CLEAN MX realtime database    
public access query for virus URL statistics
Totally watched: 825273 As of 2013-06-20 05:31:32 CEST
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006
Tweet
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0315 Seconds 10 hits
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 follow up this item(12098303) 12098303 Report false positive Report closed case make a suggestion 2013-06-15 11:20:23     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
0/36 (0.0%) 
 virustotal
no
evidence 
 lookup in virustotal.com (4016236e0e3e5f2c58896fefdb156592)-->[http://www.virustotal.com/latest-report.html?resource=3570c6b6542704fe1747ef88e7b63a01]follow up this md5sum(4016236e0e3e5f2c58896fefdb156592)follow up this itemfollow up this virusname (JS%2FiFrame.czd) as RSS-Feedfollow up this malware(JS%2FiFrame.czd) for scanner (AntiVir) in md5 table0/36 (0.0%) JS/iFrame.czd
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://daddyroach.com/  up No previous evidence recordedSaved evidence (111 Bytes) of last contact as txt June 14 2013 17:03:09 CEST. aliveSaved log of last contact as txt June 15 2013 13:20:54 CEST. SenderBaselookup 69.72.240.50 at virustotallookup 69.72.240.50 at Rus CERT university stuttgart germanylookup 69.72.240.50 at ARINfollow up this item(ip) in same window 69.72.240.50 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS25653) in networks tablefollow up this itemfollow up this AS (AS25653) as RSS-Feed AS25653 SenderBaselookup 69.72.240.50 at virustotallookup 69.72.240.50 at Rus CERT university stuttgart germanylookup 69.72.240.50 at ARINfollow up this item(review) in same window 69.72.240.50 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://daddyroach.com/ lookup daddyroach.com at virustotalfollow up this domain(daddyroach.com) daddyroach.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@fortressitx.com) as RSS-Feed abuse@fortressitx.com follow up this itemfollow up this item 69.72.128.0 - 69.72.255.255 follow up this item FORTRESSITX follow up this item FortressITX FORTR-5 100 Delawanna Ave Clifton NJ 07014 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://daddyroach.com/
2 follow up this item(11890571) 11890571 Report false positive Report closed case make a suggestion 2013-06-08 11:40:15     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
2/47 (4.3%) 
 Troj/Badsrc-Q
HTML/ScrInject.B.Gen 
 lookup in virustotal.com (e24f5f117d74d42db666bdfe31d675e7)-->[http://www.virustotal.com/latest-report.html?resource=e24f5f117d74d42db666bdfe31d675e7]follow up this md5sum(e24f5f117d74d42db666bdfe31d675e7)follow up this itemfollow up this virusname (Troj%2FBadsrc-Q) as RSS-Feedfollow up this malware(Troj%2FBadsrc-Q) for scanner (undef) in md5 table2/47 (4.3%) Troj/Badsrc-Q
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/caroline-rose-mel ...  up No previous evidence recordedSaved evidence (10408 Bytes) of last contact as txt June 08 2013 12:12:32 CEST. aliveSaved log of last contact as txt June 08 2013 12:12:32 CEST. SenderBaselookup 205.251.133.42 at virustotallookup 205.251.133.42 at Rus CERT university stuttgart germanylookup 205.251.133.42 at ARINfollow up this item(ip) in same window 205.251.133.42 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS3595) in networks tablefollow up this itemfollow up this AS (AS3595) as RSS-Feed AS3595 SenderBaselookup 205.251.133.42 at virustotallookup 205.251.133.42 at Rus CERT university stuttgart germanylookup 205.251.133.42 at ARINfollow up this item(review) in same window 205.251.133.42 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/caroline-rose-mel ... lookup donnameeinc.com at virustotalfollow up this domain(donnameeinc.com) donnameeinc.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (engineering@gnax.net) as RSS-Feed engineering@gnax.net follow up this itemfollow up this item 205.251.128.0 - 205.251.159.255 follow up this item GNAXNET follow up this item Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/caroline-rose-mel ...
