CLEAN MX realtime database    
public access query for virus URL statistics
Totally watched: Walker is running: 9(51) http://www.indreamsaati.com/kategori/erkek/tissot.aspx?PriceID=7
Subscribe to the VirusWatch Mailing list, updated hourly

This database consists of Virus URI, collected and verified since Feb 2006
Tweet
If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statisticsstatistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real viruses function in this moment you make this query.(Sites may have been closed already..)
Our automatic Viruswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0429 Seconds 10 hits
helpLine help#descendigascending helpDatedescendigascending helpCloseddescendigascending helphours helpcontributordescendigascending helpvirusnamedescendigascending helpURLdescendigascending helpip state helpresponsedescendigascending helpIp initialdescendigascending helpAS#descendigascending helpip reviewdescendigascending helpURLdescendigascending helpDomaindescendigascending helpcountrydescendigascending helpsourcedescendigascending helpemaildescendigascending helpinetnumdescendigascending helpnetnamedescendigascending helpdescrdescendigascending helpns1descendigascending helpns2descendigascending helpns3descendigascending helpns4descendigascending helpns5descendigascending helpURLdescendigascending
1 follow up this item(11261348) 11261348 Report false positive Report closed case make a suggestion 2013-05-21 16:47:47 OVERDUE! Overdue!680.4 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
42/46 (91.3%) Win32/Gael.3666.A Win32.Gael.3666 Virus/W32.Tenga.3666 W32.Tenga.A W32/Gael.worm.a Virus.Tenga Virus Virus W32/Gael.worm.gen.A Virus.Win32.Tenga.fsyd W32/Tenga.3666 W32.Imaut!gen1 FileInfector Virus.Win32.Heur.c PE_TENGA.A Win32:Tenga Virus.Win32.Tenga.a lookup in virustotal.com (9d8e4cf343c9d22248df4655b42b5e14)-->[http://www.virustotal.com/latest-report.html?resource=9d8e4cf343c9d22248df4655b42b5e14]lookup in threatexpert.comlookup the sha256(62097414eac0f573c9e7adca955bc7965c98fcba3d4ede7101f9cd1e559ce08d) in comodo.comfollow up this md5sum(9d8e4cf343c9d22248df4655b42b5e14)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table42/46 (91.3%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://23do.com/qdpqcj.exe  up No previous evidence recordedSaved evidence (267264 Bytes) of last contact as txt April 11 2013 12:34:46 CEST. aliveSaved log of last contact as txt May 21 2013 22:58:25 CEST. SenderBaselookup 60.248.106.247 at virustotallookup 60.248.106.247 at Rus CERT university stuttgart germanylookup 60.248.106.247 at apnicfollow up this item(ip) in same window 60.248.106.247 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS9680) in networks tablefollow up this itemfollow up this AS (AS9680) as RSS-Feed AS9680 SenderBaselookup 60.248.106.247 at virustotallookup 60.248.106.247 at Rus CERT university stuttgart germanylookup 60.248.106.247 at apnicfollow up this item(review) in same window 60.248.106.247 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://23do.com/qdpqcj.exe lookup 23do.com at virustotalfollow up this domain(23do.com) 23do.com follow up this itemfollow up this country (TW) as RSS-Feed TW follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (network-adm@hinet.net) as RSS-Feed network-adm@hinet.net follow up this itemfollow up this item 60.248.0.0 - 60.248.255.255 follow up this item HINET-NET follow up this item CHTD, Chunghwa Telecom Co.,Ltd.Data-Bldg.6F, No.21, Sec.21, Hsin-Yi Rd.Taipei Taiwan 100 follow up this item ns2.23do.com follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://23do.com/qdpqcj.exe
