CLEAN MX realtime database    
public access query for virus URL statistics
Totally watched: 3619299 As of 2014-04-24 03:57:05 CEST
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006
Tweet
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.2597 Seconds 10 hits
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 follow up this item(20858750) 20858750 Report false positive Report closed case make a suggestion 2014-02-16 00:11:25 OVERDUE! Overdue!1611.1 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet24/46 (52.2%) 
 
HTML/Framer
JS:Agent-AOA
Trj
Trojan.JS.QVC
JS/IFrame.RJ
TrojWare.JS.Agent.gf
JS.IFrame.505
JS/Iframe.FT
Trojan.JS.QVC
(B)
JS/IFrame.RJ
Trojan.JS.QVC
JS/Iframe.DBS!tr.dldr
Trojan.JS.QVC
Trojan.JS.IFrame
Trojan/Script.Gen
Trojan
(
e1cf975d0
)
Trojan-Downl 
 lookup in virustotal.com (b867005dbada6a878d089f41f4b72eee)-->[http://www.virustotal.com/latest-report.html?resource=b867005dbada6a878d089f41f4b72eee]follow up this md5sum(b867005dbada6a878d089f41f4b72eee)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table24/46 (52.2%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.dokdzierzgon.pl/js/menu.js  up No previous evidence recordedSaved evidence (5661 Bytes) of last contact as txt May 13 2012 19:27:24 CEST. aliveSaved log of last contact as txt February 17 2014 15:17:25 CET. follow up this ip (ip=194.28.230.121) as RSS-FeedSenderBaselookup 194.28.230.121 at virustotallookup 194.28.230.121 at Rus CERT university stuttgart germanylookup 194.28.230.121 at Ripefollow up this item(ip) in same window 194.28.230.121 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS15694) in networks tablefollow up this itemfollow up this AS (AS15694) as RSS-Feed AS15694 follow up this ip (review=194.28.230.121) as RSS-FeedSenderBaselookup 194.28.230.121 at virustotallookup 194.28.230.121 at Rus CERT university stuttgart germanylookup 194.28.230.121 at Ripefollow up this item(review) in same window 194.28.230.121 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.dokdzierzgon.pl/js/menu.js follow up this domain (dokdzierzgon.pl) as RSS-Feedlookup dokdzierzgon.pl at virustotalfollow up this domain(dokdzierzgon.pl) dokdzierzgon.pl follow up this itemfollow up this country (PL) as RSS-Feed PL follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@vbiz.pl) as RSS-Feed abuse@vbiz.pl follow up this itemfollow up this item 194.28.228.0 - 194.28.231.255 follow up this item VBIZ-PL follow up this item vSolutions Pawel GruszeckivSolutions Pawel Gruszecki follow up this item ns1.vbiz.pl follow up this item ns2.vbiz.pl follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.dokdzierzgon.pl/js/menu.js
2 follow up this item(20833740) 20833740 Report false positive Report closed case make a suggestion 2014-02-15 16:11:16 OVERDUE! Overdue!1619.1 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet23/46 (50%) 
 
HTML/Framer
JS:Agent-AOA
Trj
Trojan.JS.QVC
MW.Clod8b7.Trojan.ca8d
JS/IFrame.RJ
TrojWare.JS.Agent.gf
JS.IFrame.346
Trojan.JS.QVC
(B)
JS/IFrame.RJ
Trojan.JS.QVC
JS/Iframe.DBS!tr.dldr
Trojan.JS.QVC
Trojan.Script
Trojan/Script.Gen
Trojan
(
e1cf975d0
)
Troja 
