CLEAN MX realtime database    
public access query for virus URL statistics
Totally watched: Walker is running: 6(37) http://dwninfo.ru/software_install?guid={468E0B30-25F6-4199-85FD-5837CD199C93}&sig=443054456&ovr=0&file_id=41304927&browser=1
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006
Tweet
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 8.5884 Seconds 10 hits
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 follow up this item(11179121) 11179121 Report false positive Report closed case make a suggestion 2013-05-20 04:00:48     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
2/42 (4.8%) WS.Reputation.1 TROJ_GEN.F47V0827 lookup in virustotal.com (81c352fa68322d38efa8614a98dc0677)-->[http://www.virustotal.com/latest-report.html?resource=81c352fa68322d38efa8614a98dc0677]lookup in threatexpert.comlookup the sha256(ba8519f0581e8d0137c1f81b14685f1cc173b675fc716dd9ce7ee07e200832e0) in comodo.comfollow up this md5sum(81c352fa68322d38efa8614a98dc0677)follow up this itemfollow up this virusname (WS.Reputation.1) as RSS-Feedfollow up this malware(WS.Reputation.1) for scanner (Symantec) in md5 table2/42 (4.8%) WS.Reputation.1
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.website-force.com/zip/bestacn ...  up No previous evidence recordedSaved evidence (320804 Bytes) of last contact as txt August 27 2012 07:03:19 CEST. aliveSaved log of last contact as txt May 20 2013 04:06:43 CEST. SenderBaselookup 94.60.138.169 at virustotallookup 94.60.138.169 at Rus CERT university stuttgart germanylookup 94.60.138.169 at Ripefollow up this item(ip) in same window 94.60.138.169 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS30890) in networks tablefollow up this itemfollow up this AS (AS30890) as RSS-Feed AS30890 SenderBaselookup 94.60.138.169 at virustotallookup 94.60.138.169 at Rus CERT university stuttgart germanylookup 94.60.138.169 at Ripefollow up this item(review) in same window 94.60.138.169 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.website-force.com/zip/bestacn ... lookup website-force.com at virustotalfollow up this domain(website-force.com) website-force.com follow up this itemfollow up this country (RO) as RSS-Feed RO follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@evolva.ro) as RSS-Feed abuse@evolva.ro follow up this itemfollow up this item 94.60.0.0 - 94.63.255.255 follow up this item RO-EVOLVA-20080623 follow up this item Evolva Telecom s.r.l.Evolva Telecom follow up this item ns2.mxserver.ro follow up this item ns1.mxserver.ro follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.website-force.com/zip/bestacn ...
2 follow up this item(11179105) 11179105 Report false positive Report closed case make a suggestion 2013-05-20 04:00:45     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
9/47 (19.1%) Downloader-FMA Trojan Win32:PUP-gen [PUP] Adware.Downware.971 Soft32Downloader (fs) Downloader-FMA!ADBC7E9D71F9 Win32.Troj.Agent.zz.(kcloud) probably a variant of Win32/Soft32Downloader.C Riskware/Soft32Downloader lookup in virustotal.com (adbc7e9d71f9484638d1d1c71f8250f6)-->[http://www.virustotal.com/latest-report.html?resource=adbc7e9d71f9484638d1d1c71f8250f6]lookup in threatexpert.comlookup the sha256(92f0cc194cf3d465bb80b3fb0c855b28f0c93e49bcf2e15d5a06e8c33f4c7389) in comodo.comfollow up this md5sum(adbc7e9d71f9484638d1d1c71f8250f6)follow up this itemfollow up this virusname (Riskware%2FSoft32Downloader) as RSS-Feedfollow up this malware(Riskware%2FSoft32Downloader) for scanner (undef) in md5 table9/47 (19.1%) Riskware/Soft32Downloader
