Self Install PUP 2-vinstaller.com Traffic Sample

By | June 18, 2015

1970-01-01 -3:-59:-46.514540 IP 10.0.2.15.1049 > 66.77.96.162.80: Flags [P.], seq 1:864, ack 1, win 64240, length 863
E….R@…H!
…BM`….P.6Q…..P…vM..POST /off/mundo HTTP/1.1
Content-Type: application/json; charset=utf-8
Accept: application/json;
installerversion: 1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Host: 2-vinstaller[.]com
Content-Length: 606
Cache-Control: no-cache

{“Content”:”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”}
1970-01-01 -3:-59:-46.514724 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], ack 864, win 65535, length 0
E..(….@…BM`.
….P…….6UHP…….
1970-01-01 -3:-59:-46.543152 IP 10.0.2.15.137 > 10.0.2.255.137: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
E..`.T….!,

……..L.s..)……… FHEPFCELEHFCEPFFFACACACACACACAAA.. ….. ……….

1970-01-01 -3:-59:-46.543232 IP 10.0.2.2 > 10.0.2.15: ICMP net 10.0.2.255 unreachable, length 84
E..h……..

……k….E..`.T….!,

……..L.s..)……… FHEPFCELEHFCEPFFFACACACACACACAAA.. ….. ……….

1970-01-01 -3:-59:-46.815840 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 1:1421, ack 864, win 65535, length 1420
E…….@..3BM`.
….P…….6UHP…v…HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
P3P: CP=”PSA OUR DEM”
X-Robots-Tag: noindex, nofollow
Set-Cookie: dtCookie=2$1E6D481529CD36D3089961CAFB6823B0|2-vinstaller[.]com|1; Path=/; Domain=.2-vinstaller[.]com
Date: Mon, 09 Feb 2015 10:53:28 GMT
Content-Length: 16610

