CLEAN MX realtime database    
public access query for virus URL statistics
Totally watched: Walker is running: 1(109) http://standsalone.org/blog/2007/10/05/de-fabulousing
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006
Tweet
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0079 Seconds 10 hits
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 follow up this item(11434049) 11434049 Report false positive Report closed case make a suggestion 2013-05-25 06:00:20     follow up this itemfollow up this contributor (malc0de.com) as RSS-Feed sub14lookup Evidence at malc0de.com
lookup in virustotal.com (ee40827cb211062656e170501f98e1fa)lookup in threatexpert.comlookup the sha256(09c63ab88d8871ec7d4e8fe806a0485e6c132ba06aa552d3e8615fec34b4ead4) in comodo.comfollow up this md5sum(ee40827cb211062656e170501f98e1fa)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table2/45 (4.4%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.roadkil.net/download.php?File ...  up No previous evidence recordedSaved evidence (379200 Bytes) of last contact as txt May 25 2013 06:10:04 CEST. aliveSaved log of last contact as txt May 25 2013 06:10:04 CEST. SenderBaselookup 97.74.144.90 at virustotallookup 97.74.144.90 at Rus CERT university stuttgart germanylookup 97.74.144.90 at ARINfollow up this item(ip) in same window 97.74.144.90 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 97.74.144.90 at virustotallookup 97.74.144.90 at Rus CERT university stuttgart germanylookup 97.74.144.90 at ARINfollow up this item(review) in same window 97.74.144.90 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.roadkil.net/download.php?File ... lookup roadkil.net at virustotalfollow up this domain(roadkil.net) roadkil.net follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (noc@godaddy.com) as RSS-Feed noc@godaddy.com follow up this itemfollow up this item 97.74.0.0 - 97.74.255.255 follow up this item GO-DADDY-COM-LLC follow up this item GoDaddy.com, LLC GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns02.domaincontrol.com follow up this item ns01.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.roadkil.net/download.php?File ...
2 follow up this item(11433796) 11433796 Report false positive Report closed case make a suggestion 2013-05-25 05:40:35     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
lookup in virustotal.com (ee40827cb211062656e170501f98e1fa)lookup in threatexpert.comlookup the sha256(09c63ab88d8871ec7d4e8fe806a0485e6c132ba06aa552d3e8615fec34b4ead4) in comodo.comfollow up this md5sum(ee40827cb211062656e170501f98e1fa)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table2/45 (4.4%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.roadkil.net/download.php?File ...  up No previous evidence recordedSaved evidence (379200 Bytes) of last contact as txt May 25 2013 06:10:26 CEST. aliveSaved log of last contact as txt May 25 2013 06:10:26 CEST. SenderBaselookup 97.74.144.90 at virustotallookup 97.74.144.90 at Rus CERT university stuttgart germanylookup 97.74.144.90 at ARINfollow up this item(ip) in same window 97.74.144.90 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 97.74.144.90 at virustotallookup 97.74.144.90 at Rus CERT university stuttgart germanylookup 97.74.144.90 at ARINfollow up this item(review) in same window 97.74.144.90 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.roadkil.net/download.php?File ... lookup roadkil.net at virustotalfollow up this domain(roadkil.net) roadkil.net follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (noc@godaddy.com) as RSS-Feed noc@godaddy.com follow up this itemfollow up this item 97.74.0.0 - 97.74.255.255 follow up this item GO-DADDY-COM-LLC follow up this item GoDaddy.com, LLC GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns01.domaincontrol.com follow up this item ns02.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.roadkil.net/download.php?File ...
