CLEAN MX realtime database    
public access query for virus URL statistics
Totally watched: 648030 As of 2013-05-19 15:51:04 CEST
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006
Tweet
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0715 Seconds 10 hits
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 follow up this item(11097240) 11097240 Report false positive Report closed case make a suggestion 2013-05-17 15:20:08     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
17/47 (36.2%) 
 Trojan.Iframe.BMY
Trojan.Iframe.BMY
Trojan.Html.Iframer.bprxev
IFrame.gen
Iframe.gen
HTML:Iframe-ZG
[Trj]
HEUR:Trojan.Script.Generic
Trojan.Iframe.BMY
TrojWare.JS.Iframe.GJ
Trojan.Iframe.BMY
JS.IFrame.425
HTML/Infected.WebPage.Gen3
Heuristic.LooksLike.HT 
 lookup in virustotal.com (76ece6637de1ad2affbad777a630495a)-->[http://www.virustotal.com/latest-report.html?resource=76ece6637de1ad2affbad777a630495a]follow up this md5sum(76ece6637de1ad2affbad777a630495a)follow up this itemfollow up this virusname (JS%2FIframe.BMY%21tr) as RSS-Feedfollow up this malware(JS%2FIframe.BMY%21tr) for scanner (undef) in md5 table17/47 (36.2%) JS/Iframe.BMY!tr
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://metzgerei-schuhbauer.de/partyserv ...  up No previous evidence recordedSaved evidence (8011 Bytes) of last contact as txt May 04 2013 13:01:27 CEST. aliveSaved log of last contact as txt May 17 2013 15:45:45 CEST. SenderBaselookup 85.13.132.239 at virustotallookup 85.13.132.239 at Rus CERT university stuttgart germanylookup 85.13.132.239 at Ripefollow up this item(ip) in same window 85.13.132.239 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.132.239 at virustotallookup 85.13.132.239 at Rus CERT university stuttgart germanylookup 85.13.132.239 at Ripefollow up this item(review) in same window 85.13.132.239 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://metzgerei-schuhbauer.de/partyserv ... lookup metzgerei-schuhbauer.de at virustotalfollow up this domain(metzgerei-schuhbauer.de) metzgerei-schuhbauer.de follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://metzgerei-schuhbauer.de/partyserv ...
2 follow up this item(11089263) 11089263 Report false positive Report closed case make a suggestion 2013-05-17 09:10:12     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
lookup in virustotal.com (fc28d0d5e581efd439bcb955df9b0036)follow up this md5sum(fc28d0d5e581efd439bcb955df9b0036)follow up this itemfollow up this virusname (unknown_html) as RSS-Feedfollow up this malware(unknown_html) for scanner (undef) in md5 table unknown_html
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://free-traffic-exchange.net/  up No previous evidence recordedSaved evidence (232113 Bytes) of last contact as txt May 17 2013 11:51:12 CEST. aliveSaved log of last contact as txt May 17 2013 11:51:12 CEST. SenderBaselookup 85.13.129.50 at virustotallookup 85.13.129.50 at Rus CERT university stuttgart germanylookup 85.13.129.50 at Ripefollow up this item(ip) in same window 85.13.129.50 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.129.50 at virustotallookup 85.13.129.50 at Rus CERT university stuttgart germanylookup 85.13.129.50 at Ripefollow up this item(review) in same window 85.13.129.50 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://free-traffic-exchange.net/ lookup free-traffic-exchange.net at virustotalfollow up this domain(free-traffic-exchange.net) free-traffic-exchange.net follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://free-traffic-exchange.net/