2 follow up this item(11200736) 11200736 Report false positive Report closed case make a suggestion 2013-05-20 13:10:32 OVERDUE! Overdue!708 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
20/35 (57.1%) Win32.Gael.3666 Virus W32/Tenga.1!Generic W32.Licum Vir_Generic.GSAL TROJ_GEN.F47V0520 Win32:Tenga-B Trojan.Win32.Genome.akyga Win32.Gael.3666 UnclassifiedMalware Win32.Gael.3666 W32/Stanit Win32.Gael.3666 (B) Virus:Win32/Gael.gen!A Win32.Gael.3666 Troj lookup in virustotal.com (9acd3e750ec83cab99072a0ac48556b7)-->[http://www.virustotal.com/latest-report.html?resource=9acd3e750ec83cab99072a0ac48556b7]follow up this md5sum(9acd3e750ec83cab99072a0ac48556b7)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table20/35 (57.1%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://download.pudn.com/downloads116/so ...  up No previous evidence recordedSaved evidence (3058034 Bytes) of last contact as txt May 21 2013 14:43:07 CEST. aliveSaved log of last contact as txt May 21 2013 14:43:07 CEST. SenderBaselookup 124.232.164.168 at virustotallookup 124.232.164.168 at Rus CERT university stuttgart germanylookup 124.232.164.168 at apnicfollow up this item(ip) in same window 124.232.164.168 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS4134) in networks tablefollow up this itemfollow up this AS (AS4134) as RSS-Feed AS4134 SenderBaselookup 124.232.164.168 at virustotallookup 124.232.164.168 at Rus CERT university stuttgart germanylookup 124.232.164.168 at apnicfollow up this item(review) in same window 124.232.164.168 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://download.pudn.com/downloads116/so ... lookup pudn.com at virustotalfollow up this domain(pudn.com) pudn.com follow up this itemfollow up this country (CN) as RSS-Feed CN follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (anti-spam@ns.chinanet.cn.net) as RSS-Feed anti-spam@ns.chinanet.cn.net follow up this itemfollow up this item 124.232.0.0 - 124.233.255.255 follow up this item CHINANET-HN follow up this item CHINANET Hunan province networkChina TelecomNo.31,jingrong streetBeijing 100032From Hunan Network of ChinaTelecom follow up this item ns14.xincache.com follow up this item ns13.xincache.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://download.pudn.com/downloads116/so ...
3 follow up this item(11186245) 11186245 Report false positive Report closed case make a suggestion 2013-05-20 07:00:56 OVERDUE! Overdue!714.2 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
42/46 (91.3%) Win32/Gael.3666.A Win32.Gael.3666 Virus/W32.Tenga.3666 W32.Tenga.A W32/Gael.worm.a Virus.Tenga Virus Virus W32/Gael.worm.gen.A Virus.Win32.Tenga.fsyd W32/Tenga.3666 W32.Imaut!gen1 FileInfector Virus.Win32.Heur.c PE_TENGA.A Win32:Tenga Virus.Win32.Tenga.a lookup in virustotal.com (9d8e4cf343c9d22248df4655b42b5e14)-->[http://www.virustotal.com/latest-report.html?resource=9d8e4cf343c9d22248df4655b42b5e14]lookup in threatexpert.comlookup the sha256(62097414eac0f573c9e7adca955bc7965c98fcba3d4ede7101f9cd1e559ce08d) in comodo.comfollow up this md5sum(9d8e4cf343c9d22248df4655b42b5e14)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table42/46 (91.3%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.23do.com/qdpqcj.exe  up No previous evidence recordedSaved evidence (267264 Bytes) of last contact as txt April 11 2013 12:34:46 CEST. aliveSaved log of last contact as txt May 20 2013 07:25:31 CEST. SenderBaselookup 60.248.106.247 at virustotallookup 60.248.106.247 at Rus CERT university stuttgart germanylookup 60.248.106.247 at apnicfollow up this