3 follow up this item(11400922) 11400922 Report false positive Report closed case make a suggestion 2013-05-24 09:10:22     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
lookup in virustotal.com (ee40827cb211062656e170501f98e1fa)lookup in threatexpert.comlookup the sha256(09c63ab88d8871ec7d4e8fe806a0485e6c132ba06aa552d3e8615fec34b4ead4) in comodo.comfollow up this md5sum(ee40827cb211062656e170501f98e1fa)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table2/45 (4.4%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://roadkil.net/download.php?FileID=4 ...  up No previous evidence recordedSaved evidence (379200 Bytes) of last contact as txt May 24 2013 09:47:29 CEST. aliveSaved log of last contact as txt May 24 2013 09:47:29 CEST. SenderBaselookup 97.74.144.90 at virustotallookup 97.74.144.90 at Rus CERT university stuttgart germanylookup 97.74.144.90 at ARINfollow up this item(ip) in same window 97.74.144.90 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 97.74.144.90 at virustotallookup 97.74.144.90 at Rus CERT university stuttgart germanylookup 97.74.144.90 at ARINfollow up this item(review) in same window 97.74.144.90 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://roadkil.net/download.php?FileID=4 ... lookup roadkil.net at virustotalfollow up this domain(roadkil.net) roadkil.net follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (noc@godaddy.com) as RSS-Feed noc@godaddy.com follow up this itemfollow up this item 97.74.0.0 - 97.74.255.255 follow up this item GO-DADDY-COM-LLC follow up this item GoDaddy.com, LLC GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns01.domaincontrol.com follow up this item ns02.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://roadkil.net/download.php?FileID=4 ...
4 follow up this item(11397728) 11397728 Report false positive Report closed case make a suggestion 2013-05-24 06:50:03     follow up this itemfollow up this contributor (malc0de.com) as RSS-Feed sub14lookup Evidence at malc0de.com
lookup in virustotal.com (ee40827cb211062656e170501f98e1fa)lookup in threatexpert.comlookup the sha256(09c63ab88d8871ec7d4e8fe806a0485e6c132ba06aa552d3e8615fec34b4ead4) in comodo.comfollow up this md5sum(ee40827cb211062656e170501f98e1fa)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table2/45 (4.4%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.roadkil.net/download.php?File ...  up No previous evidence recordedSaved evidence (379200 Bytes) of last contact as txt May 24 2013 07:18:37 CEST. aliveSaved log of last contact as txt May 24 2013 07:18:37 CEST. SenderBaselookup 97.74.144.90 at virustotallookup 97.74.144.90 at Rus CERT university stuttgart germanylookup 97.74.144.90 at ARINfollow up this item(ip) in same window 97.74.144.90 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS26496) in networks tablefollow up this itemfollow up this AS (AS26496) as RSS-Feed AS26496 SenderBaselookup 97.74.144.90 at virustotallookup 97.74.144.90 at Rus CERT university stuttgart germanylookup 97.74.144.90 at ARINfollow up this item(review) in same window 97.74.144.90 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.roadkil.net/download.php?File ... lookup roadkil.net at virustotalfollow up this domain(roadkil.net) roadkil.net follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (noc@godaddy.com) as RSS-Feed noc@godaddy.com follow up this itemfollow up this item 97.74.0.0 - 97.74.255.255 follow up this item GO-DADDY-COM-LLC follow up this item GoDaddy.com, LLC GODAD 14455 N Hayden Road Suite 226 Scottsdale AZ 85260 follow up this item ns01.domaincontrol.com follow up this item ns02.domaincontrol.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.roadkil.net/download.php?File ...