{“Content”:”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
1970-01-01 -3:-59:-46.815877 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 1421:2841, ack 864, win 65535, length 1420
E…….@..2BM`.
….P…….6UHP…….l9dRmkQf2zQ2dl/VqIpWIg5bpaQjsauUrEn7cGl+MEkBOIWFoCJZQ8FKAdS4IKDCIcqCsxPM60TclAQF2j/ZJOMEH7ktbhfyIHcFOWbcAYTpGwotJvSjvTPX8jL9/2T2EslP5Q1s5EShwYE5gUAULgRwCz9f4aoP8oYMLro0IHQYYFHedlpIL1i1xiD32taLGfanayBFQ5Z6R2pGdKGSkADqYHUN9NNZHeZ3/D84h2OyALeDLqDoPZrvy0W7ot56dcQZF93R6osEScglmCgo/SGxHpCZof9tYm73i527q+EkVdSR0Mev3ZZ9FUbu0j/YysH1y+hPOrTsuikyGFZptOko0BCLbEkG9EjjosPn6fH6wM78lB7+/g/aNwGjrEFYNRHTG63oF9TLmZX3ipFegCKLMUWgOqpXDSOKcNAcUDo///ZWkZXsgKt2Vt0mVgkOziUKmIU202JjmTZqgWnSRNemoWSc1njCvkyezwVZaxzgquFrOdVsrK8HC6utPG/vTITH8OdZDT+Zdu6OtYcgc4uKbIWdCSYMjbk5yeHGEy9J60JHwKnRUdpQ19Ro9lBMItLgHFX2Uh0Yg3VEpRxinSwOA/1rRuLoSO400eeh9VIRDBbsK9sFAWb0tBTo2dGAc4mcjmeGBbCDN9jOSv1aKGAIlE/5SlE7Qq6ugUEsqnPgw/9ZijFy9HjHWHXwnB1WWc5TrdZqNTKhohLir6XhoNKOZJ9g/7zlhRVTRVuseAISArWAsDIjMH31Hnm7wSzbc4Gcm1bFVjhgv1kF+Aenbgubxo2V4NjXeut2oQn2vlr6Hc8Q6l+ycVvu71VQcUtK39gCddCsZsKtTuvT+Wu6iNq2sl2b9j64Un4yUDK8jk30MlR1wm/mFH73ajNXrDBJFn+8e4XnUG8jGvHrJE4pYj7hEwR2nfxtEMTo/fhM6YL0LMk0KSU/sFvapxkC/D7M5IyYqMSDdtI60LGedWJB0j8imrFOrBH8sLSvg94b8LQSgQyK+ozg/aIA+7oPZb5ZOvQyQP5yyca7fNaRR7foGxMQE4cm0fiqxfL/YJZoIqh2o2i948oYLIEFvORW64CzVl6EkGkwnnUx8CGL9aAhWdMkYFqdT3ZAhi4lOV/hmXTZlnF4/Ft78DBAeh8PoXqTWqyGAw/2t52rE9Z/lkPIbjLyl22OtGEaA6No6F56ddbIe3F5gPeSQn8wbl2Y34YnZYI/GJNMTSk3+r29h+T7LzJ/TZnTD3BqUerlvQUgRrP5+kzKVSCf0T25e5xe/tBbfI50tJalZKQoMLxm7BAcx4jof0xs4YtzFBBpKNLVclhdqbksn2ISQkv4IKwUJEitCMUFDqSOcRYyhNHUpncSkDeg3B7X512Wdpxpnmnge1Cl/5H8d7GEEzprtUPRYqF13luqvFkA08dS
1970-01-01 -3:-59:-46.816031 IP 10.0.2.15.1049 > 66.77.96.162.80: Flags [.], ack 2841, win 64240, length 0
E..(.U@…K}
…BM`….P.6UH….P…….TTP/1.
1970-01-01 -3:-59:-46.816085 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 2841:4261, ack 864, win 65535, length 1420
E…….@..1BM`.
….P…….6UHP…….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
1970-01-01 -3:-59:-46.816106 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 4261:5681, ack 864, win 65535, length 1420
E…….@..0BM`.
….P….
..6UHP…….qA0bqGVofAZqNaYlVAj+qw0ts6cFri3H5D2en/h+t75riP1ByNMvkvf5A/iwXfj7kr+Lp105V4EjLnIjmtlE0yFW6vOz4Nw/WG8xOagV86BEmK/iudLKfw7mfBiXZCXn1BOPF91XahZHuG2/ewxzhxApsuB+49MigoMIkj41MrOON9PwnDFPvs76EaPG5DAHbxNn9V7ocqHHAaeQisJ5vxVkPej/k9LhJRVHwf1x1RhzdpWHce3ARr8LDcrZr+hhHMME8RFp3q37xceDbvtPD2qDny1LAFBm3GwBg6AVeYdFB7OwoYjHWZgdg7k2muu8LAlH7brptT9eZupefkkqC6xyVOUHStCQEl3ldxesiAOEY982iUKW97h53neAV0SvLGGqzynfZVs4NXd7iNsR1bSBCPZeH5g4zMFtQGSgzgcwZI4c2bzcL6m25nIuvgXkV/6c1HkbgzfLEMwnNOUHoKpJ5iNvXYNG/JMfQZJZeQZjXwL2G0HDO+D+jepsup4Hfd0LCKzsWH8cqrtwdSkQTCq+OpkJbJjMP+PyPoXV3fMmG/LYk5JezDR7RTJdhYU/57aOKaw2hgKM7A7k1lGe6B2LByZRYnPagUfsu7Ewt1IZoTbtZp8s3Cozk9a+ywD1a2G59/G5b2pb0lRtxNZ0nfyzoBpmMHGJW5QkcEwu/nbSMCnx9YAOTlbO3hGaddOCQRAl2TPWfVZHIIYEskF5XNZbG71S012jwX/RjIdM1gWjpu9SrlJIZPorbXVx1D/UIhDbL8+UZjDkMpTjQKTp8T62k510/Ns9mvtzc2p8kL7rUURhirYfTetpiFdIT2HFUd5xSNF9ej5x5cGVVGgCmaArVq0Oa3bbDT/PGm/ZeQtoOhOBijD2dm4fs1+qlnhFKAgmHuqf36MQVW5U5xdq3MCvvqYKDfZf4FTLvGf0Dy8YK2vjDckUqu6r6znXNSYvqRcmgAAv+rvCpcPei4LgIB3MxOk+hcqI8bUYKc3xldb3wIBpT9eUOi16+2IorfVDRDQ7WM/PdP6Nt7Oleir5lQCQ8odb5iHKLOKYiLUhpLZ6SRtiNmiF6d4bztqLDWta2JhyEJ6dVo0N0iiZFc1fyrtZ8t1crgQLkh7JR7H988bnrRIfsUpthF+IzeoJqXOqjjVsiU02T1tVGtrdZzmbdgPu/3R4Ld5dZY7qrqJvo4oVzcFXM7xhW4WJjXluYhfSj0C9A4VICnUDM04WtA3OmXhipifejmIaGCPF6RYLWsU6chn55c6abSsng/b1F/dWqxz8GOVReF3t4FOngOK7Kpdp9x8bGVHqxCscRtL8cA7j/UIe9fCaiMD3jrUDMYomZ76oVHrWrV7lzj8j8L7SyMFMbhKDFqJKxCy495p1LTjO4HxpWjGvgLupIJUkB977SZo6+YTZ7nJk