item(ip) in same window 60.248.106.247 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS9680) in networks tablefollow up this itemfollow up this AS (AS9680) as RSS-Feed AS9680 SenderBaselookup 60.248.106.247 at virustotallookup 60.248.106.247 at Rus CERT university stuttgart germanylookup 60.248.106.247 at apnicfollow up this item(review) in same window 60.248.106.247 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.23do.com/qdpqcj.exe lookup 23do.com at virustotalfollow up this domain(23do.com) 23do.com follow up this itemfollow up this country (TW) as RSS-Feed TW follow up this itemfollow up this region (APNIC) as RSS-Feed APNIC follow up this itemfollow up this enail (network-adm@hinet.net) as RSS-Feed network-adm@hinet.net follow up this itemfollow up this item 60.248.0.0 - 60.248.255.255 follow up this item HINET-NET follow up this item CHTD, Chunghwa Telecom Co.,Ltd.Data-Bldg.6F, No.21, Sec.21, Hsin-Yi Rd.Taipei Taiwan 100 follow up this item ns2.23do.com follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.23do.com/qdpqcj.exe
4 follow up this item(9568987) 9568987 Report false positive Report closed case make a suggestion 2013-02-23 04:47:06 OVERDUE! Overdue!2779.4 follow up this itemfollow up this contributor (csirt) as RSS-Feed sub31possible lookup Evidence at malwaredomainlist.com
32/36 (88.9%) Win32.Gael.3666 W32.Tenga.A W32/Gael.worm.a W32/Gael.worm.gen.A Virus W32/Tenga.3666 W32.Licum Tenga.A PE_TENGA.A Win32:Tenga Virus.Win32.Tenga.a Win32.Gael.3666 Win32.Gael.3666 (B) Worm.Win32.Gael.A Win32.Gael.3666 Win32.Gael.3666 W32/Stanit PE_TENGA.A lookup in virustotal.com (5e924ed4c40372a9a685f45762a17901)-->[http://www.virustotal.com/latest-report.html?resource=5e924ed4c40372a9a685f45762a17901]lookup in threatexpert.comlookup the sha256(77ada858927f9b7d0053a9b846ad54f68cd1069bd50289b44c40759c7d74c134) in comodo.comfollow up this md5sum(5e924ed4c40372a9a685f45762a17901)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table32/36 (88.9%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.lu1eq.com.ar/archivos/softwar ...  up No previous evidence recordedSaved evidence (2165248 Bytes) of last contact as txt September 09 2011 19:13:19 CEST. aliveSaved log of last contact as txt February 23 2013 06:58:55 CET. SenderBaselookup 201.255.13.4 at virustotallookup 201.255.13.4 at Rus CERT university stuttgart germanylookup 201.255.13.4 at LACNICfollow up this item(ip) in same window 201.255.13.4 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS22927) in networks tablefollow up this itemfollow up this AS (AS22927) as RSS-Feed AS22927 SenderBaselookup 201.255.13.4 at virustotallookup 201.255.13.4 at Rus CERT university stuttgart germanylookup 201.255.13.4 at LACNICfollow up this item(review) in same window 201.255.13.4 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.lu1eq.com.ar/archivos/softwar ... lookup lu1eq.com.ar at virustotalfollow up this domain(lu1eq.com.ar) lu1eq.com.ar follow up this itemfollow up this country (AR) as RSS-Feed AR follow up this itemfollow up this region (LACNIC) as RSS-Feed LACNIC follow up this itemfollow up this enail (tasamail.ar@telefonica.com) as RSS-Feed tasamail.ar@telefonica.com follow up this itemfollow up this item 201.255.0.0 - 201.255.127.255 follow up this item AR-TEAR7-LACNIC follow up this item Telefonica de ArgentinaAV. ING. HUERGO - OBS. JUDICIALES, 723,1065 - Buenos Aires - CFAV. ING. HUERGO, 723,1065 - Capital Federal - BA follow up this item ns9.zoneedit.com follow up this item ns18.zoneedit.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.lu1eq.com.ar/archivos/softwar ...
