date started: Wed Feb 27 13:28:37 CET 2013 checking domain: www.mazus-art.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 74.86.197.160, 208.87.34.15, 23.23.210.22 checking domain: www.artistas-americanos.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 173.212.56.245 checking domain: www.lerchdesign.ch --> seems to be INFECTED: http://argumenthistorical.org/cgi-bin/r.cgi --> DNS: argumenthistorical.org / failed: Name or service not known. checking domain: www.foto-weller.de --> seems to be INFECTED: http://praylu.nutritionbydesign.com/t.gif --> DNS: praylu.nutritionbydesign.com / 81.92.219.62 checking domain: www.golden-champion.com --> seems to be INFECTED: http://updude.glsfinancials.com/gen_204 --> DNS: updude.glsfinancials.com / 31.210.96.158 checking domain: www.valdichianaoutlet.it --> seems to be INFECTED: http://miikel.castlelawpa.com/ads/openx/www/delivery/lg.php --> DNS: miikel.castlelawpa.com / 81.92.219.61 checking domain: www.bergparadies.ch --> seems to be INFECTED: http://youwillsee.automotiveservicesavings.com/hb/i/sg/adv/infinity/sg_prom_ysm_iframe_20110425.html --> DNS: youwillsee.automotiveservicesavings.com / 31.210.96.157 checking domain: shop.grostar-aquaristik.de --> seems to be INFECTED: http://47301.customshowerdoorsc.com/url --> DNS: 47301.customshowerdoorsc.com / 208.87.35.103 checking domain: www.thorenberg.ch --> seems to be INFECTED: http://earlyanswered.com/cgi-bin/r.cgi --> DNS: earlyanswered.com / 173.212.56.171 checking domain: www.ofct.ch --> seems to be INFECTED: http://ciepiel.reikisolar.com/delivery/lg.php --> DNS: ciepiel.reikisolar.com / 31.210.96.157 checking domain: www.hotel-hohentwiel.de --> seems to be INFECTED: http://larico.mellodj.com/imghover --> DNS: larico.mellodj.com / 31.210.96.156 checking domain: www.riadcoram.com --> seems to be INFECTED: http://quintenz.advertisewiththedevil.com/openx/www/delivery/lg.php --> DNS: quintenz.advertisewiththedevil.com / 31.210.96.155 checking domain: globalserve.com.cy --> seems to be INFECTED: http://weebam.fighttheliberalmedia.com/b/ss/aa-airasia-id-prd,aa-airasia-global/1/H.24.1/s57643699046801 --> DNS: weebam.fighttheliberalmedia.com / 81.92.219.60 checking domain: www.elektrosmognews.de --> seems to be INFECTED: http://kaiserblueth.searchtrusted.com/b --> DNS: kaiserblueth.searchtrusted.com / 81.92.219.62 checking domain: www.brichzin.de --> seems to be INFECTED: http://zhainia.prestigehonda.net/neo/darla/php/fc.php --> DNS: zhainia.prestigehonda.net / 31.210.96.157 checking domain: www.colornova.ch --> seems to be INFECTED: http://banerjie.springcleaningevent.com/f.gif --> DNS: banerjie.springcleaningevent.com / 31.210.96.156 checking domain: www.viceversa.ch --> seems to be INFECTED: http://allinoneprogmon.net/cgi-bin/r.cgi --> DNS: allinoneprogmon.net / 208.87.35.103 checking domain: www.franken-gmbh.de --> seems to be INFECTED: http://grosaru.glisinc.com/ --> DNS: grosaru.glisinc.com / 31.210.96.155 checking domain: www.pino-travel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 141.8.224.67 checking domain: www.vonjowanka.de --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.108, 199.59.243.109, 199.59.243.105, / checking domain: www.immobilienportal.li --> seems to be INFECTED: http://ruskey.totalslipsolutions.net/url --> DNS: ruskey.totalslipsolutions.net / 178.211.33.205 checking domain: dk-media.ch --> seems to be INFECTED: http://westfloriday.newcarsat.com/cpi.jsp --> DNS: westfloriday.newcarsat.com / 31.210.96.157 checking domain: download2.microapp.com --> seems to be INFECTED: http://jesusonlynet.org/cgi-bin/r.cgi --> DNS: jesusonlynet.org / 8.5.1.34 checking domain: vestidosnoivaoramatina.net --> seems to be INFECTED: http://kruch.zarrisgroup.com/a/244/d04f9a07/z --> DNS: kruch.zarrisgroup.com / 81.92.219.61 checking domain: