CLEAN MX realtime database
public access query for virus URL statistics
Totally watched: 20282, to down: 0, to up: 0, changed ip: 0
As of 2010-09-02 22:05:27 CEST
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006

If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0175 Seconds
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 369610 2010-01-23 00:00:00 2010-02-11 08:04:56 464.1 follow up this itemfollow up this contributor (sub6) as RSS-Feed sub6lookup Evidence at malwareurl.com
3/41 (7.32%) Virustotal. MD5: ad641594fc0a46b2dddc422140fdfbe0 Keylog/SpyAgent not-a-virus:Monitor.Win32.SpyAgent.z Suspicious file lookup in virustotal.com (ad641594fc0a46b2dddc422140fdfbe0)-->[http://www.virustotal.com/analisis/3cedefbd1b17e82e71ac8656bc9ec51ca536ae33a95a829d3baa17158f181911-1264247705]lookup in threatexpert.comlookup the sha256(3cedefbd1b17e82e71ac8656bc9ec51ca536ae33a95a829d3baa17158f181911) in comodo.comfollow up this md5sum(ad641594fc0a46b2dddc422140fdfbe0)follow up this itemfollow up this virusname (Keylog%2FSpyAgent) as RSS-Feedfollow up this malware(Keylog%2FSpyAgent) for scanner (Fortinet) in md5 table3/41 (7.32%) Keylog/SpyAgent
 Safe Virus-Viewer and Analyser may take a minute to complete http://spytech-inc.com/ss-fv/NVViewerIns ...  up Saved evidence (1791003 Bytes) of first contact as txt April 14 2009 23:17:34 CEST.No evidence recorded deadSaved log of last contact as txt February 11 2010 08:04:56 CET. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://spytech-inc.com/ss-fv/NVViewerIns ... follow up this domain(spytech-inc.com) spytech-inc.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@theplanet.com) as RSS-Feed abuse@theplanet.com follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item NETBLK-THEPLANET-BLK-EV1-14 follow up this item ThePlanet.com Internet Services, Inc. TPCM 315 Capitol Suite 205 Houston TX 77002 AS36420 follow up this item ns1.theplanet.com follow up this item ns2.theplanet.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://spytech-inc.com/ss-fv/NVViewerIns ...
2 197679 2009-09-16 20:44:14 2010-03-22 20:58:23 4489.2 follow up this itemfollow up this contributor (sub1) as RSS-Feed sub1possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
Saved local log of anubis as txt September 17 2009 11:08:41 CEST.32/41 (78.05%) Virustotal. MD5: 6d7aae596080989fbd67df7c94c204f6 Adware.Gen Heuristic.LooksLike.Win32.Suspicious.H!83 Monitor.Win32.SpyAgent.ae lookup in virustotal.com (6d7aae596080989fbd67df7c94c204f6)-->[http://www.virustotal.com/analisis/efc9565513d34e77ef88369791d49b8ce96ac76237d7d7dab603d896dd4f7ebf-1253134393]lookup in threatexpert.comlookup the sha256(efc9565513d34e77ef88369791d49b8ce96ac76237d7d7dab603d896dd4f7ebf) in comodo.comfollow up this md5sum(6d7aae596080989fbd67df7c94c204f6)follow up this itemfollow up this virusname (SPR%2FSpyAgent.BO) as RSS-Feedlookup Virusname at avirafollow up this malware(SPR%2FSpyAgent.BO) for scanner (avira) in md5 table32/41 (78.05%) SPR/SpyAgent.BO
 Safe Virus-Viewer and Analyser may take a minute to complete http://www.ss-01.com/R0400/winsrvc.exe  up Saved evidence (20754 Bytes) of first contact as txt February 05 2008 21:35:17 CET.No evidence recorded deadSaved log of last contact as txt March 22 2010 20:58:23 CET. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://www.ss-01.com/R0400/winsrvc.exe follow up this domain(ss-01.com) ss-01.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@theplanet.com) as RSS-Feed abuse@theplanet.com follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item NETBLK-THEPLANET-BLK-EV1-14 follow up this item ThePlanet.com Internet Services, Inc. TPCM 315 Capitol Suite 205 Houston TX 77002 AS36420 follow up this item ns1.theplanet.com follow up this item ns2.theplanet.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://www.ss-01.com/R0400/winsrvc.exe
3 15118 2008-09-25 09:45:03 2008-10-24 03:16:25 689.5 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (unknown_exe) as RSS-Feedfollow up this malware(unknown_exe) for scanner (undef) in md5 table unknown_exe
 Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/spyagent/File ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt October 24 2008 03:16:25 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/spyagent/File ... follow up this domain(spytech-web.com) spytech-web.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item ns5.ev1servers.net follow up this item ns6.ev1servers.net follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/spyagent/File ...