5 follow up this item(9450888) 9450888 Report false positive Report closed case make a suggestion 2013-02-12 12:07:33 OVERDUE! Overdue!3036.1 follow up this itemfollow up this contributor (csirt) as RSS-Feed sub31possible lookup Evidence at malwaredomainlist.com
42/45 (93.3%) Virus/W32.Tenga.3666 W32.Tenga.A W32/Gael.worm.a Virus W32/Gael.worm.gen.A W32/Tenga.3666 W32.Licum Malware PE_TENGA.A Win32:Tenga Worm.Tenga.A Virus.Win32.Tenga.a Win32.Gael.3666 W32/Tenga-A Worm.Win32.Gael.A Win32.Gael.3666 W32/Stanit PE_TENGA.A Heuris lookup in virustotal.com (dc14ef63809b5d5e40285c8a6fba88f6)-->[http://www.virustotal.com/latest-report.html?resource=dc14ef63809b5d5e40285c8a6fba88f6]lookup in threatexpert.comlookup the sha256(d39462bd4e5285d55000ed49814444fac6585bcf95fbc862158fe07fd38e34e4) in comodo.comfollow up this md5sum(dc14ef63809b5d5e40285c8a6fba88f6)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table42/45 (93.3%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://ppgp.caedufjf.net/login/index/upd ...  up No previous evidence recordedSaved evidence (102400 Bytes) of last contact as txt December 29 2012 05:21:46 CET. aliveSaved log of last contact as txt February 12 2013 14:47:01 CET. SenderBaselookup 201.76.53.31 at virustotallookup 201.76.53.31 at Rus CERT university stuttgart germanylookup 201.76.53.31 at LACNICfollow up this item(ip) in same window 201.76.53.31 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS27715) in networks tablefollow up this itemfollow up this AS (AS27715) as RSS-Feed AS27715 SenderBaselookup 201.76.53.31 at virustotallookup 201.76.53.31 at Rus CERT university stuttgart germanylookup 201.76.53.31 at LACNICfollow up this item(review) in same window 201.76.53.31 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://ppgp.caedufjf.net/login/index/upd ... lookup caedufjf.net at virustotalfollow up this domain(caedufjf.net) caedufjf.net follow up this itemfollow up this country (BR) as RSS-Feed BR follow up this itemfollow up this region (LACNIC) as RSS-Feed LACNIC follow up this itemfollow up this enail (regcom@locaweb.com.br) as RSS-Feed regcom@locaweb.com.br follow up this itemfollow up this item 201.76.32.0 - 201.76.63.255 follow up this item 002.351.877/0001-52 follow up this item Locaweb Serviços de Internet S/A follow up this item ns1.locaweb.com.br follow up this item ns2.locaweb.com.br follow up this item ns3.locaweb.com.br follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://ppgp.caedufjf.net/login/index/upd ...
6 follow up this item(8601462) 8601462 Report false positive Report closed case make a suggestion 2012-12-08 15:51:16 OVERDUE! Overdue!4616.3 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
31/36 (86.1%) W32.Tenga.A W32/Virut.n.gen W32/Virut.gen4 Virus W32/Sality.D.gen!Eldorado W32.Virut.CF W32/Virut.FQ PE_VIRUX.P Win32:Vitro Virus.Win32.Virut.ce Win32.Virtob.Gen.12 Win32.Virut.AM W32/Scribble-B Virus.Win32.Virut.Ce Win32.Virtob.Gen.12 Win32.Virut.56 W3 lookup in virustotal.com (f6834eb9bfe59fd04c6f190f5f55649d)-->[http://www.virustotal.com/latest-report.html?resource=8df605c49d1418f1a071c78a63942218]lookup in threatexpert.comlookup the sha256(1fc0088b7c66b1e3831a001cabdd901009efae23358b7b2bab82a8cdf959aaeb) in comodo.comfollow up this md5sum(f6834eb9bfe59fd04c6f190f5f55649d)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table31/36 (86.1%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://mcs51.yenidir.com/programci/pr/pl ...  up Saved evidence (76800 Bytes) of first contact as txt July 22 2012 17:13:42 CEST.Saved evidence (75296 Bytes) of last contact as txt July 22 2012 17:13:42 CEST. alive-1504Saved log of last contact as txt June 11 2013 13:31:22 CEST. SenderBaselookup 88.235.51.8 at virustotallookup 88.235.51.8 at Rus CERT university stuttgart germanylookup 88.235.51.8 at Ripefollow up this item(ip) in same window 88.235.51.8 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS9121) in networks tablefollow up this itemfollow up this AS (AS9121) as RSS-Feed AS9121 SenderBaselookup 85.102.137.107 at virustotallookup 85.102.137.107 at Rus CERT university stuttgart germanylookup 85.102.137.107 at Ripefollow up this item(review) in same window 85.102.137.107 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://mcs51.yenidir.com/programci/pr/pl ... lookup yenidir.com at virustotalfollow up this domain(yenidir.com) yenidir.com follow up this itemfollow up this country (tr) as RSS-Feed tr follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@ttnet.net.tr) as RSS-Feed abuse@ttnet.net.tr follow up this itemfollow up this item 88.235.0.0 - 88.235.127.255 follow up this item TurkTelekom follow up this item Turk Telekom ADSL-TT net_dynamic follow up this item yenidir.dyndns.org follow up this item  follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://mcs51.yenidir.com/programci/pr/pl ...