3 follow up this item(11087201) 11087201 Report false positive Report closed case make a suggestion 2013-05-17 08:11:40     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
15/47 (31.9%) 
 Trojan.Iframe.BMY
Trojan.Iframe.BMY
Trojan.Html.Iframer.bprxev
Iframe.gen
HTML:Iframe-ZG
[Trj]
HEUR:Trojan.Script.Generic
Trojan.Iframe.BMY
TrojWare.JS.Iframe.GJ
Trojan.Iframe.BMY
JS.IFrame.425
HTML/Infected.WebPage.Gen3
Heuristic.LooksLike.HTML.Infected 
 lookup in virustotal.com (c61b812b0cfbe881ab1922aef0ce74b4)-->[http://www.virustotal.com/latest-report.html?resource=c61b812b0cfbe881ab1922aef0ce74b4]follow up this md5sum(c61b812b0cfbe881ab1922aef0ce74b4)follow up this itemfollow up this virusname (JS%2FIframe.BMY%21tr) as RSS-Feedfollow up this malware(JS%2FIframe.BMY%21tr) for scanner (undef) in md5 table15/47 (31.9%) JS/Iframe.BMY!tr
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://pvgk.de/  up No previous evidence recordedSaved evidence (1766 Bytes) of last contact as txt May 04 2013 06:38:36 CEST. aliveSaved log of last contact as txt May 17 2013 09:35:13 CEST. SenderBaselookup 85.13.136.173 at virustotallookup 85.13.136.173 at Rus CERT university stuttgart germanylookup 85.13.136.173 at Ripefollow up this item(ip) in same window 85.13.136.173 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.136.173 at virustotallookup 85.13.136.173 at Rus CERT university stuttgart germanylookup 85.13.136.173 at Ripefollow up this item(review) in same window 85.13.136.173 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://pvgk.de/ lookup pvgk.de at virustotalfollow up this domain(pvgk.de) pvgk.de follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://pvgk.de/
4 follow up this item(11075466) 11075466 Report false positive Report closed case make a suggestion 2013-05-17 02:01:18     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
11/46 (23.9%) 
 Exploit
HTML/IFRAME.gen
Kryptik.JVZ
JS:Iframe-BHN
[Trj]
HEUR:Trojan.Script.Iframer
TrojWare.JS.Iframe.fpa
SCRIPT.Virus
JS:Iframe-BHN
HTML/IFRAME.gen
JS/TrojanDownloader.Iframe.NKE
Trojan.JS.IFrame 
 lookup in virustotal.com (ae834599f31c1989d5d5bb83929f739f)-->[http://www.virustotal.com/latest-report.html?resource=ae834599f31c1989d5d5bb83929f739f]follow up this md5sum(ae834599f31c1989d5d5bb83929f739f)follow up this itemfollow up this virusname (Trojan.JS.IFrame) as RSS-Feedfollow up this malware(Trojan.JS.IFrame) for scanner (undef) in md5 table11/46 (23.9%) Trojan.JS.IFrame
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.dpsg-niederrad.de/HTML/index. ...  up No previous evidence recordedSaved evidence (16502 Bytes) of last contact as txt April 28 2013 14:17:53 CEST. aliveSaved log of last contact as txt May 17 2013 06:40:02 CEST. SenderBaselookup 85.13.133.127 at virustotallookup 85.13.133.127 at Rus CERT university stuttgart germanylookup 85.13.133.127 at Ripefollow up this item(ip) in same window 85.13.133.127 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.133.127 at virustotallookup 85.13.133.127 at Rus CERT university stuttgart germanylookup 85.13.133.127 at Ripefollow up this item(review) in same window 85.13.133.127 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.dpsg-niederrad.de/HTML/index. ... lookup dpsg-niederrad.de at virustotalfollow up this domain(dpsg-niederrad.de) dpsg-niederrad.de follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.dpsg-niederrad.de/HTML/index. ...