 lookup in virustotal.com (8b7ca8dea20b0ae2b96cbe99a3ac9c68)-->[http://www.virustotal.com/latest-report.html?resource=8b7ca8dea20b0ae2b96cbe99a3ac9c68]follow up this md5sum(8b7ca8dea20b0ae2b96cbe99a3ac9c68)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table23/46 (50%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.betexplorer.mobi/wp-content/t ...  up No previous evidence recordedSaved evidence (9277 Bytes) of last contact as txt May 13 2012 15:09:04 CEST. aliveSaved log of last contact as txt February 19 2014 01:09:35 CET. follow up this ip (ip=92.48.110.5) as RSS-FeedSenderBaselookup 92.48.110.5 at virustotallookup 92.48.110.5 at Rus CERT university stuttgart germanylookup 92.48.110.5 at Ripefollow up this item(ip) in same window 92.48.110.5 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS29550) in networks tablefollow up this itemfollow up this AS (AS29550) as RSS-Feed AS29550 follow up this ip (review=92.48.110.5) as RSS-FeedSenderBaselookup 92.48.110.5 at virustotallookup 92.48.110.5 at Rus CERT university stuttgart germanylookup 92.48.110.5 at Ripefollow up this item(review) in same window 92.48.110.5 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.betexplorer.mobi/wp-content/t ... follow up this domain (betexplorer.mobi) as RSS-Feedlookup betexplorer.mobi at virustotalfollow up this domain(betexplorer.mobi) betexplorer.mobi follow up this itemfollow up this country (GB) as RSS-Feed GB follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@as29550.net) as RSS-Feed abuse@as29550.net follow up this itemfollow up this item 92.48.64.0 - 92.48.127.255 follow up this item UK-POUNDHOST-20071113 follow up this item Simply Transit Ltd follow up this item ns25.redbackinternet.net follow up this item ns26.redbackinternet.net follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.betexplorer.mobi/wp-content/t ...
3 follow up this item(20040091) 20040091 Report false positive Report closed case make a suggestion 2014-02-02 08:22:49 OVERDUE! Overdue!1938.9 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet19/50 (38%) 
 Trojan.JS.QVC
Trojan.JS.QVC
Trojan
(
e1cf975d0
)
Trojan
(
e1cf975d0
)
JS/IFrame.RJ
Iframe.RN
JS:Agent-AOA
[Trj]
Trojan.JS.QVC
Trojan.JS.QVC
Trojan.JS.QVC
(B)
TrojWare.JS.Agent.gf
Trojan.JS.QVC
Troj/JSRedir-HZ
Trojan/Script.Gen
Trojan:JS/Iframe.CR
Trojan. 
 lookup in virustotal.com (3b70ed4a69f7bc2b2e4383186df8f103)-->[http://www.virustotal.com/latest-report.html?resource=3b70ed4a69f7bc2b2e4383186df8f103]follow up this md5sum(3b70ed4a69f7bc2b2e4383186df8f103)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table19/50 (38%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://stsalescorp.com/wp-content/themes ...  up Saved evidence (5576 Bytes) of first contact as txt February 13 2013 08:36:47 CET.Saved evidence (5576 Bytes) of last contact as txt February 13 2013 08:36:47 CET. aliveSaved log of last contact as txt February 24 2014 16:22:29 CET. follow up this ip (ip=97.74.144.150) as RSS-FeedSenderBaselookup 97.74.144.150 at virustotallookup 97.74.144.150 at Rus CERT university stuttgart germanylookup 97.74.144.150 at ARINfollow up this item(ip) in same window 97.74.144.150 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 follow up this ip (review=97.74.144.150) as RSS-FeedSenderBaselookup 97.74.144.150 at virustotallookup 97.74.144.150 at Rus CERT university stuttgart germanylookup 97.74.144.150 at ARINfollow up this item(review) in same window 97.74.144.150 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://stsalescorp.com/wp-content/themes ... follow up this domain (stsalescorp.com) as RSS-Feedlookup stsalescorp.com at virustotalfollow up this domain(stsalescorp.com) stsalescorp.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (noc@godaddy.com) as RSS-Feed noc@godaddy.com follow up this itemfollow up this item 97.74.0.0 - 97.74.255.255 follow up this item GO-DADDY-COM-LLC follow up this item GoDaddy.com, LLC GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns03.domaincontrol.com follow up this item ns04.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://stsalescorp.com/wp-content/themes ...
