CLEAN MX realtime database    
public access query for virus URL statistics
Totally watched: 825273 As of 2013-06-20 05:31:32 CEST

you have also some phishing incidents open see: click here for these incidents (3604)


you have also some portals incidents open see: click here for these incidents (11550)

Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006
Tweet
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 5.0538 Seconds 10 hits
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 follow up this item(12218297) 12218297 Report false positive Report closed case make a suggestion 2013-06-20 04:30:35     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
lookup in virustotal.com (e8ae956c32e9a93a789984f06724d7bf)follow up this md5sum(e8ae956c32e9a93a789984f06724d7bf)follow up this itemfollow up this virusname (unknown_html) as RSS-Feedfollow up this malware(unknown_html) for scanner (undef) in md5 table unknown_html
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://hw001.spaaqs.ne.jp/concorde/  up No previous evidence recordedSaved evidence (15670 Bytes) of last contact as txt June 16 2013 09:58:05 CEST. aliveSaved log of last contact as txt June 20 2013 04:36:52 CEST. SenderBaselookup 58.159.206.66 at virustotallookup 58.159.206.66 at Rus CERT university stuttgart germanylookup 58.159.206.66 at apnicfollow up this item(ip) in same window 58.159.206.66 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS132524) in networks tablefollow up this itemfollow up this AS (AS132524) as RSS-Feed AS132524 SenderBaselookup 58.159.206.66 at virustotallookup 58.159.206.66 at Rus CERT university stuttgart germanylookup 58.159.206.66 at apnicfollow up this item(review) in same window 58.159.206.66 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://hw001.spaaqs.ne.jp/concorde/ lookup spaaqs.ne.jp at virustotalfollow up this domain(spaaqs.ne.jp) spaaqs.ne.jp follow up this itemfollow up this country (JP) as RSS-Feed JP follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC   follow up this itemfollow up this item 58.158.0.0 - 58.159.255.255 follow up this item  follow up this item  follow up this item ns01.usen.ad.jp follow up this item ns03.usen.ad.jp follow up this item ns02.usen.ad.jp follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://hw001.spaaqs.ne.jp/concorde/
2 follow up this item(12218064) 12218064 Report false positive Report closed case make a suggestion 2013-06-20 04:10:25     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
1/46 (2.2%) 
 Trojan.Genome.airxm 
 lookup in virustotal.com (4cff94be452edd9429fba87bae164749)-->[http://www.virustotal.com/latest-report.html?resource=b9683e2cf6f37b0965d17f37973c24d0]lookup in threatexpert.comlookup the sha256(6b87837f1f587712525ebb277c122c4099c93b036a65476859f975c826a898c6) in comodo.comfollow up this md5sum(4cff94be452edd9429fba87bae164749)follow up this itemfollow up this virusname (Trojan.Genome.airxm) as RSS-Feedfollow up this malware(Trojan.Genome.airxm) for scanner (VBA32) in md5 table1/46 (2.2%) Trojan.Genome.airxm
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://tk.wangyuehd.com/soft/skycn/Googl ...  up No previous evidence recordedSaved evidence (1307880 Bytes) of last contact as txt May 07 2013 11:01:48 CEST. aliveSaved log of last contact as txt June 20 2013 04:36:55 CEST. SenderBaselookup 61.147.115.210 at virustotallookup 61.147.115.210 at Rus CERT university stuttgart germanylookup 61.147.115.210 at apnicfollow up this item(ip) in same window 61.147.115.210 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS23650) in networks tablefollow up this itemfollow up this AS (AS23650) as RSS-Feed AS23650 SenderBaselookup 61.147.115.210 at virustotallookup 61.147.115.210 at Rus CERT university stuttgart germanylookup 61.147.115.210 at apnicfollow up this item(review) in same window 61.147.115.210 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://tk.wangyuehd.com/soft/skycn/Googl ... lookup wangyuehd.com at virustotalfollow up this domain(wangyuehd.com) wangyuehd.com follow up this itemfollow up this country (CN) as RSS-Feed CN follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (abuse@jsinfo.net) as RSS-Feed abuse@jsinfo.net follow up this itemfollow up this item 61.147.0.0 - 61.147.255.255 follow up this item CHINANET-JS follow up this item CHINANET jiangsu province networkChina TelecomA12,Xin-Jie-Kou-Wai StreetBeijing 100088CHINANET jiangsu province network follow up this item f1g1ns2.dnspod.net follow up this item f1g1ns1.dnspod.net follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://tk.wangyuehd.com/soft/skycn/Googl ...
3 follow up this item(12218031) 12218031 Report false positive Report closed case make a suggestion 2013-06-20 04:10:21     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
1/47 (2.1%) 
 Mal/FBJack-A 
 lookup in virustotal.com (db9f6888a56ca58d197340095c19d9c3)-->[http://www.virustotal.com/latest-report.html?resource=db9f6888a56ca58d197340095c19d9c3]follow up this md5sum(db9f6888a56ca58d197340095c19d9c3)follow up this itemfollow up this virusname (Mal%2FFBJack-A) as RSS-Feedfollow up this malware(Mal%2FFBJack-A) for scanner (undef) in md5 table1/47 (2.1%) Mal/FBJack-A
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://rao365.com/threads/tuyen-nhan-vie ...  up No previous evidence recordedSaved evidence (84562 Bytes) of last contact as txt June 20 2013 04:33:31 CEST. aliveSaved log of last contact as txt June 20 2013 04:32:57 CEST. SenderBaselookup 123.30.128.161 at virustotallookup 123.30.128.161 at Rus CERT university stuttgart germanylookup 123.30.128.161 at apnicfollow up this item(ip) in same window 123.30.128.161 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS7643) in networks tablefollow up this itemfollow up this AS (AS7643) as RSS-Feed AS7643 SenderBaselookup 123.30.128.161 at virustotallookup 123.30.128.161 at Rus CERT university stuttgart germanylookup 123.30.128.161 at apnicfollow up this item(review) in same window 123.30.128.161 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://rao365.com/threads/tuyen-nhan-vie ... lookup rao365.com at virustotalfollow up this domain(rao365.com) rao365.com follow up this itemfollow up this country (vn) as RSS-Feed vn follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (abuse@vnn.vn) as RSS-Feed abuse@vnn.vn follow up this itemfollow up this item 123.30.0.0 - 123.31.255.255 follow up this item VDC-NET follow up this item VietNam Data Communication Company (VDC)VietNam Post and Telecom Corporation (VNPT)VNPT-AS-AP follow up this item mdns4.nhanhoa.com follow up this item mdns1.nhanhoa.com follow up this item mdns3.nhanhoa.com follow up this item mdns2.nhanhoa.com follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://rao365.com/threads/tuyen-nhan-vie ...
4 follow up this item(12217965) 12217965 Report false positive Report closed case make a suggestion 2013-06-20 04:10:08     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
0/43 (0.0%) 
  
