CLEAN MX realtime database    
public access query for virus URL statistics
Totally watched: 690288 As of 2013-05-24 05:32:03 CEST
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006
Tweet
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0041 Seconds 10 hits
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 follow up this item(11341687) 11341687 Report false positive Report closed case make a suggestion 2013-05-23 03:30:49     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
7/47 (14.9%) 
 Malware.Packer.RRE
Trojan
HEUR:Trojan.Win32.Generic
Heuristic.LooksLike.Win32.Suspicious.B
VirTool:Win32/CeeInject.gen!JN
Backdoor.Agent!5459
W32/Kryptik.AGAJ!tr 
 lookup in virustotal.com (39f03bf6ff56ed359a5cdc0267276610)-->[http://www.virustotal.com/latest-report.html?resource=39f03bf6ff56ed359a5cdc0267276610]lookup in threatexpert.comlookup the sha256(c3addac010b19e9b83e6c34a06ee861d2400ceb8adad3ca062152fb45d4a0bc9) in comodo.comfollow up this md5sum(39f03bf6ff56ed359a5cdc0267276610)follow up this itemfollow up this virusname (W32%2FKryptik.AGAJ%21tr) as RSS-Feedfollow up this malware(W32%2FKryptik.AGAJ%21tr) for scanner (Fortinet) in md5 table7/47 (14.9%) W32/Kryptik.AGAJ!tr
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://hornyshot.com/UiB.exe  up No previous evidence recordedSaved evidence (317952 Bytes) of last contact as txt May 23 2013 04:00:10 CEST. aliveSaved log of last contact as txt May 23 2013 04:10:17 CEST. SenderBaselookup 184.168.139.1 at virustotallookup 184.168.139.1 at Rus CERT university stuttgart germanylookup 184.168.139.1 at ARINfollow up this item(ip) in same window 184.168.139.1 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 184.168.139.1 at virustotallookup 184.168.139.1 at Rus CERT university stuttgart germanylookup 184.168.139.1 at ARINfollow up this item(review) in same window 184.168.139.1 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://hornyshot.com/UiB.exe lookup hornyshot.com at virustotalfollow up this domain(hornyshot.com) hornyshot.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@godaddy.com) as RSS-Feed abuse@godaddy.com follow up this itemfollow up this item 184.168.0.0 - 184.168.255.255 follow up this item GO-DADDY-SOFTWARE-INC follow up this item GoDaddy.com, Inc. GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://hornyshot.com/UiB.exe
2 follow up this item(11328578) 11328578 Report false positive Report closed case make a suggestion 2013-05-23 00:00:29     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
20/46 (43.5%) 
 Trojan.JS.BlacoleRef.AW
JS/Exploit-Blacole.ht
Trojan
Trojan.Script.Redirector.bnfoyz
JS/Agent.RA
Blacole.SW
JS:Decode-RX
[Trj]
Trojan.JS.BlacoleRef.AW
Troj/JSRedir-JT
TrojWare.JS.Agent.LB
JS.Redirector.155
Trojan.JS.Obfuscator.aa
(v)
JS/BlacoleRef.W.285
 
 lookup in virustotal.com (448893c591db094d6fc92be149f2a92a)-->[http://www.virustotal.com/latest-report.html?resource=448893c591db094d6fc92be149f2a92a]follow up this md5sum(448893c591db094d6fc92be149f2a92a)follow up this itemfollow up this virusname (JS%2FRedir) as RSS-Feedfollow up this malware(JS%2FRedir) for scanner (undef) in md5 table20/46 (43.5%) JS/Redir
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://flyxilla.com/wp-content/uploads/2 ...  up No previous evidence recordedSaved evidence (52078 Bytes) of last contact as txt May 23 2013 00:22:12 CEST. aliveSaved log of last contact as txt May 23 2013 00:22:12 CEST. SenderBaselookup 184.168.166.1 at virustotallookup 184.168.166.1 at Rus CERT university stuttgart germanylookup 184.168.166.1 at ARINfollow up this item(ip) in same window 184.168.166.1 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 184.168.166.1 at virustotallookup 184.168.166.1 at Rus CERT university stuttgart germanylookup 184.168.166.1 at ARINfollow up this item(review) in same window 184.168.166.1 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://flyxilla.com/wp-content/uploads/2 ... lookup flyxilla.com at virustotalfollow up this domain(flyxilla.com) flyxilla.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@godaddy.com) as RSS-Feed abuse@godaddy.com follow up this itemfollow up this item 184.168.0.0 - 184.168.255.255 follow up this item GO-DADDY-SOFTWARE-INC follow up this item GoDaddy.com, Inc. GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://flyxilla.com/wp-content/uploads/2 ...
