Joe Sandbox Cloud Basic Analysis Report
Edit tour

Windows Analysis Report
Heisenberg.Bug.txt

Overview

General Information

Sample Name:Heisenberg.Bug.txt
Analysis ID:822443
MD5:1f3b5914e78ad21317cc986ac7e7a392
SHA1:ee1949ce703acc813d7bba136d626580194bd663
SHA256:f3aa34c972b0f6ab38c34e187efdaf09ce9da51270a365308234d3fc39f25216

Detection

Score:56
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
Queries the volume information (name, serial number etc) of a device

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

Process Tree

  • System is w10x64
  • notepad.exe (PID: 5888 cmdline: "C:\Windows\system32\NOTEPAD.EXE" C:\Users\user\Desktop\Heisenberg.Bug.txt MD5: BB9A06B8F2DD9D24C77F389D7B2B58D2)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtAvira: detected
Source: Heisenberg.Bug.txtReversingLabs: Detection: 29%
Source: Heisenberg.Bug.txtVirustotal: Detection: 30%Perma Link
Source: Heisenberg.Bug.txtString found in binary or memory: ***** Go to: http://www.hotmail.com equals www.hotmail.com (Hotmail)
Source: Heisenberg.Bug.txtString found in binary or memory: ***** Go to: http://www.yahoo.co.kr equals www.yahoo.com (Yahoo)
Source: Heisenberg.Bug.txtString found in binary or memory: HTTP://217.12.3.109/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: HTTP://217.12.3.109/=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: HTTP://217.12.=
Source: Heisenberg.Bug.txtString found in binary or memory: http://008.pleasehoodia.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://0a6q6woxnq6yi0026i0k600i.genevoisfc.com/?zrzdjatto
Source: Heisenberg.Bug.txtString found in binary or memory: http://0o6vn069ow5yii0dni0vni00.porodineel.com/?rsytlpqqo
Source: Heisenberg.Bug.txtString found in binary or memory: http://0uow6aohn9oyii0en0ie5ii0.nestlikelh.com/?sbgwfw
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.100watches.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.100watches.net/rm/
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.fashionablewatches.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.fashionablewatches.net/rm/
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.stylishwatches.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.stylishwatches.net/rm/
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.superpills.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.superpills.net/rm/
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.watches-for-everyone.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.watches-for-everyone.com/rm/
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.yeswatches.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://121.yeswatches.net/rm/
Source: Heisenberg.Bug.txtString found in binary or memory: http://177w6jpapx6z1jje611e6j1j.conidiumfe.com/?yecicvgkalok
Source: Heisenberg.Bug.txtString found in binary or memory: http://195.7.115.58/.cgi/paypal/cgi-bin/webscrcmd_login.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://1controlling9.hereforalimitedtimeonly.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://1p7e617s7xoh11je6j1w6jj1.muranhe.info/?ewbpisovwmn
Source: Heisenberg.Bug.txtString found in binary or memory: http://1p7e617s7xoh11je6j1w6jj1.oportoal.com/?jrqfv
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://200.164.144.190/test/movere/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://200.164.144.190/test/red/index.php?id=3Dnedford
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://200.164.144.190/test/red/legal/index.ph=
Source: Heisenberg.Bug.txtString found in binary or memory: http://203.141.149.153/.var/.ebay.com/index.php
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://203.95.1.160/remov=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://204.188.76.85/LIVE_FROM_THE_WIRE.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://210.230.195.34/.temp/pay=
Source: Heisenberg.Bug.txtString found in binary or memory: http://211.239.168.148/~e4interior/image/bow/index.php
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://217.12.3.109/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://217.12.3.109=
Source: Heisenberg.Bug.txtString found in binary or memory: http://219.113.214.246/~taku/www.ebay.com/index.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://219.127.126.151/temp/www=
Source: Heisenberg.Bug.txtString found in binary or memory: http://220.163.176.205:8689/AD.png?eid=blast-nearterm-archive
Source: Heisenberg.Bug.txtString found in binary or memory: http://222.110.46.16/usage/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://222.116.135.203/msg.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://222.121.199.11/mrtg/.q/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://28qfpk8t8gp022kx7kkxpkk2.porodineel.com/?sorxjips
Source: Heisenberg.Bug.txtString found in binary or memory: http://2cqdp9qcpxq0k2kx72kf72k2.bewingedea.com/?grrvdipgpc
Source: Heisenberg.Bug.txtString found in binary or memory: http://2cqdp9qcpxq0k2kx72kf72k2.upstrivehi.com/?grfqudhpqauym
Source: Heisenberg.Bug.txtString found in binary or memory: http://2e8y8c8jpb8i22ky7kkg7k22.upstrivehi.com/?irolhhrvdzo
Source: Heisenberg.Bug.txtString found in binary or memory: http://2hotelman8.hereforalimitedtimeonly.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://2q8xp28tqyp0222fpk2f72k2.porodineel.com/?bhhjbp
Source: Heisenberg.Bug.txtString found in binary or memory: http://2q8xpk8bqypik22x72kfp2kk.oportoal.com/?qngsikjcjwm
Source: Heisenberg.Bug.txtString found in binary or memory: http://2qqx7kqtqyp0k2kx722x7kkk.muranhe.info/?ltyjcz
Source: Heisenberg.Bug.txtString found in binary or memory: http://399y8l9urzqj333gql3gq333.conidiumfe.com/?xipgfa
Source: Heisenberg.Bug.txtString found in binary or memory: http://39rgq3rurhqjl33y8l3gq3ll.kanehjn.com/?gapjzrfpcv
Source: Heisenberg.Bug.txtString found in binary or memory: http://3i6wpmlzqx3t7ml.kosonganabl.biz/
Source: Heisenberg.Bug.txtString found in binary or memory: http://3r9gq39u9z81l3lg833g83ll.conidiumfe.com/?uffuvdqkas
Source: Heisenberg.Bug.txtString found in binary or memory: http://3rrgq39crhqj333y8l3y83ll.sarcosisdc.com/?oisitkzv
Source: Heisenberg.Bug.txtString found in binary or memory: http://3w95r0qyqgrj33lw8l3wq33l.itchreedkm.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://44rr5f.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://4aah9msdair2mm4h944zrm44.befileml.com/?tnvpmigbrvjucz
Source: Heisenberg.Bug.txtString found in binary or memory: http://4sahr4adsir24m4zrmmz9mmm.porodineel.com/?npfbcprh
Source: Heisenberg.Bug.txtString found in binary or memory: http://4saz94ada0rkm44hrm4hrm4m.kanehjn.com/?xoyxx
Source: Heisenberg.Bug.txtString found in binary or memory: http://5bbis5bwt1a3nnn0sn5iann5.sarcosisdc.com/?rsxxjapylqlv
Source: Heisenberg.Bug.txtString found in binary or memory: http://5bt0snbwb1a35nn0ann0s555.porodineel.com/?vctaovz
Source: Heisenberg.Bug.txtString found in binary or memory: http://5btianteb1a35nnia55iann5.befileml.com/?wyjyy
Source: Heisenberg.Bug.txtString found in binary or memory: http://5ftyacbxsitln550sn5iannn.bewingedea.com/?psfls
Source: Heisenberg.Bug.txtString found in binary or memory: http://5tt0anbwt1alnnnia5n0snn5.muranhe.info/?xyiakbbnr
Source: Heisenberg.Bug.txtString found in binary or memory: http://61.17.177.205/pp/cgi-bin/webscrcmd_login.php
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://63.223.64.250/removes
Source: Heisenberg.Bug.txtString found in binary or memory: http://63rhs76kt0ows7o.gustavuscb.info/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://69.93.124.100:4350/p.dat
Source: Heisenberg.Bug.txtString found in binary or memory: http://6cu1bocfc2t4oo61t6ojbo66.conidiumfe.com/?bdvksvygwkiq
Source: Heisenberg.Bug.txtString found in binary or memory: http://71v3dhvocyv57p7lup73up77.bewingedea.com/?utfbe
Source: Heisenberg.Bug.txtString found in binary or memory: http://72.29.71.97/xoops/temp/login.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://7dd2c7dydlunp7pkcp7kcp7p.oportoal.com/?oiuykybpvgay
Source: Heisenberg.Bug.txtString found in binary or memory: http://7vvkupvgdlc57772upp2u7p7.oportoal.com/?wuwuotyqaf
Source: Heisenberg.Bug.txtString found in binary or memory: http://80.59.155.154/ebay/login/
Source: Heisenberg.Bug.txtString found in binary or memory: http://80ejdxwidle68qq3v8qlv8q8.egoizerjd.com/?ztruqvwzsw
Source: Heisenberg.Bug.txtString found in binary or memory: http://80w1dxwiv3e6q8q3dqq3d88q.genevoisfc.com/?nqkkr
Source: Heisenberg.Bug.txtString found in binary or memory: http://8keme0wpdheo8884vq8mvqq8.seepweedem.com/?qeldniqfvsiuzd
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://8t.kkadcce.info/?BQ7G76CJR9IjRVB66gb
Source: Heisenberg.Bug.txtString found in binary or memory: http://8uw2v3vtwzd688q1v8q1vqqq.scriptfc.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://8we3dqehwmd6qq8ldq83v8q8.muranhe.info/?nvvttvuqs
Source: Heisenberg.Bug.txtString found in binary or memory: http://8we3v8wzemdoq8q3v88lv8q8.muranhe.info/?aiusda
Source: Heisenberg.Bug.txtString found in binary or memory: http://8welv8eze4do88qlvqq3d8qq.conidiumfe.com/?lekivsy
Source: Heisenberg.Bug.txtString found in binary or memory: http://9jxzf5foehxp9r9bxr9tfr9r.bewingedea.com/?ksndmnx
Source: Heisenberg.Bug.txtString found in binary or memory: http://9xx4e9fifnwprrrmwr9me9r9.befileml.com/?vlzqyjw
Source: Heisenberg.Bug.txtString found in binary or memory: http://9xx4erfixnep99r4e9r4er9r.bilstedaa.com/?bvdcnijh
Source: Heisenberg.Bug.txtString found in binary or memory: http://9xx4erxixnwprr94e9r4er99.porodineel.com/?rfgjlqffbqydr
Source: Heisenberg.Bug.txtString found in binary or memory: http://9xxmw9x0fnwpr99me9rmer99.muranhe.info/?ubziqtrmtqjuck
Source: Heisenberg.Bug.txtString found in binary or memory: http://ATGRIEEOT.67uccvuitou4o6oht66hto6o.buchucm.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Adamczyk.oiling.net/Sharma/Law
Source: Heisenberg.Bug.txtString found in binary or memory: http://Adeodato.soonish.net/Horlings/Kupis
Source: Heisenberg.Bug.txtString found in binary or memory: http://Adrover.trapeziums.net/Yesipenko/Evers
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ahmed.luretics.com/Odynak/Griffiths
Source: Heisenberg.Bug.txtString found in binary or memory: http://Akyol.soonish.net/Haas/Drondova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Albrecht.soonish.net/Johnstone/Pervez
Source: Heisenberg.Bug.txtString found in binary or memory: http://Alejandro.luretics.com/Lecheau/Shield
Source: Heisenberg.Bug.txtString found in binary or memory: http://Allard.luretics.com/Myers/Komochena
Source: Heisenberg.Bug.txtString found in binary or memory: http://Alvarado.trapeziums.net/Moser/Bergeron
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ameye.oiling.net/Grijalva/Giani
Source: Heisenberg.Bug.txtString found in binary or memory: http://Andernach.luretics.com/Angelov/Vorobiev
Source: Heisenberg.Bug.txtString found in binary or memory: http://Anderson.boxings.net/Tsarenko/Torres
Source: Heisenberg.Bug.txtString found in binary or memory: http://Anderson.luretics.com/Milani/Wich
Source: Heisenberg.Bug.txtString found in binary or memory: http://Andersson.luretics.com/Chandra/Arrington
Source: Heisenberg.Bug.txtString found in binary or memory: http://Annie.beststarsite.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Antalik.luretics.com/Cardoso/Brayshaw
Source: Heisenberg.Bug.txtString found in binary or memory: http://Aranzabal.soonish.net/Jellly/Manz
Source: Heisenberg.Bug.txtString found in binary or memory: http://Arias.boxings.net/Nurul/James
Source: Heisenberg.Bug.txtString found in binary or memory: http://Arias.luretics.com/Tralala/Hedworth
Source: Heisenberg.Bug.txtString found in binary or memory: http://Arington.luretics.com/Akbar/Wies
Source: Heisenberg.Bug.txtString found in binary or memory: http://Armellini.luretics.com/Horvat/Gemmink
Source: Heisenberg.Bug.txtString found in binary or memory: http://Arnbak.soonish.net/Skardis/Ake
Source: Heisenberg.Bug.txtString found in binary or memory: http://Arnott.luretics.com/Blomster/Manson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Aroshi.luretics.com/Khorolskaya/Mott
Source: Heisenberg.Bug.txtString found in binary or memory: http://Arvidson.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Attia.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Averyanova.oiling.net/Burch/Fahrizal
Source: Heisenberg.Bug.txtString found in binary or memory: http://Axelsson.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ayala.trapeziums.net/Cox/Shivley
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://BRG.kkadcce.info/?BQ7G76CJR9IjRVBEF
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bacelar.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Badillo.luretics.com/Crocker/Shanditcev
Source: Heisenberg.Bug.txtString found in binary or memory: http://Baker.boxings.net/Flores/Kaminsky
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bamberger.luretics.com/Poh/Emir
Source: Heisenberg.Bug.txtString found in binary or memory: http://Barat.soonish.net/Akers/Lord
Source: Heisenberg.Bug.txtString found in binary or memory: http://Barbie.oiling.net/Urazov/Chistyakova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Battel.luretics.com/Dazz/Hempfing
Source: Heisenberg.Bug.txtString found in binary or memory: http://Batterson.boxings.net/Ferrer/Moreno
Source: Heisenberg.Bug.txtString found in binary or memory: http://Batus.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Beetham.luretics.com/Gloatz/Wrobel
Source: Heisenberg.Bug.txtString found in binary or memory: http://Before.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bell.soonish.net/Koturovic/Duvenage
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bella.soonish.net/Lee/Fay
Source: Heisenberg.Bug.txtString found in binary or memory: http://Belosevic.oiling.net/Oviedo/Schelin
Source: Heisenberg.Bug.txtString found in binary or memory: http://Benckert.luretics.com/Yamagami/Anderson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Benjamin.soonish.net/Hendrick/Negreiros
Source: Heisenberg.Bug.txtString found in binary or memory: http://Berg.soonish.net/Gesinger/Word
Source: Heisenberg.Bug.txtString found in binary or memory: http://Berry.soonish.net/Hanson/Ternianova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Besjes.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bibiana.luretics.com/Rabatovic/Harris
Source: Heisenberg.Bug.txtString found in binary or memory: http://Birla.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bisesti.trapeziums.net/Beekman/Whibley
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bitkevicius.oiling.net/Stytsenko/Moon
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bizjak.soonish.net/Cox/Mahmut
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bjerknes.luretics.com/Oskam/Kruml
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Blast-nearterm-archive.techospdbys.biz/vpr6653
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bogdanov.luretics.com/Meliga/Milivojevic
Source: Heisenberg.Bug.txtString found in binary or memory: http://Boilard.oiling.net/Oleg/Heo
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bojarski.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bolton.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bondarenko.luretics.com/Peritore/Ponomareva
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bonita.bornbout.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bookmaker.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Borisov.oiling.net/Weeliang/Daly
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bossy.oiling.net/Hani/Malone
Source: Heisenberg.Bug.txtString found in binary or memory: http://Boye.luretics.com/Silva/Banin
Source: Heisenberg.Bug.txtString found in binary or memory: http://Boyles.soonish.net/Done/Paredes
Source: Heisenberg.Bug.txtString found in binary or memory: http://Brandi.soonish.net/Rivas/Mydrec
Source: Heisenberg.Bug.txtString found in binary or memory: http://Braun.trapeziums.net/Darren/Noble
Source: Heisenberg.Bug.txtString found in binary or memory: http://Brech.luretics.com/Shamsi/Qureshi
Source: Heisenberg.Bug.txtString found in binary or memory: http://Brekke.soonish.net/Xia/Nance
Source: Heisenberg.Bug.txtString found in binary or memory: http://Brouwers.luretics.com/Krusteva/Pettersson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Brown.trapeziums.net/Hall/Totney
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bryan.soonish.net/Berkowska/Saykol
Source: Heisenberg.Bug.txtString found in binary or memory: http://Budiharto.soonish.net/Wutzke/Tatum
Source: Heisenberg.Bug.txtString found in binary or memory: http://Bulesic.trapeziums.net/Joseph/Herten
Source: Heisenberg.Bug.txtString found in binary or memory: http://Buonamici.luretics.com/Fred/Pavlovic
Source: Heisenberg.Bug.txtString found in binary or memory: http://Burek.luretics.com/Morales/Asa
Source: Heisenberg.Bug.txtString found in binary or memory: http://Burnaby.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Burnley.boxings.net/Hardy/Dorko
Source: Heisenberg.Bug.txtString found in binary or memory: http://Cage.luretics.com/Johnson/Schaapstra
Source: Heisenberg.Bug.txtString found in binary or memory: http://Calderon.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Camargo.luretics.com/Wasti/Matuszewski
Source: Heisenberg.Bug.txtString found in binary or memory: http://Cameron.oiling.net/Gobete/Adsan
Source: Heisenberg.Bug.txtString found in binary or memory: http://Campos.oiling.net/Holyoake/Zheltyakova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Carroll.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Castillo.oiling.net/Drew/Machado
Source: Heisenberg.Bug.txtString found in binary or memory: http://Castor.trapeziums.net/Sacheti/Lyz
Source: Heisenberg.Bug.txtString found in binary or memory: http://Castro.boxings.net/Miller/Hopkins
Source: Heisenberg.Bug.txtString found in binary or memory: http://Cermak.soonish.net/Cicin/Bennette
Source: Heisenberg.Bug.txtString found in binary or memory: http://Chagas.luretics.com/Luther/Costa
Source: Heisenberg.Bug.txtString found in binary or memory: http://Chamundi.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Chaos.luretics.com/Said/Dennison
Source: Heisenberg.Bug.txtString found in binary or memory: http://Charmant.luretics.com/Joseph/Ciolfi
Source: Heisenberg.Bug.txtString found in binary or memory: http://Choppinho.soonish.net/Asp/Tut
Source: Heisenberg.Bug.txtString found in binary or memory: http://Choukri.soonish.net/Warghane/Glendenning
Source: Heisenberg.Bug.txtString found in binary or memory: http://Christensen.soonish.net/Bumgardner/Baranov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Connelly.luretics.com/Hay/Balgobin
Source: Heisenberg.Bug.txtString found in binary or memory: http://Conti.luretics.com/Wallin/Weaver
Source: Heisenberg.Bug.txtString found in binary or memory: http://Cooley.oiling.net/Hranac/Montoya
Source: Heisenberg.Bug.txtString found in binary or memory: http://Copini.soonish.net/Firsov/Lovric
Source: Heisenberg.Bug.txtString found in binary or memory: http://Corbo.trapeziums.net/Reed/Tzvetanova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Cornelissen.trapeziums.net/Panchyshyn/Chiarinotti
Source: Heisenberg.Bug.txtString found in binary or memory: http://Costa.trapeziums.net/Manuel/Velazquez
Source: Heisenberg.Bug.txtString found in binary or memory: http://Couch.luretics.com/Dozen/Ponce
Source: Heisenberg.Bug.txtString found in binary or memory: http://Crane.boxings.net/Rivette/Dionisy
Source: Heisenberg.Bug.txtString found in binary or memory: http://Crawford.luretics.com/Blackwell/Pianka
Source: Heisenberg.Bug.txtString found in binary or memory: http://Cueva.luretics.com/Henriquez/Flores
Source: Heisenberg.Bug.txtString found in binary or memory: http://Cwik.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Czarnecki.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dallhammer.luretics.com/Hennoks/Ainsworth
Source: Heisenberg.Bug.txtString found in binary or memory: http://Daniel.oiling.net/Lopez/Garner
Source: Heisenberg.Bug.txtString found in binary or memory: http://Darnell.trapeziums.net/Burachenco/Anderson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Daszenies.trapeziums.net/Rivera/Leach
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dedkov.luretics.com/Jarjur/Quintana
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dee.luretics.com/Codosea/Welter
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dembicki.soonish.net/Visser/Mirzaie
Source: Heisenberg.Bug.txtString found in binary or memory: http://Demina.luretics.com/Correia/Olszak
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dias.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Djurdjevic.luretics.com/Pereira/Westlake
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dmitri.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Doherty.soonish.net/Wallum/Secrest
Source: Heisenberg.Bug.txtString found in binary or memory: http://Doiphin.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dolengo.luretics.com/Gergova/Astorga
Source: Heisenberg.Bug.txtString found in binary or memory: http://Doormat.luretics.com/Susy/Chen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dorofeeva.luretics.com/Mitovski/Nebesnyi
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dorough.luretics.com/Coleman/Laaksonen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Doshi.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Doychinov.soonish.net/Emery/Chizhova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Doyle.soonish.net/Follebout/Curtis
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dragojevic.soonish.net/Sidorov/Sorgo
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dragumilo.luretics.com/Carroll/Leurs
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dudikov.boxings.net/Tatyana/Plotner
Source: Heisenberg.Bug.txtString found in binary or memory: http://Dyball.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Easton.trapeziums.net/Melo/Penava
Source: Heisenberg.Bug.txtString found in binary or memory: http://Eddy.roadrus.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Elena.soonish.net/Pizzicori/Lemke
Source: Heisenberg.Bug.txtString found in binary or memory: http://Elferr.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Elliott.soonish.net/Rossberger/Wurst
Source: Heisenberg.Bug.txtString found in binary or memory: http://Engelhart.luretics.com/Schmidt/Kryuchkov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ericka.bornbout.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ericsson.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Eriksson.trapeziums.net/Martinez/Michael
Source: Heisenberg.Bug.txtString found in binary or memory: http://Eslek.boxings.net/Scheda/Chizh
Source: Heisenberg.Bug.txtString found in binary or memory: http://Essebaggers.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Evason.soonish.net/Buntam/Smith
Source: Heisenberg.Bug.txtString found in binary or memory: http://Eve.luretics.com/Peltokorpi/Honsnat
Source: Heisenberg.Bug.txtString found in binary or memory: http://Fabrice.soonish.net/Terzieva/Brandt
Source: Heisenberg.Bug.txtString found in binary or memory: http://Fast.soonish.net/Henger/Hughes
Source: Heisenberg.Bug.txtString found in binary or memory: http://Faulkner.oiling.net/Luchene/Pieber
Source: Heisenberg.Bug.txtString found in binary or memory: http://Favergiotti.trapeziums.net/Kernak/Wajnoch
Source: Heisenberg.Bug.txtString found in binary or memory: http://Favergiotti.trapeziums.net/Wezel/Promitheas
Source: Heisenberg.Bug.txtString found in binary or memory: http://Favilla.luretics.com/Cocato/Afonchin
Source: Heisenberg.Bug.txtString found in binary or memory: http://Fedorenko.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Feeney.boxings.net/Lotfy/Tisdale
Source: Heisenberg.Bug.txtString found in binary or memory: http://Fellner.luretics.com/Banscher/Cvetkovic
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ferrari.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Filho.luretics.com/Johnson/Cook