4 15119 2008-09-25 09:45:03 2008-10-24 12:04:10 698.3 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (unknown_exe) as RSS-Feedfollow up this malware(unknown_exe) for scanner (undef) in md5 table unknown_exe
 Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/spyagent/File ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt October 24 2008 12:04:09 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/spyagent/File ... follow up this domain(spytech-web.com) spytech-web.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item ns5.ev1servers.net follow up this item ns6.ev1servers.net follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/spyagent/File ...
5 15120 2008-09-25 09:45:03 2008-10-23 06:32:03 668.8 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (unknown_exe) as RSS-Feedfollow up this malware(unknown_exe) for scanner (undef) in md5 table unknown_exe
 Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/spyagent/File ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt October 23 2008 06:32:02 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/spyagent/File ... follow up this domain(spytech-web.com) spytech-web.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item ns5.ev1servers.net follow up this item ns6.ev1servers.net follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/spyagent/File ...
6 15121 2008-09-25 09:45:03 2008-10-07 07:31:55 285.8 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (unknown_exe) as RSS-Feedfollow up this malware(unknown_exe) for scanner (undef) in md5 table unknown_exe
 Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/realtime-spy/ ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt October 07 2008 07:31:55 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/realtime-spy/ ... follow up this domain(spytech-web.com) spytech-web.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item ns5.ev1servers.net follow up this item ns6.ev1servers.net follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://www.spytech-web.com/realtime-spy/ ...
7 1836 2008-08-05 10:20:02 2008-08-10 14:49:57 124.5 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/inde ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 14:49:57 CEST. SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(ip) in same window 67.15.70.75 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(review) in same window 67.15.70.75 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/inde ... follow up this domain(mantisdesign.co.za) mantisdesign.co.za follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item dns2.host4africa.com follow up this item dns12.host4africa.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/inde ...
8 1837 2008-08-05 10:20:02 2008-08-10 14:49:57 124.5 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 14:49:57 CEST. SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(ip) in same window 67.15.70.75 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(review) in same window 67.15.70.75 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ... follow up this domain(mantisdesign.co.za) mantisdesign.co.za follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item dns2.host4africa.com follow up this item dns12.host4africa.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ...
9 1838 2008-08-05 10:20:02 2008-08-10 14:49:56 124.5 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 14:49:56 CEST. SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(ip) in same window 67.15.70.75 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(review) in same window 67.15.70.75 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ... follow up this domain(mantisdesign.co.za) mantisdesign.co.za follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item dns2.host4africa.com follow up this item dns12.host4africa.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ...
10 1839 2008-08-05 10:20:02 2008-08-10 14:49:56 124.5 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 14:49:56 CEST. SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(ip) in same window 67.15.70.75 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(review) in same window 67.15.70.75 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ... follow up this domain(mantisdesign.co.za) mantisdesign.co.za follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item dns2.host4africa.com follow up this item dns12.host4africa.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ...
11 1840 2008-08-05 10:20:02 2008-08-10 14:49:55 124.5 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 14:49:55 CEST. SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(ip) in same window 67.15.70.75 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(review) in same window 67.15.70.75 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ... follow up this domain(mantisdesign.co.za) mantisdesign.co.za follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item dns2.host4africa.com follow up this item dns12.host4africa.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/pornotube/vide ...