5 follow up this item(11066542) 11066542 Report false positive Report closed case make a suggestion 2013-05-16 20:11:47     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
15/34 (44.1%) 
 
Trojan.Script.480969
JS/Exploit-Blacole.gc
BlacoleRef.AB
Trojan.Script.480969
Troj/JSRedir-JT
TrojWare.JS.Agent.AXQ
Trojan.Script.480969
JS/Agent.axqoua
JS/Exploit-Blacole.gc
Trojan.Script.480969
(B)
Trojan:JS/BlacoleRef.DD
Trojan.Script.480969
Exploit. 
 lookup in virustotal.com (b9ba402c532837d77e26cac594b67685)-->[http://www.virustotal.com/latest-report.html?resource=b9ba402c532837d77e26cac594b67685]follow up this md5sum(b9ba402c532837d77e26cac594b67685)follow up this itemfollow up this virusname (JS%2FAgent.axqoua) as RSS-Feedfollow up this malware(JS%2FAgent.axqoua) for scanner (AntiVir) in md5 table15/34 (44.1%) JS/Agent.axqoua
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://dsc-photography.com/?author=1  up No previous evidence recordedSaved evidence (13710 Bytes) of last contact as txt May 17 2013 00:12:57 CEST. aliveSaved log of last contact as txt May 17 2013 00:12:57 CEST. SenderBaselookup 85.13.139.46 at virustotallookup 85.13.139.46 at Rus CERT university stuttgart germanylookup 85.13.139.46 at Ripefollow up this item(ip) in same window 85.13.139.46 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.139.46 at virustotallookup 85.13.139.46 at Rus CERT university stuttgart germanylookup 85.13.139.46 at Ripefollow up this item(review) in same window 85.13.139.46 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://dsc-photography.com/?author=1 lookup dsc-photography.com at virustotalfollow up this domain(dsc-photography.com) dsc-photography.com follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://dsc-photography.com/?author=1
6 follow up this item(11064606) 11064606 Report false positive Report closed case make a suggestion 2013-05-16 19:50:46     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
25/46 (54.3%) 
 JS:Trojan.JS.Iframe.DC
JS:Trojan.JS.Iframe.DC
JS/Exploit-Blacole.le
Trojan
Trojan.Script.Expack.blnrjk
JS/Agent.RA
BlacoleRef.AN
JS:Redirector-AJS
[Trj]
Trojan.JS.Redirector.yl
JS:Trojan.JS.Iframe.DC
Troj/JSRedir-JT
TrojWare.JS.Agent.IU
JS:Trojan.JS.Ifra 
 lookup in virustotal.com (caab802f3fb3da10826c40c4509f0c40)-->[http://www.virustotal.com/latest-report.html?resource=caab802f3fb3da10826c40c4509f0c40]follow up this md5sum(caab802f3fb3da10826c40c4509f0c40)follow up this itemfollow up this virusname (HTML%2FFramer) as RSS-Feedfollow up this malware(HTML%2FFramer) for scanner (undef) in md5 table25/46 (54.3%) HTML/Framer
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://buene.pimpel.net/Bildergalerien/2 ...  up No previous evidence recordedSaved evidence (18982 Bytes) of last contact as txt March 31 2013 21:26:27 CEST. aliveSaved log of last contact as txt May 16 2013 23:40:38 CEST. SenderBaselookup 85.13.141.11 at virustotallookup 85.13.141.11 at Rus CERT university stuttgart germanylookup 85.13.141.11 at Ripefollow up this item(ip) in same window 85.13.141.11 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.141.11 at virustotallookup 85.13.141.11 at Rus CERT university stuttgart germanylookup 85.13.141.11 at Ripefollow up this item(review) in same window 85.13.141.11 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://buene.pimpel.net/Bildergalerien/2 ... lookup pimpel.net at virustotalfollow up this domain(pimpel.net) pimpel.net follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://buene.pimpel.net/Bildergalerien/2 ...