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://windows-live-movie-maker.todownlo ...  up No previous evidence recordedSaved evidence (944768 Bytes) of last contact as txt May 20 2013 04:15:45 CEST. aliveSaved log of last contact as txt May 20 2013 04:15:45 CEST. SenderBaselookup 54.235.160.59 at virustotallookup 54.235.160.59 at Rus CERT university stuttgart germanylookup 54.235.160.59 at ARINfollow up this item(ip) in same window 54.235.160.59 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS16509) in networks tablefollow up this itemfollow up this AS (AS16509) as RSS-Feed AS16509 SenderBaselookup 54.235.160.59 at virustotallookup 54.235.160.59 at Rus CERT university stuttgart germanylookup 54.235.160.59 at ARINfollow up this item(review) in same window 54.235.160.59 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://windows-live-movie-maker.todownlo ... lookup todownload.com at virustotalfollow up this domain(todownload.com) todownload.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (ec2-abuse@amazon.com) as RSS-Feed ec2-abuse@amazon.com follow up this itemfollow up this item 54.234.0.0 - 54.235.255.255 follow up this item AMAZO-ZIAD2 follow up this item Amazon.com, Inc. AMAZO-4 Amazon Web Services, Elastic Compute Cloud, EC2 1200 12th Avenue South Seattle WA 98144 follow up this item ns-1526.awsdns-62.org follow up this item ns-1654.awsdns-14.co.uk follow up this item ns-830.awsdns-39.net follow up this item ns-163.awsdns-20.com follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://windows-live-movie-maker.todownlo ...
3 follow up this item(11179104) 11179104 Report false positive Report closed case make a suggestion 2013-05-20 04:00:45     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
5/35 (14.3%) Downloader-FMA Win32:PUP-gen PUP Adware.Downware.971 Downloader-FMA!1B29205F353F Riskware/Soft32Downloader lookup in virustotal.com (1b29205f353fe7393c1767630b1db44c)-->[http://www.virustotal.com/latest-report.html?resource=1b29205f353fe7393c1767630b1db44c]lookup in threatexpert.comlookup the sha256(f6744aef7f6d9c157a97779a1e6801994b33b852d0c652bbf064ebae16ff57c7) in comodo.comfollow up this md5sum(1b29205f353fe7393c1767630b1db44c)follow up this itemfollow up this virusname (Win32%3APUP-gen+PUP) as RSS-Feedfollow up this malware(Win32%3APUP-gen+PUP) for scanner (Avast) in md5 table5/35 (14.3%) Win32:PUP-gen PUP
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://windows-live-movie-maker.todownlo ...  up No previous evidence recordedSaved evidence (944768 Bytes) of last contact as txt May 20 2013 04:16:07 CEST. aliveSaved log of last contact as txt May 20 2013 04:16:07 CEST. SenderBaselookup 54.243.141.9 at virustotallookup 54.243.141.9 at Rus CERT university stuttgart germanylookup 54.243.141.9 at ARINfollow up this item(ip) in same window 54.243.141.9 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS16509) in networks tablefollow up this itemfollow up this AS (AS16509) as RSS-Feed AS16509 SenderBaselookup 54.235.160.59 at virustotallookup 54.235.160.59 at Rus CERT university stuttgart germanylookup 54.235.160.59 at ARINfollow up this item(review) in same window 54.235.160.59 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://windows-live-movie-maker.todownlo ... lookup todownload.com at virustotalfollow up this domain(todownload.com) todownload.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (ec2-abuse@amazon.com) as RSS-Feed ec2-abuse@amazon.com follow up this itemfollow up this item 54.242.0.0 - 54.243.255.255 follow up this item AMAZO-ZIAD2 follow up this item Amazon.com, Inc. AMAZO-4 Amazon Web Services, Elastic Compute Cloud, EC2 1200 12th Avenue South Seattle WA 98144 follow up this item ns-1526.awsdns-62.org follow up this item ns-1654.awsdns-14.co.uk follow up this item ns-830.awsdns-39.net follow up this item ns-163.awsdns-20.com follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://windows-live-movie-maker.todownlo ...