7 follow up this item(8521570) 8521570  2012-11-29 13:51:21 2013-01-11 23:59:34 1042.1 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
33/36 (91.7%) Virus/W32.Tenga.3666 W32.Tenga.A W32/Gael.worm.a Virus W32/Gael.worm.gen.A W32/Tenga.3666 W32.Licum W32/Gael.A PE_TENGA.A Win32:Malware-gen Worm.Tenga.A Virus.Win32.Tenga.a Win32.Gael.3666 Win32.Tenga.A Win32.Gael.3666 (B) Worm.Win32.Gael.A Win32.Gael.3 lookup in virustotal.com (9d29145d9172b41817500402cde6f843)-->[http://www.virustotal.com/latest-report.html?resource=9d29145d9172b41817500402cde6f843]lookup in threatexpert.comlookup the sha256(32d397946147bdf5ea921e0376d2c09ebb9c907d767dda29f3dc4163b11a5201) in comodo.comfollow up this md5sum(9d29145d9172b41817500402cde6f843)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table33/36 (91.7%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://zkjj123456.gicp.net/TCNVC.exe  down Saved evidence (1716224 Bytes) of first contact as txt October 12 2010 10:03:15 CEST.Saved evidence (1716224 Bytes) of last contact as txt October 12 2010 10:03:15 CEST. deadSaved log of last contact as txt January 11 2013 23:59:34 CET. SenderBaselookup 122.228.158.6 at virustotallookup 122.228.158.6 at Rus CERT university stuttgart germanylookup 122.228.158.6 at ARINfollow up this item(ip) in same window 122.228.158.6 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS4809) in networks tablefollow up this itemfollow up this AS (AS4809) as RSS-Feed AS4809 undef Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://zkjj123456.gicp.net/TCNVC.exe lookup gicp.net at virustotalfollow up this domain(gicp.net) gicp.net follow up this itemfollow up this country (CN) as RSS-Feed CN follow up this itemfollow up this region (ARIN) as RSS-Feed ARIN follow up this itemfollow up this enail (anti-spam@ns.chinanet.cn.net) as RSS-Feed anti-spam@ns.chinanet.cn.net follow up this itemfollow up this item 122.224.0.0 - 122.239.255.255 follow up this item CHINANET-ZJ follow up this item CHINANET Zhejiang province networkChina TelecomNo.31,jingrong streetBeijing 100032China Telecom Zhejiang Province follow up this item ns2.exhera.com follow up this item ns1.exhera.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://zkjj123456.gicp.net/TCNVC.exe
8 follow up this item(2191113) 2191113  2012-09-09 20:31:24 2012-09-12 13:52:34 65.4 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
35/37 (94.6%) Virus/W32.Tenga.3666 W32.Tenga.A W32/Gael.worm.a W32/Gael.worm.gen.A Virus Win32.Tenga.A W32/Tenga.3666 W32.Licum W32/Gael.A PE_TENGA.A Win32:Tenga Win32.Stanit Worm.Tenga.A Virus.Win32.Tenga.a Win32.Gael.3666 Win32.Tenga.A Virus.Win32.Tenga!IK Worm.Win lookup in virustotal.com (113110eaf541dd838cefc94fdb93cb63)-->[http://www.virustotal.com/latest-report.html?resource=113110eaf541dd838cefc94fdb93cb63]lookup in threatexpert.comlookup the sha256(22f95a00fd339a48ee5286cad690a7e1a915a7c3f882948a0225232e765ca75e) in comodo.comfollow up this md5sum(113110eaf541dd838cefc94fdb93cb63)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table35/37 (94.6%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://ozone-industries.co.uk/FoxitReade ...  