131690DELETEDBLACKLIST DNS request for known malware domain managejave.myftp.org - Win.Trojan.Kronosoffoffoff
131720DELETEDBLACKLIST DNS request for known malware domain albus-capital.com - Win.Trojan.Waskioffoffoff
131721DELETEDBLACKLIST DNS request for known malware domain albuscapital.info - Win.Trojan.Waskioffoffoff
131737DELETEDBLACKLIST DNS request for known malware domain razihearing.comoffoffoff
131754DELETEDBLACKLIST DNS request for known malware domain microsoftca.com - Win.Trojan.Mirasoffoffoff
131781DELETEDBLACKLIST DNS request for known malware domain gefesosexwithjimmy.orgoffoffoff
131803DELETEDBLACKLIST DNS request for known malware domain imaps.qki6.com - Win.Trojan.Dizkoffoffoff
131804DELETEDBLACKLIST DNS request for known malware domain static.jg7.org - Win.Trojan.Dizkoffoffoff
131815DELETEDBLACKLIST DNS request for known malware domain www.ltp666.com - Win.Trojan.Graftoroffoffoff
131816DELETEDBLACKLIST DNS request for known malware domain yuzhanqiu1990.3322.org - Win.Trojan.Graftoroffoffoff
131829DELETEDBLACKLIST DNS request for known malware domain eduarditopallares.mooo.com - Win.Trojan.VBKryptoffoffoff
131872DELETEDBLACKLIST DNS request for known malware domain telechargementmobile.besaba.com - Win.Dropper.Agentoffoffoff
131884DELETEDBLACKLIST DNS request for known malware domain video.csmcpr.com - Win.Trojan.Threebyteoffoffoff
131908DELETEDBLACKLIST DNS request for known malware domain recoalmeida.gratisphphost.info - Win.Trojan.Basostaboffoffoff
131919DELETEDBLACKLIST DNS request for known malware domain saltsecond.net - Win.Trojan.Symmioffoffoff
131921DELETEDBLACKLIST DNS request for known malware domain southblood.net - Win.Trojan.Symmioffoffoff
131931DELETEDBLACKLIST DNS request for known malware domain adawareblock.com - Win.Trojan.Xagentoffoffoff
131932DELETEDBLACKLIST DNS request for known malware domain checkmalware.info - Win.Trojan.Xagentoffoffoff
131933DELETEDBLACKLIST DNS request for known malware domain scanmalware.info - Win.Trojan.Xagentoffoffoff
131934DELETEDBLACKLIST DNS request for known malware domain updatepc.org - Win.Trojan.Xagentoffoffoff
131935DELETEDBLACKLIST DNS request for known malware domain updatesoftware24.com - Win.Trojan.Xagentoffoffoff
131936DELETEDBLACKLIST DNS request for known malware domain testservice24.net - Win.Trojan.Xagentoffoffoff
131937DELETEDBLACKLIST DNS request for known malware domain microsofi.org - Win.Trojan.Xagentoffoffoff
131938DELETEDBLACKLIST DNS request for known malware domain microsof-update.com - Win.Trojan.Xagentoffoffoff
131950DELETEDBLACKLIST DNS request for known malware domain ahmedfaiez.info - Win.Trojan.Rukypeeoffoffoff
131951DELETEDBLACKLIST DNS request for known malware domain flushupate.com - Win.Trojan.Rukypeeoffoffoff
131952DELETEDBLACKLIST DNS request for known malware domain pstcmedia.com - Win.Trojan.Rukypeeoffoffoff
131958DELETEDBLACKLIST DNS request for known malware domain ambi.cc - Win.Trojan.Caphawoffoffoff
131959DELETEDBLACKLIST DNS request for known malware domain edal.cc - Win.Trojan.Caphawoffoffoff
131960DELETEDBLACKLIST DNS request for known malware domain express-shippingus.net - Win.Trojan.Caphawoffoffoff
131961DELETEDBLACKLIST DNS request for known malware domain modern-shipping.biz - Win.Trojan.Caphawoffoffoff
131962DELETEDBLACKLIST DNS request for known malware domain sted.cc - Win.Trojan.Caphawoffoffoff
131963DELETEDBLACKLIST DNS request for known malware domain useushippinginc.com - Win.Trojan.Caphawoffoffoff
