Hancitor Jan 22

http://fishfindershop.com
http://sjkgps.com
http://sjkpools.com
http://morganmfg.biz
http://mygpsland.com
http://sjkboating.com
http://sjkswimming.com
http://thebreak-out.com
http://gunnegotiator.com
http://fishfinderland.com
http://sjkfishfinders.com
http://gunnegotiator.net

additional dl
http://actupconsulting.com/wp-content/plugins/lightbox-plus/1
http://actupconsulting.com/wp-content/plugins/lightbox-plus/2
http://actupconsulting.com/wp-content/plugins/lightbox-plus/3
http://cqbooths.com/1
http://cqbooths.com/2
http://cqbooths.com/3
http://rushnewmedia.de/wp/wp-content/plugins/really-simple-captcha/1
http://rushnewmedia.de/wp/wp-content/plugins/really-simple-captcha/2
http://rushnewmedia.de/wp/wp-content/plugins/really-simple-captcha/3
http://sekarlima.com/1
http://sekarlima.com/2
http://sekarlima.com/3
http://toddbransky.com/1
http://toddbransky.com/2
http://toddbransky.com/3

hashes
f2c8a4821607fd83cfc080a5242d548afdb21e50b66a798113b76b9bd49a79fe  1.dll
48acf026d0d011c62a321dac53e38bd4af823292460da3abc3065e5292594c9b  2.exe
4ef443dc917de8b83f54787d666f46aac66defd75d03446678e0900b214e5d2d  3.exe
76b96c8d796cfcebff34d42e65e5a4ab2770fda42ea3c259097ee068660dfcc2  invoice_396578.xls

hancitor c2
http://felighevengna.com/4/forum.php
http://verrestofred.ru/4/forum.php
http://hersulesup.ru/4/forum.php

pony c2
http://felighevengna.com/mlu/forum.php
http://verrestofred.ru/mlu/forum.php
http://hersulesup.ru/mlu/forum.php

evilpony c2
http://felighevengna.com/d2/about.php
http://verrestofred.ru/d2/about.php
http://hersulesup.ru/d2/about.php

gozi domains
g2.ex100p.at
in.termas.at
ax.ikobut.at