Source: Heisenberg.Bug.txtString found in binary or memory: http://Fiorino.soonish.net/Jack/Mello
Source: Heisenberg.Bug.txtString found in binary or memory: http://Fishburn.luretics.com/Patraca/Gauker
Source: Heisenberg.Bug.txtString found in binary or memory: http://Flemming.luretics.com/Marzeddu/Wisso
Source: Heisenberg.Bug.txtString found in binary or memory: http://Fomchenko.soonish.net/Frates/Zukowski
Source: Heisenberg.Bug.txtString found in binary or memory: http://Fomin.trapeziums.net/Csonti/Kontozis
Source: Heisenberg.Bug.txtString found in binary or memory: http://Foreman.luretics.com/Barbery/Haehnel
Source: Heisenberg.Bug.txtString found in binary or memory: http://Fou.soonish.net/Pollheide/Pastor
Source: Heisenberg.Bug.txtString found in binary or memory: http://Frances.bautifulhoodia.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Frey.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Friberg.soonish.net/Coleman/Karsten
Source: Heisenberg.Bug.txtString found in binary or memory: http://Froust.luretics.com/Sommerfeld/Saglik
Source: Heisenberg.Bug.txtString found in binary or memory: http://Furrer.luretics.com/Raj/Capcik
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gaafar.boxings.net/Barrett/Ning
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gachegova.soonish.net/Bandy/Georgiev
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gaither.boxings.net/Blank/Isaak
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gangrene.luretics.com/Claes/Potter
Source: Heisenberg.Bug.txtString found in binary or memory: http://Garcia.oiling.net/Gossmann/Brady
Source: Heisenberg.Bug.txtString found in binary or memory: http://Garcia.soonish.net/Semernov/Bago
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gartner.boxings.net/Sherimbetov/Trudeau
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gassor.soonish.net/Tzanev/Flores
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gehrmann.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Geleva.luretics.com/Robledo/Phelps
Source: Heisenberg.Bug.txtString found in binary or memory: http://Geoffrey.roadrus.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gereis.luretics.com/Ivaylov/Leenick
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gever.soonish.net/Adi/Jain
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ghufran.boxings.net/Tarkhan/Ghosh
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gianchi.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gill.oiling.net/Schmidt/Vassilev
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gilleran.luretics.com/Barov/Jensen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Glykin.luretics.com/Molitor/Henritzy
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gornachka.trapeziums.net/Sepeda/Ouellette
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gosling.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gramlich.soonish.net/Petersen/Hermansen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gribanov.boxings.net/Braga/Ong
Source: Heisenberg.Bug.txtString found in binary or memory: http://Grigoryan.trapeziums.net/Hunt/Smith
Source: Heisenberg.Bug.txtString found in binary or memory: http://Grzejszczyk.luretics.com/Wong/Serbezova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Guasque.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Gudumac.boxings.net/Lokotaeva/Demchenko
Source: Heisenberg.Bug.txtString found in binary or memory: http://Guerra.luretics.com/Veszpremi/Laurie
Source: Heisenberg.Bug.txtString found in binary or memory: http://Guilliam.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Guru.luretics.com/Bartl/Sidarevich
Source: Heisenberg.Bug.txtString found in binary or memory: http://Haberland.luretics.com/Wildhirt/Llamas
Source: Heisenberg.Bug.txtString found in binary or memory: http://Haddakin.oiling.net/Watson/Duncan
Source: Heisenberg.Bug.txtString found in binary or memory: http://Haim.trapeziums.net/Celestino/Pilinger
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hall.oiling.net/Obilic/Santos
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hansen.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hartmann.trapeziums.net/Retz/Sindelar
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hassani.luretics.com/Eeckhout/Taslim
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hawthorne.luretics.com/Krebs/Kormann
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hayek.trapeziums.net/Nikolov/Anacleto
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hayk.soonish.net/Gretzky/Kolmar
Source: Heisenberg.Bug.txtString found in binary or memory: http://Henderson.soonish.net/Marta/Getmanov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Herlin.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hermansky.luretics.com/Gurjar/Gurjar
Source: Heisenberg.Bug.txtString found in binary or memory: http://Herminia.tasatm.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hernandez.soonish.net/Jaeken/Felix
Source: Heisenberg.Bug.txtString found in binary or memory: http://Herr.soonish.net/Wiegmans/Palmisano
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hidalgo.luretics.com/Bakir/Bargoli
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hilley.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hindmarsh.oiling.net/Tomas/Moeed
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hingley.boxings.net/James/Kodama
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hirooka.soonish.net/Hooker/Wabo
Source: Heisenberg.Bug.txtString found in binary or memory: http://Holovanov.luretics.com/Dedkov/Jarjur
Source: Heisenberg.Bug.txtString found in binary or memory: http://Horn.luretics.com/Yanto/Andrey
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hoven.trapeziums.net/Fisher/Gerhardt
Source: Heisenberg.Bug.txtString found in binary or memory: http://Howard.luretics.com/Tsvetkova/Nankova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Howard.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hung008.emancihoodia.com/images/header_inthenews.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hung008.secureehoodia.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Hunter.oiling.net/Koloski/Mitrovic
Source: Heisenberg.Bug.txtString found in binary or memory: http://Huot.oiling.net/Nawaz/Humphrey
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ille.boxings.net/Markova/Gallegos
Source: Heisenberg.Bug.txtString found in binary or memory: http://Imran.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Incremona.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ingver.boxings.net/Mercer/Watters
Source: Heisenberg.Bug.txtString found in binary or memory: http://Irlan.luretics.com/Miller/Alexieva
Source: Heisenberg.Bug.txtString found in binary or memory: http://Irma.boxsee.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Irsetsky.luretics.com/Breaux/Naranjo
Source: Heisenberg.Bug.txtString found in binary or memory: http://Isip.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Islam.luretics.com/Hellpap/Sobhani
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ivkovic.oiling.net/Adams/Pritchard
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ixtayeczitl.soonish.net/Martins/Davies
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jackson.soonish.net/Bauman/Miranda
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jacobsen.oiling.net/Postiglione/Sedey
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jacqueline.vigor-all.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jalbert.luretics.com/Galiard/Pereira
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jamil.trapeziums.net/Bevan/Chappelle
Source: Heisenberg.Bug.txtString found in binary or memory: http://Janice.ascamp.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jankowski.luretics.com/Shackelford/Hendrix
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jaramillo.luretics.com/Kramarenko/Hansen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jeelani.soonish.net/Keen/Streich
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jeremy.boxings.net/Walker/Brady
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jessee.soonish.net/Nabatov/Rebollar
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jinkerson.oiling.net/Kasai/Cruz
Source: Heisenberg.Bug.txtString found in binary or memory: http://Johannes.luretics.com/Wigle/Antunes
Source: Heisenberg.Bug.txtString found in binary or memory: http://Johansson.luretics.com/Cheah/Nal
Source: Heisenberg.Bug.txtString found in binary or memory: http://Johansson.luretics.com/Phillips/George
Source: Heisenberg.Bug.txtString found in binary or memory: http://Johansson.soonish.net/Mahn/Cooper
Source: Heisenberg.Bug.txtString found in binary or memory: http://Johnson.luretics.com/Burch/Rateb
Source: Heisenberg.Bug.txtString found in binary or memory: http://Johnston.boxings.net/Pendleton/Cody
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jones.luretics.com/Dish/Forsey
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jovic.luretics.com/Andrea/Lim
Source: Heisenberg.Bug.txtString found in binary or memory: http://Juliana008.pleasehoodia.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Julie.roadrus.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jun.luretics.com/Noordzij/Haruyasu
Source: Heisenberg.Bug.txtString found in binary or memory: http://Jureta.trapeziums.net/Hansen/Neuhold
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kamal.oiling.net/Trilev/Eiffel
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kasperski.trapeziums.net/Peralta/Doherty
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kasy.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kayabas.luretics.com/Rosenberg/Spears
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kelly.boxings.net/Katon/Rocha
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kenpet.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kern.soonish.net/Porseva/Stoyanov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kerr.soonish.net/Grinpress/Casseus
Source: Heisenberg.Bug.txtString found in binary or memory: http://Keyrouz.luretics.com/Arboleda/Kravchenko
Source: Heisenberg.Bug.txtString found in binary or memory: http://King.luretics.com/Vargas/Halacoglu
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kinouchi.boxings.net/Lopez/Dearborn
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kiss.trapeziums.net/Liverpool/Gallegos
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kokonov.luretics.com/Tortore/Gilhen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Koleva.soonish.net/Kulikov/Williams
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kolobov.luretics.com/Lehmann/Gleave
Source: Heisenberg.Bug.txtString found in binary or memory: http://Korcakova.soonish.net/Ozusta/Candic
Source: Heisenberg.Bug.txtString found in binary or memory: http://Korkin.boxings.net/Bowman/Tawfik
Source: Heisenberg.Bug.txtString found in binary or memory: http://Koruno.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kosachev.luretics.com/Bergh/Jankkila
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kottler.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Koukleva.luretics.com/Leblanc/Smith
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kovaleva.oiling.net/Wersig/Christophe
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kowacich.oiling.net/Limberti/Bowes
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kukec.soonish.net/Decatelle/Nahafahik
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kupfermann.luretics.com/Messinetti/Noble
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kurian.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kutschera.soonish.net/Williams/Drake
Source: Heisenberg.Bug.txtString found in binary or memory: http://Kwanpetch.luretics.com/Chirilli/Vernooy
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lacy.trapeziums.net/Szczygiel/Rey
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ladanyi.soonish.net/Jarosz/Prause
Source: Heisenberg.Bug.txtString found in binary or memory: http://Laduron.luretics.com/Svatek/Awartani
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lamote.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lannon.luretics.com/Lopez/Kating
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lar.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lease.boxings.net/Bathory/Clark
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lei.luretics.com/Gray/Muhammad
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lemesh.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lens.trapeziums.net/Ballas/Norrish
Source: Heisenberg.Bug.txtString found in binary or memory: http://Leonor.ascamp.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lepri.soonish.net/Berndt/Campos
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lesmana.oiling.net/Mohan/Leebetter
Source: Heisenberg.Bug.txtString found in binary or memory: http://Leuffen.soonish.net/Fireblade/Karia
Source: Heisenberg.Bug.txtString found in binary or memory: http://Leunert.luretics.com/Leunert/Nunes
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lev.trapeziums.net/Navia/Nobler
Source: Heisenberg.Bug.txtString found in binary or memory: http://Liepe.luretics.com/Bayer/Tombre
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lilienthal.trapeziums.net/Geter/Chesney
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lima.luretics.com/Daniele/Quentel
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lima.oiling.net/Frere/Arslan
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lin.boxings.net/Georges/Kumar
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lin.luretics.com/Anelli/Marques
Source: Heisenberg.Bug.txtString found in binary or memory: http://Linke.trapeziums.net/Rivera/Balkan
Source: Heisenberg.Bug.txtString found in binary or memory: http://Linzy.oiling.net/Stoianova/Charisma
Source: Heisenberg.Bug.txtString found in binary or memory: http://Loly.luretics.com/Wiley/Gardiner
Source: Heisenberg.Bug.txtString found in binary or memory: http://Londono.oiling.net/Galic/Petrov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lopez.luretics.com/Baur/Langer
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lorrain.luretics.com/Johnson/Jenkins
Source: Heisenberg.Bug.txtString found in binary or memory: http://Love.luretics.com/Chavez/Jigolo
Source: Heisenberg.Bug.txtString found in binary or memory: http://Luettger.soonish.net/Bellew/Vassile
Source: Heisenberg.Bug.txtString found in binary or memory: http://Luis.luretics.com/Marquardt/Fontanez
Source: Heisenberg.Bug.txtString found in binary or memory: http://Lul.luretics.com/Altindal/Benic
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Lyz2.kkadcce.info/drexel?BQ7G76CJR9IjRVBOc
Source: Heisenberg.Bug.txtString found in binary or memory: http://Madonna.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Magicman.trapeziums.net/Basso/Macdonald
Source: Heisenberg.Bug.txtString found in binary or memory: http://Maguire.luretics.com/Sato/Sato
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mahmoud.soonish.net/Harrison/Steczko
Source: Heisenberg.Bug.txtString found in binary or memory: http://Majlis.soonish.net/Teixeira/Kydyrbaeva
Source: Heisenberg.Bug.txtString found in binary or memory: http://Malderle.luretics.com/Tabatabaei/Onatli
Source: Heisenberg.Bug.txtString found in binary or memory: http://Man.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Manoshin.boxings.net/Nicinov/Belozerov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Marazzi.luretics.com/Noname/Kessler
Source: Heisenberg.Bug.txtString found in binary or memory: http://Marce.luretics.com/Eit/Smith
Source: Heisenberg.Bug.txtString found in binary or memory: http://Marcel.luretics.com/Ask/Mitrohina
Source: Heisenberg.Bug.txtString found in binary or memory: http://Marianne.ascamp.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Marquez.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Martin.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Martin.luretics.com/Luna/Croft
Source: Heisenberg.Bug.txtString found in binary or memory: http://Martinelli.soonish.net/Huffaker/Valentin
Source: Heisenberg.Bug.txtString found in binary or memory: http://Martins.luretics.com/Sempere/Medrano
Source: Heisenberg.Bug.txtString found in binary or memory: http://Martinson.luretics.com/Ferrer/Waltman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Matilda.bornbout.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Matthews.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mausser.trapeziums.net/Fischer/Plsek
Source: Heisenberg.Bug.txtString found in binary or memory: http://Max.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Maximuz.luretics.com/Ballenger/Huppunen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Medeiros.luretics.com/Gabaldo/Andrey
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mendoza.soonish.net/Tognoli/Ottone
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mieda.soonish.net/Gonzalez/Markovic
Source: Heisenberg.Bug.txtString found in binary or memory: http://Miklis.luretics.com/Lopez/Rodriguez
Source: Heisenberg.Bug.txtString found in binary or memory: http://Milana.oiling.net/Linnot/Bjelanovic
Source: Heisenberg.Bug.txtString found in binary or memory: http://Miller.boxings.net/Kline/Benitez
Source: Heisenberg.Bug.txtString found in binary or memory: http://Miller.boxings.net/Rojo/Polanco
Source: Heisenberg.Bug.txtString found in binary or memory: http://Minguez.soonish.net/Arora/Vidal
Source: Heisenberg.Bug.txtString found in binary or memory: http://Miranda.trapeziums.net/Sejda/Bruxa
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mironow.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mitchell.luretics.com/Ong/Kavaja
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mite.luretics.com/Kuguk/Royan
Source: Heisenberg.Bug.txtString found in binary or memory: http://Monroy.soonish.net/Kirimova/Homer
Source: Heisenberg.Bug.txtString found in binary or memory: http://Moore.soonish.net/Woodbeck/Fuchs
Source: Heisenberg.Bug.txtString found in binary or memory: http://Morrison.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mosqueda.luretics.com/Barwirsch/Murray
Source: Heisenberg.Bug.txtString found in binary or memory: http://Moss.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Motov.trapeziums.net/Beigi/Rehman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Motte.trapeziums.net/Kapetanovic/Marco
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mouridsen.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Moz.soonish.net/Ryabov/Merta
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mubarak.trapeziums.net/Kavelish/Vassilev
Source: Heisenberg.Bug.txtString found in binary or memory: http://Muise.boxings.net/Valadao/Wafer
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mundt.oiling.net/Eriksson/Flintstone
Source: Heisenberg.Bug.txtString found in binary or memory: http://Murad.luretics.com/Aschwege/Sylwek
Source: Heisenberg.Bug.txtString found in binary or memory: http://Murricane.trapeziums.net/Linares/Rita
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mushrall.soonish.net/Minter/Leroy
Source: Heisenberg.Bug.txtString found in binary or memory: http://Mutlu.luretics.com/Walker/Vega
Source: Heisenberg.Bug.txtString found in binary or memory: http://Natali.luretics.com/Rahkonen/Chua
Source: Heisenberg.Bug.txtString found in binary or memory: http://Neathery.boxings.net/Riggio/Roesti
Source: Heisenberg.Bug.txtString found in binary or memory: http://Neimark.luretics.com/Alkhadher/Chow
Source: Heisenberg.Bug.txtString found in binary or memory: http://Nelson.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Newton.trapeziums.net/Contreras/Zaranovskiy
Source: Heisenberg.Bug.txtString found in binary or memory: http://Nezic.luretics.com/Caluz/Roller
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ngo.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ngoy.luretics.com/Avila/Moore
Source: Heisenberg.Bug.txtString found in binary or memory: http://Nguyen.boxings.net/Alex/Felber
Source: Heisenberg.Bug.txtString found in binary or memory: http://Niazi.luretics.com/Klema/Klema
Source: Heisenberg.Bug.txtString found in binary or memory: http://Nicosia.soonish.net/Dawabe/Butler
Source: Heisenberg.Bug.txtString found in binary or memory: http://Nikolic.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Nilsson.oiling.net/Nan/Alexa
Source: Heisenberg.Bug.txtString found in binary or memory: http://NjMyMzIxMTYwNDUw.backlets.info/MTA5MjIxMDU5MTk2OjEwMjpzZW5zaXBpbGw6MjEwNTkxOTY
Source: Heisenberg.Bug.txtString found in binary or memory: http://Nohra.soonish.net/Stevens/Forbord
Source: Heisenberg.Bug.txtString found in binary or memory: http://Novikov.luretics.com/Doino/Rujiper
Source: Heisenberg.Bug.txtString found in binary or memory: http://Noyola.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Nugroho.luretics.com/Angulo/Kolk
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ockey.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ogrodnic.soonish.net/Tucic/Wiesemann
Source: Heisenberg.Bug.txtString found in binary or memory: http://Olsen.boxings.net/Clark/Nuon
Source: Heisenberg.Bug.txtString found in binary or memory: http://Olszewski.luretics.com/Ahmed/Clara
Source: Heisenberg.Bug.txtString found in binary or memory: http://Omohundro.trapeziums.net/Svidas/Arthur
Source: Heisenberg.Bug.txtString found in binary or memory: http://One.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Oravecz.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Orocz.luretics.com/Holmqvist/Smits
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ostapchuk.luretics.com/Cholakova/Kapetanovic
Source: Heisenberg.Bug.txtString found in binary or memory: http://Otto.luretics.com/Rheker/Lunetta
Source: Heisenberg.Bug.txtString found in binary or memory: http://Overend.luretics.com/Nuttachai/Giannotta
Source: Heisenberg.Bug.txtString found in binary or memory: http://Oyarzun.luretics.com/Sommer/Hung
Source: Heisenberg.Bug.txtString found in binary or memory: http://Palmer.trapeziums.net/Dubuc/Fernandez
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pandeva.luretics.com/Bennett/Persitzky
Source: Heisenberg.Bug.txtString found in binary or memory: http://Park.soonish.net/Thompson/Folgueras
Source: Heisenberg.Bug.txtString found in binary or memory: http://Partovska.luretics.com/Wahba/Backberg
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pasqualin.trapeziums.net/Alcloro/Oettli
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pastor.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Patel.luretics.com/Liascos/Spycher
Source: Heisenberg.Bug.txtString found in binary or memory: http://Patel.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Paulus.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pavez.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pavlik.soonish.net/Apolinar/Baudeweyns
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pawellek.luretics.com/Smith/Karlsson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pawlowski.soonish.net/Webb/Kolesnikova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Payne.boxings.net/Harris/Chiati
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pecor.boxings.net/Afzal/Hernandez
Source: Heisenberg.Bug.txtString found in binary or memory: http://Perecz.soonish.net/Futloo/Morelock
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pereira.luretics.com/Andrey/Bowman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pergel.oiling.net/Pal/Cole
Source: Heisenberg.Bug.txtString found in binary or memory: http://Peric.soonish.net/Grund/Ashihmin
Source: Heisenberg.Bug.txtString found in binary or memory: http://Perkins.trapeziums.net/Vardapetyan/Martinez
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pervan.boxings.net/Rainer/Roman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Petrossian.luretics.com/Green/Herrmann
Source: Heisenberg.Bug.txtString found in binary or memory: http://Petrovic.luretics.com/Wurm/Guy