132019DELETEDBLACKLIST DNS request for known malware domain internetexplorers.orgoffoffoff
132051DELETEDBLACKLIST DNS request for known malware domain www.xsser.comoffoffoff
132078DELETEDBLACKLIST DNS request for known malware domain nova.ddns.us - Linux.Backdoor.Starysuoffoffoff
132079DELETEDBLACKLIST DNS request for known malware domain nova.ns01.us - Linux.Backdoor.Starysuoffoffoff
132176DELETEDBLACKLIST DNS request for known malware domain av4.microsoftsp3.com - Win.Trojan.Plugxoffoffoff
132177DELETEDBLACKLIST DNS request for known malware domain java.ns1.name - Win.Trojan.Plugxoffoffoff
132219DELETEDBLACKLIST DNS request for known malware domain worldnews247.net - Win.Trojan.Kazyoffoffoff
132241DELETEDBLACKLIST DNS request for known malware domain mcclient.0catch.com - WIN.Trojan.Clemintoffoffoff
132242DELETEDBLACKLIST DNS request for known malware domain mcclient.freetzi.com - WIN.Trojan.Clemintoffoffoff
132286DELETEDBLACKLIST DNS request for known malware domain test.hoseen454r.com - Win.Trojan.Sapertilzoffoffoff
132297DELETEDBLACKLIST DNS request for known malware domain cemotrans.com - Win.Trojan.Waskioffoffoff
132298DELETEDBLACKLIST DNS request for known malware domain cryptdice.com - Win.Trojan.Waskioffoffoff
132309DELETEDBLACKLIST DNS request for known malware domain good.myftp.org - Win.Trojan.Farfioffoffoff
132385DELETEDBLACKLIST DNS request for known malware domain tiptronic.soxx.us - Scarsi Trojanoffoffoff
132391DELETEDBLACKLIST DNS request for known malware domain tsl.gettrials.comoffoffoff
132392DELETEDBLACKLIST DNS request for known malware domain adda.lengendport.comoffoffoff
132393DELETEDBLACKLIST DNS request for known malware domain auty.organiccrap.comoffoffoff
132446DELETEDBLACKLIST DNS request for known malware domain 143biz.cc.md-14.webhostbox.net - Win.Trojan.Backoffoffoffoff
132447DELETEDBLACKLIST DNS request for known malware domain cyberwise.biz - Win.Trojan.Backoffoffoffoff
132449DELETEDBLACKLIST DNS request for known malware domain total-update.com - Win.Trojan.Backoffoffoffoff
132452DELETEDBLACKLIST DNS request for known malware domain msframeworkx86.comoffoffoff
132453DELETEDBLACKLIST DNS request for known malware domain msframeworkx86.ruoffoffoff
132454DELETEDBLACKLIST DNS request for known malware domain total-updates.comoffoffoff
132463DELETEDBLACKLIST DNS request for known malware domain octoberpics.ru - Win.Trojan.TorrentLockeroffoffoff
132522DELETEDBLACKLIST DNS request for known malware domain hydroac.info - Win.Trojan.Hancitoroffoffoff
132549DELETEDBLACKLIST DNS request for known malware domain sunzestate.com - Win.Trojan.Extantoffoffoff
132577DELETEDBLACKLIST DNS request for known malware domain pierrejb.agora.eu.orgoffoffoff
132612DELETEDBLACKLIST DNS request for known malware domain cechire.comoffoffoff
132655DELETEDBLACKLIST DNS request for known malware domain mail.q0v.pl - Group 74offoffoff
132658DELETEDBLACKLIST DNS request for known malware domain natoexhibitionff14.com - Group 74offoffoff
132660DELETEDBLACKLIST DNS request for known malware domain q0v.pl - Group 74offoffoff
132661DELETEDBLACKLIST DNS request for known malware domain qov.hu.com - Group 74offoffoff
132676DELETEDBLACKLIST DNS request for known malware domain danidata.dkoffoffoff
132726DELETEDBLACKLIST DNS request for known malware domain www.ilscnu.org.FindHere.org - Win.Backdoor.Uclinu variantoffoffoff