4 follow up this item(18175978) 18175978  2013-12-14 05:50:32 2014-03-28 11:47:34 2502 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
24/45 (53.3%) 
 
HTML/Framer
JS:Agent-AOA
Trj
Trojan.JS.QVC
JS/IFrame.RJ
TrojWare.JS.Agent.gf
JS/Iframe.FT
JS/IFrame.RJ
Trojan.JS.QVC
JS/Iframe.DBS!tr.dldr
Trojan.JS.QVC
Trojan.Script
Trojan/Script.Gen
Trojan
(
e1cf975d0
)
Exploit
(
04c5578e1
)
Trojan-Downloader.JS.Ifra 
 lookup in virustotal.com (908e075bbe86144b59a139a7ab7b5f88)-->[http://www.virustotal.com/latest-report.html?resource=908e075bbe86144b59a139a7ab7b5f88]follow up this md5sum(908e075bbe86144b59a139a7ab7b5f88)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table24/45 (53.3%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.schwerhoerigen-netz.de/ratgeb ...  up Saved evidence (1271 Bytes) of first contact as txt December 14 2013 08:17:01 CET.No evidence recorded deadSaved log of last contact as txt March 28 2014 11:43:23 CET. follow up this ip (ip=85.22.140.215) as RSS-FeedSenderBaselookup 85.22.140.215 at virustotallookup 85.22.140.215 at Rus CERT university stuttgart germanylookup 85.22.140.215 at Ripefollow up this item(ip) in same window 85.22.140.215 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS15763) in networks tablefollow up this itemfollow up this AS (AS15763) as RSS-Feed AS15763 follow up this ip (review=85.22.140.215) as RSS-FeedSenderBaselookup 85.22.140.215 at virustotallookup 85.22.140.215 at Rus CERT university stuttgart germanylookup 85.22.140.215 at Ripefollow up this item(review) in same window 85.22.140.215 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.schwerhoerigen-netz.de/ratgeb ... follow up this domain (schwerhoerigen-netz.de) as RSS-Feedlookup schwerhoerigen-netz.de at virustotalfollow up this domain(schwerhoerigen-netz.de) schwerhoerigen-netz.de follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (ripe@dokom21.de) as RSS-Feed ripe@dokom21.de follow up this itemfollow up this item 85.22.0.0 - 85.22.255.255 follow up this item DE-MKNET-20050405 follow up this item DOKOM Gesellschaft fuer Telekommunikation mbHDOKOM Gesellschaft fuer Telekommunikation mbH follow up this item ns1.key-systems.net follow up this item ns3.adesso.de follow up this item ns1.adesso.de follow up this item ns2.adesso.de follow up this item ns4.adesso.de Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.schwerhoerigen-netz.de/ratgeb ...