Source: Heisenberg.Bug.txtString found in binary or memory: http://Piekutowska.oiling.net/Berube/Larsen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pierce.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pirogov.oiling.net/Ling/Samson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Piskunov.luretics.com/Todorovic/Men
Source: Heisenberg.Bug.txtString found in binary or memory: http://Piskunova.trapeziums.net/Purtscher/Bengtsson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Plourde.trapeziums.net/Monk/Fischer
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pluto.soonish.net/Mkrtchjan/Tewari
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pointner.soonish.net/Afrodisis/Verbaendert
Source: Heisenberg.Bug.txtString found in binary or memory: http://Poldo.luretics.com/Petrenko/Crowe
Source: Heisenberg.Bug.txtString found in binary or memory: http://Poli.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ponten.luretics.com/Raae/Girotto
Source: Heisenberg.Bug.txtString found in binary or memory: http://Popcheva.oiling.net/Donat/Castillo
Source: Heisenberg.Bug.txtString found in binary or memory: http://Potseluev.luretics.com/Flanagan/Oliveira
Source: Heisenberg.Bug.txtString found in binary or memory: http://Poulsen.oiling.net/Winkler/Vaughn
Source: Heisenberg.Bug.txtString found in binary or memory: http://Powar.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://PowerLineControl.info/ms/?cid
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pratt.luretics.com/Stolze/Eijmans
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Pravda.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Preilowski.luretics.com/Yosenithy/Fernandes
Source: Heisenberg.Bug.txtString found in binary or memory: http://Prezzia.luretics.com/Jonson/Ellis
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pribyl.boxings.net/Antognini/Poonsawat
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pribytkov.luretics.com/Coleman/Strauch
Source: Heisenberg.Bug.txtString found in binary or memory: http://Price.boxings.net/Hartney/Liew
Source: Heisenberg.Bug.txtString found in binary or memory: http://Prokopieva.luretics.com/Chatelain/Momi
Source: Heisenberg.Bug.txtString found in binary or memory: http://Props.luretics.com/Rincon/Lucena
Source: Heisenberg.Bug.txtString found in binary or memory: http://Proskurin.oiling.net/Mendoza/Fox
Source: Heisenberg.Bug.txtString found in binary or memory: http://Pustovalova.luretics.com/Suarez/Allan
Source: Heisenberg.Bug.txtString found in binary or memory: http://QCYMCDBWW.o7uccduiboc46oozbo6zb6oo.apodousbk.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Quinn.luretics.com/Nilsson/Martin
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rabi.luretics.com/Sajko/Chernikhoff
Source: Heisenberg.Bug.txtString found in binary or memory: http://Radchenko.luretics.com/Radchenko/Karnas
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rahmany.boxings.net/Madej/Madron
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rainer.luretics.com/Aetizaz/Lox
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ramos.luretics.com/Ceasar/Unal
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ramos.luretics.com/Klimenkov/Ryzenkov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rankovic.oiling.net/Kowalskih/Pensa
Source: Heisenberg.Bug.txtString found in binary or memory: http://Raspo.soonish.net/Freitag/Bunarov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ratajczak.luretics.com/Sebestyen/Drescher
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rattachol.boxings.net/Ledesma/Ferrer
Source: Heisenberg.Bug.txtString found in binary or memory: http://Reichardt.boxings.net/Ouellette/Nantapulsab
Source: Heisenberg.Bug.txtString found in binary or memory: http://Reid.tasatm.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Reid.trapeziums.net/Schluck/Aristides
Source: Heisenberg.Bug.txtString found in binary or memory: http://Reinhold.luretics.com/Martynenko/Tavares
Source: Heisenberg.Bug.txtString found in binary or memory: http://Reshetnyak.luretics.com/Bober/Bober
Source: Heisenberg.Bug.txtString found in binary or memory: http://Retamal.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Reyes.oiling.net/Simonetta/Brooks
Source: Heisenberg.Bug.txtString found in binary or memory: http://Reyna.oiling.net/Kurtzmann/Beth
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rhea.tasatm.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Richards.oiling.net/Choubane/Deviatov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rizwan.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Robertson.soonish.net/Vasileva/Oppers
Source: Heisenberg.Bug.txtString found in binary or memory: http://Robledo.soonish.net/Klethi/Clinton
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rocha.trapeziums.net/Voronov/Santos
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rodes.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rodrigo008.cinnamonhoodiaa.com/images/ingredients_label.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rodrigo008.sharphoodia.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rogers.luretics.com/Cator/Wood
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rose.boxings.net/Carvalho/Ames
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rossi.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rottinger.soonish.net/Bianchini/Saghatelyan
Source: Heisenberg.Bug.txtString found in binary or memory: http://Rubini.soonish.net/Tourville/Karlsson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ruchy.boxings.net/Zema/Bashkatov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Ryan.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://STZSXLYQXDE.0j6oopou50oyi00t500tn0ii.mimeticmi.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Saabalero.luretics.com/Ramirez/Guerreiro
Source: Heisenberg.Bug.txtString found in binary or memory: http://Saikkonen.boxings.net/Treude/Jeong
Source: Heisenberg.Bug.txtString found in binary or memory: http://Salie.oiling.net/Tezel/Barr
Source: Heisenberg.Bug.txtString found in binary or memory: http://Samoilov.luretics.com/Lau/Loukin
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sandoval.luretics.com/Russell/Tavi
Source: Heisenberg.Bug.txtString found in binary or memory: http://Santiago.soonish.net/Galusha/Higgs
Source: Heisenberg.Bug.txtString found in binary or memory: http://Santos.trapeziums.net/Thomson/Morris
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sari.luretics.com/Alexeev/Adams
Source: Heisenberg.Bug.txtString found in binary or memory: http://Saunders.luretics.com/Lancaster/Fitzsimons
Source: Heisenberg.Bug.txtString found in binary or memory: http://Savic.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sawadski.luretics.com/Hansen/Castro
Source: Heisenberg.Bug.txtString found in binary or memory: http://Scaro.luretics.com/Covelli/Luff
Source: Heisenberg.Bug.txtString found in binary or memory: http://Schmidt.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Schneider.soonish.net/Nilsson/Peiffers
Source: Heisenberg.Bug.txtString found in binary or memory: http://Schoen.luretics.com/Reichel/Meyer
Source: Heisenberg.Bug.txtString found in binary or memory: http://Scott.luretics.com/Martinez/Bartelt
Source: Heisenberg.Bug.txtString found in binary or memory: http://Scottie.roadrus.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sef.luretics.com/Regenbogen/Brook
Source: Heisenberg.Bug.txtString found in binary or memory: http://Seleznev.oiling.net/Perera/Limongelli
Source: Heisenberg.Bug.txtString found in binary or memory: http://Semerdjieva.luretics.com/Valienti/Mitron
Source: Heisenberg.Bug.txtString found in binary or memory: http://Serg.luretics.com/Atherton/Nyk
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sergey.luretics.com/Dennis/Gorkemli
Source: Heisenberg.Bug.txtString found in binary or memory: http://Servranckx.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sezer.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sguizzardi.luretics.com/Lervin/Pandey
Source: Heisenberg.Bug.txtString found in binary or memory: http://Shahmed.trapeziums.net/Siqueira/Bellini
Source: Heisenberg.Bug.txtString found in binary or memory: http://Shaikin.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Shaker.soonish.net/Dunn/Mico
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sharma.soonish.net/Hilmersson/Anton
Source: Heisenberg.Bug.txtString found in binary or memory: http://Shelley.ascamp.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Shurin.soonish.net/Ortiz/Alita
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sidloski.luretics.com/Tankov/Manuel
Source: Heisenberg.Bug.txtString found in binary or memory: http://Silva.luretics.com/Tima/Ahmad
Source: Heisenberg.Bug.txtString found in binary or memory: http://Silva.soonish.net/Ronin/Rawson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Silvia.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sinha.luretics.com/Richardson/Mendoza
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sitia.luretics.com/Rydel/Lombardo
Source: Heisenberg.Bug.txtString found in binary or memory: http://Skrebnev.luretics.com/Nicklaus/Percolo
Source: Heisenberg.Bug.txtString found in binary or memory: http://Slade.soonish.net/Shkraba/Serra
Source: Heisenberg.Bug.txtString found in binary or memory: http://Slagmolen.luretics.com/Hall/Walhalla
Source: Heisenberg.Bug.txtString found in binary or memory: http://Slor.boxings.net/Geier/Bowman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Smak.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Smith.luretics.com/Daffron/Girouard
Source: Heisenberg.Bug.txtString found in binary or memory: http://Snezhana.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Soberanis.soonish.net/Kates/Gildehaus
Source: Heisenberg.Bug.txtString found in binary or memory: http://Son.soonish.net/Schoene/Green
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sousa.soonish.net/Oosthuizen/Adler
Source: Heisenberg.Bug.txtString found in binary or memory: http://Spaulding.luretics.com/Ericson/Waghorn
Source: Heisenberg.Bug.txtString found in binary or memory: http://Spray.oiling.net/Bonani/Promchote
Source: Heisenberg.Bug.txtString found in binary or memory: http://Squires.boxings.net/Frolov/Volokhova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Srinivasan.luretics.com/Ivanov/Ballesteros
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stambough.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stanev.luretics.com/Bustami/Atanasova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stankevich.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Staples.boxings.net/Murdoch/Pallares
Source: Heisenberg.Bug.txtString found in binary or memory: http://Steegmans.luretics.com/Hiebert/Ortuzar
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stefak.luretics.com/Lima/Kanhai
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Stefanie.Wade.network74.=
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stefanie.Wade.network74.net
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Stefanie.Wade.network74.net/images/product01.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Stefanie.Wade.network74.net/images/product02.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Stefanie.Wade.network74.net/images/product03.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Stefanie.Wade.network74.net/images/product04.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Stefanie.Wade.network74.net/images/product05
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stephenson.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stevens.luretics.com/Semissorov/Marsong
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stojakovic.luretics.com/Fruin/Victor
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stolypin.luretics.com/Teslenko/Kanoplich
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stoyanov.luretics.com/Walpole/Feldbusch
Source: Heisenberg.Bug.txtString found in binary or memory: http://Stutzman.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sutera.oiling.net/Fillers/Chen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Suwan.luretics.com/Abdelkader/Minier
Source: Heisenberg.Bug.txtString found in binary or memory: http://Sykorova.oiling.net/Opell/Rossolovsky
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://T6R.kkadcce.info/?BQ7G76CJR9IjRVByKfh5
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tan.boxings.net/Edwards/Shemyakina
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tan.soonish.net/Tissieres/Cetin
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Ted.Sapp.relay34.org/index.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://Ted.Sapp.relay34.org/r.h=
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tennessee.soonish.net/Koss/Kanwal
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tereshkina.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://The.oiling.net/Moodley/Shamir
Source: Heisenberg.Bug.txtString found in binary or memory: http://Thomaseth.soonish.net/Sauer/Akoronka
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tillos.trapeziums.net/Beaudin/Topalov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tinoco.luretics.com/Peluca/Nachev
Source: Heisenberg.Bug.txtString found in binary or memory: http://Toft.soonish.net/Andy/Smoot
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tolj.luretics.com/Yasuda/Soto
Source: Heisenberg.Bug.txtString found in binary or memory: http://Torebrink.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Torrealba.oiling.net/Alex/Hernandez
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tosi.luretics.com/Branson/Cook
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tranngel.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Triffett.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Trusic.soonish.net/Maersch/Sloan
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tsarina.luretics.com/Jaiswal/Rigod
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tsymbalov.luretics.com/Hoek/Zlatarev
Source: Heisenberg.Bug.txtString found in binary or memory: http://Turcic.boxings.net/Rodriguez/Thompson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Turner.luretics.com/Ortega/Fleed
Source: Heisenberg.Bug.txtString found in binary or memory: http://Turushkin.soonish.net/Polling/Dalos
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tutuncu.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Tyshlek.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Unknown.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Uphill.oiling.net/Buckingham/Mormile
Source: Heisenberg.Bug.txtString found in binary or memory: http://Usupov.luretics.com/Michael/Kotmel
Source: Heisenberg.Bug.txtString found in binary or memory: http://Uzun.oiling.net/Muntane/Kruszewska
Source: Heisenberg.Bug.txtString found in binary or memory: http://Uzun.soonish.net/Plotnieks/Doleschel
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vanbrabant.soonish.net/Craane/Hansson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vandenberg.luretics.com/Geary/Janshen
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vanderpool.boxings.net/Pigg/Andres
Source: Heisenberg.Bug.txtString found in binary or memory: http://Varnado.trapeziums.net/Koroleva/Nieto
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vasilyev.luretics.com/Keiffer/Seroka
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vauhkala.luretics.com/Maldonado/Chivers
Source: Heisenberg.Bug.txtString found in binary or memory: http://Velasquez.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Velilla.luretics.com/Oliveira/John
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vermithrax.luretics.com/Metso/Xia
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vieira.luretics.com/Hocker/Candela
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vielba.luretics.com/Batchelor/Darama
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vilkov.boxings.net/Clemons/Crane
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vincze.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vitopoulou.luretics.com/Sombra/Lee
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vitorovic.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vladimirova.luretics.com/Celobentic/Morales
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vohra.luretics.com/Horner/Andreev
Source: Heisenberg.Bug.txtString found in binary or memory: http://Volgin.boxings.net/Azan/Tchepikova
Source: Heisenberg.Bug.txtString found in binary or memory: http://Volikov.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Voss.soonish.net/Korchagin/Peter
Source: Heisenberg.Bug.txtString found in binary or memory: http://Vranckx.soonish.net/Decker/Sheikh
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wahid.boxings.net/Jenison/Medcraft
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wall.luretics.com/Burman/Baker
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wall.soonish.net/Bursche/Knutsson
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wallace.soonish.net/Swanson/Mayer
Source: Heisenberg.Bug.txtString found in binary or memory: http://Walley.soonish.net/Huber/Berghuis
Source: Heisenberg.Bug.txtString found in binary or memory: http://Walli.trapeziums.net/Hsieh/Dave
Source: Heisenberg.Bug.txtString found in binary or memory: http://Walsh.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Warren.luretics.com/Hunt/Lozano
Source: Heisenberg.Bug.txtString found in binary or memory: http://Watkins.luretics.com/Moore/Turner
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wengler.subsidises.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://Whimp.boxings.net/Donskoy/Adams
Source: Heisenberg.Bug.txtString found in binary or memory: http://White.luretics.com/Mayne/Okul
Source: Heisenberg.Bug.txtString found in binary or memory: http://White.luretics.com/Vanheule/Fagan
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wieringa.luretics.com/Calderon/Bilodeau
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wiggins.trapeziums.net/Rolls/Matchett
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wijaya.soonish.net/Azazian/Michael
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wikner.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wilson.oiling.net/Ifigeneia/Jachymek
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wincel.trapeziums.net/Gaxiola/Guinevere
Source: Heisenberg.Bug.txtString found in binary or memory: http://Winifred.roadrus.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Woodard.luretics.com/Marinsky/Armstrong
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wyatt.taxables.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://Wylie.luretics.com/Zenkovich/Alsheimer
Source: Heisenberg.Bug.txtString found in binary or memory: http://Xavier.boxings.net/Firsov/Ostrovskaya
Source: Heisenberg.Bug.txtString found in binary or memory: http://Yadav.luretics.com/Contreras/Remillard
Source: Heisenberg.Bug.txtString found in binary or memory: http://Yazdinejhad.luretics.com/Gruender/Pimentel
Source: Heisenberg.Bug.txtString found in binary or memory: http://Yotzov.oiling.net/Kovalev/Schmidtke
Source: Heisenberg.Bug.txtString found in binary or memory: http://Youlan.homespuns.net/vcl/?theman
Source: Heisenberg.Bug.txtString found in binary or memory: http://Young.beststarsite.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://Yuson.boxings.net/Kuanswang/Gentile
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zacharoff.luretics.com/Estrada/Higuerey
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zavadil.soonish.net/Lopez/Cri
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zeewuster.soonish.net/Borisevich/Gottlieb
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zenkevich.oiling.net/Spence/Akkaya
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zin.luretics.com/Mir/Trandafir
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zinoviev.luretics.com/Pham/Campbell
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zobbe.soonish.net/Tropei/Gupta
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zolotarev.luretics.com/Latypov/Haendel
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zotov.boxings.net/Hill/Gurbanov
Source: Heisenberg.Bug.txtString found in binary or memory: http://Zwahlen.trapeziums.net/Schissler/Hendriks
Source: Heisenberg.Bug.txtString found in binary or memory: http://a.WRlST.com/k.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://a.swatchs.net/r/erika/aberdeen
Source: Heisenberg.Bug.txtString found in binary or memory: http://a51.dkm.cz/.paypal/account/index.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://abalone.klih.com/r/erika/ascetic.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://abbonati.tiscali.it/adsl/
Source: Heisenberg.Bug.txtString found in binary or memory: http://abdgijkcleh.onlinepharmacy4all.info/?fmehxwvqsyabdgijkzvpcl
Source: Heisenberg.Bug.txtString found in binary or memory: http://abeyance.yffgvgfe.biz/?wid=100183
Source: Heisenberg.Bug.txtString found in binary or memory: http://abode.CASl0.com/b.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://abode.CASl0.com/r/erika/ahem
Source: Heisenberg.Bug.txtString found in binary or memory: http://abort.GlFTS.org/a.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://abort.GlFTS.org/r/erika/alderman
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://absentminded.eajficm.biz/?dsfOLeeRtNkXtxJcentury
Source: Heisenberg.Bug.txtString found in binary or memory: http://academe.felsjkdbm.com/?S8ooUrTuCqt.RSScelia
Source: Heisenberg.Bug.txtString found in binary or memory: http://accuracy.y73.net/r/jenna/amelia.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://accusation.eivk.com/r/erika/agriculture.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://ace.casino.cls2.org/iwin.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://acecasino.cls2.org/iwin.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://ackley.qwild.com/z.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://acquaintance.cahla.com/z.php
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://acrylic.greatmedsupply.biz/pic2.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://acts.spywarelist.info/?aid=582
Source: Heisenberg.Bug.txtString found in binary or memory: http://acts.spywarelist.info/discon
Source: Heisenberg.Bug.txtString found in binary or memory: http://adghiclm.healingsphere.info/?befjkclmxtrsyadghizvp
Source: Heisenberg.Bug.txtString found in binary or memory: http://adgibekl.onlinepharmacy4all.info/?cfhjmklxwvqsyadgizvpbe
Source: Heisenberg.Bug.txtString found in binary or memory: http://adhesion.BLlNG.com/h.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://adhesion.BLlNG.com/r/jenna/attendant
Source: Heisenberg.Bug.txtString found in binary or memory: http://adhesion.BLlNG.com/rep/jenna/acanthus
Source: Heisenberg.Bug.txtString found in binary or memory: http://adhesion.BLlNG.com/rep/jenna/bowen
Source: Heisenberg.Bug.txtString found in binary or memory: http://adhesive.pqer.com/r/erika/abusive.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://adieu.h67.net/r/jenna/auditory.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://adkins.mj4.net/ph/erika/12/gmt.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://adkins.mj4.net/ph/erika/20/constitution.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://adkins.mj4.net/ph/erika/28/serviceberry.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://adkins.mj4.net/ph/erika/6/captor.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://adkins.mj4.net/ph/erika/formulaic.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://admitting.yf4.net/r/jenna/annoyance.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://ado.hutanmour.com/?1Pz33C29h5E9w11animate
Source: Heisenberg.Bug.txtString found in binary or memory: http://adrenal.L0SS.com/ph/jenna/convergent
Source: Heisenberg.Bug.txtString found in binary or memory: http://adrenal.L0SS.com/s.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://aflmchjkdei.bestmeds24.info/?bgdeixwvqsyaflmzmmchjk