132733DELETEDBLACKLIST DNS request for known malware domain fabernext.roma1.infn.it - Win.Backdoor.Typideg variantoffoffoff
132779DELETEDBLACKLIST DNS request for known malware domain www.web.lookin.at - Win.Backdoor.Eskaetee variantoffoffoff
132972DELETEDBLACKLIST DNS request for known malware domain nettwerk.x10.mx - Win.Trojan.Twerketoffoffoff
132981DELETEDBLACKLIST DNS request for known malware domain aquametron.com - Win.Trojan.Graftoroffoffoff
132982DELETEDBLACKLIST DNS request for known malware domain fxxx114.com - Win.Trojan.Graftoroffoffoff
132983DELETEDBLACKLIST DNS request for known malware domain it885.com.cn - Win.Trojan.Graftoroffoffoff
132984DELETEDBLACKLIST DNS request for known malware domain niudoudou.com - Win.Trojan.Graftoroffoffoff
133119DELETEDBLACKLIST DNS request for known malware domain binaryfeed.in - Win.Trojan.Mariposaoffoffoff
133121DELETEDBLACKLIST DNS request for known malware domain butterfly.BigMoney.biz - Win.Trojan.Mariposaoffoffoff
133122DELETEDBLACKLIST DNS request for known malware domain defintelsucks.com - Win.Trojan.Mariposaoffoffoff
133123DELETEDBLACKLIST DNS request for known malware domain defintelsucks.net - Win.Trojan.Mariposaoffoffoff
133125DELETEDBLACKLIST DNS request for known malware domain extraperlo.biz - Win.Trojan.Mariposaoffoffoff
133126DELETEDBLACKLIST DNS request for known malware domain gusanodeseda.mobi - Win.Trojan.Mariposaoffoffoff
133127DELETEDBLACKLIST DNS request for known malware domain gusanodeseda.net - Win.Trojan.Mariposaoffoffoff
133132DELETEDBLACKLIST DNS request for known malware domain sexme.in - Win.Trojan.Mariposaoffoffoff
133133DELETEDBLACKLIST DNS request for known malware domain tamiflux.net - Win.Trojan.Mariposaoffoffoff
133134DELETEDBLACKLIST DNS request for known malware domain tamiflux.org - Win.Trojan.Mariposaoffoffoff
133135DELETEDBLACKLIST DNS request for known malware domain thejacksonfive.biz - Win.Trojan.Mariposaoffoffoff
133136DELETEDBLACKLIST DNS request for known malware domain thejacksonfive.mobi - Win.Trojan.Mariposaoffoffoff
133137DELETEDBLACKLIST DNS request for known malware domain thejacksonfive.us - Win.Trojan.Mariposaoffoffoff
133138DELETEDBLACKLIST DNS request for known malware domain thesexydude.com - Win.Trojan.Mariposaoffoffoff
133140DELETEDBLACKLIST DNS request for known malware domain hnox.org - Win.Trojan.Mariposaoffoffoff
133142DELETEDBLACKLIST DNS request for known malware domain socksa.com - Win.Trojan.Mariposaoffoffoff
133143DELETEDBLACKLIST DNS request for known malware domain thepicturehut.net - Win.Trojan.Mariposaoffoffoff
133144DELETEDBLACKLIST DNS request for known malware domain yougotissuez.com - Win.Trojan.Mariposaoffoffoff
133150DELETEDBLACKLIST DNS request for known malware domain okurimono.ina-ka.comoffoffoff
133154DELETEDBLACKLIST DNS request for known malware domain news-bbc.podzone.org - Linux.Trojan.Turlaoffoffoff
133281DELETEDBLACKLIST DNS request for known malware domain absurdherd.comoffoffoff
133283DELETEDBLACKLIST DNS request for known malware domain stat.wamme.cn - Win.Trojan.OnlineGamesoffoffoff
133438DELETEDBLACKLIST DNS request for known malware domain gfdimage.esy.es - Win.Trojan.Gefetroeoffoffoff
133560DELETEDBLACKLIST DNS request for known malware domain tracking-recipient.net46.net - Win.Cosstaoffoffoff
133839DELETEDBLACKLIST DNS request for known malware domain linturefa.ru - Win.Trojan.Poseidonoffoffoff
133840DELETEDBLACKLIST DNS request for known malware domain xablopefgr.ru - Win.Trojan.Poseidonoffoffoff