4 follow up this item(11179103) 11179103 Report false positive Report closed case make a suggestion 2013-05-20 04:00:45     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
4/47 (8.5%) PWS-Zbot-FAZY!056EE0E5B33A Trojan.DownLoad3.23586 PWS-Zbot-FAZY!056EE0E5B33A a variant of Win32/Injector.AGVA lookup in virustotal.com (056ee0e5b33a8928d4027d44d7db7065)-->[http://www.virustotal.com/latest-report.html?resource=056ee0e5b33a8928d4027d44d7db7065]lookup in threatexpert.comlookup the sha256(39d4fc5e3cc1c81fa966bbb3df430d19d6275b1cabce96a4d9b29ad1112aadeb) in comodo.comfollow up this md5sum(056ee0e5b33a8928d4027d44d7db7065)follow up this itemfollow up this virusname (PWS-Zbot-FAZY%21056EE0E5B33A) as RSS-Feedfollow up this malware(PWS-Zbot-FAZY%21056EE0E5B33A) for scanner (undef) in md5 table4/47 (8.5%) PWS-Zbot-FAZY!056EE0E5B33A
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://westsailors.com/LL/images/hhost.e ...  up No previous evidence recordedSaved evidence (239616 Bytes) of last contact as txt May 19 2013 21:09:32 CEST. aliveSaved log of last contact as txt May 20 2013 04:16:18 CEST. SenderBaselookup 79.96.7.53 at virustotallookup 79.96.7.53 at Rus CERT university stuttgart germanylookup 79.96.7.53 at Ripefollow up this item(ip) in same window 79.96.7.53 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS12824) in networks tablefollow up this itemfollow up this AS (AS12824) as RSS-Feed AS12824 SenderBaselookup 79.96.7.53 at virustotallookup 79.96.7.53 at Rus CERT university stuttgart germanylookup 79.96.7.53 at Ripefollow up this item(review) in same window 79.96.7.53 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://westsailors.com/LL/images/hhost.e ... lookup westsailors.com at virustotalfollow up this domain(westsailors.com) westsailors.com follow up this itemfollow up this country (PL) as RSS-Feed PL follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@home.pl) as RSS-Feed abuse@home.pl follow up this itemfollow up this item 79.96.0.0 - 79.96.127.255 follow up this item HOMEPL follow up this item home.pl webhosting farm - static allocation follow up this item dns2.home.pl follow up this item dns.home.pl follow up this item dns3.home.pl follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://westsailors.com/LL/images/hhost.e ...
5 follow up this item(11179102) 11179102 Report false positive Report closed case make a suggestion 2013-05-20 04:00:44     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
9/46 (19.6%) Downloader-FMA Trojan Win32:PUP-gen [PUP] Adware.Downware.971 Soft32Downloader (fs) Downloader-FMA!5D43D5A4FF49 Win32.Troj.Agent.zz.(kcloud) probably a variant of Win32/Soft32Downloader.C Riskware/Soft32Downloader lookup in virustotal.com (5d43d5a4ff49432788e7569d31927ab9)-->[http://www.virustotal.com/latest-report.html?resource=5d43d5a4ff49432788e7569d31927ab9]lookup in threatexpert.comlookup the sha256(d51f9c4b80f0d6cfb13aa294706b2a2e0e648f11cb4b4255abdcd71990c058d1) in comodo.comfollow up this md5sum(5d43d5a4ff49432788e7569d31927ab9)follow up this itemfollow up this virusname (Riskware%2FSoft32Downloader) as RSS-Feedfollow up this malware(Riskware%2FSoft32Downloader) for scanner (undef) in md5 table9/46 (19.6%) Riskware/Soft32Downloader
