CLEAN MX realtime database    
public access query for virus URL statistics
Totally watched: Walker is running: 89(695) http://fowavyzires.subjectdone.com/t27-payday-loans-1500-no-fax-apply-for-payday-loans-in-one-hourhigh
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006
Tweet
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
malware impact on AS AS6619
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0218 Seconds 4 hits
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 follow up this item(10954407) 10954407 Report false positive Report closed case make a suggestion 2013-05-14 11:41:57     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
2/46 (4.3%) 
 WS.Reputation.1
TROJ_GEN.F47V1027 
 lookup in virustotal.com (d873cdd230f7708f285f2baee672efeb)-->[http://www.virustotal.com/latest-report.html?resource=d873cdd230f7708f285f2baee672efeb]lookup in threatexpert.comlookup the sha256(72f175d455648bbbebd36d3e5bcee4ed488e623bd863027b7a003d9a8012da23) in comodo.comfollow up this md5sum(d873cdd230f7708f285f2baee672efeb)follow up this itemfollow up this virusname (TROJ_GEN.F47V1027) as RSS-Feedfollow up this malware(TROJ_GEN.F47V1027) for scanner (undef) in md5 table2/46 (4.3%) TROJ_GEN.F47V1027
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.hackerschool.org/HS_Boards/da ...  up No previous evidence recordedSaved evidence (119296 Bytes) of last contact as txt February 19 2011 15:01:11 CET. aliveSaved log of last contact as txt May 14 2013 12:59:53 CEST. SenderBaselookup 211.189.88.59 at virustotallookup 211.189.88.59 at Rus CERT university stuttgart germanylookup 211.189.88.59 at apnicfollow up this item(ip) in same window 211.189.88.59 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS6619) in networks tablefollow up this itemfollow up this AS (AS6619) as RSS-Feed AS6619 SenderBaselookup 211.189.88.59 at virustotallookup 211.189.88.59 at Rus CERT university stuttgart germanylookup 211.189.88.59 at apnicfollow up this item(review) in same window 211.189.88.59 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.hackerschool.org/HS_Boards/da ... lookup hackerschool.org at virustotalfollow up this domain(hackerschool.org) hackerschool.org follow up this itemfollow up this country (KR) as RSS-Feed KR follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (psj@fursys.com) as RSS-Feed psj@fursys.com follow up this itemfollow up this item 211.189.0.0 - 211.189.127.255 follow up this item SAMSUNGSDS-KR follow up this item SamsungSDS Inc. follow up this item ns.hackerschool.org follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.hackerschool.org/HS_Boards/da ...
2 follow up this item(10261755) 10261755 Report false positive Report closed case make a suggestion 2013-04-19 14:24:11 OVERDUE! Overdue!762.8 follow up this itemfollow up this contributor (cross posting from portals) as RSS-Feed sub17possible lookup Evidence at malwaredomainlist.com
0/45 (0.0%) 
  
 lookup in virustotal.com (c6828ac99495a2bb87459d92ce61bf8d)-->[http://www.virustotal.com/latest-report.html?resource=c6828ac99495a2bb87459d92ce61bf8d]follow up this md5sum(c6828ac99495a2bb87459d92ce61bf8d)follow up this itemfollow up this virusname (cleanmx_generic) as RSS-Feedfollow up this malware(cleanmx_generic) for scanner (undef) in md5 table0/45 (0.0%) cleanmx_generic
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.samsung.kg  up No previous evidence recordedSaved evidence (223 Bytes) of last contact as txt November 05 2008 01:10:45 CET. aliveSaved log of last contact as txt April 19 2013 16:43:27 CEST. SenderBaselookup 211.45.27.202 at virustotallookup 211.45.27.202 at Rus CERT university stuttgart germanylookup 211.45.27.202 at apnicfollow up this item(ip) in same window 211.45.27.202 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS6619) in networks tablefollow up this itemfollow up this AS (AS6619) as RSS-Feed AS6619 SenderBaselookup 211.45.27.202 at virustotallookup 211.45.27.202 at Rus CERT university stuttgart germanylookup 211.45.27.202 at apnicfollow up this item(review) in same window 211.45.27.202 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.samsung.kg lookup samsung.kg at virustotalfollow up this domain(samsung.kg) samsung.kg follow up this itemfollow up this country (KR) as RSS-Feed KR follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (ipmanager@samsung.com) as RSS-Feed ipmanager@samsung.com follow up this itemfollow up this item 211.45.0.0 - 211.45.31.255 follow up this item UNITEL-LLINE-ANUSBIL follow up this item SamsungSDS Inc. follow up this item red.samsung.co.kr follow up this item ns.adoptee.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.samsung.kg
3 follow up this item(8900504) 8900504 Report false positive Report closed case make a suggestion 2012-12-30 19:22:50 OVERDUE! Overdue!3396.8 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
21/46 (45.7%) 
 Trojan.IFrame.NV
Exploit
IFrame.gen
Iframe.LC
HTML:Iframe-inf
Trojan.IFrame.NV
Trojan.IFrame.NV
(B)
TrojWare.JS.Iframe.AY
Trojan.IFrame.NV
JS.IFrame.163
HTML/IFrame.nva
Mal/Iframe-Q
Exploit:HTML/IframeRef.AA
HTML.Downloader_Geno_iframe
Trojan.IFrame.NV
J 
 lookup in virustotal.com (6131e6620a91d93bbb90c8ecac0269e6)-->[http://www.virustotal.com/latest-report.html?resource=6131e6620a91d93bbb90c8ecac0269e6]follow up this md5sum(6131e6620a91d93bbb90c8ecac0269e6)follow up this itemfollow up this virusname (HTML%2FIFrame.nva) as RSS-Feedlookup Virusname at avirafollow up this malware(HTML%2FIFrame.nva) for scanner (avira) in md5 table21/46 (45.7%) HTML/IFrame.nva
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.koreataekwondo.org/english/ht ...  up Saved evidence (12208 Bytes) of first contact as txt December 31 2012 00:23:18 CET.Saved evidence (12208 Bytes) of last contact as txt April 04 2013 03:34:41 CEST. aliveSaved log of last contact as txt May 05 2013 06:49:36 CEST. SenderBaselookup 211.189.89.246 at virustotallookup 211.189.89.246 at Rus CERT university stuttgart germanylookup 211.189.89.246 at apnicfollow up this item(ip) in same window 211.189.89.246 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS6619) in networks tablefollow up this itemfollow up this AS (AS6619) as RSS-Feed AS6619 SenderBaselookup 211.189.89.246 at virustotallookup 211.189.89.246 at Rus CERT university stuttgart germanylookup 211.189.89.246 at apnicfollow up this item(review) in same window 211.189.89.246 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.koreataekwondo.org/english/ht ... lookup koreataekwondo.org at virustotalfollow up this domain(koreataekwondo.org) koreataekwondo.org follow up this itemfollow up this country (KR) as RSS-Feed KR follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (psj@fursys.com) as RSS-Feed psj@fursys.com follow up this itemfollow up this item 211.189.0.0 - 211.189.127.255 follow up this item SAMSUNGSDS-KR follow up this item SamsungSDS Inc. follow up this item red.samsung.co.kr follow up this item ns.adoptee.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.koreataekwondo.org/english/ht ...
4 follow up this item(4367002) 4367002 Report false positive Report closed case make a suggestion 2012-11-14 13:40:21 OVERDUE! Overdue!4506.6 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
16/36 (44.4%) 
 