3 follow up this item(11294509) 11294509 Report false positive Report closed case make a suggestion 2013-05-22 11:10:31     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
6/47 (12.8%) 
 JS/Coolex.D
JS/Exploit-Blacole.ht
Troj/Iframe-JH
JS/EXP.Redir.EL.7
JS/Blacole-Redirect.ad
Virus.JS.Obfuscated 
 lookup in virustotal.com (0a17b95817c327d5f1bc3b81ff08aa93)-->[http://www.virustotal.com/latest-report.html?resource=0a17b95817c327d5f1bc3b81ff08aa93]follow up this md5sum(0a17b95817c327d5f1bc3b81ff08aa93)follow up this itemfollow up this virusname (Virus.JS.Obfuscated) as RSS-Feedfollow up this malware(Virus.JS.Obfuscated) for scanner (undef) in md5 table6/47 (12.8%) Virus.JS.Obfuscated
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://bakariproject.com/  up No previous evidence recordedSaved evidence (26765 Bytes) of last contact as txt May 22 2013 07:59:42 CEST. aliveSaved log of last contact as txt May 22 2013 12:30:30 CEST. SenderBaselookup 97.74.27.1 at virustotallookup 97.74.27.1 at Rus CERT university stuttgart germanylookup 97.74.27.1 at ARINfollow up this item(ip) in same window 97.74.27.1 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 97.74.27.1 at virustotallookup 97.74.27.1 at Rus CERT university stuttgart germanylookup 97.74.27.1 at ARINfollow up this item(review) in same window 97.74.27.1 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://bakariproject.com/ lookup bakariproject.com at virustotalfollow up this domain(bakariproject.com) bakariproject.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (noc@godaddy.com) as RSS-Feed noc@godaddy.com follow up this itemfollow up this item 97.74.0.0 - 97.74.255.255 follow up this item GO-DADDY-COM-LLC follow up this item GoDaddy.com, LLC GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://bakariproject.com/
4 follow up this item(11181002) 11181002 Report false positive Report closed case make a suggestion 2013-05-20 04:50:36     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
7/47 (14.9%) 
 TROJ_GEN.F47V0418
NSIS.Adware.Somoto-1
Somoto
BetterInstaller
Adware.Somoto.8
BetterInstaller
(fs)
Riskware.Win32.Somoto.AMN
(A)
a
variant
of
Win32/Somoto.A 
 lookup in virustotal.com (5323cea1cb30cfe84093e099925d8aa1)-->[http://www.virustotal.com/latest-report.html?resource=5323cea1cb30cfe84093e099925d8aa1]lookup in threatexpert.comlookup the sha256(7f35fec356caa2170ffb4e83db12250df20c02efa8257e4ce18f72398708c28e) in comodo.comfollow up this md5sum(5323cea1cb30cfe84093e099925d8aa1)follow up this itemfollow up this virusname (NSIS.Adware.Somoto-1) as RSS-Feedlookup Virusname at viruspoolfollow up this malware(NSIS.Adware.Somoto-1) for scanner (clamav) in md5 table7/47 (14.9%) NSIS.Adware.Somoto-1
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.digiaquascr.com/Fish-Games/Ca ...  up No previous evidence recordedSaved evidence (166672 Bytes) of last contact as txt April 18 2013 12:52:27 CEST. aliveSaved log of last contact as txt May 20 2013 05:15:49 CEST. SenderBaselookup 97.74.177.64 at virustotallookup 97.74.177.64 at Rus CERT university stuttgart germanylookup 97.74.177.64 at ARINfollow up this item(ip) in same window 97.74.177.64 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 97.74.177.64 at virustotallookup 97.74.177.64 at Rus CERT university stuttgart germanylookup 97.74.177.64 at ARINfollow up this item(review) in same window 97.74.177.64 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.digiaquascr.com/Fish-Games/Ca ... lookup digiaquascr.com at virustotalfollow up this domain(digiaquascr.com) digiaquascr.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (noc@godaddy.com) as RSS-Feed noc@godaddy.com follow up this itemfollow up this item 97.74.0.0 - 97.74.255.255 follow up this item GO-DADDY-COM-LLC follow up this item GoDaddy.com, LLC GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.digiaquascr.com/Fish-Games/Ca ...