3 follow up this item(11815888) 11815888 Report false positive Report closed case make a suggestion 2013-06-05 21:40:18     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
21/47 (44.7%) 
 Trojan.Iframe.BZW
Trojan.Iframe.BZW
JS/IFrame.gen.j
Trojan.Html.TwitScroll.bklyhq
Iframe.UW
JS:Iframe-AML
[Trj]
HEUR:Trojan.Script.Generic
Trojan.Iframe.BZW
Troj/Iframe-JG
TrojWare.HTML.Iframe.G
Trojan.Iframe.BZW
Exploit.HTML.Iframe.dm
(v)
HTML/TwitScrol 
 lookup in virustotal.com (6b67d5c38b138c6d33acc45b40f2e6f4)-->[http://www.virustotal.com/latest-report.html?resource=6b67d5c38b138c6d33acc45b40f2e6f4]follow up this md5sum(6b67d5c38b138c6d33acc45b40f2e6f4)follow up this itemfollow up this virusname (cleanmx_generic) as RSS-Feedfollow up this malware(cleanmx_generic) for scanner (undef) in md5 table21/47 (44.7%) cleanmx_generic
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://caterpillarboy.com/  up No previous evidence recordedSaved evidence (503 Bytes) of last contact as txt June 04 2013 04:54:36 CEST. aliveSaved log of last contact as txt June 05 2013 22:52:45 CEST. SenderBaselookup 69.72.240.26 at virustotallookup 69.72.240.26 at Rus CERT university stuttgart germanylookup 69.72.240.26 at ARINfollow up this item(ip) in same window 69.72.240.26 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS25653) in networks tablefollow up this itemfollow up this AS (AS25653) as RSS-Feed AS25653 SenderBaselookup 69.72.240.26 at virustotallookup 69.72.240.26 at Rus CERT university stuttgart germanylookup 69.72.240.26 at ARINfollow up this item(review) in same window 69.72.240.26 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://caterpillarboy.com/ lookup caterpillarboy.com at virustotalfollow up this domain(caterpillarboy.com) caterpillarboy.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@fortressitx.com) as RSS-Feed abuse@fortressitx.com follow up this itemfollow up this item 69.72.128.0 - 69.72.255.255 follow up this item FORTRESSITX follow up this item FortressITX FORTR-5 100 Delawanna Ave Clifton NJ 07014 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://caterpillarboy.com/
4 follow up this item(11570290) 11570290 Report false positive Report closed case make a suggestion 2013-05-28 23:01:40     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
3/36 (8.3%) 
 
HTML.Redirector.WD
Troj/Redir-X
HTML/Framer.DO.229 
 lookup in virustotal.com (a3b9d2bef3c70a7911322612da0041d9)-->[http://www.virustotal.com/latest-report.html?resource=a3b9d2bef3c70a7911322612da0041d9]follow up this md5sum(a3b9d2bef3c70a7911322612da0041d9)follow up this itemfollow up this virusname (HTML%2FFramer.DO.229) as RSS-Feedfollow up this malware(HTML%2FFramer.DO.229) for scanner (AntiVir) in md5 table3/36 (8.3%) HTML/Framer.DO.229
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://youtugreen.com/hedley-dogs-bee-de ...  up No previous evidence recordedSaved evidence (2012 Bytes) of last contact as txt May 28 2013 23:17:44 CEST. aliveSaved log of last contact as txt May 28 2013 23:17:44 CEST. SenderBaselookup 69.72.240.58 at virustotallookup 69.72.240.58 at Rus CERT university stuttgart germanylookup 69.72.240.58 at ARINfollow up this item(ip) in same window 69.72.240.58 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS25653) in networks tablefollow up this itemfollow up this AS (AS25653) as RSS-Feed AS25653 SenderBaselookup 69.72.240.58 at virustotallookup 69.72.240.58 at Rus CERT university stuttgart germanylookup 69.72.240.58 at ARINfollow up this item(review) in same window 69.72.240.58 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://youtugreen.com/hedley-dogs-bee-de ... lookup youtugreen.com at virustotalfollow up this domain(youtugreen.com) youtugreen.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@fortressitx.com) as RSS-Feed abuse@fortressitx.com follow up this itemfollow up this item 69.72.128.0 - 69.72.255.255 follow up this item FORTRESSITX follow up this item FortressITX FORTR-5 100 Delawanna Ave Clifton NJ 07014 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://youtugreen.com/hedley-dogs-bee-de ...