12 1731 2008-08-04 19:50:01 2008-08-10 15:02:17 139.2 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/index1.php  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 15:02:17 CEST. SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(ip) in same window 67.15.70.75 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.75 at Rus CERT university stuttgart germanylookup 67.15.70.75 at ARINfollow up this item(review) in same window 67.15.70.75 Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/index1.php follow up this domain(mantisdesign.co.za) mantisdesign.co.za follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item dns12.host4africa.com follow up this item dns2.host4africa.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://mantisdesign.co.za/index1.php
13 1436 2008-08-03 14:40:02 2008-08-10 15:08:16 168.5 follow up this itemfollow up this contributor (sub1) as RSS-Feed sub1possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://www.financialservice.com.br/image ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 15:08:16 CEST. SenderBaselookup 67.15.70.2 at Rus CERT university stuttgart germanylookup 67.15.70.2 at ARINfollow up this item(ip) in same window 67.15.70.2 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.2 at Rus CERT university stuttgart germanylookup 67.15.70.2 at ARINfollow up this item(review) in same window 67.15.70.2 Safe Virus-Viewer and Analyser may take a minute to complete http://www.financialservice.com.br/image ... follow up this domain(financialservice.com.br) financialservice.com.br follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item dns1.deliverycard.com.br follow up this item dns2.deliverycard.com.br follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://www.financialservice.com.br/image ...
14 420 2008-08-01 14:01:15 2008-08-10 15:22:01 217.3 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://guiasaojose.net/1.html  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 15:22:01 CEST. SenderBaselookup 67.15.70.85 at Rus CERT university stuttgart germanylookup 67.15.70.85 at ARINfollow up this item(ip) in same window 67.15.70.85 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.85 at Rus CERT university stuttgart germanylookup 67.15.70.85 at ARINfollow up this item(review) in same window 67.15.70.85 Safe Virus-Viewer and Analyser may take a minute to complete http://guiasaojose.net/1.html follow up this domain(guiasaojose.net) guiasaojose.net follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item ns1.hostseguro.com follow up this item ns3.hostseguro.com follow up this item ns2.hostseguro.com follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://guiasaojose.net/1.html
15 421 2008-08-01 14:01:15 2008-08-10 15:22:00 217.3 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://guiasaojose.net/default.html  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 15:22:00 CEST. SenderBaselookup 67.15.70.85 at Rus CERT university stuttgart germanylookup 67.15.70.85 at ARINfollow up this item(ip) in same window 67.15.70.85 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.85 at Rus CERT university stuttgart germanylookup 67.15.70.85 at ARINfollow up this item(review) in same window 67.15.70.85 Safe Virus-Viewer and Analyser may take a minute to complete http://guiasaojose.net/default.html follow up this domain(guiasaojose.net) guiasaojose.net follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item ns1.hostseguro.com follow up this item ns3.hostseguro.com follow up this item ns2.hostseguro.com follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://guiasaojose.net/default.html
16 422 2008-08-01 14:01:15 2008-08-10 15:22:00 217.3 follow up this itemfollow up this contributor (sub2) as RSS-Feed sub2possible lookup Evidence at malwareurl.compossible lookup Evidence at malwaredomainlist.com
follow up this itemfollow up this virusname (NA) as RSS-Feedfollow up this malware(NA) for scanner (undef) in md5 table NA
 Safe Virus-Viewer and Analyser may take a minute to complete http://guiasaojose.net/get_flash_update. ...  up No previous evidence recordedNo evidence recorded deadSaved log of last contact as txt August 10 2008 15:22:00 CEST. SenderBaselookup 67.15.70.85 at Rus CERT university stuttgart germanylookup 67.15.70.85 at ARINfollow up this item(ip) in same window 67.15.70.85 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.85 at Rus CERT university stuttgart germanylookup 67.15.70.85 at ARINfollow up this item(review) in same window 67.15.70.85 Safe Virus-Viewer and Analyser may take a minute to complete http://guiasaojose.net/get_flash_update. ... follow up this domain(guiasaojose.net) guiasaojose.net follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@ev1servers.net) as RSS-Feed abuse@ev1servers.net follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item EVRY-BLK-15 follow up this item Everyones Internet EVRY 390 Benmar Suite 200 Houston TX 77060 follow up this item ns1.hostseguro.com follow up this item ns3.hostseguro.com follow up this item ns2.hostseguro.com follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://guiasaojose.net/get_flash_update. ...