5 follow up this item(17871196) 17871196 Report false positive Report closed case make a suggestion 2013-12-05 18:51:58 OVERDUE! Overdue!3344.4 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet23/46 (50%) 
 
HTML/Framer
JS:Agent-AOA
Trj
Trojan.JS.QVC
JS/IFrame.RJ
TrojWare.JS.Agent.gf
JS/Iframe.FT
JS/IFrame.RJ
Trojan.JS.QVC
Trojan.JS.QVC
Trojan.Script
Trojan/Script.Gen
Trojan
(
e1cf975d0
)
Exploit
(
04c555281
)
Trojan-Downloader.JS.Iframe.dbs
JS/Blacole-Redi 
 lookup in virustotal.com (77ffe600acdf4ed0a48965f154c9978f)-->[http://www.virustotal.com/latest-report.html?resource=77ffe600acdf4ed0a48965f154c9978f]follow up this md5sum(77ffe600acdf4ed0a48965f154c9978f)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table23/46 (50%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.novagida.com.tr/site/swfobjec ...  up No previous evidence recordedSaved evidence (9467 Bytes) of last contact as txt August 15 2013 13:41:37 CEST. aliveSaved log of last contact as txt December 06 2013 09:34:04 CET. follow up this ip (ip=94.73.147.80) as RSS-FeedSenderBaselookup 94.73.147.80 at virustotallookup 94.73.147.80 at Rus CERT university stuttgart germanylookup 94.73.147.80 at Ripefollow up this item(ip) in same window 94.73.147.80 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS34619) in networks tablefollow up this itemfollow up this AS (AS34619) as RSS-Feed AS34619 follow up this ip (review=94.73.147.80) as RSS-FeedSenderBaselookup 94.73.147.80 at virustotallookup 94.73.147.80 at Rus CERT university stuttgart germanylookup 94.73.147.80 at Ripefollow up this item(review) in same window 94.73.147.80 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.novagida.com.tr/site/swfobjec ... follow up this domain (novagida.com.tr) as RSS-Feedlookup novagida.com.tr at virustotalfollow up this domain(novagida.com.tr) novagida.com.tr follow up this itemfollow up this country (TR) as RSS-Feed TR follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (huseyin.caymaz@cizgibilgisayar.com) as RSS-Feed huseyin.caymaz@cizgibilgisayar.com follow up this itemfollow up this item 94.73.128.0 - 94.73.191.255 follow up this item TR-CIZGI-20080710 follow up this item Cizgi Bilgisayar Sistemleri San. Tic. Ltd. Sti.Cizgi Telekom Block #10.0Cizgi Telekom Colocation Block follow up this item res78.natrohost.com follow up this item res77.natrohost.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.novagida.com.tr/site/swfobjec ...
6 follow up this item(17301440) 17301440 Report false positive Report closed case make a suggestion 2013-11-21 05:12:04 OVERDUE! Overdue!3694.1 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet19/46 (41.3%) 
 
JS:Agent-AOA
Trj
Trojan.JS.QVC
JS/IFrame.RJ
TrojWare.JS.Agent.gf
JS.IFrame.346
JS/Iframe.FT
Trojan.JS.QVC
(B)
JS/IFrame.RJ
Trojan.JS.QVC
Trojan.JS.QVC
Trojan.Script
Trojan/Script.Gen
Trojan
(
e1cf975d0
)
Trojan-Downloader.JS.Iframe.dbs
Trojan.JS.QVC
Tro 
 lookup in virustotal.com (1b1f67d169e0c8bf9aebfcf61aa663af)-->[http://www.virustotal.com/latest-report.html?resource=1b1f67d169e0c8bf9aebfcf61aa663af]follow up this md5sum(1b1f67d169e0c8bf9aebfcf61aa663af)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table19/46 (41.3%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.szybkanauka.fr.pl/inewsletter ...  up No previous evidence recordedSaved evidence (2901 Bytes) of last contact as txt May 15 2012 17:00:38 CEST. aliveSaved log of last contact as txt November 21 2013 05:38:39 CET. follow up this ip (ip=91.224.60.21) as RSS-FeedSenderBaselookup 91.224.60.21 at virustotallookup 91.224.60.21 at Rus CERT university stuttgart germanylookup 91.224.60.21 at Ripefollow up this item(ip) in same window 91.224.60.21 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS47544) in networks tablefollow up this itemfollow up this AS (AS47544) as RSS-Feed AS47544 follow up this ip (review=91.224.60.21) as RSS-FeedSenderBaselookup 91.224.60.21 at virustotallookup 91.224.60.21 at Rus CERT university stuttgart germanylookup 91.224.60.21 at Ripefollow up this item(review) in same window 91.224.60.21 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.szybkanauka.fr.pl/inewsletter ... follow up this domain (fr.pl) as RSS-Feedlookup fr.pl at virustotalfollow up this domain(fr.pl) fr.pl follow up this itemfollow up this country (PL) as RSS-Feed PL follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (info@ecenter.pl) as RSS-Feed info@ecenter.pl follow up this itemfollow up this item 91.224.60.0 - 91.224.61.255 follow up this item ECENTER follow up this item ECENTER SP. Z O.O.ECENTER SP. Z O.O. follow up this item ns1.fr.pl follow up this item ns2.fr.pl follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.szybkanauka.fr.pl/inewsletter ...