www.greenfieldadvisorsltd.com --> seems to be INFECTED: http://moutsiouna.iretarpg.com/url --> DNS: moutsiouna.iretarpg.com / 31.210.96.155 checking domain: www.hekimce.com --> seems to be INFECTED: http://merchx.golfnewsmaine.com/__utm.gif --> DNS: merchx.golfnewsmaine.com / 31.210.96.157 checking domain: www.jordanbad.de --> seems to be INFECTED: http://facuri.chelseyfatula.com/tracker --> DNS: facuri.chelseyfatula.com / 31.210.96.155 checking domain: www.literatur-vsm.at --> seems to be INFECTED: http://wmanou.telecomindiana.com/t.gif --> DNS: wmanou.telecomindiana.com / 31.210.96.155 checking domain: www.oople.com --> seems to be INFECTED: http://assington.whhusainc.net/b --> DNS: assington.whhusainc.net / 81.92.219.62 checking domain: www.pssst.de --> seems to be INFECTED: http://yhulo.landscapesbygeorge.net/fpc.pl --> DNS: yhulo.landscapesbygeorge.net / 81.92.219.60 checking domain: www.sportmodelagency.com --> seems to be INFECTED: http://violoka.michigancity11thstreetplan.com/url --> DNS: violoka.michigancity11thstreetplan.com / 178.211.33.202 checking domain: www.windsorsuiteshotel.com --> seems to be INFECTED: http://mishor.ancestorworshippublishing.com/b --> DNS: mishor.ancestorworshippublishing.com / 81.92.219.61 checking domain: agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 62.116.143.11 checking domain: kewb.co.ke --> seems to be INFECTED: http://ugwuezumba.iconarchitects.net/lg.php --> DNS: ugwuezumba.iconarchitects.net / 81.92.219.61 checking domain: www.weller.to --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30 checking domain: www.asia-federblumen.de --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / 69.43.161.153 checking domain: www.smartek.ch --> seems to be INFECTED: http://www.smartek.ch/fr/ --> DNS: qushawnda.thebabiesandbeyondpeds.com / 31.210.96.155 checking domain: www.vitaminbude.de --> seems to be INFECTED: http://karepii.dealerholidayevent.com/__utm.gif --> DNS: karepii.dealerholidayevent.com / 31.210.96.157 checking domain: www.mapet.de --> seems to be INFECTED: http://cielma.williespage.com/hb/i/sg/adv/infinity/sg_prom_ysm_iframe_20110425.html --> DNS: cielma.williespage.com / 31.210.96.155 checking domain: www.bad-saulgau.de --> seems to be INFECTED: http://solent.alloyradianttubes.com/delivery/lg.php --> DNS: solent.alloyradianttubes.com / 31.210.96.155 checking domain: www.kelliewinnell.com.au --> seems to be INFECTED: http://yiceli.thecinema6.com/json --> DNS: yiceli.thecinema6.com / 31.210.96.156 checking domain: www.elektrolok.de --> seems to be INFECTED: http://malvaez.bvvk.com/__utm.gif --> DNS: malvaez.bvvk.com / 31.210.96.158 checking domain: www.cepsuisse.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: www.perfume-worldwide.com --> seems to be INFECTED: http://cosha.electhillary2016.com/b/ss/sunglobal,sunjava/1/H.14/s34311347147434 --> DNS: cosha.electhillary2016.com / 81.92.219.60 checking domain: www.log-in-verlag.de --> seems to be INFECTED: http://wcameron.arrozconbeans.com/s --> DNS: wcameron.arrozconbeans.com / failed: Name or service not known. checking domain: forum.adoptionefa.org --> seems to be INFECTED: http://delacuseta.invisabletread.com/url --> DNS: delacuseta.invisabletread.com / 178.211.33.205 checking domain: www.hese-project.org --> seems to be INFECTED: http://kaiserblueth.searchtrusted.com/b --> DNS: kaiserblueth.searchtrusted.com / 81.92.219.62 checking domain: bgs-architekten.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.165 checking domain: www.natalshopping.com.br --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.109, 199.59.243.105, 199.59.243.106, / checking domain: www.fraichattitude.com --> seems to be INFECTED: http://formalytidy.fruitsofgaia.com/delivery/ajs.php --> DNS: formalytidy.fruitsofgaia.com / 178.211.33.205 date finished: Wed Feb 27 13:29:57 CET 2013