5 follow up this item(11552513) 11552513 Report false positive Report closed case make a suggestion 2013-05-28 14:10:08 OVERDUE! Overdue!545.4 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
21/45 (46.7%) 
 Trojan.Iframe.BZW
Trojan.Iframe.BZW
JS/IFrame.gen.j
Trojan.Html.TwitScroll.bklyhq
Iframe.UW
JS:Iframe-AMQ
[Trj]
HEUR:Trojan.Script.Generic
Trojan.Iframe.BZW
TrojWare.HTML.Iframe.G
Trojan.Iframe.BZW
JS.IFrame.407
Exploit.HTML.Iframe.dm
(v)
HTML/TwitScroll 
 lookup in virustotal.com (ba2cf60fb9fbca157ecaee23e36931fd)-->[http://www.virustotal.com/latest-report.html?resource=ba2cf60fb9fbca157ecaee23e36931fd]follow up this md5sum(ba2cf60fb9fbca157ecaee23e36931fd)follow up this itemfollow up this virusname (HTML%2FFramer) as RSS-Feedfollow up this malware(HTML%2FFramer) for scanner (undef) in md5 table21/45 (46.7%) HTML/Framer
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://andraoana.com/author/andra  up No previous evidence recordedSaved evidence (8978 Bytes) of last contact as txt May 28 2013 14:46:22 CEST. aliveSaved log of last contact as txt May 28 2013 14:46:22 CEST. SenderBaselookup 205.251.130.98 at virustotallookup 205.251.130.98 at Rus CERT university stuttgart germanylookup 205.251.130.98 at ARINfollow up this item(ip) in same window 205.251.130.98 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS3595) in networks tablefollow up this itemfollow up this AS (AS3595) as RSS-Feed AS3595 SenderBaselookup 205.251.130.98 at virustotallookup 205.251.130.98 at Rus CERT university stuttgart germanylookup 205.251.130.98 at ARINfollow up this item(review) in same window 205.251.130.98 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://andraoana.com/author/andra lookup andraoana.com at virustotalfollow up this domain(andraoana.com) andraoana.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (engineering@gnax.net) as RSS-Feed engineering@gnax.net follow up this itemfollow up this item 205.251.128.0 - 205.251.159.255 follow up this item GNAXNET follow up this item Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://andraoana.com/author/andra
6 follow up this item(11530374) 11530374 Report false positive Report closed case make a suggestion 2013-05-27 19:11:12 OVERDUE! Overdue!564.3 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
2/47 (4.3%) 
 Troj/Badsrc-Q
HTML/ScrInject.B.Gen 
 lookup in virustotal.com (e24f5f117d74d42db666bdfe31d675e7)-->[http://www.virustotal.com/latest-report.html?resource=e24f5f117d74d42db666bdfe31d675e7]follow up this md5sum(e24f5f117d74d42db666bdfe31d675e7)follow up this itemfollow up this virusname (Troj%2FBadsrc-Q) as RSS-Feedfollow up this malware(Troj%2FBadsrc-Q) for scanner (undef) in md5 table2/47 (4.3%) Troj/Badsrc-Q
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/caroline-rose-mel ...  up No previous evidence recordedSaved evidence (10408 Bytes) of last contact as txt May 27 2013 20:30:58 CEST. aliveSaved log of last contact as txt May 27 2013 20:30:58 CEST. SenderBaselookup 205.251.133.42 at virustotallookup 205.251.133.42 at Rus CERT university stuttgart germanylookup 205.251.133.42 at ARINfollow up this item(ip) in same window 205.251.133.42 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS3595) in networks tablefollow up this itemfollow up this AS (AS3595) as RSS-Feed AS3595 SenderBaselookup 205.251.133.42 at virustotallookup 205.251.133.42 at Rus CERT university stuttgart germanylookup 205.251.133.42 at ARINfollow up this item(review) in same window 205.251.133.42 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/caroline-rose-mel ... lookup donnameeinc.com at virustotalfollow up this domain(donnameeinc.com) donnameeinc.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (engineering@gnax.net) as RSS-Feed engineering@gnax.net follow up this itemfollow up this item 205.251.128.0 - 205.251.159.255 follow up this item GNAXNET follow up this item Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/caroline-rose-mel ...