7 follow up this item(17288195) 17288195 Report false positive Report closed case make a suggestion 2013-11-20 14:30:48 OVERDUE! Overdue!3708.7 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet23/50 (46%) 
 
HTML/Framer
JS:Agent-AOA
Trj
Trojan.JS.QVC
JS/IFrame.RJ
TrojWare.JS.Agent.gf
JS.IFrame.346
JS/Iframe.FT
Trojan.JS.QVC
(B)
Trojan.JS.QVC
(B)
JS/IFrame.RJ
Trojan.JS.QVC
Trojan.JS.QVC
Trojan.Script
Trojan/Script.Gen
Trojan
(
e1cf975d0
)
Trojan-Downloader.J 
 lookup in virustotal.com (46961700e92171f65b6ba8142981feb8)-->[http://www.virustotal.com/latest-report.html?resource=46961700e92171f65b6ba8142981feb8]follow up this md5sum(46961700e92171f65b6ba8142981feb8)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table23/50 (46%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.ghv-bramfeld.de/live_tinc.js  up Saved evidence (9895 Bytes) of first contact as txt May 15 2012 04:29:56 CEST.Saved evidence (9895 Bytes) of last contact as txt May 15 2012 04:29:56 CEST. aliveSaved log of last contact as txt April 06 2014 08:22:50 CEST. follow up this ip (ip=82.165.93.28) as RSS-FeedSenderBaselookup 82.165.93.28 at virustotallookup 82.165.93.28 at Rus CERT university stuttgart germanylookup 82.165.93.28 at Ripefollow up this item(ip) in same window 82.165.93.28 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS8560) in networks tablefollow up this itemfollow up this AS (AS8560) as RSS-Feed AS8560 follow up this ip (review=82.165.93.28) as RSS-FeedSenderBaselookup 82.165.93.28 at virustotallookup 82.165.93.28 at Rus CERT university stuttgart germanylookup 82.165.93.28 at Ripefollow up this item(review) in same window 82.165.93.28 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.ghv-bramfeld.de/live_tinc.js follow up this domain (ghv-bramfeld.de) as RSS-Feedlookup ghv-bramfeld.de at virustotalfollow up this domain(ghv-bramfeld.de) ghv-bramfeld.de follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@oneandone.net) as RSS-Feed abuse@oneandone.net follow up this itemfollow up this item 82.165.64.0 - 82.165.127.255 follow up this item SCHLUND-SHARED follow up this item 1&1 Internet AGNCC#2004115007SCHLUND-PA-4 follow up this item ns14.schlund.de follow up this item ns13.schlund.de follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.ghv-bramfeld.de/live_tinc.js
8 follow up this item(16941473) 16941473 Report false positive Report closed case make a suggestion 2013-11-11 20:42:37 OVERDUE! Overdue!3918.5 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet20/46 (43.5%) 
 
HTML/Framer
JS:Agent-AOA
Trj
Trojan.JS.QVC
JS/IFrame.RJ
TrojWare.JS.Agent.gf
JS.IFrame.346
Trojan.JS.QVC
(B)
JS/IFrame.RJ
Trojan.JS.QVC
Trojan.JS.QVC
Trojan.Script
Trojan/Script.Gen
Trojan
(
e1cf975d0
)
Trojan-Downloader.JS.Iframe.dbs
Trojan.JS.QVC
Troj 
 lookup in virustotal.com (10e51f601566f27973dec12ef0aaa057)-->[http://www.virustotal.com/latest-report.html?resource=10e51f601566f27973dec12ef0aaa057]follow up this md5sum(10e51f601566f27973dec12ef0aaa057)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table20/46 (43.5%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.cazare-felix.ro/datasiora.js  up No previous evidence recordedSaved evidence (3463 Bytes) of last contact as txt May 15 2012 09:12:58 CEST. aliveSaved log of last contact as