7 follow up this item(11056520) 11056520 Report false positive Report closed case make a suggestion 2013-05-16 17:10:25     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
24/46 (52.2%) 
 Trojan.Iframe.BZW
Trojan.Iframe.BZW
JS/IFrame.gen.j
Trojan.Html.TwitScroll.bklyhq
IFrame.gen
Iframe.UW
JS:Iframe-AMP
[Trj]
HEUR:Trojan.Script.Generic
Trojan.Iframe.BZW
Troj/Iframe-JG
TrojWare.HTML.Iframe.G
Trojan.Iframe.BZW
JS.IFrame.407
Exploit.HTML.Ifr 
 lookup in virustotal.com (9d06ad8c19788b38d29c72eeca890751)-->[http://www.virustotal.com/latest-report.html?resource=9d06ad8c19788b38d29c72eeca890751]follow up this md5sum(9d06ad8c19788b38d29c72eeca890751)follow up this itemfollow up this virusname (HTML%2FFramer) as RSS-Feedfollow up this malware(HTML%2FFramer) for scanner (undef) in md5 table24/46 (52.2%) HTML/Framer
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://stadionimbiss.de/  up No previous evidence recordedSaved evidence (8041 Bytes) of last contact as txt May 16 2013 17:47:16 CEST. aliveSaved log of last contact as txt May 16 2013 17:47:16 CEST. SenderBaselookup 85.13.143.76 at virustotallookup 85.13.143.76 at Rus CERT university stuttgart germanylookup 85.13.143.76 at Ripefollow up this item(ip) in same window 85.13.143.76 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.143.76 at virustotallookup 85.13.143.76 at Rus CERT university stuttgart germanylookup 85.13.143.76 at Ripefollow up this item(review) in same window 85.13.143.76 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://stadionimbiss.de/ lookup stadionimbiss.de at virustotalfollow up this domain(stadionimbiss.de) stadionimbiss.de follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://stadionimbiss.de/
8 follow up this item(11047014) 11047014 Report false positive Report closed case make a suggestion 2013-05-16 12:40:08     follow up this itemfollow up this contributor (Paretologic.com) as RSS-Feed sub10possible lookup Evidence at malwaredomainlist.com
23/46 (50%) 
 Trojan.JS.Agent.HZZ
Trojan.JS.Agent.HZZ
Trojan.Script.Pegel.yftup
JS_ONLOAD.SMB
JS:Illredir-I
[Trj]
Trojan-Downloader.JS.Pegel.g
Trojan.JS.Agent.HZZ
JS.Obfuscated.Gen.1
JS.A.Pegel.6747
Troj/JSRedir-AR
UnclassifiedMalware
Trojan.JS.Agent.HZZ
JS.Redirector 
 lookup in virustotal.com (483dcfa269b8971d611e6a077de43553)-->[http://www.virustotal.com/latest-report.html?resource=483dcfa269b8971d611e6a077de43553]follow up this md5sum(483dcfa269b8971d611e6a077de43553)follow up this itemfollow up this virusname (JS_ONLOAD.SMB) as RSS-Feedlookup Virusname at trendmicrofollow up this malware(JS_ONLOAD.SMB) for scanner (trendmicro) in md5 table23/46 (50%) JS_ONLOAD.SMB
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://tourismus-fuer-alle.at/umgang/ski ...  up No previous evidence recordedSaved evidence (6747 Bytes) of last contact as txt February 11 2010 05:46:22 CET. aliveSaved log of last contact as txt May 16 2013 14:04:12 CEST. SenderBaselookup 85.13.144.164 at virustotallookup 85.13.144.164 at Rus CERT university stuttgart germanylookup 85.13.144.164 at Ripefollow up this item(ip) in same window 85.13.144.164 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.144.164 at virustotallookup 85.13.144.164 at Rus CERT university stuttgart germanylookup 85.13.144.164 at Ripefollow up this item(review) in same window 85.13.144.164 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://tourismus-fuer-alle.at/umgang/ski ... lookup tourismus-fuer-alle.at at virustotalfollow up this domain(tourismus-fuer-alle.at) tourismus-fuer-alle.at follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://tourismus-fuer-alle.at/umgang/ski ...