Source: Heisenberg.Bug.txtString found in binary or memory: http://agamemnon.rf6.net/r/erika/ask.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://agway.morecheaprx.biz/?wid=100183
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://agway.morecheaprx.biz/ads/images/60pills2.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://agway.morecheaprx.biz/book/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://alan.apieasy.biz/ads/images/60pills2.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://alberta.aeroseddicc.com/?GLcZcbGiqKhuSaGcyclopean
Source: Heisenberg.Bug.txtString found in binary or memory: http://alderman.q67.net/rep/erika/abacus.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://aldermen.edyo.com/r/erika/absentminded.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://allotted.h64.net/ext/erika/combatant.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://alter.ibtz.com/p/erika/12/honey.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://alter.ibtz.com/p/erika/20/lease.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://alter.ibtz.com/p/erika/28/filmmake.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://alter.ibtz.com/p/erika/6/familiarly.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://alter.ibtz.com/p/erika/social.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://ammeter.czxugs.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://amplifier.mecei.com/replica/jenna/bucharest.shtm
Source: Heisenberg.Bug.txtString found in binary or memory: http://amtpro70.com/1up/formeml2.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://anarchic.yffgvgfe.biz/book/
Source: Heisenberg.Bug.txtString found in binary or memory: http://anticipate.rgry.com/r/jenna/aden.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://antisemitic.ju7.net/r/erika/1/asilomar.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://antisemitic.ju7.net/r/erika/23/asilomar.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://antisemitic.ju7.net/r/erika/4/asilomar.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://antisemitic.ju7.net/r/erika/5/asilomar.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://antisemitic.ju7.net/r/erika/asilomar.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://antisemitism.cheapwarehousemeds.com/pic2.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://aol.com.email.com.blusys=
Source: Heisenberg.Bug.txtString found in binary or memory: http://apocryphal.TlCKS.com/r/erika/aside
Source: Heisenberg.Bug.txtString found in binary or memory: http://apocryphal.TlCKS.com/v.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://apocryphal.breitlings.net/r/erika/aside
Source: Heisenberg.Bug.txtString found in binary or memory: http://apse.vf9.net/r/erika/arctangent.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://aptitude3a7hos5h8xlk4o3.hydropticnb.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://argentina.canadaccadm.com/?4m6CCF5cQEHIzA4asilomar
Source: Heisenberg.Bug.txtString found in binary or memory: http://argillaceous.WlNNER.com/b.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://argillaceous.WlNNER.com/r/erika/appeal
Source: Heisenberg.Bug.txtString found in binary or memory: http://arid.cahla.com/replica/jenna/bask.shtm
Source: Heisenberg.Bug.txtString found in binary or memory: http://armada.acananmdaf.com/?f1hhNQgnvPSTeLfabrasion
Source: Heisenberg.Bug.txtString found in binary or memory: http://armchair.giglotkhjgl.com/?6oE88HDKSadeBCCassault
Source: Heisenberg.Bug.txtString found in binary or memory: http://army.wlue.com/r/erika/crepe.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://arrowroot.yourstuffcentral.com/?e=185sm
Source: Heisenberg.Bug.txtString found in binary or memory: http://article.felsjkdbm.com/?pbrXr.W19Z01oVVanglicanism
Source: Heisenberg.Bug.txtString found in binary or memory: http://artificial.ud7.net/r/jenna/adipic.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://aside.q67.net/rep/erika/literal.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://asparagus.htak.com/r/erika/ammunition.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://aspirin.yffgvgfe.biz/?wid=100183
Source: Heisenberg.Bug.txtString found in binary or memory: http://aspirin.yffgvgfe.biz/ads/images/60pills2.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://aspirin.yffgvgfe.biz/book/
Source: Heisenberg.Bug.txtString found in binary or memory: http://astrophysics.ltalian.net/replica/jenna/counterargument.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://asymptotic.galhdce.info/?UDqZqFU0EYv8EIobarnard
Source: Heisenberg.Bug.txtString found in binary or memory: http://attendant.d3w.net/r/erika/1/astute.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://attendant.d3w.net/r/erika/23/astute.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://attendant.d3w.net/r/erika/4/astute.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://attendant.d3w.net/r/erika/5/astute.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://attendant.d3w.net/r/erika/astute.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://audacity.pq4.net/r/erika/abdomen.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://aurora.ru6.net/r/erika/arboreal.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://authenticate.b7x.net/r/jenna/animate.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://autograph.ud7.net/r/jenna/accountant.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://autos.yahoo.ca
Source: Heisenberg.Bug.txtString found in binary or memory: http://awakefmjbimhb29fwgif.jixeronicmi.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://awg.webchu.com/?freehost
Source: Heisenberg.Bug.txtString found in binary or memory: http://awg.webchu.com/?springi
Source: Heisenberg.Bug.txtString found in binary or memory: http://ax.fdun.com/r/erika/anaconda.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://b5h7hlhag2zrbttpybtpybtt.mornlessdj.com/?kammdhapfft
Source: Heisenberg.Bug.txtString found in binary or memory: http://babel.azlk4xd5x.com/?wid=100183
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://babel.azlk4xd5x.com/ads/images/60pills2.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://ball.etneanimbme.com/?A9CnC5AckEHogAAtraipse
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://banister.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://bargain.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://beecham.yourstuffcentral.com/o4.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://before.ltalian.net/z.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://begjchkm.yourpils24.info/?adfilmxtrsybegjzvpchk
Source: Heisenberg.Bug.txtString found in binary or memory: http://bfz5g6ywhkg9btb4gbt4gttb.breymj.com/?gxttbotmt
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://bigcharts.marketwatch.com/quickchart/quickchart.asp?symb=3D=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://bigcharts.marketwatch.com/quickchart/quickchart.asp?symb=IPFS&o_
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://biogenusa.biz/nomo=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://biz.yahoo.com/prnews/031112/lnw017_1.=
Source: Heisenberg.Bug.txtString found in binary or memory: http://blbcgzlhi.rtxnwxxke3e7rrrpe9r7wr99.autosliphi.com/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://bloodbath.yourstuffcentral.com/?e=185sm
Source: Heisenberg.Bug.txtString found in binary or memory: http://blouse.axmlegan.biz/?wid=100183
Source: Heisenberg.Bug.txtString found in binary or memory: http://blouse.axmlegan.biz/ads/images/60pills2.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://blouse.axmlegan.biz/book/
Source: Heisenberg.Bug.txtString found in binary or memory: http://booky.h67.net/r/erika/creamy.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://born.yffgvgfe.biz/?wid=100183
Source: Heisenberg.Bug.txtString found in binary or memory: http://bread.untowncjaad.com/?LuhPhWgTvPSueffunitary
Source: Heisenberg.Bug.txtString found in binary or memory: http://bryant.yffgvgfe.biz/?wid=100183
Source: Heisenberg.Bug.txtString found in binary or memory: http://bryant.yffgvgfe.biz/ads/images/60pills2.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://bryant.yffgvgfe.biz/book/
Source: Heisenberg.Bug.txtString found in binary or memory: http://bstvffovsl9bq7qz615g9.paradermdi.inf=
Source: Heisenberg.Bug.txtString found in binary or memory: http://bun.da9.net/ph/jenna/auspicious
Source: Heisenberg.Bug.txtString found in binary or memory: http://bun.da9.net/v.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://burgundy.k3y.net/pe/erika/diatomaceous.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://butcher.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://bxzng6gwhkyrbbt4yttmytbb.antonioga.com/?eisagnf
Source: Heisenberg.Bug.txtString found in binary or memory: http://bzzoytzkz7grtbtoybtogbbt.conidiumfe.com/?mfstxiptpdz
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://cable.xhentronic.com/Legal.asp?rid=3D10=
Source: Heisenberg.Bug.txtString found in binary or memory: http://calculate.yffgvgfe.biz/ads/images/60pills2.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://candela.wlue.com/e/erika/messrs.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://cantle.galhdce.info/rwanda?FUHKHW9NpdgVpt9airplane
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://capella.nggfgcm.info/?2f45AnyGiCFROSyliberal
Source: Heisenberg.Bug.txtString found in binary or memory: http://carl.oi6.net/ext/erika/daddy.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://carucatedlf.info/OD043/img/adobe.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://carucatedlf.info/OD043/img/ico=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://casino.cls2.org/iwin.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://cattlemen.galhdce.info/?raZ0ZcX3bvyHHLrrecluse
Source: Heisenberg.Bug.txtString found in binary or memory: http://caucus.kuev.com/z.php
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://cbs.marketwatch.com/news/story.asp?guid=
Source: Heisenberg.Bug.txtString found in binary or memory: http://celluloid.hiltiimfj.com/?9KHYHa9NVJMZlF9cozen
Source: Heisenberg.Bug.txtString found in binary or memory: http://centennial185fmq3fod1i2mj.scombronebf.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://cgi1.ebay.com/aw-cgi/eBayISAPI.dll?MyEbayLogin
Source: Heisenberg.Bug.txtString found in binary or memory: http://cgi1.ebay.com/aw-cgi/ebayISAPI.dll?UPdate
Source: Heisenberg.Bug.txtString found in binary or memory: http://cgi4.ebay.com/aw-cgi/eBayISAPI.dll?RegisterShow
Source: Heisenberg.Bug.txtString found in binary or memory: http://cgi5.ebay.com/ws1/eBayISAPI.dll?ListItemForSale
Source: Heisenberg.Bug.txtString found in binary or memory: http://cglaikdhj.bestmedz4healt.info/?befmdhjxwvqsycglzvpaik
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://chart.bigcharts.com/bc3/quickchart/chart.asp?symb=3DIPFS&co=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://chock.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://chummy.yf4.net/pe/erika/case.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://cilafjkh.bestpills4all.info/?bdegmhxwvqsycilzvpafjk
Source: Heisenberg.Bug.txtString found in binary or memory: http://clmkabdfgh.healingsphere.info/?eijabdfghxtrsyclmzvpk
Source: Heisenberg.Bug.txtString found in binary or memory: http://cocksure.FOSSlL.com/r/jenna/billion
Source: Heisenberg.Bug.txtString found in binary or memory: http://cocksure.FOSSlL.com/rep/jenna/billion
Source: Heisenberg.Bug.txtString found in binary or memory: http://cocksure.FOSSlL.com/w.php
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://coldfusion.affiliateshop.com/AIDLink.cfm?AID=033547&BID=3251
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://combine.eajficm.biz/?dsfOLeeltNkXZ1Jsnoopy
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://communion.kkhpaihkd.info/dsfOLeeltNkWZ1Jpale
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://condensible.eajficm.biz/heptane?j2loRkQX3TW13DPbellicose
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://condensible.yourstuffcentral.com?e=185sm
Source: Heisenberg.Bug.txtString found in binary or memory: http://corbett.boweldjaej.com/?P5lllUkXznqXOjPbias
Source: Heisenberg.Bug.txtString found in binary or memory: http://cornelius.mkfo.com/rx/erika/12/werner.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://cornelius.mkfo.com/rx/erika/20/chattel.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://cornelius.mkfo.com/rx/erika/22/whelan.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://cornelius.mkfo.com/rx/erika/6/declaratory.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://cornelius.mkfo.com/rx/erika/libya.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://cornet.kuev.com/replica/jenna/affiance.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://coset.s0o.net/ext/erika/arclength.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://crispin.xe4.net/ph/jenna/grout
Source: Heisenberg.Bug.txtString found in binary or memory: http://crispin.xe4.net/t.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://cryptanalytic.yffgvgfe.biz/?wid=100183
Source: Heisenberg.Bug.txtString found in binary or memory: http://cyberinfo.co.kr/orderinfo/reject_insert.asp
Source: Heisenberg.Bug.txtString found in binary or memory: http://cytoplasm.nf0.net/rep/erika/preliminary.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://d118id141r0tdvv8idv8idvv.conidiumfe.com/?dxskahnbktmb
Source: Heisenberg.Bug.txtString found in binary or memory: http://d5jo0k150qjbdddqivvqivvd.genevoisfc.com/?vwzmbmp
Source: Heisenberg.Bug.txtString found in binary or memory: http://d5jo0k150qjbdddqivvqivvd.polytomycg.com/?dsvtjahrnf
Source: Heisenberg.Bug.txtString found in binary or memory: http://declassify.lekl.com/pe/erika/midweek.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://delightful.lavekdhik.com/?BGDU7C5dl9cpNBBdisburse
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://demark.cls2.org/iwin.h=
Source: Heisenberg.Bug.txtString found in binary or memory: http://depute.etneanimbme.com/?nCVXpyo_7X.6STTbishop
Source: Heisenberg.Bug.txtString found in binary or memory: http://descriptor.j5k.net/ext/erika/paranoid.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://desktop.msn.co.za/
Source: Heisenberg.Bug.txtString found in binary or memory: http://developer.ebay.com/DevProgram/
Source: Heisenberg.Bug.txtString found in binary or memory: http://dgiklachjbe.allthemeds.info/?fmbexwvqsydgiklzvpachj
Source: Heisenberg.Bug.txtString found in binary or memory: http://dgmbfhilacek.bestmeds24.info/?jacekxwvqsydgmzmmbfhil
Source: Heisenberg.Bug.txtString found in binary or memory: http://dimple.ghtnsecn.com/?lWT8TmRZBVsF1llmullen
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://doubleopt.biz/optout.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://dragonhead.Yazzie.appe=
Source: Heisenberg.Bug.txtString found in binary or memory: http://driven.acananmdaf.com/?GLcZcbGiqKhuSaGdialect
Source: Heisenberg.Bug.txtString found in binary or memory: http://duncanthrax.net/exiscan/)
Source: Heisenberg.Bug.txtString found in binary or memory: http://dus014.walltransb0rder.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://dwiqgsro.OTFkMmZiYjYzZmY5OTEyNDk1NWIyM2Uw.nyclamiami.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://eaton.vaIium.com/ph/jenna/accountant
Source: Heisenberg.Bug.txtString found in binary or memory: http://eaton.vaIium.com/r.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://ebay.doubleclick.net/clk;8188304;9130450;f
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://ebb.nggfgcm.info/?1ez4zm1FNB8kNlxevasion
Source: Heisenberg.Bug.txtString found in binary or memory: http://ec1.images-amazon.com/images/P/B00005AFI0.01-A1XBPHGHAXLHDG._SCMZZZZZZZ_.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://ec1.images-amazon.com/images/P/B00008ZGS2.01-A3LRAUYQKK60X3._SCMZZZZZZZ_.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://ec1.images-amazon.com/images/P/B0000BX73E.01._PE17_SCMZZZZZZZ_.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://ec1.images-amazon.com/images/P/B00022PTT8.01._PE10_SCMZZZZZZZ_.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://eden.ulemabld.com/?TYpapUn_7Xub3TTindirect
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://educating.turpsz.us/hgh/?kadafi
Source: Heisenberg.Bug.txtString found in binary or memory: http://efojkshwovzubcla49kd.canellaih.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://ek29jw252a1cwwwrjwe9jwew.muranhe.info/?nbwyh
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://emaffint.com/0/22/22-10.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://emaffint.com/100/index.php?ai=7707
Source: Heisenberg.Bug.txtString found in binary or memory: http://emaffint.com/unsub
Source: Heisenberg.Bug.txtString found in binary or memory: http://endustri.dumlupinar.edu.tr
Source: Heisenberg.Bug.txtString found in binary or memory: http://english.pravda.ru/accidents/21/97/384/11653_Aircrash.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://enlargit.com/?rid=1662
Source: Heisenberg.Bug.txtString found in binary or memory: http://enlargit.com/?rid=3D1662
Source: Heisenberg.Bug.txtString found in binary or memory: http://enlargit.com/remove/
Source: Heisenberg.Bug.txtString found in binary or memory: http://eok7j3k61r2uewwr1we91wew.mornlessdj.com/?deauc
Source: Heisenberg.Bug.txtString found in binary or memory: http://eok7j3k61r2uewwr1we91wew.seepweedem.com/?knwkerfgsugwrw
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://epigram.kkhpaihkd.info/?BQDGDCCdlFIOlp5dockyard
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://ercof.org
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://errant.cheapwarehousemeds.com/?man=x56
Source: Heisenberg.Bug.txtString found in binary or memory: http://eygcfyey074f3n21ktivzal.hatrailna.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://f3lakx36lb2dffxs2fxakfxx.bilstedaa.com/?ylvhbcuvn
Source: Heisenberg.Bug.txtString found in binary or memory: http://f3ls2f363t2dxxxs2xfskxfx.muranhe.info/?eedwszedybjbqb
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://fatteners.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://feasible.lackcidfh.com/?0Ly42bxEgA7Lvwwbelt
Source: Heisenberg.Bug.txtString found in binary or memory: http://fieldsbillnorma.maximum-loans.net/rem.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://fikegahjl.bestuspharmacy.info/?bcdmahjlxwvqsyfikzvpeg
Source: Heisenberg.Bug.txtString found in binary or memory: http://fknez.ZDg2ZWNhMzhmNjFkZDE3NWNhOWRkMmY3.notetoyouplz.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://flaw.apieasy.biz/?wid=100183
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://flaw.apieasy.biz/ads/images/60pills2.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://flaw.apieasy.biz/book/
Source: Heisenberg.Bug.txtString found in binary or memory: http://fllakfl6lt2dfxfakfxa2xxf.befileml.com/?oixbexdyra
Source: Heisenberg.Bug.txtString found in binary or memory: http://fllakfl6lt2dfxfakfxa2xxf.oportoal.com/?wtkkeirie
Source: Heisenberg.Bug.txtString found in binary or memory: http://fllskxloltkdxfxa2fxa2fxx.porodineel.com/?jddiugxwf
Source: Heisenberg.Bug.txtString found in binary or memory: http://fmtjovksahw6vzcbclsmr2d.canellaih.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://football.fantasysports.yahoo.com?ovchn=YAH&ovcpn=Integration&ovcrn=Mail
Source: Heisenberg.Bug.txtString found in binary or memory: http://fp3qk4372sldfxfskxxs2ffx.bewingedea.com/?mmttbljk
Source: Heisenberg.Bug.txtString found in binary or memory: http://fpl53blu2n3dfffz3xxzlxxf.upstrivehi.com/?vhlvoepatnhaz
Source: Heisenberg.Bug.txtString found in binary or memory: http://fr.messenger.yahoo.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://fritillary.ftke.com/e/erika/brink.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://g-images.amazon.com/images/G/01/buttons/add-to-cart-yellow-short.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://g-images.amazon.com/images/G/01/software/banners/02-software_bnr.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://g-images.amazon.com/images/G/01/stores/hardlines/headers/featured-products.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://g-images.amazon.com/images/G/01/x-locale/common/icons/eyebrow-upper-left-corner.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://g-images.amazon.com/images/G/01/x-locale/common/icons/eyebrow-upper-right-corner.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://g-images.amazon.com/images/G/01/x-locale/common/orange-arrow.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://g44b3g4p4cleyggblygtlyyy.sarcosisdc.com/?qfvauvglamo
Source: Heisenberg.Bug.txtString found in binary or memory: http://gabfijkehm.bestmeds24.info/?cdlehmxwvqsygzvpabfijk
Source: Heisenberg.Bug.txtString found in binary or memory: http://gamu4q4f37megggc3gyclgyg.egoizerjd.com/?mfzkdb
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://getmoresavemore.biz/optout.html?=
Source: Heisenberg.Bug.txtString found in binary or memory: http://gill.a8k.net/e/erika/disgustful.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://glamourware.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://glbceafij.pharmacy4allonline.info/?dhkmafijxwvqsyglzvpbce
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://gosh.apieasy.biz/?wid=100183
Source: Heisenberg.Bug.txtString found in binary or memory: http://grhkwuwbf4jbi4zghqx9e7i.canellaih.info
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://guiltiest.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://gulf.nlav.com/p/erika/12/elan.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://gulf.nlav.com/ph/erika/28/that
Source: Heisenberg.Bug.txtString found in binary or memory: http://gulf.nlav.com/ph/erika/6/bonaparte.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://gulf.nlav.com/rx/erika/20/hoar.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://gw.landware.co.jp/.temp/paypal.com/cmdr_login/index.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://hatrailna.info/OD043/img/corel.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://hatrailna.info/OD043/img/ico/a=
Source: Heisenberg.Bug.txtString found in binary or memory: http://hatrailna.info/OD043/img/ico/b=
Source: Heisenberg.Bug.txtString found in binary or memory: http://hatrailna.info/OD043/img/mm.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://hatrailna.info/OD043/img/win_cat.g=
Source: Heisenberg.Bug.txtString found in binary or memory: http://healthpronews.com/?bb6Fab7cbefB9a6dbaec6206T2f9f33f
Source: Heisenberg.Bug.txtString found in binary or memory: http://hindu.makdimim.info/?vc1y1kv7L36iLjvabuse
Source: Heisenberg.Bug.txtString found in binary or memory: http://hindu.makdimim.info/j0lmREPX3TW63DPcontend
Source: Heisenberg.Bug.txtString found in binary or memory: http://hippopotamus.el9.net/e/erika/libertine.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://hmcdekbfgij.healingsphere.info/?albfgijxtrsyhmzvpcdek
Source: Heisenberg.Bug.txtString found in binary or memory: http://hnnc4znq5v4xhhzc4hhumzhh.oportoal.com/?mgofz
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://horde.yourstuffcentral.com/?e=185sm
Source: Heisenberg.Bug.txtString found in binary or memory: http://huhsmann.de
Source: Heisenberg.Bug.txtString found in binary or memory: http://i1img.com/images/newsletter/topanimation.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://iaotn7osnvoy0i0dn0iv50i0.seepweedem.com/?uvnyiztuvk
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.amazon.com/images/P/B00005MOTG.01._SCMZZZZZZZ_.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.amazon.com/images/P/B0000AZJVC.01.TZZZZZZZ.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.amazon.com/images/P/B00081I6JI.01._PE7_SCMZZZZZZZ_.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.com/images?q=tbn:-bspjicyAhkJ:www.palottery.state.pa.us/lottery/lib/lottery/ric
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.com/images?q=tbn:27t7guoX-bwJ:www.lcslogic.com/images/News_Room/Citrix-globe.jp