Artemis!F08D1F44C540
Riskware
WS.Reputation.1
W32/Troj_Generic.FKBPF
TROJ_GEN.R4FH1K3
HEUR:Trojan-Downloader.Win32.Generic
Gen:Trojan.Downloader.DmKfaaPrdnzG
Gen:Trojan.Downloader.DmKfaaPrdnzG
(B)
UnclassifiedMalware
Gen:Trojan.Downloader.DmKfaaPrdnzG
T 
 lookup in virustotal.com (f08d1f44c5406374555b7bcfae33f90a)-->[http://www.virustotal.com/latest-report.html?resource=f08d1f44c5406374555b7bcfae33f90a]lookup in threatexpert.comlookup the sha256(b68c8c610607339ad2d53d61f95e9c886eb34555e0fc53bc4c6a12cddffccfb8) in comodo.comfollow up this md5sum(f08d1f44c5406374555b7bcfae33f90a)follow up this itemfollow up this virusname (PUA.Win32.Packer.UpxProtector) as RSS-Feedlookup Virusname at viruspoolfollow up this malware(PUA.Win32.Packer.UpxProtector) for scanner (clamav) in md5 table16/36 (44.4%) PUA.Win32.Packer.UpxProtector
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://211.45.30.136/updatefb/AcePartVer ...  up Saved evidence (480768 Bytes) of first contact as txt November 16 2009 07:03:53 CET.Saved evidence (480768 Bytes) of last contact as txt November 16 2009 07:03:53 CET. aliveSaved log of last contact as txt May 20 2013 07:06:34 CEST. SenderBaselookup 211.45.30.136 at virustotallookup 211.45.30.136 at Rus CERT university stuttgart germanylookup 211.45.30.136 at apnicfollow up this item(ip) in same window 211.45.30.136 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS6619) in networks tablefollow up this itemfollow up this AS (AS6619) as RSS-Feed AS6619 SenderBaselookup 211.45.30.136 at virustotallookup 211.45.30.136 at Rus CERT university stuttgart germanylookup 211.45.30.136 at apnicfollow up this item(review) in same window 211.45.30.136 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://211.45.30.136/updatefb/AcePartVer ... lookup 211.45.30.136 at virustotalfollow up this domain(211.45.30.136) 211.45.30.136 follow up this itemfollow up this country (KR) as RSS-Feed KR follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (ipmanager@samsung.com) as RSS-Feed ipmanager@samsung.com follow up this itemfollow up this item 211.45.0.0 - 211.45.31.255 follow up this item UNITEL-LLINE-ANUSBIL follow up this item SamsungSDS Inc. follow up this item  follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://211.45.30.136/updatefb/AcePartVer ...
Click here for other already closed incidents for your AS (AS6619)

Click here for other vital incidents



Protected by clean MX [Valid RSS] Valid HTML 4.01 Transitional CSS ist valide!
Access is provided for free and subject to these Terms and Conditions.