5 follow up this item(11115041) 11115041 Report false positive Report closed case make a suggestion 2013-05-18 03:30:07     follow up this itemfollow up this contributor (cross posting from portals) as RSS-Feed sub17possible lookup Evidence at malwaredomainlist.com
16/46 (34.8%) 
 Trojan.JS.Agent.HHY
Riskware
JS/IFrame.HP.gen
TROJ_GEN.RCBH1L3
HEUR:Trojan.Script.Generic
Trojan.JS.Agent.HHY
UnclassifiedMalware
Trojan.JS.Agent.HHY
JS/iFrame.PH.3
Trojan.JS.Agent.HHY
(B)
Trojan:JS/Redirector.LF
Trojan.JS.Agent.HHY
Trojan.Script
HTML/Fr 
 lookup in virustotal.com (75d1aca2ecf6b32922afd4eb9a146558)-->[http://www.virustotal.com/latest-report.html?resource=f5cc4f5c6d9ad2d41f385cafa1b5e747]follow up this md5sum(75d1aca2ecf6b32922afd4eb9a146558)follow up this itemfollow up this virusname (JS%2FiFrame.PH.3) as RSS-Feedlookup Virusname at avirafollow up this malware(JS%2FiFrame.PH.3) for scanner (avira) in md5 table16/46 (34.8%) JS/iFrame.PH.3
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://brendadraney.com/wp-content/theme ...  up No previous evidence recordedSaved evidence (2654 Bytes) of last contact as txt March 21 2013 15:02:49 CET. aliveSaved log of last contact as txt May 19 2013 07:25:08 CEST. SenderBaselookup 184.168.185.1 at virustotallookup 184.168.185.1 at Rus CERT university stuttgart germanylookup 184.168.185.1 at ARINfollow up this item(ip) in same window 184.168.185.1 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 184.168.185.1 at virustotallookup 184.168.185.1 at Rus CERT university stuttgart germanylookup 184.168.185.1 at ARINfollow up this item(review) in same window 184.168.185.1 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://brendadraney.com/wp-content/theme ... lookup brendadraney.com at virustotalfollow up this domain(brendadraney.com) brendadraney.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@godaddy.com) as RSS-Feed abuse@godaddy.com follow up this itemfollow up this item 184.168.0.0 - 184.168.255.255 follow up this item GO-DADDY-SOFTWARE-INC follow up this item GoDaddy.com, Inc. GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://brendadraney.com/wp-content/theme ...
6 follow up this item(11113804) 11113804 Report false positive Report closed case make a suggestion 2013-05-18 02:40:32     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet12/36 (33.3%) 
 
JS/Coolex.D
BlacoleRef.BC
TROJ_GEN.F47V0516
JS:Decode-AFL
Trj
TrojWare.JS.Agent.IY
JS/EXP.Redir.EL.7
Mal/Iframe-AO
Trojan:JS/BlacoleRef.CZ
JS:Decode-AFL
Virus.HTML.Framer
W32/Iframe.AO
HTML/Framer 
 lookup in virustotal.com (c087d7f8fc61b1db8220edbeeb481662)-->[http://www.virustotal.com/latest-report.html?resource=c087d7f8fc61b1db8220edbeeb481662]follow up this md5sum(c087d7f8fc61b1db8220edbeeb481662)follow up this itemfollow up this virusname (JS%2FEXP.Redir.EL.7) as RSS-Feedfollow up this malware(JS%2FEXP.Redir.EL.7) for scanner (AntiVir) in md5 table12/36 (33.3%) JS/EXP.Redir.EL.7
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www3.impre.com/webservices/menu/m ...  up No previous evidence recordedSaved evidence (14580 Bytes) of last contact as txt May 09 2013 19:49:10 CEST. aliveSaved log of last contact as txt May 19 2013 08:40:45 CEST. SenderBaselookup 67.93.45.82 at virustotallookup 67.93.45.82 at Rus CERT university stuttgart germanylookup 67.93.45.82 at ARINfollow up this item(ip) in same window 67.93.45.82 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS2828) in networks tablefollow up this itemfollow up this AS (AS2828) as RSS-Feed AS2828 SenderBaselookup 67.93.45.82 at virustotallookup 67.93.45.82 at Rus CERT university stuttgart germanylookup 67.93.45.82 at ARINfollow up this item(review) in same window 67.93.45.82 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www3.impre.com/webservices/menu/m ... lookup impre.com at virustotalfollow up this domain(impre.com) impre.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@xo.net) as RSS-Feed abuse@xo.net follow up this itemfollow up this item 67.88.0.0 - 67.95.255.255 follow up this item IALG-ALGX-9 follow up this item XO Communications XOXO 13865 Sunrise Valley Drive Herdon VA 20171 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www3.impre.com/webservices/menu/m ...