7 follow up this item(11530373) 11530373 Report false positive Report closed case make a suggestion 2013-05-27 19:11:12 OVERDUE! Overdue!564.3 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
2/47 (4.3%) 
 Troj/Badsrc-Q
HTML/ScrInject.B.Gen 
 lookup in virustotal.com (37ad7264ec5a468df9c9896756dd3e57)-->[http://www.virustotal.com/latest-report.html?resource=37ad7264ec5a468df9c9896756dd3e57]follow up this md5sum(37ad7264ec5a468df9c9896756dd3e57)follow up this itemfollow up this virusname (Troj%2FBadsrc-Q) as RSS-Feedfollow up this malware(Troj%2FBadsrc-Q) for scanner (undef) in md5 table2/47 (4.3%) Troj/Badsrc-Q
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/beauty-expert/tes ...  up No previous evidence recordedSaved evidence (165802 Bytes) of last contact as txt May 27 2013 20:31:19 CEST. aliveSaved log of last contact as txt May 27 2013 20:31:19 CEST. SenderBaselookup 205.251.133.42 at virustotallookup 205.251.133.42 at Rus CERT university stuttgart germanylookup 205.251.133.42 at ARINfollow up this item(ip) in same window 205.251.133.42 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS3595) in networks tablefollow up this itemfollow up this AS (AS3595) as RSS-Feed AS3595 SenderBaselookup 205.251.133.42 at virustotallookup 205.251.133.42 at Rus CERT university stuttgart germanylookup 205.251.133.42 at ARINfollow up this item(review) in same window 205.251.133.42 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/beauty-expert/tes ... lookup donnameeinc.com at virustotalfollow up this domain(donnameeinc.com) donnameeinc.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (engineering@gnax.net) as RSS-Feed engineering@gnax.net follow up this itemfollow up this item 205.251.128.0 - 205.251.159.255 follow up this item GNAXNET follow up this item Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/beauty-expert/tes ...
8 follow up this item(11529284) 11529284 Report false positive Report closed case make a suggestion 2013-05-27 17:40:41 OVERDUE! Overdue!565.8 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
1/36 (2.8%) 
 
Troj/Badsrc-Q 
 lookup in virustotal.com (a1764633a9747d393c81d2f191b7be19)-->[http://www.virustotal.com/latest-report.html?resource=a1764633a9747d393c81d2f191b7be19]follow up this md5sum(a1764633a9747d393c81d2f191b7be19)follow up this itemfollow up this virusname (Troj%2FBadsrc-Q) as RSS-Feedfollow up this malware(Troj%2FBadsrc-Q) for scanner (Sophos) in md5 table1/36 (2.8%) Troj/Badsrc-Q
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/nora-ponce-el-sob ...  up No previous evidence recordedSaved evidence (10338 Bytes) of last contact as txt May 27 2013 20:36:05 CEST. aliveSaved log of last contact as txt May 27 2013 20:36:05 CEST. SenderBaselookup 205.251.133.42 at virustotallookup 205.251.133.42 at Rus CERT university stuttgart germanylookup 205.251.133.42 at ARINfollow up this item(ip) in same window 205.251.133.42 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS3595) in networks tablefollow up this itemfollow up this AS (AS3595) as RSS-Feed AS3595 SenderBaselookup 205.251.133.42 at virustotallookup 205.251.133.42 at Rus CERT university stuttgart germanylookup 205.251.133.42 at ARINfollow up this item(review) in same window 205.251.133.42 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/nora-ponce-el-sob ... lookup donnameeinc.com at virustotalfollow up this domain(donnameeinc.com) donnameeinc.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (engineering@gnax.net) as RSS-Feed engineering@gnax.net follow up this itemfollow up this item 205.251.128.0 - 205.251.159.255 follow up this item GNAXNET follow up this item Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://donnameeinc.com/nora-ponce-el-sob ...