133841DELETEDBLACKLIST DNS request for known malware domain tabidzuwek.ru - Win.Trojan.Poseidonoffoffoff
133842DELETEDBLACKLIST DNS request for known malware domain weksrubaz.ru - Win.Trojan.Poseidonoffoffoff
133843DELETEDBLACKLIST DNS request for known malware domain mifastubiv.ru - Win.Trojan.Poseidonoffoffoff
133844DELETEDBLACKLIST DNS request for known malware domain lacdileftre.ru - Win.Trojan.Poseidonoffoffoff
133882DELETEDBLACKLIST DNS request for known malware domain ere5453.com - Win.Trojan.Jadtreoffoffoff
134040DELETEDBLACKLIST DNS request for known malware domain s12.site90.net - Win.Backdoor.Igliveforgoffoffoff
134043DELETEDBLACKLIST DNS request for known malware domain cybercrime.rocks - Win.Trojan.Exacrytionoffoffoff
134218DELETEDBLACKLIST DNS request for known malware domain lazyshare.net - Win.Trojan.Nanocoreoffoffoff
134370DELETEDBLACKLIST DNS request for known malware domain mymoney.000a.de - Win.Trojan.Fareitoffoffoff
134490DELETEDBLACKLIST DNS request for known malware domain ngusto-uro.ruoffoffoff
134570DELETEDBLACKLIST DNS request for known malware domain driveake.webcindario.com - Win.Trojan.Zinnemlsoffoffoff
134571DELETEDBLACKLIST DNS request for known malware domain nonobabe.100webspace.net - Win.Trojan.Zinnemlsoffoffoff
134657DELETEDBLACKLIST DNS request for known malware domain apporistale.com - Win.Trojan.Poseidonoffoffoff
134660DELETEDBLACKLIST DNS request for known malware domain dingdownmahedt.ru - Win.Trojan.Poseidonoffoffoff
134661DELETEDBLACKLIST DNS request for known malware domain ferepritdi.ru - Win.Trojan.Poseidonoffoffoff
134662DELETEDBLACKLIST DNS request for known malware domain terethaundv.ru - Win.Trojan.Poseidonoffoffoff
134663DELETEDBLACKLIST DNS request for known malware domain howthatficy.ru - Win.Trojan.Poseidonoffoffoff
134664DELETEDBLACKLIST DNS request for known malware domain lasttrainforest.com - Win.Trojan.Poseidonoffoffoff
134668DELETEDBLACKLIST DNS request for known malware domain srachechno.com - Win.Trojan.Poseidonoffoffoff
134670DELETEDBLACKLIST DNS request for known malware domain mehanistran.com - Win.Trojan.Poseidonoffoffoff
134671DELETEDBLACKLIST DNS request for known malware domain switlawert.com - Win.Trojan.Poseidonoffoffoff
134672DELETEDBLACKLIST DNS request for known malware domain vesnarusural.ru - Win.Trojan.Poseidonoffoffoff
134673DELETEDBLACKLIST DNS request for known malware domain petronasconn.ru - Win.Trojan.Poseidonoffoffoff
134674DELETEDBLACKLIST DNS request for known malware domain restavratormira.ru - Win.Trojan.Poseidonoffoffoff
134675DELETEDBLACKLIST DNS request for known malware domain serppoglandam.ru - Win.Trojan.Poseidonoffoffoff
134676DELETEDBLACKLIST DNS request for known malware domain wertstumbahn.ru - Win.Trojan.Poseidonoffoffoff
134677DELETEDBLACKLIST DNS request for known malware domain queryforworld.com - Win.Trojan.Poseidonoffoffoff
134678DELETEDBLACKLIST DNS request for known malware domain serfilefnom.ru - Win.Trojan.Poseidonoffoffoff
134684DELETEDBLACKLIST DNS request for known malware domain forttapaha.ru - Win.Trojan.Poseidonoffoffoff
134686DELETEDBLACKLIST DNS request for known malware domain gantropine.com - Win.Trojan.Poseidonoffoffoff
134687DELETEDBLACKLIST DNS request for known malware domain gutontredsup.com - Win.Trojan.Poseidonoffoffoff
134688DELETEDBLACKLIST DNS request for known malware domain hepretfortna.ru - Win.Trojan.Poseidonoffoffoff
