# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: http://www.symantec.com/connect/blogs/snapshot-virut-botnet-after-interruption

irc.zief.pl
proxim.ircgalaxy.pl

# Reference: https://www.threatcrowd.org/malware.php?md5=88cca88f77be6b6902b4f8d606446eb3

intelaids.su
intelblog.su
intelcore.su
intelprog.su
intelservice.su
intelsecurity.su

# Reference: http://www.symantec.com/security_response/writeup.jsp?docid=2007-041117-2623-99&tabid=2

core.ircgalaxy.pl
irc.zief.pl
proxim.ircgalaxy.pl
ru.brans.pl

# Reference: https://www.symantec.com/security_response/writeup.jsp?docid=2007-090613-5727-99&tabid=2

ircd.zief.pl

# Reference: https://www.symantec.com/security_response/writeup.jsp?docid=2006-051402-1930-99&tabid=2

proxima.ircgalaxy.pl

# Reference: https://www.cert.pl/PDF/Report_Virut_EN.pdf

adle.pl
asyr.pl
bigex.pl
brans.pl
brenz.pl
bton.pl
cfan.pl
chura.pl
civix.pl
deps.pl
ghura.pl
hamb.pl
idet.pl
idon.pl
ircgalaxy.pl
ixie.pl
kerit.pl
kilme.pl
konter.pl
lifty.pl
lometr.pl
meiu.pl
merts.pl
mugu.pl
nels.pl
nigim.pl
play9.pl
ragom.pl
remp.pl
runk.pl
sizi.pl
strup.pl
sums.pl
tanz.pl
timid.pl
traum.pl
trenz.pl
tymis.pl
valc.pl
vand.pl
vasli.pl
volke.pl
zief.pl
alr4.ru
bzug.ru
cawt.ru
dbut.ru
gbil.ru
gimbs.ru
ijol.ru
ilgo.ru
ilopa.ru
ketor.ru
libis.ru
lilke.ru
limag.ru
linug.ru
migtu.ru
mlix.ru
pamip.ru
qnx1.ru
rdek.ru
rolmi.ru
rulm.ru
tasb.ru
tim4.ru
varpo.ru
vilq.ru
wict.ru
xalx.ru
xdix.ru
xitr.ru
ziten.ru
amfib.at
difti.at
egab.at
ikepa.at
kamfo.at
maft.at
mampo.at
sox4.at
adxhost.org

# Reference: http://www.mcafee.com/threat-intelligence/malware/default.aspx?id=143054

ntkrnlpa.info

# Reference: https://twitter.com/SickPeaSec/status/1138513877090443264

ilo.brenz.pl