 lookup in virustotal.com (168a55af39d0a5eef3540514acd432f8)-->[queue]follow up this md5sum(168a55af39d0a5eef3540514acd432f8)follow up this itemfollow up this virusname (unknown_html) as RSS-Feedfollow up this malware(unknown_html) for scanner (undef) in md5 table0/43 (0.0%) unknown_html
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://amino-cn.com/  up No previous evidence recordedSaved evidence (11909 Bytes) of last contact as txt March 05 2013 04:16:17 CET. aliveSaved log of last contact as txt June 20 2013 04:33:57 CEST. SenderBaselookup 122.193.17.47 at virustotallookup 122.193.17.47 at Rus CERT university stuttgart germanylookup 122.193.17.47 at apnicfollow up this item(ip) in same window 122.193.17.47 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS4837) in networks tablefollow up this itemfollow up this AS (AS4837) as RSS-Feed AS4837 SenderBaselookup 122.193.17.47 at virustotallookup 122.193.17.47 at Rus CERT university stuttgart germanylookup 122.193.17.47 at apnicfollow up this item(review) in same window 122.193.17.47 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://amino-cn.com/ lookup amino-cn.com at virustotalfollow up this domain(amino-cn.com) amino-cn.com follow up this itemfollow up this country (CN) as RSS-Feed CN follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (abuse@chinaunicom.cn) as RSS-Feed abuse@chinaunicom.cn follow up this itemfollow up this item 122.192.0.0 - 122.195.255.255 follow up this item UNICOM-JS follow up this item China Unicom Jiangsu province networkChina UnicomCNC Group CHINA169 Jiangsu Province Network follow up this item ns17.xincache.com follow up this item ns18.xincache.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://amino-cn.com/
5 follow up this item(12217951) 12217951 Report false positive Report closed case make a suggestion 2013-06-20 04:10:06     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
4/36 (11.1%) 
 