17 48696Report false positive Report closed case make a suggestion 2008-06-05 19:45:00 OVERDUE! Overdue!19658.5 follow up this itemfollow up this contributor (sub4) as RSS-Feed sub4lookup Evidence at malwaredomainlist.com
Saved local log of anubis as txt August 30 2009 14:18:06 CEST.Saved local log of joebox May 11 2010 11:31:20 CEST.29/41 (70.73%) Virustotal. MD5: c3cac506d20dba437c516478ffb9a922 Trojan.Win32.Pakes.lw Win32/TrojanDropper.Agent.NLL Trojan.Generic.1358800 lookup in virustotal.com (c3cac506d20dba437c516478ffb9a922)-->[http://www.virustotal.com/analisis/94e743d755c0c398ac0beb9be05eeb98c6563138fd6b8411cb6b8513029ce287-1251299082 ]lookup in threatexpert.comlookup the sha256(94e743d755c0c398ac0beb9be05eeb98c6563138fd6b8411cb6b8513029ce287) in comodo.comfollow up this md5sum(c3cac506d20dba437c516478ffb9a922)follow up this itemfollow up this virusname (TROJ_PAKES.LW) as RSS-Feedlookup Virusname at trendmicrofollow up this malware(TROJ_PAKES.LW) for scanner (trendmicro) in md5 table29/41 (70.73%) TROJ_PAKES.LW
 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/drsetup.dat  up Saved evidence (277282 Bytes) of first contact as txt November 12 2004 04:52:12 CET.Saved evidence (277282 Bytes) of last contact as txt November 12 2004 04:52:12 CET. aliveSaved log of last contact as txt August 30 2010 16:31:02 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/drsetup.dat follow up this domain(ss-01.com) ss-01.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@theplanet.com) as RSS-Feed abuse@theplanet.com follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item NETBLK-THEPLANET-BLK-EV1-14 follow up this item ThePlanet.com Internet Services, Inc. TPCM 315 Capitol Suite 205 Houston TX 77002 follow up this item ns1.theplanet.com follow up this item ns2.theplanet.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/drsetup.dat
18 48697Report false positive Report closed case make a suggestion 2008-06-05 19:45:00 OVERDUE! Overdue!19658.5 follow up this itemfollow up this contributor (sub4) as RSS-Feed sub4lookup Evidence at malwaredomainlist.com
Saved local log of anubis as txt August 30 2009 13:21:30 CEST.Saved local log of joebox May 11 2010 11:32:14 CEST.37/41 (90.24%) Virustotal. MD5: 9818d59d427f6edcf946d8ba4db09d2a Infostealer Heuristic.LooksLike.Win32.Suspicious.B!83 Trojan-PSW.Win32.Small.ex lookup in virustotal.com (9818d59d427f6edcf946d8ba4db09d2a)-->[http://www.virustotal.com/analisis/8c79299f4b1ed5d47cf07ce03a6840672a1f6d32d76824293fceed4d39060158-1251299079 ]lookup the sha256(8c79299f4b1ed5d47cf07ce03a6840672a1f6d32d76824293fceed4d39060158) in comodo.comfollow up this md5sum(9818d59d427f6edcf946d8ba4db09d2a)follow up this itemfollow up this virusname (TR%2FPSW.Small.EX) as RSS-Feedlookup Virusname at avirafollow up this malware(TR%2FPSW.Small.EX) for scanner (avira) in md5 table37/41 (90.24%) TR/PSW.Small.EX
 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/rspoolv.dat  up Saved evidence (45793 Bytes) of first contact as txt February 05 2008 21:30:37 CET.Saved evidence (45793 Bytes) of last contact as txt February 05 2008 21:30:37 CET. aliveSaved log of last contact as txt August 30 2010 16:31:00 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/rspoolv.dat follow up this domain(ss-01.com) ss-01.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@theplanet.com) as RSS-Feed abuse@theplanet.com follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item NETBLK-THEPLANET-BLK-EV1-14 follow up this item ThePlanet.com Internet Services, Inc. TPCM 315 Capitol Suite 205 Houston TX 77002 follow up this item ns1.theplanet.com follow up this item ns2.theplanet.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/rspoolv.dat
19 48698Report false positive Report closed case make a suggestion 2008-06-05 19:45:00 OVERDUE! Overdue!19658.5 follow up this itemfollow up this contributor (sub4) as RSS-Feed sub4lookup Evidence at malwaredomainlist.com