1970-01-01 -3:-59:-46.816116 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 5681:7101, ack 864, win 65535, length 1420
E…….@../BM`.
….P…..2.6UHP…C…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
1970-01-01 -3:-59:-46.816234 IP 10.0.2.15.1049 > 66.77.96.162.80: Flags [.], ack 4261, win 62820, length 0
E..(.V@…K|
…BM`….P.6UH..
.P..d…… FEE
1970-01-01 -3:-59:-46.816285 IP 10.0.2.15.1049 > 66.77.96.162.80: Flags [.], ack 7101, win 64240, length 0
E..(.W@…K{
…BM`….P.6UH….P….>.. FHEPF
1970-01-01 -3:-59:-46.816351 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 7101:8521, ack 864, win 65535, length 1420
E…….@…BM`.
….P…….6UHP…u…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
1970-01-01 -3:-59:-46.816369 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 8521:9941, ack 864, win 65535, length 1420
E…….@..-BM`.
….P…..J.6UHP…!…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
1970-01-01 -3:-59:-46.816383 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 9941:11361, ack 864, win 65535, length 1420
E…….@..,BM`.
….P…. ..6UHP…G…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
1970-01-01 -3:-59:-46.816396 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 11361:12781, ack 864, win 65535, length 1420
E…….@..+BM`.
….P….&b.6UHP….u..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
1970-01-01 -3:-59:-46.816412 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [P.], seq 12781:13681, ack 864, win 65535, length 900
E…….@..2BM`.
….P….+..6UHP….f..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
1970-01-01 -3:-59:-46.816540 IP 10.0.2.15.1049 > 66.77.96.162.80: Flags [.], ack 8521, win 62820, length 0
E..(.X@…Kz
…BM`….P.6UH…JP..d.>.. FHEPF
1970-01-01 -3:-59:-46.816588 IP 10.0.2.15.1049 > 66.77.96.162.80: Flags [.], ack 11361, win 59980, length 0
E..(.Y@…Ky
…BM`….P.6UH..&bP..L.>.. FHEPF
1970-01-01 -3:-59:-46.816630 IP 10.0.2.15.1049 > 66.77.96.162.80: Flags [.], ack 13681, win 57660, length 0
E..(.Z@…Kx
…BM`….P.6UH../rP..<.>..TTP/1.
1970-01-01 -3:-59:-46.816821 IP 10.0.2.15.1049 > 66.77.96.162.80: Flags [.], ack 13681, win 62840, length 0
E..(.[@…Kw
…BM`….P.6UH../rP..x…. FHEPF
1970-01-01 -3:-59:-46.916145 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 13681:15101, ack 864, win 65535, length 1420
E…….@..)BM`.
….P…./r.6UHP…….eyD8QMMl7gI//uZ/8p8OExMOxCal5txR6DIN509uzTKXmvDnRbNLc+/4VE4dfAgVLvhiu7dDn8/N/IId5tbierDCWGIlH+PfKrkm6lkUCdbypdYemkKNRMZOzLSIIzQG8fO3EqexxfxSmMeLwsR9h0FqR5ytDPvuFdZEYnDThYIKZ4+lyOQoCz4aCcEWChLbha8ZATZhtIOPoaLxQolePmjG9pjMK46zVit7QLxsvyiJcpKLBFH7CLIrT1eERShkMekoMf2qDdW8Z2ZnS0u3H6cpniLbrjvY8XUnXStF0ULUIuONQUMAQxqfOVaIDvPcDNre2tWf951UPdNBqP778BuR7vEEL6IDjVKj7bAYCCc96JCOweiripOGMCGyyn8WVfQkUTiC9jTUER5U7XEIpelC7YTl6MmsYjkBgwVw1K5/LxAO/3zcEUFsnb+UH5zu1aPm5q03UHGK5VsV1M1Man9k17bjLsDXaULPsEtl0QTGGLZDKa13gCUke/O0MOQTVziEmDnT4u4T36XRECTY7TZ6ibO6uX/3qqchOJDpqD0T7ybQIs1mugA8mV+ilRAza8PH1