9 follow up this item(11040644) 11040644 Report false positive Report closed case make a suggestion 2013-05-16 08:30:07     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
21/46 (45.7%) 
 Trojan.Iframe.BZW
Trojan.Iframe.BZW
JS/IFrame.gen.j
Trojan.Html.TwitScroll.bklyhq
Iframe.WL
JS:Iframe-AMQ
[Trj]
HEUR:Trojan.Script.Generic
Trojan.Iframe.BZW
Troj/Iframe-JG
TrojWare.HTML.Iframe.G
Trojan.Iframe.BZW
Exploit.HTML.Iframe.dm
(v)
HTML/TwitScrol 
 lookup in virustotal.com (92880ab39a6b1f032465853e0bb13a31)-->[http://www.virustotal.com/latest-report.html?resource=92880ab39a6b1f032465853e0bb13a31]follow up this md5sum(92880ab39a6b1f032465853e0bb13a31)follow up this itemfollow up this virusname (HTML%2FFramer) as RSS-Feedfollow up this malware(HTML%2FFramer) for scanner (undef) in md5 table21/46 (45.7%) HTML/Framer
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.druckerpatronen-shop24.de/  up No previous evidence recordedSaved evidence (30024 Bytes) of last contact as txt May 16 2013 09:13:40 CEST. aliveSaved log of last contact as txt May 16 2013 09:13:40 CEST. SenderBaselookup 85.13.131.132 at virustotallookup 85.13.131.132 at Rus CERT university stuttgart germanylookup 85.13.131.132 at Ripefollow up this item(ip) in same window 85.13.131.132 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.131.132 at virustotallookup 85.13.131.132 at Rus CERT university stuttgart germanylookup 85.13.131.132 at Ripefollow up this item(review) in same window 85.13.131.132 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.druckerpatronen-shop24.de/ lookup druckerpatronen-shop24.de at virustotalfollow up this domain(druckerpatronen-shop24.de) druckerpatronen-shop24.de follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.druckerpatronen-shop24.de/
10 follow up this item(11030647) 11030647 Report false positive Report closed case make a suggestion 2013-05-16 02:20:15     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
lookup in virustotal.com (21c88f4dd42b0491c72c4345c4e9e8ca)follow up this md5sum(21c88f4dd42b0491c72c4345c4e9e8ca)follow up this itemfollow up this virusname (unknown_html) as RSS-Feedfollow up this malware(unknown_html) for scanner (undef) in md5 table unknown_html
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.edv-schneider.com/zubehoer/b- ...  up No previous evidence recordedSaved evidence (20279 Bytes) of last contact as txt May 16 2013 02:55:00 CEST. aliveSaved log of last contact as txt May 16 2013 02:55:00 CEST. SenderBaselookup 85.13.145.31 at virustotallookup 85.13.145.31 at Rus CERT university stuttgart germanylookup 85.13.145.31 at Ripefollow up this item(ip) in same window 85.13.145.31 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34788) in networks tablefollow up this itemfollow up this AS (AS34788) as RSS-Feed AS34788 SenderBaselookup 85.13.145.31 at virustotallookup 85.13.145.31 at Rus CERT university stuttgart germanylookup 85.13.145.31 at Ripefollow up this item(review) in same window 85.13.145.31 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.edv-schneider.com/zubehoer/b- ... lookup edv-schneider.com at virustotalfollow up this domain(edv-schneider.com) edv-schneider.com follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ip@all-inkl.com) as RSS-Feed ip@all-inkl.com follow up this itemfollow up this item 85.13.128.0 - 85.13.191.255 follow up this item DE-ALL-INKL-20050405 follow up this item Neue Medien Muennich follow up this item ns5.kasserver.com follow up this item ns6.kasserver.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.edv-schneider.com/zubehoer/b- ...
Click here for other vital incidents



Protected by clean MX [Valid RSS] Valid HTML 4.01 Transitional CSS ist valide!
Access is provided for free and subject to these Terms and Conditions.