5 follow up this item(11262782) 11262782 Report false positive Report closed case make a suggestion 2013-05-21 16:48:48     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
2/45 (4.4%) 
 Trojan/VB.oai
Suspicion:
unknown
virus 
 lookup in virustotal.com (769cd32e2db3f429c93ec9a4e01c659a)-->[http://www.virustotal.com/latest-report.html?resource=769cd32e2db3f429c93ec9a4e01c659a]lookup in threatexpert.comlookup the sha256(67b44bb76c5f5892d4248a4d3c36b3b19f22ee640212e26c13eacb01a464d1f8) in comodo.comfollow up this md5sum(769cd32e2db3f429c93ec9a4e01c659a)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table2/45 (4.4%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://update.vaccineclinic.co.kr/versio ...  up No previous evidence recordedSaved evidence (18448 Bytes) of last contact as txt May 04 2013 06:22:29 CEST. aliveSaved log of last contact as txt May 22 2013 00:51:05 CEST. SenderBaselookup 115.68.58.7 at virustotallookup 115.68.58.7 at Rus CERT university stuttgart germanylookup 115.68.58.7 at apnicfollow up this item(ip) in same window 115.68.58.7 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS38700) in networks tablefollow up this itemfollow up this AS (AS38700) as RSS-Feed AS38700 SenderBaselookup 115.68.58.8 at virustotallookup 115.68.58.8 at Rus CERT university stuttgart germanylookup 115.68.58.8 at apnicfollow up this item(review) in same window 115.68.58.8 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://update.vaccineclinic.co.kr/versio ... lookup vaccineclinic.co.kr at virustotalfollow up this domain(vaccineclinic.co.kr) vaccineclinic.co.kr follow up this itemfollow up this country (KR) as RSS-Feed KR follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (network@smileserv.com) as RSS-Feed network@smileserv.com follow up this itemfollow up this item 115.68.0.0 - 115.68.255.255 follow up this item SMILESERV-KR follow up this item SMILESERV follow up this item ns.vaccineclinic.co.kr follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://update.vaccineclinic.co.kr/versio ...
6 follow up this item(11223594) 11223594 Report false positive Report closed case make a suggestion 2013-05-20 20:19:20     follow up this itemfollow up this contributor (csirt) as RSS-Feed sub31possible lookup Evidence at malwaredomainlist.com
lookup in virustotal.com (66faa161a1fb385a989838c043f2270d)lookup in threatexpert.comlookup the sha256(56cd21bdc30fd943482ca3ab80fbe2b4a4697306a737fb1b49b8af7859b0be59) in comodo.comfollow up this md5sum(66faa161a1fb385a989838c043f2270d)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table5/45 (11.1%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://download.performersoft.com/downlo ...  up No previous evidence recordedSaved evidence (609304 Bytes) of last contact as txt May 21 2013 02:31:38 CEST. aliveSaved log of last contact as txt May 21 2013 02:31:38 CEST. SenderBaselookup 23.21.87.236 at virustotallookup 23.21.87.236 at Rus CERT university stuttgart germanylookup 23.21.87.236 at ARINfollow up this item(ip) in same window 23.21.87.236 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS16509) in networks tablefollow up this itemfollow up this AS (AS16509) as RSS-Feed AS16509 SenderBaselookup 54.235.141.50 at virustotallookup 54.235.141.50 at Rus CERT university stuttgart germanylookup 54.235.141.50 at ARINfollow up this item(review) in same window 54.235.141.50 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://download.performersoft.com/downlo ... lookup performersoft.com at virustotalfollow up this domain(performersoft.com) performersoft.com follow up this itemfollow up this country (US) as RSS-Feed US follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (ec2-abuse@amazon.com) as RSS-Feed ec2-abuse@amazon.com follow up this itemfollow up this item 23.20.0.0 - 23.23.255.255 follow up this item AMAZO-ZIAD2 follow up this item Amazon.com, Inc. AMAZO-4 Amazon Web Services, Elastic Compute Cloud, EC2 1200 12th Avenue South Seattle WA 98144 follow up this item ns3.p09.dynect.net follow up this item ns1.p09.dynect.net follow up this item ns2.p09.dynect.net follow up this item ns4.p09.dynect.net follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://download.performersoft.com/downlo ...