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.com/images?q=tbn:WqyqP08BUccJ:www.cds.net/images/globe.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.com/images?q=tbn:ZUAKxkzDBuEJ:www.adlertech.com/Site%2520Graphics/Canadian%2520
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.com/images?q=tbn:_MMRq0XIDlgJ:www.blinman.com/national_lottery.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.com/images?q=tbn:mLYDPE-B2HsJ:www.lottetymark.com/images/index.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.it/images?q=tbn:ANVmeAV6ViAJ:www.new-infoproducts.com/Google_Profits/gp_box_1_n
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.it/images?q=tbn:MllXXig4oXUJ:www.premiumdrugs.com/images/coup_levitra_pill.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.it/images?q=tbn:Mw3HLi2iG6kJ:www.premiumdrugs.com/images/coup_viagra_pill.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.it/images?q=tbn:YZSu5lazaxcJ:www.premiumdrugs.com/images/coup_cialis_pill.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.it/images?q=tbn:h_In-S_eKfEJ:www.hostdepartment.com/images/v.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.it/images?q=tbn:jNuci8wvTdMJ:photos1.blogger.com/img/118/2458/1024/In%2520the%2
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.google.it/images?q=tbn:o7ogVOGySWMJ:www.ice.gov/graphics/images/050701addidas_lg.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.paypal.com/en_US/i/logo/email_logo.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.paypal.com/en_US/i/scr/pixel.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.paypal.com/en_US/images/pixel.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.paypal.com/images/bg_clk.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://images.paypal.com/images/pixel.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://img2.%4e%41y%61%6ea.com/~l_137/her.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://img2.nayana.com/~l_137/4.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://img2.nayana.com/~l_137/click.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://img2.nayana.com/~l_137/ut.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://imp.azlk4xd5x.com/?wid=100183
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://imp.azlk4xd5x.com/ads/images/60pills4.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://imp.azlk4xd5x.com/book/
Source: Heisenberg.Bug.txtString found in binary or memory: http://include.ebaystatic.com/aw/pics/js/stats/ss.js
Source: Heisenberg.Bug.txtString found in binary or memory: http://include.ebaystatic.com/aw/pics/js/stats/ss2.js
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://indonesia.eajficm.biz/?O1knQjjWySp0yCOhurwitz
Source: Heisenberg.Bug.txtString found in binary or memory: http://internet.e-mail
Source: Heisenberg.Bug.txtString found in binary or memory: http://internet24.tiscali.cz
Source: Heisenberg.Bug.txtString found in binary or memory: http://invisible.xe4.net/b.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://invisible.xe4.net/p/jenna/stodgy
Source: Heisenberg.Bug.txtString found in binary or memory: http://iood5i6row5g00id500dniii.porodineel.com/?ssfxfhgvvixqui
Source: Heisenberg.Bug.txtString found in binary or memory: http://irexzzuyla7zos54ne3fkd6.carucatedlf.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://j7pwojps7foz111wo1jw61j1.befileml.com/?tewgivymbgyvty
Source: Heisenberg.Bug.txtString found in binary or memory: http://jb7u6qpt6epzjj1eo11wojjj.genevoisfc.com/?reberuq
Source: Heisenberg.Bug.txtString found in binary or memory: http://jfavabnaew.OTFkMmZiYjYzZmY5OTEyNDk1NWIyM2Uw.twelvebrand.com/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://jiky.egiefdjm.info/?l4TqTkltBpsy59lGMGLcv
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://johnson.senate.gov/~johnson/releases/200301/2003124B11.h=
Source: Heisenberg.Bug.txtString found in binary or memory: http://jp7w61pa7x6hj11wo1jwo1jj.muranhe.info/?wjlgjzcdjunt
Source: Heisenberg.Bug.txtString found in binary or memory: http://junction.czxugs.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://k88f728tqy70kkkxpk2fp2kk.befileml.com/?tsdjzouamrl
Source: Heisenberg.Bug.txtString found in binary or memory: http://k88xpk8t8g7i22kfp2kf72kk.muranhe.info/?uvpjcmw
Source: Heisenberg.Bug.txtString found in binary or memory: http://kaleidoscope.xe4.net/e.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://kaleidoscope.xe4.net/p/jenna/gam
Source: Heisenberg.Bug.txtString found in binary or memory: http://kingj85x4q3xov1ikm1.deservedlyma.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://koqw7x75qb70222dpkkdp2k2.akekicb.com/?ftarnblc
Source: Heisenberg.Bug.txtString found in binary or memory: http://koqw7x75qb70222dpkkdp2k2.breymj.com/?xauygpqd
Source: Heisenberg.Bug.txtString found in binary or memory: http://l9rgqlru9z81lllg83ly833l.muranhe.info/?wcolm
Source: Heisenberg.Bug.txtString found in binary or memory: http://lange.tnashbsv.com/?4PC86f5cQ8Hjz4Aubiquitous
Source: Heisenberg.Bug.txtString found in binary or memory: http://layman.tanachklgmj.com/?HqdLdmIjXLiWaHbaperiodic
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://leak.policy.network74.net
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://lfhN.kkadcce.info/?BQ7G76CJR9IjRVBNq
Source: Heisenberg.Bug.txtString found in binary or memory: http://live.deargenius.net/
Source: Heisenberg.Bug.txtString found in binary or memory: http://live.muhosransk.com/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://lodestone.yourstuffcentral.com/?e=185sm
Source: Heisenberg.Bug.txtString found in binary or memory: http://lorinda.feralacjhk.com/?05yj2x08M4Dkc00campus
Source: Heisenberg.Bug.txtString found in binary or memory: http://lr9y8lrcrzqj33lg833g8lll.bilstedaa.com/?xcgmgbplvihj
Source: Heisenberg.Bug.txtString found in binary or memory: http://lvzhgswrce.MzI0OTdjNzc1Y2IzMWJiYTVjMzBlMjY5.peanutsalty.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://m8sy9hr7svr2m4mx9m4xr44m.segolatelf.com/?zvvdaeay
Source: Heisenberg.Bug.txtString found in binary or memory: http://macassarrydncyb5e398sur.wjncnbfj.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://mail.yahoo.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://mashrmsva09k444h94mhrmm4.muranhe.info/?sprmblopd
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://mastery.nggfgcm.info/3g565ozbPDGmPT3mellow
Source: Heisenberg.Bug.txtString found in binary or memory: http://maszr4svsir24mmzrm4zr4m4.befileml.com/?pkzvqt
Source: Heisenberg.Bug.txtString found in binary or memory: http://mcallister.ghtnsecn.com/?OTk5QjOqySpC.OOinlay
Source: Heisenberg.Bug.txtString found in binary or memory: http://mcwyd2z9ykfex6dpc5y.carucatedlf.info
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://mealy.yourstuffcentral.com/?e=185sm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://mercilessly.apieasy.biz/?wid=100183
Source: Heisenberg.Bug.txtString found in binary or memory: http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
Source: Heisenberg.Bug.txtString found in binary or memory: http://mga0aesl9ds244m09mmir44m.bewingedea.com/?ooexui
Source: Heisenberg.Bug.txtString found in binary or memory: http://mgaiswa3rvs24m40rm40rmm4.bewingedea.com/?kudxgnjisd
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://moneycentral.msn.com/scripts/webquote.dll?iPage=3Dqd&Sym=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://monterey.cheapdrugsplus.com/?man=x56
Source: Heisenberg.Bug.txtString found in binary or memory: http://msazrmsvs0rk4mmzrmmz94m4.sarcosisdc.com/?khicpfpp
Source: Heisenberg.Bug.txtString found in binary or memory: http://myweb.hinet.net/home2/wetalk/i=
Source: Heisenberg.Bug.txtString found in binary or memory: http://myweb.hinet.net/home2/wetalk/images/ew.=
Source: Heisenberg.Bug.txtString found in binary or memory: http://n9ths0a8tws35nnya55ys55n.rallidaelk.com/?cqusdsey
Source: Heisenberg.Bug.txtString found in binary or memory: http://nbbianbwtja355n0s55ian5n.conidiumfe.com/?ipmdl
Source: Heisenberg.Bug.txtString found in binary or memory: http://nbbisnbwtja35nnisnn0s55n.befileml.com/?hfebuu
Source: Heisenberg.Bug.txtString found in binary or memory: http://nbt0s5betja3nnniannisnnn.oportoal.com/?xomddibpgtoyu
Source: Heisenberg.Bug.txtString found in binary or memory: http://nbt0sntet1al555is5n0a555.porodineel.com/?vhvbjetjryreef
Source: Heisenberg.Bug.txtString found in binary or memory: http://nbtianbwbjsl5n50sn5is555.muranhe.info/?hwwfadsnnwetc
Source: Heisenberg.Bug.txtString found in binary or memory: http://neptunium.spywarelist.info/?aid=582
Source: Heisenberg.Bug.txtString found in binary or memory: http://neptunium.spywarelist.info/discon
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://netwinsite.com/top_mail.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://news.bbc.co.uk/1/hi/world/africa/830774.stm
Source: Heisenberg.Bug.txtString found in binary or memory: http://news.bbc.co.uk/1/hi/world/americas/502503.stm)
Source: Heisenberg.Bug.txtString found in binary or memory: http://news.bbc.co.uk/2/hi/africa/3364111.stm
Source: Heisenberg.Bug.txtString found in binary or memory: http://news.ft.com/cms/4bb9612a-d254-11d8-b661-00000e2511c8.h
Source: Heisenberg.Bug.txtString found in binary or memory: http://newsfromrussia.com/main/2003/11/13/51215.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://ngtaip4wl7k12bicza3.canellaih.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://nincopomper.com/33/5/index.php?ai=7707
Source: Heisenberg.Bug.txtString found in binary or memory: http://nincopomper.com/33/5/index.php?ai=7707&com=30
Source: Heisenberg.Bug.txtString found in binary or memory: http://nincopomper.com/unsub
Source: Heisenberg.Bug.txtString found in binary or memory: http://nlubtxzgfcf.OTFkMmZiYjYzZmY5OTEyNDk1NWIyM2Uw.smartcarrace.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://ntbiantwbja3nn50sn5ia5nn.kanehjn.com/?obcawnelxwpxg
Source: Heisenberg.Bug.txtString found in binary or memory: http://nttisnbwt1s355nisnn0a5nn.bilstedaa.com/?kgpqfufkwxyp
Source: Heisenberg.Bug.txtString found in binary or memory: http://nttisnbwt1s355nisnn0a5nn.kanehjn.com/?fucpdkoqtfj
Source: Heisenberg.Bug.txtString found in binary or memory: http://nwxhjjudnti.b4gryyzyzuz9btt5gtb5gbbt.boltantnd.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://nyclamiami.com/images/flash.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://nyclamiami.com/images/pic_index_holidayspecials2.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://nyclamiami.com/images/pic_weshipworldwide.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://nyclamiami.com/watches/CA269-NP0_m.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://nyclamiami.com/watches/RX288-NP0_m.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://occasion.nggfgcm.info/?MZijOBgUwkTzwAgswift
Source: Heisenberg.Bug.txtString found in binary or memory: http://ocu1b6cxc2b4o66jboo1t66o.porodineel.com/?hwjnixkzt
Source: Heisenberg.Bug.txtString found in binary or memory: http://oerb0xqwat9cnb873e.dmespousenb.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://oft.idgcfbcgfj.info/?xMzC3ix3L58eNR1zxc
Source: Heisenberg.Bug.txtString found in binary or memory: http://ogceu2c3twc4666qu668co66.seepweedem.com/?yzcdovgesi
Source: Heisenberg.Bug.txtString found in binary or memory: http://ogchbdcgb1cmo6o1b6o1bo6o.genevoisfc.com/?fjtuwk
Source: Heisenberg.Bug.txtString found in binary or memory: http://okilmuipla7zos54ne3fkd6.canellaih.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://ostipmxlh0yju0fws3.dmespousenb.com/ost
Source: Heisenberg.Bug.txtString found in binary or memory: http://ouu1b6uxc2tm66ojboo1too6.muranhe.info/?ecdpeuko
Source: Heisenberg.Bug.txtString found in binary or memory: http://over.casefydcngd.com/?BGDU7C5dl9cpNBBdiadem
Source: Heisenberg.Bug.txtString found in binary or memory: http://pa.yahoo.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/affiliate/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/buy/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/community/aboutebay/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/community/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/download/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/help/community/png-priv.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/help/community/png-user.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/help/confidence/hub.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/help/index_popup.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/help/new/signin.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/help/policies/hub.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/help/policies/privacy-policy.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/help/policies/user-agreement.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/search/items/basicsearch.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/services/forum/feedback.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/services/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://pages.ebay.com/sitemap.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://palfrey.tritylbcgbj.com/?z8BS543bPDGnf33pearce
Source: Heisenberg.Bug.txtString found in binary or memory: http://paradermdi.info/OD043/img/ico/=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://pastime.galhdce.info/?k3SVSBks4orAAEkbulldoze
Source: Heisenberg.Bug.txtString found in binary or memory: http://patio.ziagra.net/j.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://patio.ziagra.net/p/jenna/vt
Source: Heisenberg.Bug.txtString found in binary or memory: http://paypal.com/)
Source: Heisenberg.Bug.txtString found in binary or memory: http://pbdgld.maximum-loans.net/2/index/pfd/fergybut
Source: Heisenberg.Bug.txtString found in binary or memory: http://pbfwio.tablechair.info/?83563507
Source: Heisenberg.Bug.txtString found in binary or memory: http://pdd2c7dydlc57ppkcp7kcp7p.befileml.com/?fwvoqherzaxk
Source: Heisenberg.Bug.txtString found in binary or memory: http://pdd2upvyd3un77p2up72u777.muranhe.info/?qaywik
Source: Heisenberg.Bug.txtString found in binary or memory: http://pdv2updgv3cn7p72u77kcp7p.conidiumfe.com/?aeskip
Source: Heisenberg.Bug.txtString found in binary or memory: http://peanutsalty.com/images/pens.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://perfecter.eajficm.biz/?N0jSjiip1lov1Bhinc
Source: Heisenberg.Bug.txtString found in binary or memory: http://pgdxgmb807bonofmy3ep.paradermd=
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebay.com/aw/pics/listings/questionMark_14x14.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebay.com/aw/pics/sitewide/leftLine_16x3.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebay.com/aw/pics/spacer.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebaystatic.com/aw/pics/hp/hdr_760x47.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebaystatic.com/aw/pics/listings/questionMark_14x14.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebaystatic.com/aw/pics/register/HeaderRegister_387x40.g=
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebaystatic.com/aw/pics/sitewide/leftLine_16x3.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebaystatic.com/aw/pics/spacer.g=
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebaystatic.com/aw/pics/spacer.gi=
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebaystatic.com/aw/pics/spacer.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebaystatic.com/aw/pics/spacer.gif=
Source: Heisenberg.Bug.txtString found in binary or memory: http://pics.ebaystatic.com/aw/pics/truste_button.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://pills-you-need.net/spa/
Source: Heisenberg.Bug.txtString found in binary or memory: http://pills-you-need.net/unsub.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://pnhmfjllaze6dzctcls4r2d.paradermdi.info
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://poker.blackjack.cls2.org/iwin.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://poker.room.cls2.org/iwin.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://poker.table.cls2.org/iwin.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://provetme.com/0/15/15-1.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://provetme.com/33/1/index.php?ai=3D7513&com=3D30
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://provetme.com/remove/
Source: Heisenberg.Bug.txtString found in binary or memory: http://pzen074f3n21ktivzal.paradermdi.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://qeelv8whwmdo8qqlv883dqqq.sarcosisdc.com/?ybkjfsh
Source: Heisenberg.Bug.txtString found in binary or memory: http://qieiyzpszwpdxutu3s592v.carucatedlf.info
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://quote.money.cnn.com/quote/quote?symbols=3Dhtds
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://quotes.barchart.com/texpert.asp?sy=
Source: Heisenberg.Bug.txtString found in binary or memory: http://qweldqehe4v68q8lvqq3vq8q.kanehjn.com/?ntwuayqd
Source: Heisenberg.Bug.txtString found in binary or memory: http://r1xhfnxowzxp9rrbf9rtf99r.bewingedea.com/?rcpmqtrkmhoqm
Source: Heisenberg.Bug.txtString found in binary or memory: http://r3x5f1x8wix79r95w9r5e9r9.seepweedem.com/?rntsvxujemyd
Source: Heisenberg.Bug.txtString found in binary or memory: http://r3x5x1fqw0f7r99nerr5w9rr.genevoisfc.com/?fjkfac
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://racked.wpzza.us/pher/o.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://rd.yahoo.com/punic/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://redhotflames.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://remarked.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://rest.apieasy.biz/?wid=100183
Source: Heisenberg.Bug.txtString found in binary or memory: http://restitution.j5k.net/ext/erika/melt.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://resume.galhdce.info/?EnaJaV8MocLoUs8apple
Source: Heisenberg.Bug.txtString found in binary or memory: http://rff4e9xix5ep99rmw9rmw9r9.befileml.com/?yiouqih
Source: Heisenberg.Bug.txtString found in binary or memory: http://rffmw9xif5wprr94wr94er99.oportoal.com/?gaxvssducyzuxc
Source: Heisenberg.Bug.txtString found in binary or memory: http://rfxme9x0xnw7r9r4err4er99.kanehjn.com/?orjxofyhyh
Source: Heisenberg.Bug.txtString found in binary or memory: http://roll.wndbsdqb.com/?GLcZcbGiqKhuSaGcoleus
Source: Heisenberg.Bug.txtString found in binary or memory: http://rot.qo2.net/p/erika/23/tomb.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://savagers.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://scarcity.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://secret.cls2.org/iwin.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://secret.rli3.org/iwin.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://secret.rxt2.org/iwin.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://seymxnfvyjxqaaalxss3fsaa.breymj.com/?iktnctov
Source: Heisenberg.Bug.txtString found in binary or memory: http://sgg5fayjy6x8ssanfsa5xsas.bilstedaa.com/?gwajdtzyurinmx
Source: Heisenberg.Bug.txtString found in binary or memory: http://shawalphabet.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://slimy.j5k.net/ext/erika/guarantee.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://slovakia.yourstuffcentral.com?e=185sm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://smaller.eajficm.biz/?APCFC55IkEHikU4contemptible
Source: Heisenberg.Bug.txtString found in binary or memory: http://smartcarrace.com/images/pic_index_holidayspecials1.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://smartcarrace.com/watches/RX388-NP0_m.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://smgoy2y9f1g8sasoxaaoxssa.genevoisfc.com/?omrcnurtvshs
Source: Heisenberg.Bug.txtString found in binary or memory: http://smjflk.newpowerproject.info/?msecegxwssrydmsbujzpofwwvvn
Source: Heisenberg.Bug.txtString found in binary or memory: http://souchasneg.com/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://store.yahoo.com/gardenguides-store/index.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://sweatshirt.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://swissqualitywatch.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://sxtqequgf4jtimhgzqf9wp0.canellaih.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://syy5fsg1yofqaaa5xaa5fsas.kanehjn.com/?ngzmc
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://table.finance.yahoo.com/d?a=3D7&b=3D28&c=3D2003&d=3D8&e=3D=
Source: Heisenberg.Bug.txtString found in binary or memory: http://tbggkmdcwf.buhihvzfhzzrtttmgbt4ybbt.freyadi.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://tetrahedron.ravishfaknc.com/?OTQ5kjOW2mpC.Oieverywhere
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://this.apieasy.biz/book/
Source: Heisenberg.Bug.txtString found in binary or memory: http://tinyurl.com/29dxp
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://tn.kkadcce.info/?BQ7G76CJR9IjRVBC3b0A
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://tracker.hit=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://tracker.hitmatic.com/24571/?page=MainPage&mp=1&sx=1024&sy=768&sd=32&cp=x8
Source: Heisenberg.Bug.txtString found in binary or memory: http://tracker.hitmatic.com/24571/?page=MainPage&mp=1
Source: Heisenberg.Bug.txtString found in binary or memory: http://transmission.lekl.com/pe/erika/confidential.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://transworldwebsites.com/EM.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://travesty.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://treemobiles.com/0/25/25-5.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://treemobiles.com/200/index.php?ai=7707
Source: Heisenberg.Bug.txtString found in binary or memory: http://tribunal.lekl.com/ext/erika/lacustrine.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://trichloroacetic.uosb.com/ph/jenna/boswell
Source: Heisenberg.Bug.txtString found in binary or memory: http://trichloroacetic.uosb.com/y.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://tubular.xenl.com/p/erika/20/lecture
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://turbojet.nggfgcm.info/?WDYtYLWyau1JGKqbessemer
Source: Heisenberg.Bug.txtString found in binary or memory: http://tzh6ytz2hpgrbbbogbtogbtt.porodineel.com/?cxhqaqwjbgss
Source: Heisenberg.Bug.txtString found in binary or memory: http://u0iphui3i8hscucphuu7zcuc.conidiumfe.com/?wsslurbwffhmim
Source: Heisenberg.Bug.txtString found in binary or memory: http://u4i208i9z20acccw0ucw0ucu.seepweedem.com/?lmyzguigtw
Source: Heisenberg.Bug.txtString found in binary or memory: http://udobreno.com/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://underworld.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://updatebots.com/cp/whyiquitmyjob.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://updatebots.com/remove.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://updatebots.com/whyiquitmyjob-r.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://updatebots.com/whyiquitmyjob-r=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://updatebots.com/whyiquitmyjob.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://us.rd.yahoo.com/evt=33539/
Source: Heisenberg.Bug.txtString found in binary or memory: http://us.rd.yahoo.com/messenger/mail_taglines/yahoofr/
Source: Heisenberg.Bug.txtString found in binary or memory: http://uvt.tuzvo.sk/tuzvonet1/
Source: Heisenberg.Bug.txtString found in binary or memory: http://vatican.boweldjaej.com/?OTkBkjOq2mVCuOOadmissible
Source: Heisenberg.Bug.txtString found in binary or memory: http://vgelyeqmmsr.OGQ5MjA2Yjg5ODM2NjhkMWNkNDdjMGVm.niceclassgoods.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://vnj60kj5iqjbvdvqivv80ddv.genevoisfc.com/?vjbpqnbbx
Source: Heisenberg.Bug.txtString found in binary or memory: http://volley.pq4.net/rep/erika/nouveau.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://vpjrjn1cimjtvvv90dd9ivdd.genevoisfc.com/?wxlgmaftehtj