up Saved evidence (3526656 Bytes) of first contact as txt December 05 2010 16:44:45 CET.No evidence recorded deadSaved log of last contact as txt September 12 2012 13:52:34 CEST. SenderBaselookup 213.229.77.28 at virustotallookup 213.229.77.28 at Rus CERT university stuttgart germanylookup 213.229.77.28 at Ripefollow up this item(ip) in same window 213.229.77.28 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS29550) in networks tablefollow up this itemfollow up this AS (AS29550) as RSS-Feed AS29550 SenderBaselookup 213.229.77.28 at virustotallookup 213.229.77.28 at Rus CERT university stuttgart germanylookup 213.229.77.28 at Ripefollow up this item(review) in same window 213.229.77.28 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://ozone-industries.co.uk/FoxitReade ... lookup ozone-industries.co.uk at virustotalfollow up this domain(ozone-industries.co.uk) ozone-industries.co.uk follow up this itemfollow up this country (GB) as RSS-Feed GB follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@as29550.net) as RSS-Feed abuse@as29550.net follow up this itemfollow up this item 213.229.77.0 - 213.229.77.63 follow up this item AS29550-infra follow up this item Canonical range for MK-29Z follow up this item ns2.freevirtualservers.com follow up this item ns1.freevirtualservers.com follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://ozone-industries.co.uk/FoxitReade ...
9 follow up this item(2084581) 2084581  2012-08-18 12:11:08 2012-11-29 17:35:32 2478.4 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
33/36 (91.7%) Virus/W32.Tenga.3666 W32.Tenga.A W32/Gael.worm.a Virus W32/Gael.worm.gen.A Win32.Tenga.A W32/Tenga.3666 W32.Licum W32/Gael.A PE_TENGA.A Win32:Tenga Worm.Tenga.A Virus.Win32.Tenga.a Win32.Gael.3666 Virus.Win32.Tenga!IK Worm.Win32.Gael.A Win32.Gael.3666 W lookup in virustotal.com (74f7825f71f945ddde5ac3564c1959e5)-->[http://www.virustotal.com/latest-report.html?resource=74f7825f71f945ddde5ac3564c1959e5]lookup in threatexpert.comlookup the sha256(7a842509e7fe0ad9df5c99cf900cb0eddd66abd084a7d7ba05f220db2fe3f3ee) in comodo.comfollow up this md5sum(74f7825f71f945ddde5ac3564c1959e5)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table33/36 (91.7%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.fernitronix.fr/media/dossiers ...  up Saved evidence (376832 Bytes) of first contact as txt July 06 2012 14:20:36 CEST.Saved evidence (376832 Bytes) of last contact as txt July 06 2012 14:20:36 CEST. deadSaved log of last contact as txt November 29 2012 17:35:32 CET. SenderBaselookup 78.208.16.112 at virustotallookup 78.208.16.112 at Rus CERT university stuttgart germanylookup 78.208.16.112 at Ripefollow up this item(ip) in same window 78.208.16.112 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS12322) in networks tablefollow up this itemfollow up this AS (AS12322) as RSS-Feed AS12322 SenderBaselookup 78.208.16.112 at virustotallookup 78.208.16.112 at Rus CERT university stuttgart germanylookup 78.208.16.112 at Ripefollow up this item(review) in same window 78.208.16.112 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.fernitronix.fr/media/dossiers ... lookup fernitronix.fr at virustotalfollow up this domain(fernitronix.fr) fernitronix.fr follow up this itemfollow up this country (FR) as RSS-Feed FR follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@proxad.net) as RSS-Feed abuse@proxad.net follow up this itemfollow up this item 78.192.0.0 - 78.255.255.255 follow up this item FR-PROXAD-20051003 follow up this item Free SAS follow up this item dns102.ovh.net follow up this item ns102.ovh.net follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://www.fernitronix.fr/media/dossiers ...