rxEJkK5XO53sV3hnEzYsT6WRhWcj91QgPxciPgVreJUT2yD8IQBAogkpiGqM9JCXdw7fABOGylwqj6e+jNz1MXz8RZjlMWldkCYlYBKSDUlNKHNpw2So54Fp52pJu/CqNpYsPp6rp912LWmMOgLQg3s8FX66YgJnBWtU5dGKFIpKVHxvTYN1Kq9vSXCR1h1nBiyclvNooyTBZ6K6UEP1HbRm+6aCB5Vz2wSqN9/7XlTFlVww8MxH0MzTPCG7X3iT1CGymodpI2M3FqQjFagtsGQvzctfbwlqkpjOOO8p25Ug/n0Q5/ptdLfatqS4wHGqC0J2Y1PtItu/9bI+7WNkjlqm+czqC66M10tTc/54qr89qRUi0Wz63NHRPBg7u/H34Of0swdkaTo3aHpmo4A73JXwpP8b+C20XAMkSsfmpcC2XZTcCZ6oKYjJ2bQJFCT3K35/BQMHkiwaS1xwKCNEi2kxpavttctQhsWDO5Z0n/F0AKk8yz+jjPxeYfVqF3JbNrTUHYILBCLauDHst8oz6UJS1miGu86Fa5QdCQMv+j/9x9aM+2EnnQRVIhf0UomDo2WvV4fxlEso7dH9NPJnVHey702J+B/cTiXZ8HdMdRGrpfWW8EdG3TtUz3q0MA1oZhbiApaGa6YmMNyRf1MI5rt31D54M5X168syu8yQAREYo/Kwo5OItSXyULt7Qs6dJgUYv0H0qxc4FQeHpsCrdZO8wJWJG9MEOoG5mdtPN2IDDiUlCPXSPhx3aE6CUC9Y2sLe9yBj5+am0IFH2mvSZpMxdc+hF5eLimIBYLaRX8kX96azUIEyfnW1G9U3fU42bj1NcNH
1970-01-01 -3:-59:-46.916182 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [.], seq 15101:16521, ack 864, win 65535, length 1420
E…….@..(BM`.
….P….4..6UHP….j..BoCdpFE4uS1GthPx3tTzS7ZCeWtnDAXEG2FH3nNinl6LjFs+4hH4NOht/BWo4FYHuvWNtSQvKCtg1e/smYRNevCEVUVpIAvilQf3T4RurXuFODJv7FGPHrM4OPKG82JXJKVailwJNMxezfPMtC9a7vRM0Dce03r1EHUWYRZ2tf93mgDvvkWcaYt4fUKJfzis3F/Z+84luV249ibrD9huaFm1KN3UJ5zyttpD5dYdiwoh7f4AQRNd0/hmk0O2IGd28MimZ7kmG7cchzMLVhu9fjxKuqYKNwGX8g8l9Tk6nRfmXEApjfNBVi2Z3BIaukEAzSPvgFooVaa/6JxHOj9AZv6ATqEkp3jT+zYwQCFC8/IvnPnbCO4uvxKHlUXvGhAiVtRf3/69SVMA14QEJN71XkD6WuJ48FGrq8t8fvl5ZUMiOBG5P9z68n/aCGkEjoK9olfmKSVyS6x2EfAsIdxwp67vfMbrmL2B7d3G4UGBbD2W5ZZmJ4Tc0xiwakgeLnzaYu2qpYwqq+h47ugv/+vyaacinPDp9VuSq6rHyz7K/XVckpjZJx9iGs6GTHUkfGLtVRdHvSYSWQZ5UNC1diX8KzPxqHrVGrOLXaI//jRri4ScNfNKmDwAmqqmBJXn7FSpl32W6lyW7oUcWkaTuZsmy7NtwDkgXUUbT3I0uR+BFOblbRGnVvbx7yHYn34CM3XiWKJqFXYgfEW8QkAYFhclOxdUuVXqtinhwot1pLTV+7hm2sudvQJD7OoJnWG9cuX90ePxaE3vmXC67nL/Q7FBy4gkicQsf7Ml3rgkUN+EWgwf26bOzReaWhMS0ga3QebHDczPu1JuoI7o/DOxJbpLIyipA+2nrgr3zphJmSN+5S4I+M4fRfYH1A7zAcEfYG0htWjMQ1mIh/L+G80xUS1oOJqgHFZx9lBaI2/gwipoEEuQbYQAsjJu32wj8wHgRQibAyl+wzyqavJNB2ubWuFTo0OjzvWqFfylFulunauC8EqECgd/DPAUbImrZz6sGhLGveLPRj6VK3OFp49xzbxUnIsFotIoiqogwATo+Iyi1ExGHKtoj4KvVpuwNXqWocBNxr3rDIJ4ZtKOYS/32qf9VAugXuQ8FbATqiSMJAD6rJi6YJ6zBbgyh4W8EGeQY0/TOV03x0/1vH1+KJTUHbAeY7cqBVW6hgvQqQg1Pi7qSmkbHlW2u+hoJo8svIqRQlcFTb1aNuaygaB4hWwTL4uQFKdzuG8Gqf5bPAL/IyuJWDUmw+pT0oxnICnjuvinnL4bKHG5f1B0RzU7PHnToQ/ZNZK8cmKG5ZSkQRQFxRdh4NqGdeIxdMphCylIjfPe2F3DZbij4vG3BL9fDMGWROdTKG4HKqwUjXardQr44M1kXjoOg2QQnMVz7IDM4/eRPMbCKtc5xGj6In1+
1970-01-01 -3:-59:-46.916198 IP 66.77.96.162.80 > 10.0.2.15.1049: Flags [P.], seq 16521:17038, ack 864, win 65535, length 517
E..-….@…BM`.
….P….:..6UHP…g…7++ZHIK3CqnQT0WrJPCdbPOI9Cjde5PpyM3Q+kU8M23xRnqJiLckdQA9A+1pwG16paR0wVTE+AtztwEekI39orYCR7OI0sOpFzdWzncao6q0A2TP38Ok2VsksZzuUiA4+BxG70lSzN3u/neofCdx/8+9YrpbHD3NunpsLX8r73tWqseqblDwc5WShOHNwcDLXXMFVClkyeGfCNkP+dKx2epSjujZydW9fGxXZmZwJlarviJndk2rNNO6XPEN+arJcJ82odYCRlzVPAqQEvtQVbeHJOrzbNyyuQj7auOQYPIx+Iy0vJmcmHSX/Kk3/9AARj1pZQX2xwg5RaANUZjepImKvzJoj/3cKQS5J2Z5JlGup2QBwS6v3sHFGPtTrLGmML2zKDEKXaY3QwnoAAc1XLg4yKibfUMQQPdcUCAO73oFI1qmb+NS8/Z6t+ertZA2reNqfYK2RNske0RRccV6GpRtzW7JH8mogWIE9PI”,”Success”:true,”Error”:null}
1970-01-01 -3:-59:-46.916340 IP 10.0.2.15.1049 > 66.77.96.162.80: Flags [.], ack 16521, win 64240, length 0
E..(.]@…Ku