lookup in anubisSaved local log of joebox May 11 2010 11:33:40 CEST.14/41 (34.15%) Virustotal. MD5: c2475e82370d0662b9230be7223b0399 Spyware.NetVizor probably a variant of Win32/Spy.Agent MonitoringTool:Win32/SpytechNetVizor lookup in virustotal.com (c2475e82370d0662b9230be7223b0399)-->[http://www.virustotal.com/analisis/744a52dfaa13184ba36109e5d60d17cbc735370b3a82e4c5d9a276be8e480cd3-1251299178 ]lookup in threatexpert.comlookup the sha256(744a52dfaa13184ba36109e5d60d17cbc735370b3a82e4c5d9a276be8e480cd3) in comodo.comfollow up this md5sum(c2475e82370d0662b9230be7223b0399)follow up this itemfollow up this virusname (MonitoringTool.Win32.SpytechNetVizor%21IK) as RSS-Feedfollow up this malware(MonitoringTool.Win32.SpytechNetVizor%21IK) for scanner (a_squared) in md5 table14/41 (34.15%) MonitoringTool.Win32.SpytechNetVizor!IK
 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/rsscap.dat  up Saved evidence (270336 Bytes) of first contact as txt September 19 2000 01:37:00 CEST.Saved evidence (270336 Bytes) of last contact as txt September 19 2000 01:37:00 CEST. aliveSaved log of last contact as txt August 30 2010 16:30:57 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/rsscap.dat follow up this domain(ss-01.com) ss-01.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@theplanet.com) as RSS-Feed abuse@theplanet.com follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item NETBLK-THEPLANET-BLK-EV1-14 follow up this item ThePlanet.com Internet Services, Inc. TPCM 315 Capitol Suite 205 Houston TX 77002 follow up this item ns1.theplanet.com follow up this item ns2.theplanet.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/rsscap.dat
20 48699Report false positive Report closed case make a suggestion 2008-06-05 19:45:00 OVERDUE! Overdue!19658.5 follow up this itemfollow up this contributor (sub4) as RSS-Feed sub4lookup Evidence at malwaredomainlist.com
lookup in anubisSaved local log of joebox May 11 2010 11:34:44 CEST.27/41 (65.85%) Virustotal. MD5: 913b3cbff5d97da98b1bfb82aee6d24a Adware.Gen Heuristic.LooksLike.Win32.SpyAgent.L Monitor.Win32.SpyAgent.aa lookup in virustotal.com (913b3cbff5d97da98b1bfb82aee6d24a)-->[http://www.virustotal.com/analisis/577e05126c72688af8031471a781b764235f1dd8bdad9117383bf74848d37b96-1251299078 ]lookup the sha256(577e05126c72688af8031471a781b764235f1dd8bdad9117383bf74848d37b96) in comodo.comfollow up this md5sum(913b3cbff5d97da98b1bfb82aee6d24a)follow up this itemfollow up this virusname (SPR%2FSpyAgent.AA) as RSS-Feedlookup Virusname at avirafollow up this malware(SPR%2FSpyAgent.AA) for scanner (avira) in md5 table27/41 (65.85%) SPR/SpyAgent.AA
 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/RTSk16.dll  up Saved evidence (25828 Bytes) of first contact as txt February 03 2008 09:39:08 CET.Saved evidence (25828 Bytes) of last contact as txt February 03 2008 09:39:08 CET. aliveSaved log of last contact as txt August 30 2010 16:30:55 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/RTSk16.dll follow up this domain(ss-01.com) ss-01.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@theplanet.com) as RSS-Feed abuse@theplanet.com follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item NETBLK-THEPLANET-BLK-EV1-14 follow up this item ThePlanet.com Internet Services, Inc. TPCM 315 Capitol Suite 205 Houston TX 77002 follow up this item ns1.theplanet.com follow up this item ns2.theplanet.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/RTSk16.dll
21 48700Report false positive Report closed case make a suggestion 2008-06-05 19:45:00 OVERDUE! Overdue!19658.5 follow up this itemfollow up this contributor (sub4) as RSS-Feed sub4lookup Evidence at malwaredomainlist.com