WS.Reputation.1
PAK_Generic.001
Win32.Banker
PAK_Generic.001 
 lookup in virustotal.com (81c0b3ab8ad21ababfb71ca49cd1de4d)-->[http://www.virustotal.com/latest-report.html?resource=81c0b3ab8ad21ababfb71ca49cd1de4d]lookup in threatexpert.comlookup the sha256(c0414c078f264c51a2ddbb7d8a591b9fdd9e9cfbae007bbc5d01067cd249972f) in comodo.comfollow up this md5sum(81c0b3ab8ad21ababfb71ca49cd1de4d)follow up this itemfollow up this virusname (Win32.Banker) as RSS-Feedfollow up this malware(Win32.Banker) for scanner (eSafe) in md5 table4/36 (11.1%) Win32.Banker
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://222.73.28.88/9/file.data.weipan.c ...  up No previous evidence recordedSaved evidence (627799 Bytes) of last contact as txt April 18 2013 05:54:31 CEST. aliveSaved log of last contact as txt June 20 2013 04:34:38 CEST. SenderBaselookup 222.73.28.88 at virustotallookup 222.73.28.88 at Rus CERT university stuttgart germanylookup 222.73.28.88 at apnicfollow up this item(ip) in same window 222.73.28.88 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS132524) in networks tablefollow up this itemfollow up this AS (AS132524) as RSS-Feed AS132524 SenderBaselookup 222.73.28.88 at virustotallookup 222.73.28.88 at Rus CERT university stuttgart germanylookup 222.73.28.88 at apnicfollow up this item(review) in same window 222.73.28.88 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://222.73.28.88/9/file.data.weipan.c ... lookup 222.73.28.88 at virustotalfollow up this domain(222.73.28.88) 222.73.28.88 follow up this itemfollow up this country (CN) as RSS-Feed CN follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC   follow up this itemfollow up this item 222.72.0.0 - 222.73.255.255 follow up this item  follow up this item  follow up this item  follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://222.73.28.88/9/file.data.weipan.c ...
6 follow up this item(12217939) 12217939 Report false positive Report closed case make a suggestion 2013-06-20 04:10:03     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
3/38 (7.9%) 
  
 lookup in virustotal.com (1930b6c25fba47e4097fec5bb4de36a5)-->[http://www.virustotal.com/latest-report.html?resource=f1199c7910988500f7781fbe83a0f9ff]follow up this md5sum(1930b6c25fba47e4097fec5bb4de36a5)follow up this itemfollow up this virusname (HEUR%3ATrojan.Script.Generic) as RSS-Feedfollow up this malware(HEUR%3ATrojan.Script.Generic) for scanner (Kaspersky) in md5 table3/38 (7.9%) HEUR:Trojan.Script.Generic
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://140.135.131.202/%7Emaster2006/ins ...  up No previous evidence recordedSaved evidence (442 Bytes) of last contact as txt December 11 2012 09:42:12 CET. aliveSaved log of last contact as txt June 20 2013 04:35:24 CEST. SenderBaselookup 140.135.131.202 at virustotallookup 140.135.131.202 at Rus CERT university stuttgart germanylookup 140.135.131.202 at apnicfollow up this item(ip) in same window 140.135.131.202 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS7539) in networks tablefollow up this itemfollow up this AS (AS7539) as RSS-Feed AS7539 SenderBaselookup 140.135.131.202 at virustotallookup 140.135.131.202 at Rus CERT university stuttgart germanylookup 140.135.131.202 at apnicfollow up this item(review) in same window 140.135.131.202 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://140.135.131.202/%7Emaster2006/ins ... lookup 140.135.131.202 at virustotalfollow up this domain(140.135.131.202) 140.135.131.202 follow up this itemfollow up this country (TW) as RSS-Feed TW follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (abuse@cycu.edu.tw) as RSS-Feed abuse@cycu.edu.tw follow up this itemfollow up this item 140.135.0.0 - 140.135.255.255 follow up this item T-CYCU.EDU.TW-NET follow up this item Chung Yuan Christian UniversityChung Li Taiwan follow up this item  follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://140.135.131.202/%7Emaster2006/ins ...
7 follow up this item(12217888) 12217888 Report false positive Report closed case make a suggestion 2013-06-20 04:00:36     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
4/36 (11.1%) 
 