1970-01-01 -3:-59:-44.402251 IP 10.0.2.15.1025 > 10.0.2.2.53: 41480+ A? liveupdate.symantecliveupdate[.]com. (51)
E..O.d….”*

……5.;.[…………
liveupdate.symantecliveupdate[.]com…..
1970-01-01 -3:-59:-44.439151 IP 10.0.2.2.53 > 10.0.2.15.1025: 41480 5/8/0 CNAME liveupdate.symantec.d4p.net., CNAME symantec.georedirector.akadns.net., CNAME a568.d.akamai.net., A 5.178.43.33, A 5.178.43.50 (340)
E..p.$..@.aI

….5…\…………..
liveupdate.symantecliveupdate[.]com……………..
liveupdate.symantec.d4p.net..?……… .symantec.georedirector.akadns.W.h……
….a568.d.akamai.W…………..+!…………..+2……..
….n0d……….
….n1d……….
….n3d……….
….n7d……….
….n4d……….
….n2d……….
….n5d……….
….n6d..
1970-01-01 -3:-59:-44.440576 IP 10.0.2.15.1050 > 5.178.43.33.80: Flags [S], seq 185906836, win 64240, options [mss 1460,nop,nop,sackOK], length 0
E..0.e@…..
…..+!…P……..p….:……….
1970-01-01 -3:-59:-44.458473 IP 5.178.43.33.80 > 10.0.2.15.1050: Flags [S.], seq 320001, ack 185906837, win 65535, options [mss 1460], length 0
E..,.%..@.=…+!
….P……….`………..
1970-01-01 -3:-59:-44.458651 IP 10.0.2.15.1050 > 5.178.43.33.80: Flags [.], ack 1, win 64240, length 0
E..(.g@…..
…..+!…P……..P………….
1970-01-01 -3:-59:-44.458901 IP 10.0.2.15.1050 > 5.178.43.33.80: Flags [P.], seq 1:300, ack 1, win 64240, length 299
E..S.h@….[
…..+!…P……..P…/…GET /upgrade/NSS/SymCCIS/Production/SCC.dll HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Host: liveupdate.symantecliveupdate[.]com
Connection: Keep-Alive