Saved local log of anubis as txt August 30 2009 12:53:30 CEST.Saved local log of joebox May 11 2010 11:36:10 CEST.32/41 (78.05%) Virustotal. MD5: 6d7aae596080989fbd67df7c94c204f6 Adware.Gen Heuristic.LooksLike.Win32.Suspicious.H!83 Monitor.Win32.SpyAgent.ae lookup in virustotal.com (6d7aae596080989fbd67df7c94c204f6)-->[http://www.virustotal.com/analisis/efc9565513d34e77ef88369791d49b8ce96ac76237d7d7dab603d896dd4f7ebf-1251299263 ]lookup in threatexpert.comlookup the sha256(efc9565513d34e77ef88369791d49b8ce96ac76237d7d7dab603d896dd4f7ebf) in comodo.comfollow up this md5sum(6d7aae596080989fbd67df7c94c204f6)follow up this itemfollow up this virusname (SPR%2FSpyAgent.BO) as RSS-Feedlookup Virusname at avirafollow up this malware(SPR%2FSpyAgent.BO) for scanner (avira) in md5 table32/41 (78.05%) SPR/SpyAgent.BO
 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/winsrvc.exe  up Saved evidence (20754 Bytes) of first contact as txt February 05 2008 21:35:17 CET.Saved evidence (49956 Bytes) of last contact as txt October 07 2009 09:34:42 CEST. alive29202Saved log of last contact as txt August 30 2010 16:30:54 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/winsrvc.exe follow up this domain(ss-01.com) ss-01.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@theplanet.com) as RSS-Feed abuse@theplanet.com follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item NETBLK-THEPLANET-BLK-EV1-14 follow up this item ThePlanet.com Internet Services, Inc. TPCM 315 Capitol Suite 205 Houston TX 77002 follow up this item ns1.theplanet.com follow up this item ns2.theplanet.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/winsrvc.exe
22 48701Report false positive Report closed case make a suggestion 2008-06-05 19:45:00 OVERDUE! Overdue!19658.5 follow up this itemfollow up this contributor (sub4) as RSS-Feed sub4lookup Evidence at malwaredomainlist.com
lookup in anubisSaved local log of joebox May 11 2010 11:37:20 CEST.30/41 (73.17%) Virustotal. MD5: eed0e7dd5e1d913b30c428952a2e9222 Spyware.NetVizor Riskware.SpyAgent.60006.11 Monitor.Win32.SpyAgent.60006 lookup in virustotal.com (eed0e7dd5e1d913b30c428952a2e9222)-->[http://www.virustotal.com/analisis/dac4557af5c2a8d2ee8ee31b9f6405978d74b3a4e5c333841aabb8d150ca1303-1251299265 ]lookup the sha256(dac4557af5c2a8d2ee8ee31b9f6405978d74b3a4e5c333841aabb8d150ca1303) in comodo.comfollow up this md5sum(eed0e7dd5e1d913b30c428952a2e9222)follow up this itemfollow up this virusname (SPR%2FTool.SpyAgent.A.1) as RSS-Feedlookup Virusname at avirafollow up this malware(SPR%2FTool.SpyAgent.A.1) for scanner (avira) in md5 table30/41 (73.17%) SPR/Tool.SpyAgent.A.1
 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/YahooDLL.dll  up Saved evidence (49931 Bytes) of first contact as txt February 05 2008 21:41:46 CET.Saved evidence (50004 Bytes) of last contact as txt January 14 2010 07:24:46 CET. alive73Saved log of last contact as txt August 30 2010 16:30:52 CEST. SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(ip) in same window 67.15.70.100 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) in networks tablefollow up this itemfollow up this AS (AS36420, AS30315, AS13749, AS21844, AS13884) as RSS-Feed AS36420, AS30315, AS13749, AS21844, AS13884 SenderBaselookup 67.15.70.100 at Rus CERT university stuttgart germanylookup 67.15.70.100 at ARINfollow up this item(review) in same window 67.15.70.100 Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/YahooDLL.dll follow up this domain(ss-01.com) ss-01.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (abuse@theplanet.com) as RSS-Feed abuse@theplanet.com follow up this itemfollow up this item 67.15.0.0 - 67.15.255.255 follow up this item NETBLK-THEPLANET-BLK-EV1-14 follow up this item ThePlanet.com Internet Services, Inc. TPCM 315 Capitol Suite 205 Houston TX 77002 follow up this item ns1.theplanet.com follow up this item ns2.theplanet.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to complete http://ss-01.com/R0400/YahooDLL.dll
Click here for other vital incidents