Source: Heisenberg.Bug.txtString found in binary or memory: http://vpjrjn1cimjtvvv90dd9ivdd.upstrivehi.com/?wiormf
Source: Heisenberg.Bug.txtString found in binary or memory: http://vtopkusoft.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://w229je2nkajcwwwrjwer1www.bilstedaa.com/?grywdjsjnmrb
Source: Heisenberg.Bug.txtString found in binary or memory: http://walkout.mqobpkgw.biz/?wid=100313
Source: Heisenberg.Bug.txtString found in binary or memory: http://walkout.mqobpkgw.biz/book/
Source: Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/download=
Source: Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/downloads/CasinoS=
Source: Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/downloads/CasinoSetup.msi
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/image=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/dot.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/download_here_help.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/games.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/internet_casin=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/internet_casinos_03.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/internet_casinos_04.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/main_promos_li=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/main_promos_to=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/newest_casino=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/payouts_98.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/step2.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/images/step3.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/r.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://warp2casino.org/remove.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://wealth.yourstuffcentral.com/?e=185sm
Source: Heisenberg.Bug.txtString found in binary or memory: http://webbasedemail.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://wella.boom.ro
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://whole.galhdce.info/?Aj6FCRAcQ8HQQU4intermittent
Source: Heisenberg.Bug.txtString found in binary or memory: http://wingman.spywarelist.info/?aid=582
Source: Heisenberg.Bug.txtString found in binary or memory: http://wingman.spywarelist.info/discon
Source: Heisenberg.Bug.txtString found in binary or memory: http://wo24ka2tj42cewwykwwy2www.bewingedea.com/?ofbjk
Source: Heisenberg.Bug.txtString found in binary or memory: http://writ.nf0.net/rep/erika/praecox.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://wvvw.co.kr/her02t.php?partner_id=marine
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://ww%77.%65v%69%64%65%6E%63e%2D%65%6C%69%6D%69%6Ea=
Source: Heisenberg.Bug.txtString found in binary or memory: http://wwvvw.com/402t.php?partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://wwvvw.com/ut02t.php?partner_id=marine
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www%2E%77eb%64%65%61%6Cz%2Ec%6F%6D/unlist.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.%61%64%64%69ct%69%76e%73e%78.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.%70%72%69%43einfo.co.kr/user/ftp/default/bbs/hak5.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.%70%72%69%43einfo.co.kr/user/ftp/default/bbs/sun.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.%70%72%69%43einfo.co.kr/user/ftp/default/bbs/yak.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.%74%6cq%6bfsha.com/x/sun/sun02.php?partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.%78d%46g%68%4a.co.kr/x/sky/sky202.php?partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.014.walltran=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.100-pills.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.100-pills.com/vp/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.10pills.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.10pills.net/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.123spywar.com/?id=urgent
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.2005-downloads.com/trave1.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.2day4u.biz/conferencecall3.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.2day4u.biz/investment2.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.2oo5-downloads.com/info.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.2pills.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.2pills.net/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.5jzd.org/out5s/rem2e-bak.asp
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.StopAllThatSpam.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.WinFreeGas.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.XhenTronic.net?refid=3D10010000858361131
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.XhenTronic.net?unsub=3D100100008583611=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.alfavoyage.ru/catalog/.../default_location/CheckSession.php?72b150dc8b014b2a8cfd17188eb28
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.all-soft-disks.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.all-soft-disks.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.all-soft-for-you.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.all-soft-for-you.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.allsoftpossible.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.allsoftpossible.com/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.ama.com.au/web.nsf/doc/WEEN-5NV24W
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.amtpro70.com/86.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.amyz.info/alpha/?buster
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.amyz.info/pher/o.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.amyz.info/welo/?kadafi
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.anjdidlrjs.com/x/yak/yak02.php?partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.annualnotification.com/info.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.aol.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.aqmp.net/out5s/rem2e.asp
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.atlantahomesandlifestyles.com/info.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.audit.wa.gov.au/reports/report2002_03.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.autochan.in.th
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.backgammonsite.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bankofthewest.com/BOW/assets/vcmStaticContent/images/logo.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bankofthewest.com/BOW/home
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.bargain-pricings.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.beanstalk.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.beenteresting.com/remove/cstremove.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bestcds.su
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bestcds.su/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.betterthis.biz/l/105/index.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.betterthis.biz/l/110/index.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.betterthis.biz/optout.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bizforum.org/hotspot.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bizforum.org/images/dmfire.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bizforum.org/world_spinning_1.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bk6u.net/mrg.asp
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bk6u.net/n.asp
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.bonkey.biz/kadafi/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.bonkey.biz/kadafi/z.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.bozz.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.bsdwins.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.calvesi.it
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.capturepages.net/mcp/121/1642/cap279.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cardpat.cf.st
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.caymannetnews.com/Archive/Archive%20Articles/August=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cddisks.org
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cddisks.org/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cds-for-you.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cds-for-you.com/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.cheaperthanever.com/g/index.php?AFF_ID=3Dr2d2
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cheapsoft.biz
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cheapsoft.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cjlinc.net
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.cjlinc.net/CJ01.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.clinicextra.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.cnn.com/2003/WORLD/africa/07/20/kenya.crash/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cnn.com/2003/WORLD/africa/12/26/benin.crash/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.cnn.com/2003/WORLD/africa/12/26/benin.crash/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.cnn.com/2003/world/africa/12/25/benin.crash/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.com.ar
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.com.ar/arg/hosting.htm?fo=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.com.ar/arg/im/ban-2x=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.coolbrands.net
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.coolbrands.net/emailremovalmanagementcenter.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.coolbrands.net/protectv/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.creaty.biz/hgh/?kadafi
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.crwflags.com/fotw/images/j/jp.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.customerblast.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.dealsforu.biz/l/110/index.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.dealsforu.biz/l/117/index.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.dealsforu.biz/l/118/index.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.dealsforu.biz/optout.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.devilnet-on-line.org
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.dfghjkiu.co.kr/x/hak/hak02.php?partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.directurls.com?c=3D6
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.directurls.com?c=3D8
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.dnews.com/health/hc5.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.dns8899.co=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.doctoroncall.com/NewsRelease/HealthCareCrisis.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.dohjk.biz/patch/?kadafi
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.donga.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.dontletthisonepassyouby.com/trave1.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.downloadnetwerk.com/info.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.e-watchez.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.e-watchez.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.eakv.com/?axel=3D49
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.earthlink.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ebay.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ebaycareers.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ebayorama.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.ecom-universe.net/splash1/FF.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.elite-meds.com/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.elite-meds.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.elite-meds.com/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.elitewatches.biz
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.emgj.org?axel=3D36
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.eohuisa.biz/rxmimg/logo.=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.eohuisa.biz/rxmimg/soma.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.eohuisa.biz/rxmimg/valium.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.eohuisa.biz/rxmimg/xanax.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.eohuisa.biz/vpr6653
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ersk41.biz/?wid=100183
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.ersk41.biz/ads/images/60pills2.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.ersk41.biz/book/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.esavingsplus.com?unsub=3D1001000085942=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/in.php?id=jenna
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/unsubscribe/unsubscribe.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/xtndr-fpa/small/images/extender_01.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/xtndr-fpa/small/images/extender_02.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/xtndr-fpa/small/images/extender_03.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/xtndr-fpa/small/images/extender_04.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/xtndr-fpa/small/images/extender_05.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/xtndr-fpa/small/images/extender_06.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/xtndr-fpa/small/images/extender_07.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extendit.info/xtndr-fpa/small/images/extender_08.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extraohuisa.biz/rmtimages/ambien.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extraohuisa.biz/rmtimages/phentermine.gif?astarte
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extraohuisa.biz/rmtimages/soma.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extraohuisa.biz/rmtimages/top_img/img_02.gif=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.extraohuisa.biz/vpr6653
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ezfilesharing.com/ref44.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.famousoffers.com/remove/cstremove.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.fdgshd.com/again/amoebae/ajax.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.fdgshd.com/atop/alvarez/adelia/anabaptist.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.fdgshd.com/bb/addison/aggrieve/acyclic.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.in=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.info/coop/test/vm.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.info/images/BMAD.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.info/images/bmcoop.bmp
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.info/images/sidebar.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.info/images/topbar.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.info/index2.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.info/remove.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.info/splash1.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.financialbuilder.info/takeoff.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.findpilzhere.com/v2/index.php?AFF_ID=3Dr2d2
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.firstclassbusiness.net/takeoff=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.garden-gifts.com/images/calligraphy_set1.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.gdfhgfnhg.com/0in/0in.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.gdfhgfnhg.com/0in/0in2.php?ad_num=44&partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.gdfhgfnhg.com/bok2/bok2.php?ad_num=50&partner_id=marine
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.geocities.com/blowjobfunz/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.geocities.com/mailtestbox2000/Kiloh_logo.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.geocities.com/pappaeciccia22/cd.html?tswekbh
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.geocities.com/pappaeciccia22/dl.html?zfoif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.get-a-pill.com/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.get-a-pill.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.get-a-pill.com/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.get-top-rankings.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.get-top-rankings.com/im=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.get-top-rankings.com/images/booster_ad_01.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.get-top-rankings.com/images/booster_ad_02.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.getreadyproductions.com/ref44.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.gorxmeds.biz/?wid=100183
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.gorxmeds.biz/ads/images/60pills2.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.gorxmeds.biz/book/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.gov.za/profi=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.gr8offers.info/in.php?id=jenna
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.gr8offers.info/unsubscribe/unsubscribe.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.hankooki.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.health-products2003.com/index.php?KBID=3D1008
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.health-products2003.com/r
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.herbalplus.us/out.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.hgee1.info/pher/o.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.hitour.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.holidayjingle.com/info.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.holidaystorefinder.com/info.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.hoovers.com/yukos/--ID__53700--/free-co-factsheet.xhtml
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.hotmail.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.hotpennies.net/wfg/?Email=3Dblast-nearterm-archive
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.hotpennies.net/wfg/?Email=blast-nearterm-archive
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.hotrx.net/remove
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6e%4721s.com/x/50.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6e%4721s.com/x/50_01.php?ad_num=50&partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/24.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/24_02.php?ad_num=80&partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/36.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/36_02.php?partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/44.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/44_02.php?ad_num=44&partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/48.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/48_02.php?ad_num=48&partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/73.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/73_02.php?ad_num=73&partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/76.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/76_01.php?partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/77.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.i%6eg21%53.com/x/77_02.php?partner_id=marine
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ineedsoft.biz
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ineedsoft.biz/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.inetcontact.com/ref44.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.infrasoft.biz
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.infrasoft.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ink-tw.com/useride/0514.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ink-tw.com/useride/05141.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ink-tw.com/useride/05142.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ink-tw.com/useride/05143.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ink-tw.com/useride/05144.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ink-tw.com/useride/0520.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ink-tw.com/useride/5.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ink.idv.tw/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.interlog.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.iohuisa.biz/rmtimages/ambien.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.iohuisa.biz/rmtimages/phentermine.gif?buchanan
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.iohuisa.biz/rmtimages/soma.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.iohuisa.biz/rmtimages/top_img/img_02.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.iohuisa.biz/vpr6653
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.j-music.com/art/kawashim/kawashima2/china.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.japanesegifts.com/images/chopset.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.japanesegifts.com/images/chopset_small.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.kadafz.biz/alpha/?kadafi
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.kilomed.biz/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.kilomed.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.kilomed.biz/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.l%6fw%63la%73%53l%49%66%45.co.kr/user/ftp/default/bbs/sky04.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.lemoine.co.kr/plus/board/table/bbs2/upload/remail.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.livefromthewire.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.llat.org?axel=3D49
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.lotterygoodcauses.org.uk/gif/distributors.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.lovemedicine.biz/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.lovemedicine.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.lovemedicine.biz/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.lpha1.com/?48
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.lunchmate.com/mailimages/lunchmate_logo.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.lunsanaweb.biz/rmtimages/ambien.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.lunsanaweb.biz/rmtimages/phentermine.gif?rhine
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.lunsanaweb.biz/rmtimages/soma.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.lunsanaweb.biz/rmtimages/top_img/img_02.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.lunsanaweb.biz/vpr6653
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mailx.cf.st
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mailx.cf.st/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mailx.ww.to
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.marketgains.net
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketgains.net/images/1000bill.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketgains.net/images/wealthad.bmp
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.marketgains.net/wealth/rotator/rotator.php
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketingbooster.c=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.marketingbooster.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.marketingbooster.com/images/engines.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.marketingbooster.com/images/feet.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.marketingbooster.com/images/head.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.marketingbooster.com/images/middle.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.marketingbooster.com/images/text.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketingbooster.com/remove.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketingnewsletter.net/Live_From_the_Street_NATK.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketingnewsletter.net/bm01.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketingnewsletter.us/Live_From_the_Street_TBIN.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketingnewsletter.us/bm08.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketyourcompany.biz