txt November 11 2013 22:12:14 CET. follow up this ip (ip=89.42.216.241) as RSS-FeedSenderBaselookup 89.42.216.241 at virustotallookup 89.42.216.241 at Rus CERT university stuttgart germanylookup 89.42.216.241 at Ripefollow up this item(ip) in same window 89.42.216.241 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS5606) in networks tablefollow up this itemfollow up this AS (AS5606) as RSS-Feed AS5606 follow up this ip (review=89.42.216.241) as RSS-FeedSenderBaselookup 89.42.216.241 at virustotallookup 89.42.216.241 at Rus CERT university stuttgart germanylookup 89.42.216.241 at Ripefollow up this item(review) in same window 89.42.216.241 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.cazare-felix.ro/datasiora.js follow up this domain (cazare-felix.ro) as RSS-Feedlookup cazare-felix.ro at virustotalfollow up this domain(cazare-felix.ro) cazare-felix.ro follow up this itemfollow up this country (ro) as RSS-Feed ro follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@romarg.com) as RSS-Feed abuse@romarg.com follow up this itemfollow up this item 89.42.216.0 - 89.42.223.255 follow up this item SC-ROMARG-SRL follow up this item ROMARG SRL-----------------------------ROMARG | The Hosting Provider-----------------------------Str. Transilvaniei, nr. 28Brasov Brasov Romania follow up this item ns1.wdp-gazduire.ro follow up this item ns3.wdp-gazduire.ro follow up this item ns4.wdp-gazduire.ro follow up this item ns2.wdp-gazduire.ro follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.cazare-felix.ro/datasiora.js
9 follow up this item(16272632) 16272632 Report false positive Report closed case make a suggestion 2013-10-21 14:17:02 OVERDUE! Overdue!4430 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet20/47 (42.6%) 
 
JS:Agent-AOA
Trj
Trojan.JS.QVC
JS/IFrame.RJ
TrojWare.JS.Agent.gf
JS.IFrame.346
Trojan.JS.QVC
(B)
JS/IFrame.RJ
Trojan.JS.QVC
Trojan.JS.QVC
Trojan-Downloader.JS.Iframe
Trojan/Script.Gen
Trojan
Trojan-Downloader.JS.Iframe.dbs
Trojan.JS.QVC
Trojan:JS/Iframe 
 lookup in virustotal.com (9bf4956ea7dc141c1567edd764171a9f)-->[http://www.virustotal.com/latest-report.html?resource=9bf4956ea7dc141c1567edd764171a9f]follow up this md5sum(9bf4956ea7dc141c1567edd764171a9f)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table20/47 (42.6%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.ogrodplast.pl/js/lightbox.js  up No previous evidence recordedSaved evidence (26394 Bytes) of last contact as txt May 15 2012 03:33:05 CEST. aliveSaved log of last contact as txt October 21 2013 22:48:44 CEST. follow up this ip (ip=80.72.46.106) as RSS-FeedSenderBaselookup 80.72.46.106 at virustotallookup 80.72.46.106 at Rus CERT university stuttgart germanylookup 80.72.46.106 at Ripefollow up this item(ip) in same window 80.72.46.106 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS20853) in networks tablefollow up this itemfollow up this AS (AS20853) as RSS-Feed AS20853 follow up this ip (review=80.72.46.106) as RSS-FeedSenderBaselookup 80.72.46.106 at virustotallookup 80.72.46.106 at Rus CERT university stuttgart germanylookup 80.72.46.106 at Ripefollow up this item(review) in same window 80.72.46.106 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.ogrodplast.pl/js/lightbox.js follow up this domain (ogrodplast.pl) as