WS.Reputation.1
PAK_Generic.001
Win32.Banker
PAK_Generic.001 
 lookup in virustotal.com (81c0b3ab8ad21ababfb71ca49cd1de4d)-->[http://www.virustotal.com/latest-report.html?resource=81c0b3ab8ad21ababfb71ca49cd1de4d]lookup in threatexpert.comlookup the sha256(c0414c078f264c51a2ddbb7d8a591b9fdd9e9cfbae007bbc5d01067cd249972f) in comodo.comfollow up this md5sum(81c0b3ab8ad21ababfb71ca49cd1de4d)follow up this itemfollow up this virusname (Win32.Banker) as RSS-Feedfollow up this malware(Win32.Banker) for scanner (eSafe) in md5 table4/36 (11.1%) Win32.Banker
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://222.73.28.88/9/file.data.weipan.c ...  up No previous evidence recordedSaved evidence (627799 Bytes) of last contact as txt April 18 2013 05:54:31 CEST. aliveSaved log of last contact as txt June 20 2013 04:11:39 CEST. SenderBaselookup 222.73.28.88 at virustotallookup 222.73.28.88 at Rus CERT university stuttgart germanylookup 222.73.28.88 at apnicfollow up this item(ip) in same window 222.73.28.88 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS132524) in networks tablefollow up this itemfollow up this AS (AS132524) as RSS-Feed AS132524 SenderBaselookup 222.73.28.88 at virustotallookup 222.73.28.88 at Rus CERT university stuttgart germanylookup 222.73.28.88 at apnicfollow up this item(review) in same window 222.73.28.88 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://222.73.28.88/9/file.data.weipan.c ... lookup 222.73.28.88 at virustotalfollow up this domain(222.73.28.88) 222.73.28.88 follow up this itemfollow up this country (CN) as RSS-Feed CN follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC   follow up this itemfollow up this item 222.72.0.0 - 222.73.255.255 follow up this item  follow up this item  follow up this item  follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://222.73.28.88/9/file.data.weipan.c ...
8 follow up this item(12217865) 12217865 Report false positive Report closed case make a suggestion 2013-06-20 03:40:28     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
20/47 (42.6%) 
 JS:Trojan.JS.Iframe.DI
JS/Exploit-Blacole.ht
Trojan.Script.Expack.bqgmvl
JS/IFrame.RS.gen
Blacole.TH
JS:Decode-ZN
[Trj]
JS:Trojan.JS.Iframe.DI
TrojWare.JS.BlacoleRef.AC
JS:Trojan.JS.Iframe.DI
JS.IFrame.418
Trojan.JS.Obfuscator.aa
(v)
JS/BlacoleRef.DD.1
H 
 lookup in virustotal.com (444bcb3a3fcf8389296c49467f27e1d6)-->[http://www.virustotal.com/latest-report.html?resource=a2b5bff8ac7605ced1f85094a1c3d3f3]follow up this md5sum(444bcb3a3fcf8389296c49467f27e1d6)follow up this itemfollow up this virusname (JS%2FExploit) as RSS-Feedfollow up this malware(JS%2FExploit) for scanner (undef) in md5 table20/47 (42.6%) JS/Exploit
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.kubotakaikei.net/atmailform_d ...  up No previous evidence recordedSaved evidence (2 Bytes) of last contact as txt June 20 2013 04:12:37 CEST. aliveSaved log of last contact as txt June 20 2013 04:12:37 CEST. SenderBaselookup 210.172.144.247 at virustotallookup 210.172.144.247 at Rus CERT university stuttgart germanylookup 210.172.144.247 at apnicfollow up this item(ip) in same window 210.172.144.247 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS7506) in networks tablefollow up this itemfollow up this AS (AS7506) as RSS-Feed AS7506 SenderBaselookup 210.172.144.247 at virustotallookup 210.172.144.247 at Rus CERT university stuttgart germanylookup 210.172.144.247 at apnicfollow up this item(review) in same window 210.172.144.247 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.kubotakaikei.net/atmailform_d ... lookup kubotakaikei.net at virustotalfollow up this domain(kubotakaikei.net) kubotakaikei.net follow up this itemfollow up this country (JP) as RSS-Feed JP follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (warita@gmo.jp) as RSS-Feed warita@gmo.jp follow up this itemfollow up this item 210.172.128.0 - 210.172.191.255 follow up this item INTERQ follow up this item Global Media Online inc. follow up this item uns01.lolipop.jp follow up this item uns02.lolipop.jp follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.kubotakaikei.net/atmailform_d ...
9 follow up this item(12217859) 12217859 Report false positive Report closed case make a suggestion 2013-06-20 03:40:28     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
lookup in virustotal.com (aa3417ed969bcda63e6f125e29e6bc29)follow up this md5sum(aa3417ed969bcda63e6f125e29e6bc29)follow up this itemfollow up this virusname (unknown_html) as RSS-Feedfollow up this malware(unknown_html) for scanner (undef) in md5 table unknown_html
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.fosterlink.co.jp/  up No previous evidence recordedSaved evidence (15137 Bytes) of last contact as txt June 20 2013 04:11:31 CEST. aliveSaved log of last contact as txt June 20 2013 04:12:52 CEST. SenderBaselookup 59.106.27.212 at virustotallookup 59.106.27.212 at Rus CERT university stuttgart germanylookup 59.106.27.212 at apnicfollow up this item(ip) in same window 59.106.27.212 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS9370) in networks tablefollow up this itemfollow up this AS (AS9370) as RSS-Feed AS9370 SenderBaselookup 59.106.27.212 at virustotallookup 59.106.27.212 at Rus CERT university stuttgart germanylookup 59.106.27.212 at apnicfollow up this item(review) in same window 59.106.27.212 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.fosterlink.co.jp/ lookup fosterlink.co.jp at virustotalfollow up this domain(fosterlink.co.jp) fosterlink.co.jp follow up this itemfollow up this country (JP) as RSS-Feed JP follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (tanaka-nic@sakura.ad.jp) as RSS-Feed tanaka-nic@sakura.ad.jp follow up this itemfollow up this item 59.106.12.0-59.106.27.255 follow up this item SAKURA-NET follow up this item SAKURA Internet Inc. follow up this item ns1.dns.ne.jp follow up this item ns2.dns.ne.jp follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.fosterlink.co.jp/
10 follow up this item(12217851) 12217851 Report false positive Report closed case make a suggestion 2013-06-20 03:40:27     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
18/36 (50%) 
 