7 follow up this item(11188893) 11188893 Report false positive Report closed case make a suggestion 2013-05-20 08:10:26     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
lookup in virustotal.com (f6077081b2f74db505f2fb46aa2a1a70)lookup in threatexpert.comlookup the sha256(7acc3de8c386bbe8005b6569ee8155c1ba83b4c1cf88c46d56709787038df632) in comodo.comfollow up this md5sum(f6077081b2f74db505f2fb46aa2a1a70)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table1/46 (2.2%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://gh506191919.eicp.net:82/AxPlayOcx ...  up No previous evidence recordedSaved evidence (1288784 Bytes) of last contact as txt September 17 2012 12:08:18 CEST. aliveSaved log of last contact as txt May 20 2013 13:48:13 CEST. SenderBaselookup 114.99.154.107 at virustotallookup 114.99.154.107 at Rus CERT university stuttgart germanylookup 114.99.154.107 at apnicfollow up this item(ip) in same window 114.99.154.107 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS4134) in networks tablefollow up this itemfollow up this AS (AS4134) as RSS-Feed AS4134 SenderBaselookup 114.99.154.107 at virustotallookup 114.99.154.107 at Rus CERT university stuttgart germanylookup 114.99.154.107 at apnicfollow up this item(review) in same window 114.99.154.107 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://gh506191919.eicp.net:82/AxPlayOcx ... lookup eicp.net at virustotalfollow up this domain(eicp.net) eicp.net follow up this itemfollow up this country (CN) as RSS-Feed CN follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (wang@mail.hf.ah.cninfo.net) as RSS-Feed wang@mail.hf.ah.cninfo.net follow up this itemfollow up this item 114.96.0.0 - 114.103.255.255 follow up this item CHINANET-AH follow up this item CHINANET Anhui PROVINCE NETWORKChina TelecomNo.31,jingrong streetBeijing 100032 follow up this item ns1.exhera.com follow up this item ns2.exhera.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://gh506191919.eicp.net:82/AxPlayOcx ...
8 follow up this item(11185065) 11185065 Report false positive Report closed case make a suggestion 2013-05-20 06:50:23     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
2/46 (4.3%) 
 Corrupted
File
(v)
Suspicion:
unknown
virus 
 lookup in virustotal.com (6b2e41e670701452f203fa6dcb35ec1c)-->[http://www.virustotal.com/latest-report.html?resource=6b2e41e670701452f203fa6dcb35ec1c]lookup in threatexpert.comlookup the sha256(35a8678f298a89adad75657cbf0c914587093a7406ffaddda6846e6e1cfbd1a9) in comodo.comfollow up this md5sum(6b2e41e670701452f203fa6dcb35ec1c)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table2/46 (4.3%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://211.147.248.97/ycgsetup.exe  up No previous evidence recordedSaved evidence (16384 Bytes) of last contact as txt May 20 2013 08:01:59 CEST. aliveSaved log of last contact as txt May 20 2013 08:01:59 CEST. SenderBaselookup 211.147.248.97 at virustotallookup 211.147.248.97 at Rus CERT university stuttgart germanylookup 211.147.248.97 at apnicfollow up this item(ip) in same window 211.147.248.97 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS17622) in networks tablefollow up this itemfollow up this AS (AS17622) as RSS-Feed AS17622 SenderBaselookup 211.147.248.97 at virustotallookup 211.147.248.97 at Rus CERT university stuttgart germanylookup 211.147.248.97 at apnicfollow up this item(review) in same window 211.147.248.97 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://211.147.248.97/ycgsetup.exe lookup 211.147.248.97 at virustotalfollow up this domain(211.147.248.97) 211.147.248.97 follow up this itemfollow up this country (CN) as RSS-Feed CN follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (netadmin@ehomenet.com) as RSS-Feed netadmin@ehomenet.com follow up this itemfollow up this item 211.147.243.0 - 211.147.248.255 follow up this item Etrust follow up this item 广东盈信信息投资有限公司 follow up this item  follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://211.147.248.97/ycgsetup.exe
9 follow up this item(11138545) 11138545 Report false positive Report closed case make a suggestion 2013-05-18 21:02:32     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
3/44 (6.8%) 
 a
variant
of
Win32/Adware.Kraddare.EB
Win32.Troj.Generic.a.(kcloud)