RSS-Feedlookup ogrodplast.pl at virustotalfollow up this domain(ogrodplast.pl) ogrodplast.pl follow up this itemfollow up this country (PL) as RSS-Feed PL follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@etop.pl) as RSS-Feed abuse@etop.pl follow up this itemfollow up this item 80.72.32.0 - 80.72.47.255 follow up this item PL-ETOP-20010608 follow up this item eTOP sp. z o.o. follow up this item ns1.neteasy.pl follow up this item ns2.neteasy.pl follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.ogrodplast.pl/js/lightbox.js
10 follow up this item(15790974) 15790974 Report false positive Report closed case make a suggestion 2013-10-06 19:26:31 OVERDUE! Overdue!4784.8 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
possible lookup in wepawet20/50 (40%) 
 
HTML/Framer
JS:Agent-AOA
Trj
Trojan.JS.QVC
JS/IFrame.RJ
UnclassifiedMalware
Trojan.JS.QVC
(B)
Trojan.JS.QVC
(B)
JS/IFrame.RJ
Trojan.JS.QVC
Trojan.JS.QVC
Trojan.Script
Trojan/Script.Gen
Trojan
(
e1cf975d0
)
Trojan-Downloader.JS.Iframe.dbs
Trojan.JS.QVC
T 
 lookup in virustotal.com (438ec39e0e08172ab3a205fb2ec9131d)-->[http://www.virustotal.com/latest-report.html?resource=438ec39e0e08172ab3a205fb2ec9131d]follow up this md5sum(438ec39e0e08172ab3a205fb2ec9131d)follow up this itemfollow up this virusname (JS%3AAgent-AOA+Trj) as RSS-Feedfollow up this malware(JS%3AAgent-AOA+Trj) for scanner (Avast) in md5 table20/50 (40%) JS:Agent-AOA Trj
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.eventi.it/js/base.js  up No previous evidence recordedSaved evidence (4139 Bytes) of last contact as txt May 09 2012 02:43:49 CEST. aliveSaved log of last contact as txt April 04 2014 17:53:41 CEST. follow up this ip (ip=62.149.140.171) as RSS-FeedSenderBaselookup 62.149.140.171 at virustotallookup 62.149.140.171 at Rus CERT university stuttgart germanylookup 62.149.140.171 at Ripefollow up this item(ip) in same window 62.149.140.171 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS31034) in networks tablefollow up this itemfollow up this AS (AS31034) as RSS-Feed AS31034 follow up this ip (review=62.149.140.171) as RSS-FeedSenderBaselookup 62.149.140.171 at virustotallookup 62.149.140.171 at Rus CERT university stuttgart germanylookup 62.149.140.171 at Ripefollow up this item(review) in same window 62.149.140.171 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.eventi.it/js/base.js follow up this domain (eventi.it) as RSS-Feedlookup eventi.it at virustotalfollow up this domain(eventi.it) eventi.it follow up this itemfollow up this country (IT) as RSS-Feed IT follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (hostmaster@technorail.com) as RSS-Feed hostmaster@technorail.com follow up this itemfollow up this item 62.149.138.0 - 62.149.159.255 follow up this item TECHNORAIL-NET follow up this item Technorail srlInternet Service and Access Provider follow up this item dns3.arubadns.net follow up this item dns.technorail.com follow up this item dns2.technorail.com follow up this item dns4.arubadns.cz follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.eventi.it/js/base.js
Click here for other vital incidents



Protected by clean MX [Valid RSS] Valid HTML 4.01 Transitional CSS ist valide!
Access is provided for free and subject to these Terms and Conditions.