10 follow up this item(2045883) 2045883  2012-08-10 12:21:02 2012-11-29 08:42:47 2661.4 follow up this itemfollow up this contributor (test) as RSS-Feed sub16possible lookup Evidence at malwaredomainlist.com
33/36 (91.7%) Virus/W32.Tenga.3666 W32.Tenga.A W32/Gael.worm.a Virus W32/Gael.worm.gen.A Win32.Tenga.A W32/Tenga.3666 W32.Licum W32/Gael.A PE_TENGA.A Win32:Tenga Worm.Tenga.A Win32.Gael.3666 Win32.Tenga.A Virus.Win32.Tenga!IK Worm.Win32.Gael.A Win32.Gael.3666 Win32.G lookup in virustotal.com (48841f87902b5619d5bf637954b434ec)-->[http://www.virustotal.com/latest-report.html?resource=48841f87902b5619d5bf637954b434ec]lookup in threatexpert.comlookup the sha256(0c6e7ff4dfe6a85129b5676266e59575cb95ad8cfb242155004bfaf55eac199b) in comodo.comfollow up this md5sum(48841f87902b5619d5bf637954b434ec)follow up this itemfollow up this virusname (W32%2FStanit) as RSS-Feedlookup Virusname at avirafollow up this malware(W32%2FStanit) for scanner (avira) in md5 table33/36 (91.7%) W32/Stanit
 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://forsaken-minority.de/downloads/Fo ...  up Saved evidence (104448 Bytes) of first contact as txt July 18 2012 21:51:30 CEST.Saved evidence (104448 Bytes) of last contact as txt July 18 2012 21:51:30 CEST. deadSaved log of last contact as txt November 29 2012 08:42:47 CET. SenderBaselookup 85.25.117.144 at virustotallookup 85.25.117.144 at Rus CERT university stuttgart germanylookup 85.25.117.144 at Ripefollow up this item(ip) in same window 85.25.117.144 possible lookup in maliciousnetworks.org (FIRE: FInding RoguE Networks) pagepossible lookup in google safebrowsing pagefollow up this AS (AS8972) in networks tablefollow up this itemfollow up this AS (AS8972) as RSS-Feed AS8972 SenderBaselookup 85.25.117.144 at virustotallookup 85.25.117.144 at Rus CERT university stuttgart germanylookup 85.25.117.144 at Ripefollow up this item(review) in same window 85.25.117.144 Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://forsaken-minority.de/downloads/Fo ... lookup forsaken-minority.de at virustotalfollow up this domain(forsaken-minority.de) forsaken-minority.de follow up this itemfollow up this country (DE) as RSS-Feed DE follow up this itemfollow up this region (RIPE) as RSS-Feed RIPE follow up this itemfollow up this enail (abuse@server4you.de) as RSS-Feed abuse@server4you.de follow up this itemfollow up this item 85.25.112.0 - 85.25.127.255 follow up this item SERVER4YOU-DSL follow up this item SERVER4YOU-DSL Broadband DialinhttpThese IPs are dynamic-assigned broadband IPsInternet-Hosterintergenia AG follow up this item ns1.nameserverservice.de follow up this item ns2.nameserverservice.de follow up this item  follow up this item  follow up this item  Safe Virus-Viewer and Analyser may take a minute to completelookup in virustotal http://forsaken-minority.de/downloads/Fo ...
Click here for other vital incidents


for query you may use wildcard=% or placeholder=_
response
domain
url
virusname
md5
ip
review
score
as
id
scanner
recent
descr
email
netname
inetnum
source
country
nsx
ns1
ns2
ns3
ns4
ns5
sub
sort
# of items to display

Protected by clean MX [Valid RSS] Valid HTML 4.01 Transitional CSS ist valide!
Access is provided for free and subject to these Terms and Conditions.