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://virtual-dj.todownload.com/get/fil ...  up No previous evidence recordedSaved evidence (944768 Bytes) of last contact as txt May 20 2013 04:16:27 CEST. aliveSaved log of last contact as txt May 20 2013 04:16:27 CEST. SenderBaselookup 54.235.66.87 at virustotallookup 54.235.66.87 at Rus CERT university stuttgart germanylookup 54.235.66.87 at ARINfollow up this item(ip) in same window 54.235.66.87 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS16509) in networks tablefollow up this itemfollow up this AS (AS16509) as RSS-Feed AS16509 SenderBaselookup 54.235.160.59 at virustotallookup 54.235.160.59 at Rus CERT university stuttgart germanylookup 54.235.160.59 at ARINfollow up this item(review) in same window 54.235.160.59 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://virtual-dj.todownload.com/get/fil ... lookup todownload.com at virustotalfollow up this domain(todownload.com) todownload.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (ec2-abuse@amazon.com) as RSS-Feed ec2-abuse@amazon.com follow up this itemfollow up this item 54.234.0.0 - 54.235.255.255 follow up this item AMAZO-ZIAD2 follow up this item Amazon.com, Inc. AMAZO-4 Amazon Web Services, Elastic Compute Cloud, EC2 1200 12th Avenue South Seattle WA 98144 follow up this item ns-163.awsdns-20.com follow up this item ns-830.awsdns-39.net follow up this item ns-1526.awsdns-62.org follow up this item ns-1654.awsdns-14.co.uk follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://virtual-dj.todownload.com/get/fil ...
6 follow up this item(11179101) 11179101 Report false positive Report closed case make a suggestion 2013-05-20 04:00:44     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
9/47 (19.1%) Downloader-FMA Trojan Win32:PUP-gen [PUP] Adware.Downware.971 Soft32Downloader (fs) Downloader-FMA!D5B8D5504BC6 Win32.Troj.Agent.zz.(kcloud) probably a variant of Win32/Soft32Downloader.C Riskware/Soft32Downloader lookup in virustotal.com (d5b8d5504bc62b78b7cd057b135f9760)-->[http://www.virustotal.com/latest-report.html?resource=d5b8d5504bc62b78b7cd057b135f9760]lookup in threatexpert.comlookup the sha256(69ca1ef399994db3f09c57a931fb6b48ce2bcfe69e0688040d84741e70d22d55) in comodo.comfollow up this md5sum(d5b8d5504bc62b78b7cd057b135f9760)follow up this itemfollow up this virusname (Riskware%2FSoft32Downloader) as RSS-Feedfollow up this malware(Riskware%2FSoft32Downloader) for scanner (undef) in md5 table9/47 (19.1%) Riskware/Soft32Downloader
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://virtual-dj.todownload.com/get/fil ...  up No previous evidence recordedSaved evidence (944768 Bytes) of last contact as txt May 20 2013 04:16:55 CEST. aliveSaved log of last contact as txt May 20 2013 04:16:55 CEST. SenderBaselookup 54.243.141.9 at virustotallookup 54.243.141.9 at Rus CERT university stuttgart germanylookup 54.243.141.9 at ARINfollow up this item(ip) in same window 54.243.141.9 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS16509) in networks tablefollow up this itemfollow up this AS (AS16509) as RSS-Feed AS16509 SenderBaselookup 54.235.66.87 at virustotallookup 54.235.66.87 at Rus CERT university stuttgart germanylookup 54.235.66.87 at ARINfollow up this item(review) in same window 54.235.66.87 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://virtual-dj.todownload.com/get/fil ... lookup todownload.com at virustotalfollow up this domain(todownload.com) todownload.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (ec2-abuse@amazon.com) as RSS-Feed ec2-abuse@amazon.com follow up this itemfollow up this item 54.242.0.0 - 54.243.255.255 follow up this item AMAZO-ZIAD2 follow up this item Amazon.com, Inc. AMAZO-4 Amazon Web Services, Elastic Compute Cloud, EC2 1200 12th Avenue South Seattle WA 98144 follow up this item ns-163.awsdns-20.com follow up this item ns-830.awsdns-39.net follow up this item ns-1526.awsdns-62.org follow up this item ns-1654.awsdns-14.co.uk follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://virtual-dj.todownload.com/get/fil ...