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.marketyourcompany.biz/images/footer.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mbprofesional.ro/Imagini/logo.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.w=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2ca=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/downloads/CasinoSetup.=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/downloads/CasinoSetup.msi
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/i=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/images/dot.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/images/games.g=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/images/intern=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/images/main_pr=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/images/newest_=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/images/step3.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mdd-kalischko.at.warp2casino.org/r.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mediasetshop.it/JumpyChat/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mediomglobal.net/affiliate/scripts/sb.php?a_aid=54751841&a_bid=0156b0f3
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mediomglobal.net/affiliate/scripts/sb.php?a_aid=54751841&a_bid=89869f13
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mediomglobal.net/affiliate/scripts/t.php?a_aid=54751841&a_bid=0156b0f3
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mediomglobal.net/affiliate/scripts/t.php?a_aid=54751841&a_bid=89869f13
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mifigarw.com/pt/?46&tibtfo
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.milliniumdrive.com/VMDirect/index.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.millionpills.net/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.millionpills.net/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mini-cars-n-boats2003.com/?axel=3D49
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mini-remote-cars-boats.com/?axel=3D36
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.mmv9.org?affil=3D49
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mtstarnews.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.multimed.ws/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.mylittlesource.com/info.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.national-lottery.co.uk/player/i/small_balls_lotto/lotto_balls_small_11_redbg.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.national-lottery.co.uk/player/i/small_balls_lotto/lotto_balls_small_13_redbg.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.national-lottery.co.uk/player/i/small_balls_lotto/lotto_balls_small_26_redbg.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.national-lottery.co.uk/player/i/small_balls_lotto/lotto_balls_small_34_redbg.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.national-lottery.co.uk/player/i/small_balls_lotto/lotto_balls_small_44_redbg.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.national-lottery.co.uk/player/i/small_balls_lotto/lotto_balls_small_48_redbg.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.national-lottery.co.uk/player/i/small_balls_lotto/lotto_bonus_small_2_redbg.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.national-lottery.co.uk/player/i/tnl_logo_topnav.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.national-lottery.co.uk/player/p/home/home.do
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.nctrafficleague.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ncua.gov/#PageNavigation
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ncua.gov/#SiteNavigation
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ncua.gov/#T=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ncua.gov/images/prop/BLUELAB.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ncua.gov/images/prop/blueseal98.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.netcreo.com/0/8/8-6.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.netcreo.com/4/8/index.php?ai=3D7187
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.newyearspecials.com/info.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.nowbetterthis.biz/byee.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.nowbetterthis.biz/l/105/index.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.oacklaz.us/pher/o.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.oacklaz.us/vp/?buster
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.oemtotal.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.oemtotal.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.oemunlimited.biz
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.oemunlimited.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.officesoft.biz
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.officesoft.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.ohkbrno.cz/k-k2004/images/top3.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.ohuisacentral.biz/rmtimages/ambien.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.ohuisacentral.biz/rmtimages/phentermine.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.ohuisacentral.biz/rmtimages/soma.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.ohuisacentral.biz/rmtimages/top_img/img_02.g=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.ohuisacentral.biz/vpr6653
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.onii.org/?axel=3D49
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.onii.org/images/home/boat_yellow.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.onii.org/images/home/car_purple.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.onii.org/images/home/stunt_flip.gi=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.onii.org/images/home/stunt_flip.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paipall.com/cgi-bin/webscr?cmd=_login-submit
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paypal.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paypal.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paypal.com/cgi-bin/webscr?cmd=_home
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paypal.com/cgi-bin/webscr?cmd=login-run
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paypal.com/en_US/i/logo/paypal_logo.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paypal.com/login?update
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.paypal.com/securitytips
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pcink.idv.tw/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.photorepairnow.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.photorepairnow.info/d.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.photorepairnow.info/rem.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pictureedit.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pictureedit.info/d.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pictureedit.info/rem.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pills-for-you.net/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pills-for-you.net/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pills-now.com/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pills-now.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pills-now.com/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pills-of-love.com/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pills-of-love.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pills-of-love.com/vt/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.pills4lezz.com/c/index.php?AFF_ID=3Dr2d2
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pillsmaster.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pillsmaster.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pillsofpassion.biz/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pillsofpassion.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pillsofpassion.biz/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pillsofpassion.com/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pillsofpassion.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.pillsofpassion.com/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.platinummed.biz/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.platinummed.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.platinummed.biz/vt/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.play-the-market-to-win.com/Gambling_Promo.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.play-the-market-to-win.com/casino_1e.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.poihfrer.biz/vpr6653
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.popularmeds.biz
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.popularpills.biz/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.popularpills.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.popularpills.biz/vt/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.promodiscounts.com/ref44.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.promotemarket.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.promotemarket.com.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.protosoft.biz
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.protosoft.biz/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.prpj.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.quadrasoft.org
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.quadrasoft.org/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.radaruol.com.br
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.raisesexlife.com/ablate/codetermine.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.rau.co.kr/bbs/board/table/bbs2/upload/remail.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.rc-cars-boats2003.com/?axel=3D49
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.replica911.biz
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.researchfactor.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.riverrockrewards.com/info.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.rjyscooter.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.rjyscooter.com/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.rjyscooter.com/catalog/LOGO1.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.rjyscooter.com/eh/images/18sa.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.rjyscooter.com/eh/images/cksa.jpg
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.rxpalace.biz/a.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.rxpalace.biz/superstore/group.asp?g=3D128
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.savebigdollars.net/o/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.savebigdollars.net/x/index.php?AFF_ID=3Dr2d2
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.saynotospam.info/gh/as/index.asp?affil=3D=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.sex4many.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.sexchemistry.biz/sv/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.sexchemistry.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.sexchemistry.biz/vt/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.sgeyudh.com/i/alfredo/acquiescent.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.signoffcorp.biz/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.snoofz.biz/pher/o.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.snoofz.biz/welo/?kadafi
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.soemchik.com/adc/belvidere/brendan/anthropogenic/buck.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.soemchik.com/bb/b
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.soemchik.com/bb/colossi/annotate/accelerometer.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.soemchik.com/bb/cravat/abernathy/convair/auctioneer.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.soemchik.com/i/ail/blizzard.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.soemchik.com/i/cantilever/auctioneer/biochemic.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.softdisks-inc.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.softdisks-inc.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.softforus.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.softforus.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.softforyou.biz
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.softforyou.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.softheaven.org
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.softheaven.org/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.softuniverse.biz/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.software-disks.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.software-disks.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.starchier.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.starchier.net/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.suncoastrewards.com/ref44.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.swiss-time.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.swiss-time.net/rm/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.swissbankclaims.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.swissqualitywatch.com/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.texaspolicy.com/press_releases_single.php?report_id=3D=
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.tiscali.co.uk/products/broadband/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.tiscali.co.uk/travel/flights/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.tiscali.co.uk/travel/holidays/
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.tjsc.co.uk/calendar/pkg/temp/login.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.toinfo1.biz/mcp/121/1642/cap279.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.tomorrowsoft.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.tomorrowsoft.net/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.transactiontoday.com/trave1.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.transworldwebsites.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.tristarzeus.com/103816/stopwatch01.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.tristarzeus.com/103816/wall_street_bulletin.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.tristarzeus.com/remove/cstremove.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.two-dudes.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.uglagartneri.no
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.unquenched.net/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.unquenched.net/vt/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.updatebots.com/rps/whyiquitmyjob.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.updatebots.com/whyiquitmyjob.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.vacationpromo.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vacationpromo.net/4banner_f=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.vacationpromo.net/4banner_files/=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.vacationpromo.net/4banner_files/a3_=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.vacationpromo.net/4banner_files/adds1_02.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.vacationpromo.net/4banner_files/b7.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.vacationpromo.net/nomor=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.vacationpromo.net/thankyou.php
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.veddyts.biz/rmtimages/ambien.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.veddyts.biz/rmtimages/phentermine.gif?bp
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.veddyts.biz/rmtimages/soma.gif?=
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.veddyts.biz/rmtimages/top_img/img_02.gif
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.veddyts.biz/vpr6653
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vfcu.org/disclosure/disclosure.asp
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vimax-shop.info/in.php?id=jenna
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vimax-shop.info/unsubscribe/unsubscribe.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vippills.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vippills.net/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vipwatches.net
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vipwatches.net/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vipwatchesnow.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.vipwatchesnow.com/uns.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.wakeuptonews.com/ref44.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.watches-for-people.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.watches-for-people.com/uns.htm
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.webdealz.info/gh/as/index.asp?affil=heaven
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.webdealz.info/gh/r/r.asp
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.webdilz.com/unlist.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.weller602.info/fcu/get.php
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.winfreegas.com/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.winfreegas.com/ads/wfgad1.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.winfreegas.com/dor/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.winfreegas.com/wfg/?Email=3Dblast-nearterm-archive
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.winfreegas.com/wfg/?Email=blast-nearterm-archive
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.wppv.org/p
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.wudhryc.com/accord/accusative/angle/alginate.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.wudhryc.com/antiquarian/babylon/clergymen.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.wudhryc.com/apex/asphalt.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.wudhryc.com/cottage/bullish/crewmen/cowpea.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.xdfghj.co.kr/x/mailx/reject.htm
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.xlresponder.com/cgi-bin/varpro/r.cgi?id=dreammaker5&a=blast-nearterm-archive
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.xtenders.info/in.php?id=jenna
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.xtenders.info/unsubscribe/unsubscribe.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.yahoo.co.kr
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.yna.co.kr
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.yourdownloadgateway.com/ref44.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.yourfreedvds.com/creatives/popunders/img/WINNERFLASH.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.yourholidaydownloadcenter.com/info.html
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.yourrealworkscenter.com/info.html
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.yourstuffcentral.com/o4.gif
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.yukos.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://www.yukos.com/
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://www.zppi.org/?axel=3D49
Source: Heisenberg.Bug.txtString found in binary or memory: http://www2.ebay.com/aw/marketing.shtml
Source: Heisenberg.Bug.txtString found in binary or memory: http://xaxnqqi8xcntva9a1q3pit.paradermdi.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://xbbkngipd.MzE0N2Y5MzczNzM3YzU5OGNkOGRmNmU2.peanutsalty.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://xczwqjpargkkdix.349arnr7r99jl3lw8llwql33.zaniahdl.com/
Source: Heisenberg.Bug.txtString found in binary or memory: http://xiq014.walltransb0rder.com
Source: notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtString found in binary or memory: http://yoursite.com
Source: Heisenberg.Bug.txtString found in binary or memory: http://zmiakydszwpdxutu3s592v.paradermdi.info
Source: Heisenberg.Bug.txtString found in binary or memory: http://zsin.MDEzYzc1OWRlNmNmOTVkODNhOTBiMmE3.nyclamiami.com/
Source: Heisenberg.Bug.txtString found in binary or memory: https://certificates.ebay.com/
Source: Heisenberg.Bug.txtString found in binary or memory: https://secure.lasalle.com/CVS/
Source: Heisenberg.Bug.txtString found in binary or memory: https://securepics.ebaystatic.com/aw/pics/truste_button.gif
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.lasallebank.com/templates/images/lasalle_logo.gif
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paipall.com/cgi-bin/webscr?cmd=_login-submit
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/cgi-bin/webscr?cmd=_login-run
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/row
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/row/.
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/row/PREFS-NOTI
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/row/securitytips
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/)
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/PREFS-NOTI
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=3D_login-run
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_account
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_auction
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_batch-payment-overview
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_dc-intro
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_help&source_page=_login-done
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_logout
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_merchant
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_pay-bill
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_request-money
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_transaction-run
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_upgrade-interest-marcom
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=_web-referrals-mrb
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/about
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/fdic
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/mobile
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/cps/general/PayPalAccountTypes
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypal.com/us/securitytips
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypalobjects.com/en_US/i/header/hpPrivacy_shopwoutsharing_563x115.jpg
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypalobjects.com/en_US/i/logo/paypal_logo.gif
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypalobjects.com/en_US/i/nav/P_off_auction_tools.gif
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypalobjects.com/en_US/i/nav/P_off_merchant_tools.gif
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypalobjects.com/en_US/i/nav/P_off_my_account.gif
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypalobjects.com/en_US/i/nav/P_off_request_money.gif
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypalobjects.com/en_US/i/nav/P_off_send_money.gif
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.paypalobjects.com/en_US/i/nav/pixel.gif
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.visionsfcu.com/cgi-bin/mcw000.cgi?MCWSTART2&=
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.visionsfcu.org/links/offSiteCheck.asp?Prefe=
Source: Heisenberg.Bug.txtString found in binary or memory: https://www.visionsfcu.org/memberResources/images/car.jpg
Source: Heisenberg.Bug.txtReversingLabs: Detection: 29%
Source: Heisenberg.Bug.txtVirustotal: Detection: 30%
Source: C:\Windows\System32\notepad.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11659a23-5884-4d1b-9cf6-67d6f4f90b36}\InProcServer32Jump to behavior
Source: C:\Windows\System32\notepad.exeKey opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
Source: classification engineClassification label: mal56.winTXT@1/0@0/0
Source: Heisenberg.Bug.txtStatic file information: File size 56926688 > 1048576
Source: Heisenberg.Bug.txtBinary or memory string: NYjedUrX1U8qB1946JhhGFSaMn+7YFnmY17Lkny4Z4Wt9xrauJqR+FyYZCC3QD8s0mZKJiA/
Source: C:\Windows\System32\notepad.exeQueries volume information: C:\Users\user\Desktop\Heisenberg.Bug.txt VolumeInformationJump to behavior