7 follow up this item(11091985) 11091985 Report false positive Report closed case make a suggestion 2013-05-17 10:50:08     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
3/46 (6.5%) 
 HTML:Iframe-inf
HTML:Iframe-inf
HTML/Iframe.B.Gen 
 lookup in virustotal.com (01a68fb78800f269534a093e4558b904)-->[http://www.virustotal.com/latest-report.html?resource=01a68fb78800f269534a093e4558b904]follow up this md5sum(01a68fb78800f269534a093e4558b904)follow up this itemfollow up this virusname (HTML%3AIframe-inf) as RSS-Feedfollow up this malware(HTML%3AIframe-inf) for scanner (undef) in md5 table3/46 (6.5%) HTML:Iframe-inf
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://icyspicy.us/  up No previous evidence recordedSaved evidence (48564 Bytes) of last contact as txt May 13 2013 08:25:14 CEST. aliveSaved log of last contact as txt May 17 2013 11:21:21 CEST. SenderBaselookup 50.63.202.27 at virustotallookup 50.63.202.27 at Rus CERT university stuttgart germanylookup 50.63.202.27 at ARINfollow up this item(ip) in same window 50.63.202.27 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 50.63.202.27 at virustotallookup 50.63.202.27 at Rus CERT university stuttgart germanylookup 50.63.202.27 at ARINfollow up this item(review) in same window 50.63.202.27 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://icyspicy.us/ lookup icyspicy.us at virustotalfollow up this domain(icyspicy.us) icyspicy.us follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@godaddy.com) as RSS-Feed abuse@godaddy.com follow up this itemfollow up this item 50.62.0.0 - 50.63.255.255 follow up this item GO-DADDY-SOFTWARE-INC follow up this item GoDaddy.com, Inc. GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://icyspicy.us/
8 follow up this item(11078343) 11078343 Report false positive Report closed case make a suggestion 2013-05-17 04:00:44     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
23/46 (50%) 
 Trojan.Iframe.BZW
Trojan.Iframe.BZW
JS/IFrame.gen.j
Trojan.Html.TwitScroll.bklyhq
IFrame.gen
Iframe.UW
JS:Iframe-AMQ
[Trj]
HEUR:Trojan.Script.Generic
Trojan.Iframe.BZW
Troj/Iframe-JG
TrojWare.HTML.Iframe.G
Trojan.Iframe.BZW
Exploit.HTML.Iframe.dm
(v)
HTM 
 lookup in virustotal.com (e05b99712c6df31c0c4242e24af64d23)-->[http://www.virustotal.com/latest-report.html?resource=e05b99712c6df31c0c4242e24af64d23]follow up this md5sum(e05b99712c6df31c0c4242e24af64d23)follow up this itemfollow up this virusname (HTML%2FFramer) as RSS-Feedfollow up this malware(HTML%2FFramer) for scanner (undef) in md5 table23/46 (50%) HTML/Framer
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://pcolahouseflipping.com/applicatio ...  up No previous evidence recordedSaved evidence (4851 Bytes) of last contact as txt May 17 2013 06:51:50 CEST. aliveSaved log of last contact as txt May 17 2013 06:51:50 CEST. SenderBaselookup 50.63.73.1 at virustotallookup 50.63.73.1 at Rus CERT university stuttgart germanylookup 50.63.73.1 at ARINfollow up this item(ip) in same window 50.63.73.1 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 50.63.73.1 at virustotallookup 50.63.73.1 at Rus CERT university stuttgart germanylookup 50.63.73.1 at ARINfollow up this item(review) in same window 50.63.73.1 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://pcolahouseflipping.com/applicatio ... lookup pcolahouseflipping.com at virustotalfollow up this domain(pcolahouseflipping.com) pcolahouseflipping.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@godaddy.com) as RSS-Feed abuse@godaddy.com follow up this itemfollow up this item 50.62.0.0 - 50.63.255.255 follow up this item GO-DADDY-SOFTWARE-INC follow up this item GoDaddy.com, Inc. GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://pcolahouseflipping.com/applicatio ...