7 follow up this item(11179100) 11179100 Report false positive Report closed case make a suggestion 2013-05-20 04:00:44     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
5/36 (13.9%) Downloader-FMA Win32:PUP-gen PUP Adware.Downware.971 Downloader-FMA!25AEE39E4AA1 Riskware/Soft32Downloader lookup in virustotal.com (25aee39e4aa117b4509bb5a9326dd801)-->[http://www.virustotal.com/latest-report.html?resource=25aee39e4aa117b4509bb5a9326dd801]lookup in threatexpert.comlookup the sha256(79e1109ca050e606ff9385e6c0c8bd643a418ded063b3bdf1308b4091514e214) in comodo.comfollow up this md5sum(25aee39e4aa117b4509bb5a9326dd801)follow up this itemfollow up this virusname (Win32%3APUP-gen+PUP) as RSS-Feedfollow up this malware(Win32%3APUP-gen+PUP) for scanner (Avast) in md5 table5/36 (13.9%) Win32:PUP-gen PUP
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://virtual-dj.todownload.com/get/fil ...  up No previous evidence recordedSaved evidence (944768 Bytes) of last contact as txt May 20 2013 04:17:33 CEST. aliveSaved log of last contact as txt May 20 2013 04:17:33 CEST. SenderBaselookup 54.235.66.87 at virustotallookup 54.235.66.87 at Rus CERT university stuttgart germanylookup 54.235.66.87 at ARINfollow up this item(ip) in same window 54.235.66.87 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS16509) in networks tablefollow up this itemfollow up this AS (AS16509) as RSS-Feed AS16509 SenderBaselookup 54.235.160.59 at virustotallookup 54.235.160.59 at Rus CERT university stuttgart germanylookup 54.235.160.59 at ARINfollow up this item(review) in same window 54.235.160.59 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://virtual-dj.todownload.com/get/fil ... lookup todownload.com at virustotalfollow up this domain(todownload.com) todownload.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (ec2-abuse@amazon.com) as RSS-Feed ec2-abuse@amazon.com follow up this itemfollow up this item 54.234.0.0 - 54.235.255.255 follow up this item AMAZO-ZIAD2 follow up this item Amazon.com, Inc. AMAZO-4 Amazon Web Services, Elastic Compute Cloud, EC2 1200 12th Avenue South Seattle WA 98144 follow up this item ns-163.awsdns-20.com follow up this item ns-830.awsdns-39.net follow up this item ns-1526.awsdns-62.org follow up this item ns-1654.awsdns-14.co.uk follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://virtual-dj.todownload.com/get/fil ...