134689DELETEDBLACKLIST DNS request for known malware domain juindorey.com - Win.Trojan.Poseidonoffoffoff
134695DELETEDBLACKLIST DNS request for known malware domain pavesohap.com - Win.Trojan.Poseidonoffoffoff
134698DELETEDBLACKLIST DNS request for known malware domain qwertygontul.com - Win.Trojan.Poseidonoffoffoff
134699DELETEDBLACKLIST DNS request for known malware domain rechedtthaten.ru - Win.Trojan.Poseidonoffoffoff
134701DELETEDBLACKLIST DNS request for known malware domain repherfeted.com - Win.Trojan.Poseidonoffoffoff
134705DELETEDBLACKLIST DNS request for known malware domain sivesuhat.ru - Win.Trojan.Poseidonoffoffoff
134706DELETEDBLACKLIST DNS request for known malware domain stenfirthsta.com - Win.Trojan.Poseidonoffoffoff
134711DELETEDBLACKLIST DNS request for known malware domain a.gwas.perl.sh - Win.Trojan.Windexoffoffoff
134712DELETEDBLACKLIST DNS request for known malware domain a-gwas-01.slyip.net - Win.Trojan.Windexoffoffoff
134713DELETEDBLACKLIST DNS request for known malware domain a-gwas-01.dyndns.org - Win.Trojan.Windexoffoffoff
134828DELETEDBLACKLIST DNS request for known malware domain pvt.relance.fr - Win.Trojan.Cozybearoffoffoff
134830DELETEDBLACKLIST DNS request for known malware domain seccionpolitica.com.ar - Win.Trojan.Cozybearoffoffoff
134928DELETEDBLACKLIST DNS request for known malware domain aotc.ru - Win.Trojan.Urausyoffoffoff
135028DELETEDBLACKLIST DNS request for known malware domain killer0709.pf-control.de - Win.Keylogger.Lotroncoffoffoff
135068DELETEDBLACKLIST DNS request for known malware domain tooti15.no-ip.biz - Win.Trojan.AutoItoffoffoff
135099DELETEDBLACKLIST DNS request for known malware domain houseofsultan.co.uk - Win.Trojan.Dridexoffoffoff
135100DELETEDBLACKLIST DNS request for known malware domain houstonsbackyard.com - Win.Trojan.Dridexoffoffoff
135368DELETEDBLACKLIST DNS request for known malware domain bbs.gokickes.com - Win.Backdoor.Bimtenioffoffoff
135369DELETEDBLACKLIST DNS request for known malware domain domain.gokickes.com - Win.Backdoor.Bimtenioffoffoff
135370DELETEDBLACKLIST DNS request for known malware domain img.lifesolves.com - Win.Backdoor.Bimtenioffoffoff
135595DELETEDBLACKLIST DNS request for known malware domain dpaste.dzfl.pl - Trojan.Win32.Nibagemoffoffoff
135788DELETEDBLACKLIST DNS request for known malware domain ezglobalmarketing.com - TeslaCrypt 2.0offoffoff
135789DELETEDBLACKLIST DNS request for known malware domain fgainterests.com - TeslaCrypt 2.0offoffoff
135791DELETEDBLACKLIST DNS request for known malware domain serenitynowbooksandgifts.com - TeslaCrypt 2.0offoffoff
135792DELETEDBLACKLIST DNS request for known malware domain shmetterheath.ru - TeslaCrypt 2.0offoffoff
135793DELETEDBLACKLIST DNS request for known malware domain teenpornotube.org - TeslaCrypt 2.0offoffoff
135800DELETEDBLACKLIST DNS request for known malware domain itsurvive.com - Win.Trojan.Seyelifonoffoffoff
135801DELETEDBLACKLIST DNS request for known malware domain quadjacks.com - Win.Trojan.Seyelifonoffoffoff
135838DELETEDBLACKLIST DNS request for known malware domain drop-into.hol.es - Win.Trojan.Namospuoffoffoff
135839DELETEDBLACKLIST DNS request for known malware domain exonapps.nl - Win.Trojan.Namospuoffoffoff
136185DELETEDBLACKLIST DNS request for known malware domain bokerensheng.lofter.com - Win.Trojan.Qytagsoffoffoff
136200DELETEDBLACKLIST DNS request for known malware domain ali5319ali.mooo.com - Win.Downloader.Bladabindioffoffoff