1970-01-01 -3:-59:-44.458960 IP 5.178.43.33.80 > 10.0.2.15.1050: Flags [.], ack 300, win 65535, length 0
E..(.&..@.=…+!
….P……….P…….
1970-01-01 -3:-59:-44.477852 IP 5.178.43.33.80 > 10.0.2.15.1050: Flags [.], seq 1:1421, ack 300, win 65535, length 1420
E….’..@.8<..+! ....P..........P.......HTTP/1.1 200 OK Server: Apache ETag: "303f02fcd577a11acab7c3a36970e4be:1409925581" Last-Modified: Fri, 05 Sep 2014 13:59:34 GMT Accept-Ranges: bytes Content-Length: 168288 Content-Type: application/octet-stream Cache-Control: max-age=903 Expires: Mon, 09 Feb 2015 11:08:33 GMT Date: Mon, 09 Feb 2015 10:53:30 GMT Connection: keep-alive MZ......................@............................................. .!..L.!This program cannot be run in DOS mode.. $.........r.................................E...............................Q...................................Rich............PE..L......T...........!.. ......F............................................................@.........................E...........{.......=............x..`...........0................................................................................text............X......PEC2TO...... ....rsrc.... ...........\.............. ....reloc...............v..............@.............................................................................................................................................................................................................................................................................................................................................................................................................................../.....*..u?...._.Z.|'..Y9j1..V...*%O%.D.o.. 1970-01-01 -3:-59:-44.715643 IP 10.0.2.15.1050 > 5.178.43.33.80: Flags [P.], seq 300:618, ack 168638, win 62819, length 318
E..f..@…..
…..+!…P……t.P..c?…GET /upgrade/NSS/SymCCIS/Production/SCC/w3i/ENG.SCC.config.txt HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Host: liveupdate.symantecliveupdate[.]com
Connection: Keep-Alive

1970-01-01 -3:-59:-44.715714 IP 5.178.43.33.80 > 10.0.2.15.1050: Flags [.], ack 618, win 65535, length 0
E..(….@.=L..+!
….P….t…..P…5…
1970-01-01 -3:-59:-44.734309 IP 5.178.43.33.80 > 10.0.2.15.1050: Flags [.], seq 168638:170058, ack 618, win 65535, length 1420
E…….@.7…+!
….P….t…..P…….HTTP/1.1 200 OK
Server: Apache
ETag: “b8dbac3cc2be258b539c305a828416aa:1395133614”
Last-Modified: Tue, 18 Mar 2014 09:06:50 GMT
Accept-Ranges: bytes
Content-Length: 3216
Content-Type: text/plain
Cache-Control: max-age=131
Expires: Mon, 09 Feb 2015 10:55:41 GMT
Date: Mon, 09 Feb 2015 10:53:30 GMT
Connection: keep-alive