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid AccountsWindows Management InstrumentationPath InterceptionPath InterceptionDirect Volume AccessOS Credential Dumping1
Security Software Discovery		Remote ServicesData from Local SystemExfiltration Over Other Network MediumData ObfuscationEavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS Memory11
System Information Discovery		Remote Desktop ProtocolData from Removable MediaExfiltration Over BluetoothJunk DataExploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 822443 Sample: Heisenberg.Bug.txt Startdate: 08/03/2023 Architecture: WINDOWS Score: 56 7 Antivirus / Scanner detection for submitted sample 2->7 9 Multi AV Scanner detection for submitted file 2->9 5 notepad.exe 2->5         started        process3

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

No bigger version

windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
Heisenberg.Bug.txt30%ReversingLabsEmail.Worm.Allaple
Heisenberg.Bug.txt30%VirustotalBrowse
Heisenberg.Bug.txt100%AviraHTML/Infected.WebPage.Gen
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y
Heisenberg.Bug.txt100%AviraWORM/Sober.Y

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

SourceDetectionScannerLabelLink
http://Lorrain.luretics.com/Johnson/Jenkins0%Avira URL Cloudsafe
http://Wieringa.luretics.com/Calderon/Bilodeau0%Avira URL Cloudsafe
http://rest.apieasy.biz/?wid=1001830%Avira URL Cloudsafe
http://Youlan.homespuns.net/vcl/?theman0%Avira URL Cloudsafe
http://adkins.mj4.net/ph/erika/formulaic.htm0%Avira URL Cloudsafe
http://smaller.eajficm.biz/?APCFC55IkEHikU4contemptible0%Avira URL Cloudsafe
http://Prokopieva.luretics.com/Chatelain/Momi0%Avira URL Cloudsafe
http://www.multimed.ws/uns.htm0%Avira URL Cloudsafe
http://treemobiles.com/200/index.php?ai=77070%Avira URL Cloudsafe
http://www.quadrasoft.org0%Avira URL Cloudsafe
http://Stefanie.Wade.network74.net/images/product050%Avira URL Cloudsafe
http://www.soemchik.com/bb/b0%Avira URL Cloudsafe
http://gill.a8k.net/e/erika/disgustful.htm0%Avira URL Cloudsafe
http://Rodes.taxables.net0%Avira URL Cloudsafe
http://www.yourfreedvds.com/creatives/popunders/img/WINNERFLASH.gif0%Avira URL Cloudsafe
http://www.wakeuptonews.com/ref44.html0%Avira URL Cloudsafe
http://www.findpilzhere.com/v2/index.php?AFF_ID=3Dr2d20%Avira URL Cloudsafe
http://121.yeswatches.net/rm/0%Avira URL Cloudsafe
http://irexzzuyla7zos54ne3fkd6.carucatedlf.info0%Avira URL Cloudsafe
http://203.95.1.160/remov=0%Avira URL Cloudsafe
http://www.lotterygoodcauses.org.uk/gif/distributors.gif0%Avira URL Cloudsafe
http://eok7j3k61r2uewwr1we91wew.mornlessdj.com/?deauc0%Avira URL Cloudsafe
https://secure.lasalle.com/CVS/0%Avira URL Cloudsafe
http://Wincel.trapeziums.net/Gaxiola/Guinevere0%Avira URL Cloudsafe
http://www.%61%64%64%69ct%69%76e%73e%78.com0%Avira URL Cloudsafe
http://www.nowbetterthis.biz/l/105/index.htm0%Avira URL Cloudsafe
http://Bossy.oiling.net/Hani/Malone0%Avira URL Cloudsafe
http://leak.policy.network74.net0%Avira URL Cloudsafe
http://www.ezfilesharing.com/ref44.html0%Avira URL Cloudsafe
http://Kottler.subsidises.net/0%Avira URL Cloudsafe
http://www.i%6eg21%53.com/x/48.gif0%Avira URL Cloudsafe
http://220.163.176.205:8689/AD.png?eid=blast-nearterm-archive0%Avira URL Cloudsafe
http://alter.ibtz.com/p/erika/social.htm0%Avira URL Cloudsafe
http://www.tomorrowsoft.net0%Avira URL Cloudsafe
http://aptitude3a7hos5h8xlk4o3.hydropticnb.com/0%Avira URL Cloudsafe
http://paradermdi.info/OD043/img/ico/=0%Avira URL Cloudsafe
http://Laduron.luretics.com/Svatek/Awartani0%Avira URL Cloudsafe
http://www.emgj.org?axel=3D360%Avira URL Cloudsafe
http://emaffint.com/100/index.php?ai=77070%Avira URL Cloudsafe
http://www.softforyou.biz/uns.htm0%Avira URL Cloudsafe
http://Kamal.oiling.net/Trilev/Eiffel0%Avira URL Cloudsafe
http://www.winfreegas.com/dor/0%Avira URL Cloudsafe
http://Braun.trapeziums.net/Darren/Noble0%Avira URL Cloudsafe
http://amtpro70.com/1up/formeml2.html0%Avira URL Cloudsafe
http://armchair.giglotkhjgl.com/?6oE88HDKSadeBCCassault0%Avira URL Cloudsafe
http://www.platinummed.biz/vt/0%Avira URL Cloudsafe
http://Linke.trapeziums.net/Rivera/Balkan0%Avira URL Cloudsafe
http://eaton.vaIium.com/r.php0%Avira URL Cloudsafe
http://www.oemunlimited.biz0%Avira URL Cloudsafe
http://Boye.luretics.com/Silva/Banin0%Avira URL Cloudsafe
http://Foreman.luretics.com/Barbery/Haehnel0%Avira URL Cloudsafe
http://warp2casino.org/download=0%Avira URL Cloudsafe
http://www.webdilz.com/unlist.html0%Avira URL Cloudsafe
http://Burnaby.homespuns.net/vcl/?theman0%Avira URL Cloudsafe
http://mastery.nggfgcm.info/3g565ozbPDGmPT3mellow0%Avira URL Cloudsafe
http://Zobbe.soonish.net/Tropei/Gupta0%Avira URL Cloudsafe
http://2qqx7kqtqyp0k2kx722x7kkk.muranhe.info/?ltyjcz0%Avira URL Cloudsafe
http://chart.bigcharts.com/bc3/quickchart/chart.asp?symb=3DIPFS&co=0%Avira URL Cloudsafe
http://White.luretics.com/Mayne/Okul0%Avira URL Cloudsafe
http://Beetham.luretics.com/Gloatz/Wrobel0%Avira URL Cloudsafe
http://8welv8eze4do88qlvqq3d8qq.conidiumfe.com/?lekivsy0%Avira URL Cloudsafe
http://www.bk6u.net/mrg.asp0%Avira URL Cloudsafe
http://Benckert.luretics.com/Yamagami/Anderson0%Avira URL Cloudsafe
http://wella.boom.ro0%Avira URL Cloudsafe
http://www.pillsofpassion.biz/sv/0%Avira URL Cloudsafe
http://gulf.nlav.com/rx/erika/20/hoar.htm0%Avira URL Cloudsafe
http://Walley.soonish.net/Huber/Berghuis0%Avira URL Cloudsafe
http://slimy.j5k.net/ext/erika/guarantee.htm0%Avira URL Cloudsafe
http://www.financialbuilder.in=0%Avira URL Cloudsafe
http://Aranzabal.soonish.net/Jellly/Manz0%Avira URL Cloudsafe
http://ball.etneanimbme.com/?A9CnC5AckEHogAAtraipse0%Avira URL Cloudsafe
http://Eddy.roadrus.com0%Avira URL Cloudsafe
http://writ.nf0.net/rep/erika/praecox.htm0%Avira URL Cloudsafe
http://duncanthrax.net/exiscan/)0%Avira URL Cloudsafe
http://Martinelli.soonish.net/Huffaker/Valentin0%Avira URL Cloudsafe
http://Ille.boxings.net/Markova/Gallegos0%Avira URL Cloudsafe
http://cantle.galhdce.info/rwanda?FUHKHW9NpdgVpt9airplane0%Avira URL Cloudsafe
http://www.financialbuilder.info/splash1.html0%Avira URL Cloudsafe
http://ww%77.%65v%69%64%65%6E%63e%2D%65%6C%69%6D%69%6Ea=0%Avira URL Cloudsafe
http://Otto.luretics.com/Rheker/Lunetta0%Avira URL Cloudsafe
http://aside.q67.net/rep/erika/literal.htm0%Avira URL Cloudsafe
http://carucatedlf.info/OD043/img/ico=0%Avira URL Cloudsafe
http://www.mdd-kalischko.at.warp2casino.org/images/games.g=0%Avira URL Cloudsafe
http://Torrealba.oiling.net/Alex/Hernandez0%Avira URL Cloudsafe
http://Johnston.boxings.net/Pendleton/Cody0%Avira URL Cloudsafe
http://news.bbc.co.uk/2/hi/africa/3364111.stm0%Avira URL Cloudsafe
http://www.promotemarket.com0%Avira URL Cloudsafe
http://Lopez.luretics.com/Baur/Langer0%Avira URL Cloudsafe
http://Fishburn.luretics.com/Patraca/Gauker0%Avira URL Cloudsafe
http://Majlis.soonish.net/Teixeira/Kydyrbaeva0%Avira URL Cloudsafe
http://Pergel.oiling.net/Pal/Cole0%Avira URL Cloudsafe
http://a.WRlST.com/k.php0%Avira URL Cloudsafe
http://www.rc-cars-boats2003.com/?axel=3D490%Avira URL Cloudsafe

Domains and IPs

Contacted Domains

⊘No contacted domains info
NameSourceMaliciousAntivirus DetectionReputation
http://rest.apieasy.biz/?wid=100183notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://Youlan.homespuns.net/vcl/?themanHeisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://Lorrain.luretics.com/Johnson/JenkinsHeisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://adkins.mj4.net/ph/erika/formulaic.htmHeisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://Wieringa.luretics.com/Calderon/BilodeauHeisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://smaller.eajficm.biz/?APCFC55IkEHikU4contemptiblenotepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://www.multimed.ws/uns.htmHeisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://Prokopieva.luretics.com/Chatelain/MomiHeisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://treemobiles.com/200/index.php?ai=7707Heisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://www.quadrasoft.orgHeisenberg.Bug.txtfalse
  • Avira URL Cloud: safe
unknown
http://pages.ebay.com/help/community/png-priv.htmlHeisenberg.Bug.txtfalse
    		high
    http://www.soemchik.com/bb/bHeisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://Stefanie.Wade.network74.net/images/product05notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://gill.a8k.net/e/erika/disgustful.htmHeisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://Rodes.taxables.netHeisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://www.yourfreedvds.com/creatives/popunders/img/WINNERFLASH.gifHeisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://www.wakeuptonews.com/ref44.htmlnotepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://www.findpilzhere.com/v2/index.php?AFF_ID=3Dr2d2notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://121.yeswatches.net/rm/Heisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://irexzzuyla7zos54ne3fkd6.carucatedlf.infoHeisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://203.95.1.160/remov=notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://www.lotterygoodcauses.org.uk/gif/distributors.gifHeisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    https://secure.lasalle.com/CVS/Heisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://eok7j3k61r2uewwr1we91wew.mornlessdj.com/?deaucHeisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://Wincel.trapeziums.net/Gaxiola/GuinevereHeisenberg.Bug.txtfalse
    • Avira URL Cloud: safe
    		unknown
    http://images.google.com/images?q=tbn:-bspjicyAhkJ:www.palottery.state.pa.us/lottery/lib/lottery/ricHeisenberg.Bug.txtfalse
      		high
      http://www.%61%64%64%69ct%69%76e%73e%78.comnotepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		low
      http://www.nowbetterthis.biz/l/105/index.htmnotepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://Bossy.oiling.net/Hani/MaloneHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://leak.policy.network74.netnotepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://www.ezfilesharing.com/ref44.htmlHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://Kottler.subsidises.net/Heisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://www.i%6eg21%53.com/x/48.gifHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		low
      http://220.163.176.205:8689/AD.png?eid=blast-nearterm-archiveHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://alter.ibtz.com/p/erika/social.htmHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://www.tomorrowsoft.netHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://aptitude3a7hos5h8xlk4o3.hydropticnb.com/Heisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://paradermdi.info/OD043/img/ico/=Heisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://Laduron.luretics.com/Svatek/AwartaniHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://www.emgj.org?axel=3D36Heisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://emaffint.com/100/index.php?ai=7707Heisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://www.softforyou.biz/uns.htmHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://Kamal.oiling.net/Trilev/EiffelHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://www.winfreegas.com/dor/Heisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://Braun.trapeziums.net/Darren/NobleHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://amtpro70.com/1up/formeml2.htmlHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://armchair.giglotkhjgl.com/?6oE88HDKSadeBCCassaultHeisenberg.Bug.txtfalse
      • Avira URL Cloud: safe
      		unknown
      http://pics.ebay.com/aw/pics/listings/questionMark_14x14.gifHeisenberg.Bug.txtfalse
        		high
        http://www.platinummed.biz/vt/Heisenberg.Bug.txtfalse
        • Avira URL Cloud: safe
        		unknown
        http://Linke.trapeziums.net/Rivera/BalkanHeisenberg.Bug.txtfalse
        • Avira URL Cloud: safe
        		unknown
        http://eaton.vaIium.com/r.phpHeisenberg.Bug.txtfalse
        • Avira URL Cloud: safe
        		unknown
        http://www.oemunlimited.bizHeisenberg.Bug.txtfalse
        • Avira URL Cloud: safe
        		unknown
        http://cgi1.ebay.com/aw-cgi/eBayISAPI.dll?MyEbayLoginHeisenberg.Bug.txtfalse
          		high
          http://Boye.luretics.com/Silva/BaninHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://Foreman.luretics.com/Barbery/HaehnelHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://warp2casino.org/download=Heisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://www.webdilz.com/unlist.htmlnotepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://Burnaby.homespuns.net/vcl/?themanHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://Zobbe.soonish.net/Tropei/GuptaHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://mastery.nggfgcm.info/3g565ozbPDGmPT3mellownotepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://2qqx7kqtqyp0k2kx722x7kkk.muranhe.info/?ltyjczHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://chart.bigcharts.com/bc3/quickchart/chart.asp?symb=3DIPFS&co=notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://White.luretics.com/Mayne/OkulHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://Beetham.luretics.com/Gloatz/WrobelHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://8welv8eze4do88qlvqq3d8qq.conidiumfe.com/?lekivsyHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://www.bk6u.net/mrg.aspHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://Benckert.luretics.com/Yamagami/AndersonHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://wella.boom.roHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://www.pillsofpassion.biz/sv/Heisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          http://gulf.nlav.com/rx/erika/20/hoar.htmHeisenberg.Bug.txtfalse
          • Avira URL Cloud: safe
          		unknown
          https://www.paypal.com/us/cgi-bin/webscr?cmd=_accountHeisenberg.Bug.txtfalse
            		high
            http://Walley.soonish.net/Huber/BerghuisHeisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		unknown
            http://slimy.j5k.net/ext/erika/guarantee.htmHeisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		unknown
            http://www.financialbuilder.in=notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		low
            http://Aranzabal.soonish.net/Jellly/ManzHeisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		unknown
            http://ball.etneanimbme.com/?A9CnC5AckEHogAAtraipseHeisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		unknown
            http://Eddy.roadrus.comHeisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		unknown
            http://writ.nf0.net/rep/erika/praecox.htmHeisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		unknown
            http://duncanthrax.net/exiscan/)Heisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		unknown
            http://Martinelli.soonish.net/Huffaker/ValentinHeisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		unknown
            http://Ille.boxings.net/Markova/GallegosHeisenberg.Bug.txtfalse
            • Avira URL Cloud: safe
            		unknown
            http://www.paypal.com/Heisenberg.Bug.txtfalse
              		high
              http://www.financialbuilder.info/splash1.htmlnotepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://cantle.galhdce.info/rwanda?FUHKHW9NpdgVpt9airplanenotepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://ww%77.%65v%69%64%65%6E%63e%2D%65%6C%69%6D%69%6Ea=notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		low
              http://Otto.luretics.com/Rheker/LunettaHeisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://aside.q67.net/rep/erika/literal.htmHeisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://carucatedlf.info/OD043/img/ico=Heisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://www.mdd-kalischko.at.warp2casino.org/images/games.g=notepad.exe, 00000000.00000002.518128903.0000024846F11000.00000004.00000020.00020000.00000000.sdmp, Heisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://Torrealba.oiling.net/Alex/HernandezHeisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://Johnston.boxings.net/Pendleton/CodyHeisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://news.bbc.co.uk/2/hi/africa/3364111.stmHeisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://www.promotemarket.comHeisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://Lopez.luretics.com/Baur/LangerHeisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://Fishburn.luretics.com/Patraca/GaukerHeisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://Majlis.soonish.net/Teixeira/KydyrbaevaHeisenberg.Bug.txtfalse
              • Avira URL Cloud: safe
              		unknown
              http://images.google.it/images?q=tbn:YZSu5lazaxcJ:www.premiumdrugs.com/images/coup_cialis_pill.gifHeisenberg.Bug.txtfalse
                		high
                http://Pergel.oiling.net/Pal/ColeHeisenberg.Bug.txtfalse
                • Avira URL Cloud: safe
                		unknown
                http://a.WRlST.com/k.phpHeisenberg.Bug.txtfalse
                • Avira URL Cloud: safe
                		unknown
                http://www.rc-cars-boats2003.com/?axel=3D49Heisenberg.Bug.txtfalse
                • Avira URL Cloud: safe
                		unknown

                World Map of Contacted IPs

                ⊘No contacted IP infos

                General Information

                Joe Sandbox Version:37.0.0 Beryl
                Analysis ID:822443
                Start date and time:2023-03-08 17:53:25 +01:00
                Joe Sandbox Product:CloudBasic
                Overall analysis duration:0h 6m 6s
                Hypervisor based Inspection enabled:false
                Report type:full
                Cookbook file name:default.jbs
                Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
                Number of analysed new started processes analysed:12
                Number of new started drivers analysed:0
                Number of existing processes analysed:0
                Number of existing drivers analysed:0
                Number of injected processes analysed:0
                Technologies:
                • HCA enabled
                • EGA enabled
                • HDC enabled
                • AMSI enabled
                Analysis Mode:default
                Analysis stop reason:Timeout
                Sample file name:Heisenberg.Bug.txt
                Detection:MAL
                Classification:mal56.winTXT@1/0@0/0
                EGA Information:Failed
                HDC Information:Failed
                HCA Information:
                • Successful, ratio: 100%
                • Number of executed functions: 0
                • Number of non-executed functions: 0
                Cookbook Comments:
                • Found application associated with file extension: .txt
                • Exclude process from analysis (whitelisted): MpCmdRun.exe, SgrmBroker.exe, conhost.exe, svchost.exe
                • Excluded domains from analysis (whitelisted): fs.microsoft.com, ctldl.windowsupdate.com
                • Not all processes where analyzed, report is missing behavior information
                • Report size getting too big, too many NtProtectVirtualMemory calls found.

                Simulations

                Behavior and APIs

                ⊘No simulations

                Joe Sandbox View / Context

                IPs

                ⊘No context

                Domains

                ⊘No context

                ASNs

                ⊘No context

                JA3 Fingerprints

                ⊘No context

                Dropped Files

                ⊘No context

                Created / dropped Files

                ⊘No created / dropped files found

                Static File Info

                General

                File type:Non-ISO extended-ASCII text, with very long lines (447)
                Entropy (8bit):6.148459905355301
                TrID:
                • Standard Unix Mailbox (42005/1) 70.00%
                • Microsoft Word document (MIME) (18001/1) 30.00%
                File name:Heisenberg.Bug.txt
                File size:56926688
                MD5:1f3b5914e78ad21317cc986ac7e7a392
                SHA1:ee1949ce703acc813d7bba136d626580194bd663
                SHA256:f3aa34c972b0f6ab38c34e187efdaf09ce9da51270a365308234d3fc39f25216
                SHA512:c601411c3702c070d0a825e4d68cd0e41ce264cf6e641473f2232a45582150d2daeca29941af41a00d856b43b18aec8f3a21b558359961b3afafd5558c55e912
                SSDEEP:49152:WErPWAB9YV62BakFzVxXWZE2kk7VAVlNhw92oHDO+Y1Q5jkPz13eJBZhTlMytfe3:hgOG/zODRV7OMW
                TLSH:32C7BFB2EE40852A7222D0AE3B477BC0FE34519FA365CBE4385D901A1BCDD59D27D2C9
                File Content Preview:From dongarra@CS.UTK.EDU Tue Aug 5 21:31:51 1997.Return-Path: <dongarra@CS.UTK.EDU>.Received: from CS.UTK.EDU by netlib2.cs.utk.edu with ESMTP (cf v2.9t-netlib)..id VAA02436; Tue, 5 Aug 1997 21:31:51 -0400.Received: from serv05.slac.stanford.edu (SERV05.

                File Icon

                Icon Hash:74f4e4e4e4e4e4e4

                Network Behavior

                Report size exceeds maximum size, please checkout the PCAP download to see all network behavior

                Statistics

                CPU Usage

                050100s020406080100

                Click to jump to process

                Memory Usage

                050100s0.0050100150200MB

                Click to jump to process

                High Level Behavior Distribution

                • • File
                • • Registry

                Click to dive into process behavior distribution

                System Behavior

                General

                Target ID:0
                Start time:17:54:20
                Start date:08/03/2023
                Path:C:\Windows\System32\notepad.exe
                Wow64 process (32bit):false
                Commandline:"C:\Windows\system32\NOTEPAD.EXE" C:\Users\user\Desktop\Heisenberg.Bug.txt
                Imagebase:0x7ff7296f0000
                File size:245760 bytes
                MD5 hash:BB9A06B8F2DD9D24C77F389D7B2B58D2
                Has elevated privileges:true
                Has administrator privileges:true
                Programmed in:C, C++ or other language
                Reputation:high
                Show Windows behavior

                File Activities

                Show Windows behavior

                Section Activities

                Show Windows behavior

                Registry Activities

                There is hidden Windows Behavior. Click on Show Windows Behavior to show it.
                Show Windows behavior

                Process Activities

                Show Windows behavior

                Thread Activities

                Show Windows behavior

                Memory Activities

                Show Windows behavior

                System Activities

                There is hidden Windows Behavior. Click on Show Windows Behavior to show it.
                Show Windows behavior

                Windows UI Activities

                There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

                Disassembly

                ⊘No disassembly