136205DELETEDBLACKLIST DNS request for known malware domain init.crash-analytics.com - XcodeGhostoffoffoff
136206DELETEDBLACKLIST DNS request for known malware domain init.icloud-diagnostics.com - XcodeGhostoffoffoff
136207DELETEDBLACKLIST DNS request for known malware domain init.icloud-analysis.com - XcodeGhostoffoffoff
136273DELETEDBLACKLIST DNS request for known malware domain arijoputane.com - Win.Trojan.Corebotoffoffoff
136274DELETEDBLACKLIST DNS request for known malware domain vincenzo-sorelli.com - Win.Trojan.Corebotoffoffoff
136293DELETEDBLACKLIST DNS request for known malware domain exenull1.appspot.com - Win.Backdoor.Nisinuloffoffoff
136382DELETEDBLACKLIST DNS request for known malware domain mindfucktoys.com - Necursoffoffoff
136390DELETEDBLACKLIST DNS request for known malware domain facetoo.co.vu - Win.Trojan.DustySkyoffoffoff
136391DELETEDBLACKLIST DNS request for known malware domain games.buybit.us - Win.Trojan.DustySkyoffoffoff
136392DELETEDBLACKLIST DNS request for known malware domain news.buybit.us - Win.Trojan.DustySkyoffoffoff
136394DELETEDBLACKLIST DNS request for known malware domain sip.supportcom.xyz - Win.Trojan.DustySkyoffoffoff
136395DELETEDBLACKLIST DNS request for known malware domain update.ciscofreak.com - Win.Trojan.DustySkyoffoffoff
136464DELETEDBLACKLIST DNS request for known malware domain oowdesign.com - Win.Trojan.AridViperoffoffoff
136465DELETEDBLACKLIST DNS request for known malware domain yalladesign.net - Win.Trojan.AridViperoffoffoff
136466DELETEDBLACKLIST DNS request for known malware domain coldydesign.com - Win.Trojan.AridViperoffoffoff
136470DELETEDBLACKLIST DNS request for known malware domain kemoge.net - Kemogeoffoffoff
136518DELETEDBLACKLIST DNS request for known malware domain corpsone.agropecuaria.ws - Win.Trojan.Banker.NWToffoffoff
136519DELETEDBLACKLIST DNS request for known malware domain gfxcorp.engenharia.ws - Win.Trojan.Banker.NWToffoffoff
136521DELETEDBLACKLIST DNS request for known malware domain smartcell.webcindario.com - Win.Trojan.Banker.NWToffoffoff
136538DELETEDBLACKLIST DNS request for known malware domain fas-go-jp-security.servecounterstrike.com - Win.Trojan.Broluxoffoffoff
136539DELETEDBLACKLIST DNS request for known malware domain luxurybro.co.kr - Win.Trojan.Broluxoffoffoff
136764DELETEDBLACKLIST DNS request for known malware domain blogbox.it - Win.Trojan.Stupevaloffoffoff
136768DELETEDBLACKLIST DNS request for known malware domain razercommns.com - Win.Trojan.Redcontroleoffoffoff
136769DELETEDBLACKLIST DNS request for known malware domain webdelphi.ru - Win.Trojan.Redcontroleoffoffoff
136773DELETEDBLACKLIST DNS request for known malware domain 240.la - Win.Trojan.Zimwervioffoffoff
136776DELETEDBLACKLIST DNS request for known malware domain zy98.com - Win.Trojan.Zimwervioffoffoff
136779DELETEDBLACKLIST DNS request for known malware domain xa.ghokswa.com - Win.Trojan.Gokawaoffoffoff
136780DELETEDBLACKLIST DNS request for known malware domain xa.yessearches.com - Win.Trojan.Gokawaoffoffoff
136799DELETEDBLACKLIST DNS request for known malware domain cbbps0.lh1.in - Trojan.Win32.Ruinmail.Aoffoffoff
136806DELETEDBLACKLIST DNS request for known malware domain desktopicon.net - Win.Trojan.Nodslitoffoffoff
136809DELETEDBLACKLIST DNS request for known malware domain creativecode.com.br - OSX.Trojan.Mabouiaoffoffoff
136840DELETEDBLACKLIST DNS request for known malware domain poems.net16.net - Win.Trojan.Leralogsoffoffoff