8 follow up this item(11179099) 11179099 Report false positive Report closed case make a suggestion 2013-05-20 04:00:38     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
24/47 (51.1%) Trojan.GenericKDZ.17532 Trojan.GenericKDZ.17532 Artemis!F9A00496A1B3 Hoax.ArchSMS Adware WebAlta.A PremiumSMSScam!gen16 Win32:Malware-gen UDS:DangerousObject.Multi.Generic Trojan.GenericKDZ.17532 Mal/ArchSMS-A ApplicUnwnt.Win32.Hoax.ArchSMS.TVO Trojan.Ge lookup in virustotal.com (f9a00496a1b35c45738ce4921076b6fd)-->[http://www.virustotal.com/latest-report.html?resource=f9a00496a1b35c45738ce4921076b6fd]lookup in threatexpert.comlookup the sha256(259b35e24b5bf1c9a0f02b6377b1e76111e37e497c5d1210417eda2bb1a933a5) in comodo.comfollow up this md5sum(f9a00496a1b35c45738ce4921076b6fd)follow up this itemfollow up this virusname (TR%2FBarys.609854541) as RSS-Feedfollow up this malware(TR%2FBarys.609854541) for scanner (AntiVir) in md5 table24/47 (51.1%) TR/Barys.609854541
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://upload.zkjmzs.ru/download/9397512 ...  up No previous evidence recordedSaved evidence (2908160 Bytes) of last contact as txt May 20 2013 04:18:12 CEST. aliveSaved log of last contact as txt May 20 2013 04:18:12 CEST. SenderBaselookup 94.102.52.128 at virustotallookup 94.102.52.128 at Rus CERT university stuttgart germanylookup 94.102.52.128 at Ripefollow up this item(ip) in same window 94.102.52.128 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS29073) in networks tablefollow up this itemfollow up this AS (AS29073) as RSS-Feed AS29073 SenderBaselookup 94.102.52.128 at virustotallookup 94.102.52.128 at Rus CERT university stuttgart germanylookup 94.102.52.128 at Ripefollow up this item(review) in same window 94.102.52.128 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://upload.zkjmzs.ru/download/9397512 ... lookup zkjmzs.ru at virustotalfollow up this domain(zkjmzs.ru) zkjmzs.ru follow up this itemfollow up this country (NL) as RSS-Feed NL follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (r.eeden@ecatel.net) as RSS-Feed r.eeden@ecatel.net follow up this itemfollow up this item 94.102.48.0 - 94.102.63.255 follow up this item NL-ECATEL-20080829 follow up this item Ecatel LTDAS29073 Route object follow up this item ns1.qcash.ws follow up this item ns2.qcash.ws follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://upload.zkjmzs.ru/download/9397512 ...
9 follow up this item(11179098) 11179098 Report false positive Report closed case make a suggestion 2013-05-20 04:00:38     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
33/46 (71.7%) Joke/W32.ArchSMS.3000000.AJ Trojan-FBKF!14A88779B282 Trojan.ADH.2 Troj_Generic.JIXXW TROJ_GEN.RCBCFD7 Win32:Rootkit-gen [Rtk] Hoax.Win32.ArchSMS.azmqd Gen:Variant.Zusy.Elzob.1632 Mal/ArchSMS-A ApplicUnwnt.Win32.Hoax.ArchSMS.AAD Gen:Variant.Zusy.Elzob.163 lookup in virustotal.com (a48edb8f1d390e010b0eef8323a15e8d)-->[http://www.virustotal.com/latest-report.html?resource=14a88779b28215a0bf483787ffe5ec4d]lookup in threatexpert.comlookup the sha256(4faad2ee44439cd1a5c58459be55eb425acc438df31e2bcd0de4627de4a9b611) in comodo.comfollow up this md5sum(a48edb8f1d390e010b0eef8323a15e8d)follow up this itemfollow up this virusname (TR%2FFraud.Gen2) as RSS-Feedlookup Virusname at avirafollow up this malware(TR%2FFraud.Gen2) for scanner (avira) in md5 table33/46 (71.7%) TR/Fraud.Gen2
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://upload.vnfsas.ru/download/8883511 ...  up No previous evidence recordedSaved evidence (3000000 Bytes) of last contact as txt May 20 2013 04:18:47 CEST. aliveSaved log of last contact as txt May 20 2013 04:18:47 CEST. SenderBaselookup 94.102.52.128 at virustotallookup 94.102.52.128 at Rus CERT university stuttgart germanylookup 94.102.52.128 at Ripefollow up this item(ip) in same window 94.102.52.128 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS29073) in networks tablefollow up this itemfollow up this AS (AS29073) as RSS-Feed AS29073 SenderBaselookup 94.102.52.128 at virustotallookup 94.102.52.128 at Rus CERT university stuttgart germanylookup 94.102.52.128 at Ripefollow up this item(review) in same window 94.102.52.128 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://upload.vnfsas.ru/download/8883511 ... lookup vnfsas.ru at virustotalfollow up this domain(vnfsas.ru) vnfsas.ru follow up this itemfollow up this country (NL) as RSS-Feed NL follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (r.eeden@ecatel.net) as RSS-Feed r.eeden@ecatel.net follow up this itemfollow up this item 94.102.48.0 - 94.102.63.255 follow up this item NL-ECATEL-20080829 follow up this item Ecatel LTDAS29073 Route object follow up this item ns1.qcash.ws follow up this item ns2.qcash.ws follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://upload.vnfsas.ru/download/8883511 ...