9 follow up this item(11075176) 11075176 Report false positive Report closed case make a suggestion 2013-05-17 02:01:12     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
15/46 (32.6%) 
 JS:Trojan.Crypt.IO
JS:Trojan.Crypt.IO
Trojan.Script.Iframe.hqvxv
Redirector.HM
JS:Redirector-ALH
[Trj]
Trojan.JS.Redirector.ns
JS:Trojan.Crypt.IO
TrojWare.JS.Redirector.mh
JS:Trojan.Crypt.IO
JS:Trojan.Crypt.IO
(B)
JS:Trojan.Crypt.IO
JS/Redirector.NAV
Tro 
 lookup in virustotal.com (4bde50ea967f563138515af5a3a0bfb5)-->[http://www.virustotal.com/latest-report.html?resource=4bde50ea967f563138515af5a3a0bfb5]follow up this md5sum(4bde50ea967f563138515af5a3a0bfb5)follow up this itemfollow up this virusname (HTML%2FFramer) as RSS-Feedfollow up this malware(HTML%2FFramer) for scanner (undef) in md5 table15/46 (32.6%) HTML/Framer
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://vreer.com/gbdorkxg0u0x  up No previous evidence recordedSaved evidence (19015 Bytes) of last contact as txt May 17 2013 05:59:38 CEST. aliveSaved log of last contact as txt May 17 2013 05:59:38 CEST. SenderBaselookup 76.73.118.114 at virustotallookup 76.73.118.114 at Rus CERT university stuttgart germanylookup 76.73.118.114 at ARINfollow up this item(ip) in same window 76.73.118.114 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS30058) in networks tablefollow up this itemfollow up this AS (AS30058) as RSS-Feed AS30058 SenderBaselookup 76.73.118.114 at virustotallookup 76.73.118.114 at Rus CERT university stuttgart germanylookup 76.73.118.114 at ARINfollow up this item(review) in same window 76.73.118.114 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://vreer.com/gbdorkxg0u0x lookup vreer.com at virustotalfollow up this domain(vreer.com) vreer.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@fdcservers.net) as RSS-Feed abuse@fdcservers.net follow up this itemfollow up this item 76.73.0.0 - 76.73.127.255 follow up this item FDCSERVERS follow up this item FDCservers.net FDCSE 141 w jackson blvd. suite #1135 Chicago IL 60098 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://vreer.com/gbdorkxg0u0x
10 follow up this item(11075175) 11075175 Report false positive Report closed case make a suggestion 2013-05-17 02:01:12     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
15/46 (32.6%) 
 JS:Trojan.Crypt.IO
JS:Trojan.Crypt.IO
Trojan.Script.Iframe.hqvxv
Redirector.HM
JS:Redirector-ALH
[Trj]
Trojan.JS.Redirector.ns
JS:Trojan.Crypt.IO
TrojWare.JS.Redirector.mh
JS:Trojan.Crypt.IO
JS:Trojan.Crypt.IO
(B)
JS:Trojan.Crypt.IO
JS/Redirector.NAV
Tro 
 lookup in virustotal.com (cc7c7fc7c92d9e9914104f172c80d34f)-->[http://www.virustotal.com/latest-report.html?resource=cc7c7fc7c92d9e9914104f172c80d34f]follow up this md5sum(cc7c7fc7c92d9e9914104f172c80d34f)follow up this itemfollow up this virusname (HTML%2FFramer) as RSS-Feedfollow up this malware(HTML%2FFramer) for scanner (undef) in md5 table15/46 (32.6%) HTML/Framer
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://vreer.com/dqhgvu97ra18  up No previous evidence recordedSaved evidence (19015 Bytes) of last contact as txt May 17 2013 06:01:04 CEST. aliveSaved log of last contact as txt May 17 2013 06:01:04 CEST. SenderBaselookup 76.73.118.114 at virustotallookup 76.73.118.114 at Rus CERT university stuttgart germanylookup 76.73.118.114 at ARINfollow up this item(ip) in same window 76.73.118.114 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS30058) in networks tablefollow up this itemfollow up this AS (AS30058) as RSS-Feed AS30058 SenderBaselookup 76.73.118.114 at virustotallookup 76.73.118.114 at Rus CERT university stuttgart germanylookup 76.73.118.114 at ARINfollow up this item(review) in same window 76.73.118.114 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://vreer.com/dqhgvu97ra18 lookup vreer.com at virustotalfollow up this domain(vreer.com) vreer.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@fdcservers.net) as RSS-Feed abuse@fdcservers.net follow up this itemfollow up this item 76.73.0.0 - 76.73.127.255 follow up this item FDCSERVERS follow up this item FDCservers.net FDCSE 141 w jackson blvd. suite #1135 Chicago IL 60098 follow up this item ns30.domaincontrol.com follow up this item ns29.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://vreer.com/dqhgvu97ra18
Click here for other vital incidents



Protected by clean MX [Valid RSS] Valid HTML 4.01 Transitional CSS ist valide!
Access is provided for free and subject to these Terms and Conditions.