136904DELETEDBLACKLIST DNS GlassRAT domain alternate009.comoffoffoff
136905DELETEDBLACKLIST DNS GlassRAT domain cainformations.comoffoffoff
136907DELETEDBLACKLIST DNS GlassRAT domain foryousee.netoffoffoff
136908DELETEDBLACKLIST DNS GlassRAT domain rausers.comoffoffoff
136909DELETEDBLACKLIST DNS GlassRAT domain news-google.netoffoffoff
136910DELETEDBLACKLIST DNS GlassRAT domain mechanicnote.comoffoffoff
137456DELETEDBLACKLIST DNS request for known malware domain oriontronproject.site11.com - Win.Trojan.Sovfooffoffoff
137472DELETEDBLACKLIST DNS request for known malware domain akaros79.no-ip.biz - Win.Trojan.Nancratoffoffoff
137473DELETEDBLACKLIST DNS request for known malware domain alohamoneydrop.no-ip.biz - Win.Trojan.Nancratoffoffoff
137474DELETEDBLACKLIST DNS request for known malware domain althaman123.ohost.de - Win.Trojan.Nancratoffoffoff
137477DELETEDBLACKLIST DNS request for known malware domain cleintten101.no-ip.biz - Win.Trojan.Nancratoffoffoff
137480DELETEDBLACKLIST DNS request for known malware domain faceebook.servehttp.com - Win.Trojan.Nancratoffoffoff
137482DELETEDBLACKLIST DNS request for known malware domain malouzimbra.no-ip.biz - Win.Trojan.Nancratoffoffoff
137483DELETEDBLACKLIST DNS request for known malware domain mathew79.no-ip.biz - Win.Trojan.Nancratoffoffoff
137488DELETEDBLACKLIST DNS request for known malware domain supercold1.ddns.net - Win.Trojan.Nancratoffoffoff
138297DELETEDBLACKLIST DNS request for known malware domain agent.wizztrakys.com - SpywareJarloffoffoff
138298DELETEDBLACKLIST DNS request for known malware domain dl.auhazard.com - SpywareJarloffoffoff
138299DELETEDBLACKLIST DNS request for known malware domain dl.wizzuniquify.com - SpywareJarloffoffoff
138301DELETEDBLACKLIST DNS request for known malware domain www.csdimonetize.com - SpywareJarloffoffoff
138527DELETEDBLACKLIST DNS request for known malware domain melon25.ru - XBotoffoffoff
138604DELETEDBLACKLIST DNS request for known malware domain tongjii.us - JS_JITONoffoffoff
138605DELETEDBLACKLIST DNS request for known malware domain tongjj.info - JS_JITONoffoffoff
138611DELETEDBLACKLIST DNS request for known malware domain gils.ho.ua - Win.Trojan.Wallexoffoffoff
138612DELETEDBLACKLIST DNS request for known malware domain wallex.ho.ua - Win.Trojan.Wallexoffoffoff
138725DELETEDBLACKLIST DNS request for known malware domain evengtorsdodint.com - Win.Trojan.Poseidonoffoffoff
139051DELETEDBLACKLIST DNS request for known malware domain adsl.carpediem.fr - Win.Trojan.Adialeroffoffoff
139057DELETEDBLACKLIST DNS request for known malware domain webshell.jexboss.net - JSP webshell backdooroffoffoff
139106MALWARE-CNCWin.Trojan.LuminosityLink RAT variant outbound connectionoffdropdrop
139107MALWARE-CNCWin.Trojan.LuminosityLink RAT variant inbound connectionoffdropdrop
139367DELETEDBLACKLIST DNS request for known malware domain up-king.com - Win.Trojan.Lorozoad offoffoff
139447DELETEDBLACKLIST DNS request for known malware domain plusvan.com - Win.Trojan.Renosoffoffoff
139646DELETEDBLACKLIST DNS request for known malware domain alwaysonline.pw - Win.Trojan.ZeusPandaoffoffoff
139649DELETEDBLACKLIST DNS request for known malware domain denoted-chioces.com - Win.Trojan.ZeusPandaoffoffoff
139718DELETEDBLACKLIST DNS request for known malware domain ns1.logitech-usa.com - pisloaderoffoffoff
139719DELETEDBLACKLIST DNS request for known malware domain globalprint-us.com - pisloaderoffoffoff