9 follow up this item(11406475) 11406475 Report false positive Report closed case make a suggestion 2013-05-24 14:40:17 OVERDUE! Overdue!640.9 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
20/47 (42.6%) 
 Trojan.Iframe.BZW
Trojan.Iframe.BZW
JS/IFrame.gen.j
Trojan.Html.TwitScroll.bklyhq
Iframe.UW
JS:Iframe-AMQ
[Trj]
HEUR:Trojan.Script.Generic
Trojan.Iframe.BZW
Troj/Iframe-JG
TrojWare.HTML.Iframe.G
Trojan.Iframe.BZW
Exploit.HTML.Iframe.dm
(v)
HTML/TwitScrol 
 lookup in virustotal.com (efbc99534ab10a02690fa0cd289737e8)-->[http://www.virustotal.com/latest-report.html?resource=efbc99534ab10a02690fa0cd289737e8]follow up this md5sum(efbc99534ab10a02690fa0cd289737e8)follow up this itemfollow up this virusname (HTML%2FFramer) as RSS-Feedfollow up this malware(HTML%2FFramer) for scanner (undef) in md5 table20/47 (42.6%) HTML/Framer
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://andraoana.com/contact/  up No previous evidence recordedSaved evidence (6958 Bytes) of last contact as txt May 24 2013 15:16:40 CEST. aliveSaved log of last contact as txt May 24 2013 15:16:40 CEST. SenderBaselookup 205.251.130.98 at virustotallookup 205.251.130.98 at Rus CERT university stuttgart germanylookup 205.251.130.98 at ARINfollow up this item(ip) in same window 205.251.130.98 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS3595) in networks tablefollow up this itemfollow up this AS (AS3595) as RSS-Feed AS3595 SenderBaselookup 205.251.130.98 at virustotallookup 205.251.130.98 at Rus CERT university stuttgart germanylookup 205.251.130.98 at ARINfollow up this item(review) in same window 205.251.130.98 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://andraoana.com/contact/ lookup andraoana.com at virustotalfollow up this domain(andraoana.com) andraoana.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (engineering@gnax.net) as RSS-Feed engineering@gnax.net follow up this itemfollow up this item 205.251.128.0 - 205.251.159.255 follow up this item GNAXNET follow up this item Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://andraoana.com/contact/
10 follow up this item(11224072) 11224072 Report false positive Report closed case make a suggestion 2013-05-20 22:20:16 OVERDUE! Overdue!729.2 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
22/47 (46.8%) 
 Trojan.Iframe.BZW
Trojan.Iframe.BZW
JS/IFrame.gen.j
Trojan.Html.TwitScroll.bklyhq
Iframe.UW
JS:Iframe-AMQ
[Trj]
HEUR:Trojan.Script.Generic
Trojan.Iframe.BZW
Troj/Iframe-JG
TrojWare.HTML.Iframe.G
Trojan.Iframe.BZW
JS.IFrame.407
Exploit.HTML.Iframe.dm
(v)
 
 lookup in virustotal.com (04ca737c45631a8f7eee6a1e3d470d67)-->[http://www.virustotal.com/latest-report.html?resource=04ca737c45631a8f7eee6a1e3d470d67]follow up this md5sum(04ca737c45631a8f7eee6a1e3d470d67)follow up this itemfollow up this virusname (HTML%2FFramer) as RSS-Feedfollow up this malware(HTML%2FFramer) for scanner (undef) in md5 table22/47 (46.8%) HTML/Framer
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://andraoana.com/last-sunset./  up No previous evidence recordedSaved evidence (11074 Bytes) of last contact as txt May 21 2013 09:08:59 CEST. aliveSaved log of last contact as txt May 21 2013 09:08:59 CEST. SenderBaselookup 205.251.130.98 at virustotallookup 205.251.130.98 at Rus CERT university stuttgart germanylookup 205.251.130.98 at ARINfollow up this item(ip) in same window 205.251.130.98 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS3595) in networks tablefollow up this itemfollow up this AS (AS3595) as RSS-Feed AS3595 SenderBaselookup 205.251.130.98 at virustotallookup 205.251.130.98 at Rus CERT university stuttgart germanylookup 205.251.130.98 at ARINfollow up this item(review) in same window 205.251.130.98 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://andraoana.com/last-sunset./ lookup andraoana.com at virustotalfollow up this domain(andraoana.com) andraoana.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (engineering@gnax.net) as RSS-Feed engineering@gnax.net follow up this itemfollow up this item 205.251.128.0 - 205.251.159.255 follow up this item GNAXNET follow up this item Global Net Access, LLC GNAL-2 1100 White St SW Atlanta GA 30310 follow up this item ns100.whbdns.com follow up this item ns101.whbdns.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://andraoana.com/last-sunset./
Click here for other vital incidents



Protected by clean MX [Valid RSS] Valid HTML 4.01 Transitional CSS ist valide!
Access is provided for free and subject to these Terms and Conditions.