CLEAN MX realtime database
public access query for virus URL statistics
Totally watched: 20282, to down: 0, to up: 0, changed ip: 0
As of 2010-09-02 22:05:27 CEST
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006

If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0213 Seconds
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 197477 2009-09-16 20:44:09 2010-03-22 21:07:13 4489.4 follow up this itemfollow up this contributor (sub1) as RSS-Feed sub1possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
Saved local log of anubis as txt September 17 2009 10:59:14 CEST.4/41 (9.76%) Virustotal. MD5: e55005cee4f09c4a32150c03d9f87ec2 Fake_AntiSpyware.AQS Application.Win32.AdWare.SpyRemoverPro.~A Win32.Banker lookup in virustotal.com (e55005cee4f09c4a32150c03d9f87ec2)-->[http://www.virustotal.com/analisis/7ca3748cf0877d9224b8fcec97ef6fcd9e4bf101107da221e2ec7a926304d38a-1253137858]lookup the sha256(7ca3748cf0877d9224b8fcec97ef6fcd9e4bf101107da221e2ec7a926304d38a) in comodo.comfollow up this md5sum(e55005cee4f09c4a32150c03d9f87ec2)follow up this itemfollow up this virusname (Fake_AntiSpyware.AQS) as RSS-Feedfollow up this malware(Fake_AntiSpyware.AQS) for scanner (AVG) in md5 table4/41 (9.76%) Fake_AntiSpyware.AQS
 Safe Virus-Viewer and Analyser may take a minute to complete http://www.itcompany.com/remover.exe  up Saved evidence (6692130 Bytes) of first contact as txt February 17 2009 19:25:36 CET.Saved evidence (6692130 Bytes) of last contact as txt February 17 2009 19:25:36 CET. deadSaved log of last contact as txt March 22 2010 21:07:13 CET. SenderBaselookup 192.220.12.192 at Rus CERT university stuttgart germanylookup 192.220.12.192 at ARINfollow up this item(ip) in same window 192.220.12.192 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS2914) in networks tablefollow up this itemfollow up this AS (AS2914) as RSS-Feed AS2914 SenderBaselookup 192.220.12.192 at Rus CERT university stuttgart germanylookup 192.220.12.192 at ARINfollow up this item(review) in same window 192.220.12.192 Safe Virus-Viewer and Analyser may take a minute to complete http://www.itcompany.com/remover.exe follow up this domain(itcompany.com) itcompany.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ntt.net) as RSS-Feed abuse@ntt.net follow up this itemfollow up this item 192.220.0.0 - 192.220.255.255 follow up this item NTTA-192-220 follow up this item NTT America, Inc. NTTAM-1 8005 South Chester Street Suite 200 Centennial CO 80112 follow up this item ns19a.nameservers.net follow up this item ns19b.nameservers.net follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://www.itcompany.com/remover.exe
Click here for other already closed incidents for your domain (itcompany.com)

Click here for other vital incidents