139720DELETEDBLACKLIST DNS request for known malware domain intranetwabcam.com - pisloaderoffoffoff
139721DELETEDBLACKLIST DNS request for known malware domain login.access-mail.com - pisloaderoffoffoff
139724DELETEDBLACKLIST DNS request for known malware domain hi.getgo2.com - pisloaderoffoffoff
139739DELETEDBLACKLIST DNS request for known malware domain dns01.ninth.biz - Win.Backdoor.Contopeeoffoffoff
139740DELETEDBLACKLIST DNS request for known malware domain ovhelp.mrbasic.com - Win.Backdoor.Contopeeoffoffoff
139782DELETEDBLACKLIST DNS request for known malware domain file.anyoffice.info - Win.Trojan.Lientchtpoffoffoff
139858DELETEDBLACKLIST DNS request for known malware domain eholidays.mooo.com - Win.Trojan.NanHaiShuoffoffoff
139859DELETEDBLACKLIST DNS request for known malware domain humans.mooo.info - Win.Trojan.NanHaiShuoffoffoff
139860DELETEDBLACKLIST DNS request for known malware domain presentation.twilightparadox.com - Win.Trojan.NanHaiShuoffoffoff
139862DELETEDBLACKLIST DNS request for known malware domain mines.port0.org - Win.Trojan.NanHaiShuoffoffoff
139939DELETEDBLACKLIST DNS request for known malware domain supketwron.ru - Donoffoffoffoff
139940DELETEDBLACKLIST DNS request for known malware domain eparfum.ro - Donoffoffoffoff
140025DELETEDBLACKLIST DNS request for known malware domain securedesignus.com - Win.Trojan.Shaktioffoffoff
140026DELETEDBLACKLIST DNS request for known malware domain web4solution.net - Win.Trojan.Shaktioffoffoff
140988BROWSER-IEMicrosoft Internet Explorer out of bounds read attemptoffdropdrop
140989BROWSER-IEMicrosoft Internet Explorer out of bounds read attemptoffdropdrop
141124DELETEDBLACKLIST DNS request for known malware domain insta.reduct.ruoffoffoff
141126DELETEDBLACKLIST DNS request for known malware domain mymodule.waterfilter.in.uaoffoffoff
141127DELETEDBLACKLIST DNS request for known malware domain one2shoppee.comoffoffoff
141128DELETEDBLACKLIST DNS request for known malware domain private.directinvesting.comoffoffoff
141131DELETEDBLACKLIST DNS request for known malware domain www.cderlearn.comoffoffoff
141167DELETEDBLACKLIST DNS request for known malware domain himalayard.de - Win.Trojan.Augustoffoffoff
141168DELETEDBLACKLIST DNS request for known malware domain krusingtheworld.de - Win.Trojan.Augustoffoffoff
141169DELETEDBLACKLIST DNS request for known malware domain muralegdanskzaspa.eu - Win.Trojan.Augustoffoffoff
141170DELETEDBLACKLIST DNS request for known malware domain overstockage.com - Win.Trojan.Augustoffoffoff
141172DELETEDBLACKLIST DNS request for known malware domain thedragon318.com - Win.Trojan.Augustoffoffoff
141655DELETEDBLACKLIST DNS request for known malware domain chrome-up.date - Win.Trojan.MagicHoundoffoffoff
141779DELETEDBLACKLIST DNS request for known malware domain eye-watch.in - Ratankbaoffoffoff
142130DELETEDBLACKLIST DNS request for known malware domain update.winappupdater.com - Win.Trojan.Ismdooroffoffoff
144647MALWARE-OTHERWin.Ransomware.BadRabbit propagation via SMB2 transfer attemptoffdropdrop
144649MALWARE-OTHERWin.Ransomware.BadRabbit propagation via SMB2 transfer attemptoffdropdrop
Medium Priority
GIDSIDRule GroupRule MessagePolicy State
Con.Bal.Sec.
131513BROWSER-FIREFOXMultiple browser pressure function denial of service attemptoffoffoff
Low Priority
GIDSIDRule GroupRule MessagePolicy State
Con.Bal.Sec.
131705DELETEDBLACKLIST DNS request for known PUA domain mytransitguide.com - MyTransitGuide Toolbaroffoffoff