1970-01-01 -3:-59:-43.105624 IP 10.0.2.15.1051 > 63.245.197.112.80: Flags [P.], seq 1:301, ack 1, win 64240, length 300
E..T..@….s
…?..p…P.UW-….P…….GET /n/p?module=9160&product=SCC&version=4.6.1.11&language=09.01&os=5.1.2600.3.0&y=1033&a=w3i&b=false&c=nis&d=nis=1000;nss=1123&e=0x0&error=0&n=0&j=0&k=0&l=none&m=none&o=none&q=none&t=none&u=-1&v=none HTTP/1.1
User-Agent: Install Stub
Accept: */*
Host: stats.norton[.]com
Connection: Keep-Alive

1970-01-01 -3:-59:-43.105968 IP 63.245.197.112.80 > 10.0.2.15.1051: Flags [.], ack 301, win 65535, length 0
E..(….@.h.?..p
….P…….UXYP….=..
1970-01-01 -3:-59:-43.184876 IP 63.245.197.112.80 > 10.0.2.15.1051: Flags [P.], seq 1:205, ack 301, win 65535, length 204
E…….@.g.?..p
….P…….UXYP…….HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/plain;charset=ISO-8859-1
Content-Length: 13
Date: Mon, 09 Feb 2015 10:53:30 GMT

1423479211228
1970-01-01 -3:-59:-43.212477 IP 10.0.2.15.1051 > 63.245.197.112.80: Flags [P.], seq 301:597, ack 205, win 64036, length 296
E..P..@….v
…?..p…P.UXY….P..$….GET /n/p?module=9151&product=SymCCIS&version=2.1.0.20&language=09.01&os=5.1.2600.3.0&y=1033&b=w3i&a=CallCriteriaChecker&f=10&c=false&d=false&e=0x0&error=0&j=nis&k=nis=1000;nss=1123&g=0.167&l=0.818 HTTP/1.1
User-Agent: Install Stub
Accept: */*
Host: stats.norton[.]com
Connection: Keep-Alive

1970-01-01 -3:-59:-43.212625 IP 63.245.197.112.80 > 10.0.2.15.1051: Flags [.], ack 597, win 65535, length 0
E..(….@.h.?..p
….P…….UY.P….I..
1970-01-01 -3:-59:-43.291269 IP 63.245.197.112.80 > 10.0.2.15.1051: Flags [P.], seq 205:409, ack 597, win 65535, length 204
E…….@.g.?..p
….P…….UY.P…….HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/plain;charset=ISO-8859-1
Content-Length: 13
Date: Mon, 09 Feb 2015 10:53:30 GMT

1423479211335

1970-01-01 -3:-59:-32.721860 IP 10.0.2.15.1052 > 66.77.96.160.80: Flags [P.], seq 1:385, ack 1, win 64240, length 384
E…..@…I.
…BM`….P…]..L.P…….POST /api/values/count HTTP/1.1
Content-Type: application/json; charset=utf-8
Accept: application/json
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Host: interact.appclick.co
Content-Length: 138
Cache-Control: no-cache

[{“key”:”Web.Installer.VDI.InstallError”,”samplerate”:1,”value”:1},{“key”:”Web.Installer.VDI.OfferInstallError”,”samplerate”:1,”value”:1}]
1970-01-01 -3:-59:-32.721906 IP 66.77.96.160.80 > 10.0.2.15.1052: Flags [.], ack 385, win 65535, length 0
E..(….@…BM`.
….P….L…..P….~..
1970-01-01 -3:-59:-32.823283 IP 66.77.96.160.80 > 10.0.2.15.1052: Flags [P.], seq 1:377, ack 385, win 65535, length 376
E…….@…BM`.
….P….L…..P…wR..HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: application/json; charset=utf-8
Expires: -1
Server: Microsoft-IIS/7.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Set-Cookie: dtCookie=3$1ED2FA34BFBFBC3967D0FB63B996191F|Mobile-Default|1; Path=/; Domain=.appclick.co
Date: Mon, 09 Feb 2015 10:53:42 GMT
Content-Length: 15

{“Result”:true}

Share Button

2 thoughts on “Self Install PUP 2-vinstaller.com Traffic Sample

  1. Pingback: Margaret Cunniffe and David Brown are Australian Fraudsters based in Melbourne Victoria that deceive real business people via Synergize Vip Vip Club and Connect Network Fundraise but are nothing more than con-artists.

  2. Pingback: Joseph de Saram#Rhodium

Leave a Reply

Your email address will not be published. Required fields are marked *