10 follow up this item(11179097) 11179097 Report false positive Report closed case make a suggestion 2013-05-20 04:00:38     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
24/47 (51.1%) Trojan.GenericKDZ.17532 Trojan.GenericKDZ.17532 Artemis!F9A00496A1B3 Hoax.ArchSMS Adware WebAlta.A PremiumSMSScam!gen16 Win32:Malware-gen UDS:DangerousObject.Multi.Generic Trojan.GenericKDZ.17532 Mal/ArchSMS-A ApplicUnwnt.Win32.Hoax.ArchSMS.TVO Trojan.Ge lookup in virustotal.com (f9a00496a1b35c45738ce4921076b6fd)-->[http://www.virustotal.com/latest-report.html?resource=f9a00496a1b35c45738ce4921076b6fd]lookup in threatexpert.comlookup the sha256(259b35e24b5bf1c9a0f02b6377b1e76111e37e497c5d1210417eda2bb1a933a5) in comodo.comfollow up this md5sum(f9a00496a1b35c45738ce4921076b6fd)follow up this itemfollow up this virusname (TR%2FBarys.609854541) as RSS-Feedfollow up this malware(TR%2FBarys.609854541) for scanner (AntiVir) in md5 table24/47 (51.1%) TR/Barys.609854541
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://upload.vmkbr.ru/download/11223513 ...  up No previous evidence recordedSaved evidence (2908160 Bytes) of last contact as txt May 20 2013 04:19:22 CEST. aliveSaved log of last contact as txt May 20 2013 04:19:22 CEST. SenderBaselookup 94.102.52.128 at virustotallookup 94.102.52.128 at Rus CERT university stuttgart germanylookup 94.102.52.128 at Ripefollow up this item(ip) in same window 94.102.52.128 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS29073) in networks tablefollow up this itemfollow up this AS (AS29073) as RSS-Feed AS29073 SenderBaselookup 94.102.52.128 at virustotallookup 94.102.52.128 at Rus CERT university stuttgart germanylookup 94.102.52.128 at Ripefollow up this item(review) in same window 94.102.52.128 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://upload.vmkbr.ru/download/11223513 ... lookup vmkbr.ru at virustotalfollow up this domain(vmkbr.ru) vmkbr.ru follow up this itemfollow up this country (NL) as RSS-Feed NL follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (r.eeden@ecatel.net) as RSS-Feed r.eeden@ecatel.net follow up this itemfollow up this item 94.102.48.0 - 94.102.63.255 follow up this item NL-ECATEL-20080829 follow up this item Ecatel LTDAS29073 Route object follow up this item ns1.qcash.ws follow up this item ns2.qcash.ws follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://upload.vmkbr.ru/download/11223513 ...
Click here for other vital incidents


for query you may use wildcard=% or placeholder=_
response
domain
url
virusname
md5
ip
review
score
as
id
scanner
recent
descr
email
netname
inetnum
source
country
nsx
ns1
ns2
ns3
ns4
ns5
sub
sort
# of items to display

Protected by clean MX [Valid RSS] Valid HTML 4.01 Transitional CSS ist valide!
Access is provided for free and subject to these Terms and Conditions.