Suspicion:
unknown
virus 
 lookup in virustotal.com (567beb7d680c14abfe14d84fe2cb82e5)-->[http://www.virustotal.com/latest-report.html?resource=567beb7d680c14abfe14d84fe2cb82e5]lookup in threatexpert.comlookup the sha256(08de258c192c47ce59d31c62e531ae08ed5221097baf0b2417b11933ab8cb023) in comodo.comfollow up this md5sum(567beb7d680c14abfe14d84fe2cb82e5)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table3/44 (6.8%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://update.pcsystem.co.kr/bin/pcsyste ...  up No previous evidence recordedSaved evidence (161288 Bytes) of last contact as txt May 04 2013 06:34:57 CEST. aliveSaved log of last contact as txt May 19 2013 11:00:24 CEST. SenderBaselookup 115.68.58.6 at virustotallookup 115.68.58.6 at Rus CERT university stuttgart germanylookup 115.68.58.6 at apnicfollow up this item(ip) in same window 115.68.58.6 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS38700) in networks tablefollow up this itemfollow up this AS (AS38700) as RSS-Feed AS38700 SenderBaselookup 115.68.58.8 at virustotallookup 115.68.58.8 at Rus CERT university stuttgart germanylookup 115.68.58.8 at apnicfollow up this item(review) in same window 115.68.58.8 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://update.pcsystem.co.kr/bin/pcsyste ... lookup pcsystem.co.kr at virustotalfollow up this domain(pcsystem.co.kr) pcsystem.co.kr follow up this itemfollow up this country (KR) as RSS-Feed KR follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (network@smileserv.com) as RSS-Feed network@smileserv.com follow up this itemfollow up this item 115.68.0.0 - 115.68.255.255 follow up this item SMILESERV-KR follow up this item SMILESERV follow up this item ns.pcsystem.co.kr follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://update.pcsystem.co.kr/bin/pcsyste ...
10 follow up this item(10894766) 10894766 Report false positive Report closed case make a suggestion 2013-05-13 08:48:55     follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
4/45 (8.9%) 
 Adware.K.WindowSearch
Posible_Worm32
PUP/Win32.WindowSearch
Suspicion:
unknown
virus 
 lookup in virustotal.com (0bc2e9cbea10520f3e5d918954b5e719)-->[http://www.virustotal.com/latest-report.html?resource=0bc2e9cbea10520f3e5d918954b5e719]lookup in threatexpert.comlookup the sha256(743973ab73e8b6825b1129d05083608568e0450dae307d334fcc56deb286f848) in comodo.comfollow up this md5sum(0bc2e9cbea10520f3e5d918954b5e719)follow up this itemfollow up this virusname (Suspicion%3A+unknown+virus) as RSS-Feedfollow up this malware(Suspicion%3A+unknown+virus) for scanner (undef) in md5 table4/45 (8.9%) Suspicion: unknown virus
Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://dn.windowsearch.co.kr/programs/un ...  up No previous evidence recordedSaved evidence (129104 Bytes) of last contact as txt November 22 2012 08:52:54 CET. aliveSaved log of last contact as txt May 13 2013 14:32:00 CEST. SenderBaselookup 180.210.37.36 at virustotallookup 180.210.37.36 at Rus CERT university stuttgart germanylookup 180.210.37.36 at apnicfollow up this item(ip) in same window 180.210.37.36 possible lookup  in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS38661) in networks tablefollow up this itemfollow up this AS (AS38661) as RSS-Feed AS38661 SenderBaselookup 180.210.37.35 at virustotallookup 180.210.37.35 at Rus CERT university stuttgart germanylookup 180.210.37.35 at apnicfollow up this item(review) in same window 180.210.37.35 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://dn.windowsearch.co.kr/programs/un ... lookup windowsearch.co.kr at virustotalfollow up this domain(windowsearch.co.kr) windowsearch.co.kr follow up this itemfollow up this country (KR) as RSS-Feed KR follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (luvyong@hclc.co.kr) as RSS-Feed luvyong@hclc.co.kr follow up this itemfollow up this item 180.210.0.0 - 180.210.127.255 follow up this item HCLC-KR follow up this item HCLC follow up this item win-legiictqphn follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://dn.windowsearch.co.kr/programs/un ...
Click here for other vital incidents



Protected by clean MX [Valid RSS] Valid HTML 4.01 Transitional CSS ist valide!
Access is provided for free and subject to these Terms and Conditions.