Worm.Win32.Viking.FU
HTML/Jadtre.Y
Trojan
JS/Redir.EP
W32.Wapomi!html
Redirector.FK
HTML:Script-inf
JS.Agent-157
Worm.Win32.Viking.FU
TrojWare.JS.Agent.SCR
Worm.Win32.Viking.FU
JS/Agent.brx
Worm.Win32.Viking.FU
(B)
Trojan:HTML/Redirector.AD
Worm.Win32.V 
 lookup in virustotal.com (f16509dbd14329f801f255f737833a29)-->[http://www.virustotal.com/latest-report.html?resource=f16509dbd14329f801f255f737833a29]follow up this md5sum(f16509dbd14329f801f255f737833a29)follow up this itemfollow up this virusname (JS%2FAgent.brx) as RSS-Feedlookup Virusname at avirafollow up this malware(JS%2FAgent.brx) for scanner (avira) in md5 table18/36 (50%) JS/Agent.brx
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.cnhrsf.com/  up No previous evidence recordedSaved evidence (34780 Bytes) of last contact as txt June 16 2013 18:36:07 CEST. aliveSaved log of last contact as txt June 20 2013 04:14:36 CEST. SenderBaselookup 117.41.249.5 at virustotallookup 117.41.249.5 at Rus CERT university stuttgart germanylookup 117.41.249.5 at apnicfollow up this item(ip) in same window 117.41.249.5 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS4134) in networks tablefollow up this itemfollow up this AS (AS4134) as RSS-Feed AS4134 SenderBaselookup 117.41.249.5 at virustotallookup 117.41.249.5 at Rus CERT university stuttgart germanylookup 117.41.249.5 at apnicfollow up this item(review) in same window 117.41.249.5 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.cnhrsf.com/ lookup cnhrsf.com at virustotalfollow up this domain(cnhrsf.com) cnhrsf.com follow up this itemfollow up this country (CN) as RSS-Feed CN follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (anti-spam@ns.chinanet.cn.net) as RSS-Feed anti-spam@ns.chinanet.cn.net follow up this itemfollow up this item 117.40.0.0 - 117.43.255.255 follow up this item CHINANET-JX follow up this item CHINANET Jiangxi province networkChina TelecomNo.31,jingrong streetBeijing 100032 follow up this item yns2.yahoo.com follow up this item yns1.yahoo.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.cnhrsf.com/
Click here for other vital incidents



Protected by clean MX [Valid RSS] Valid HTML 4.01 Transitional CSS ist valide!
Access is provided for free and subject to these Terms and Conditions.