date started: Fri Mar 22 08:41:02 CET 2013 checking domain: www.look-atme.ch --> seems to be INFECTED: http://bulletshitt.alloyfurnacerolls.com/b/ss/timepeople/1/H.20.2/s84092430730695 --> DNS: bulletshitt.alloyfurnacerolls.com / 31.210.96.155 checking domain: www.insieme-nw.ch --> seems to be INFECTED: http://tauscheck.sonnabendlaw.com/t.gif --> DNS: tauscheck.sonnabendlaw.com / 81.92.219.62 checking domain: www.myrevelations.de --> seems to be INFECTED: http://kaang.dealerholidayevent.com/openx/www/delivery/lg.php --> DNS: kaang.dealerholidayevent.com / 31.210.96.157 checking domain: www.sportsbutiken.se --> seems to be INFECTED: http://zaady.globalhumanitariansummit.com/url --> DNS: zaady.globalhumanitariansummit.com / 178.211.33.203 checking domain: www.clicker.de --> seems to be INFECTED: http://blesyl.reikisolar.com/tracker --> DNS: blesyl.reikisolar.com / 31.210.96.157 checking domain: sivota-land.gr --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30 checking domain: laserme.de --> seems to be INFECTED: http://dauginas.21ideas.com/delivery/lg.php --> DNS: dauginas.21ideas.com / 81.92.219.62 checking domain: www.recrutam.ro --> seems to be INFECTED: http://dambalang.vehicleexchangeprogram.com/pixel;r=859962289;a=p-5dyPa639IrgIw;event=refresh;fpan=0;fpa=P0-1434396918-1341369573086;ns=0;ce=1;je=0;sr=1024x768x24;enc=n;dst=0;et=1341369784660;tzo=-420;ref=http%3A%2F%2Fwww.recrutam.ro%2F --> DNS: dambalang.vehicleexchangeprogram.com / 31.210.96.157 checking domain: boutique-hotel-chiangmai.com --> seems to be INFECTED: http://enenche.hollyspringssavingsnetwork.com/__utm.gif --> DNS: enenche.hollyspringssavingsnetwork.com / 31.210.96.155 checking domain: www.xerox-drucker.de --> seems to be INFECTED: http://alothaim.mrsstyleseeker.com/1pix.gif --> DNS: alothaim.mrsstyleseeker.com / 31.210.96.157 checking domain: www.compta-geniale.com --> seems to be INFECTED: http://alipan.be3ny.com/fpc.pl --> DNS: alipan.be3ny.com / 31.210.96.156 checking domain: www.laufen-in-koeln.de --> seems to be INFECTED: http://53368.majesticbetta.com/url --> DNS: 53368.majesticbetta.com / 178.211.33.203 checking domain: www.hotelwindsornice.com --> seems to be INFECTED: http://benziman.southvalleyrugby.com/ads/www/delivery/lg.php --> DNS: benziman.southvalleyrugby.com / 31.210.96.155 checking domain: www.co2partners.com --> seems to be INFECTED: http://reportedtechniques.org/cgi-bin/r.cgi --> DNS: reportedtechniques.org / 199.59.243.107, 199.59.243.108, 199.59.243.109, / checking domain: www.agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 62.116.143.11 checking domain: www.niceshop.at --> seems to be INFECTED: http://perrugina.coreywasley.com/pixel;r=480706757;a=p-72V4-XKpaKDrE;tags=WikiAnswersSport;fpan=0;fpa=P0-164425288-1309943515111;ns=0;ce=1;je=0;sr=1024x768x24;enc=n;dst=0;et=1340686168189;tzo=-420;ref=http%3A%2F%2Fwww.niceshop.at%2F --> DNS: perrugina.coreywasley.com / 31.210.96.155 checking domain: www.phuketvilla-elisabeth.com --> seems to be INFECTED: http://kovacina.webrunchhard.com/event.js --> DNS: kovacina.webrunchhard.com / 31.210.96.155 checking domain: www.mazus-art.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 208.87.34.15, 23.23.210.22, 74.86.197.160 checking domain: www.artistas-americanos.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 173.212.56.245 checking domain: www.foto-weller.de --> seems to be INFECTED: http://praylu.nutritionbydesign.com/pview --> DNS: praylu.nutritionbydesign.com / 81.92.219.62 checking domain: www.golden-champion.com --> seems to be INFECTED: http://updude.glsfinancials.com/servidor/www/delivery/lg.php --> DNS: updude.glsfinancials.com / 31.210.96.158 checking domain: shop.grostar-aquaristik.de --> seems to be INFECTED: http://49703.customshowerdoorsc.com/url --> DNS: 49703.customshowerdoorsc.com / 176.74.176.167 checking domain: www.hotel-hohentwiel.de --> seems to be INFECTED: http://larico.mellodj.com/imghover --> DNS: larico.mellodj.com / 31.210.96.156 checking domain: www.riadcoram.com --> seems to be INFECTED: http://quintenz.advertisewiththedevil.com/delivery/lg.php --> DNS: quintenz.advertisewiththedevil.com / 31.210.96.155 checking domain: globalserve.com.cy --> seems to be INFECTED: http://weebam.fighttheliberalmedia.com/f.gif --> DNS: weebam.fighttheliberalmedia.com / 81.92.219.60 checking domain: www.elektrosmognews.de --> seems to be INFECTED: http://kaiserblueth.searchtrusted.com/__utm.gif --> DNS: kaiserblueth.searchtrusted.com / 81.92.219.62 checking domain: www.brichzin.de --> seems to be INFECTED: http://zhainia.prestigehonda.net/__utm.gif --> DNS: zhainia.prestigehonda.net / 31.210.96.157 checking domain: www.colornova.ch --> seems to be INFECTED: http://banerjie.springcleaningevent.com/f.gif --> DNS: banerjie.springcleaningevent.com / 31.210.96.156 checking domain: www.franken-gmbh.de --> seems to be INFECTED: http://grosaru.glisinc.com/spc.php --> DNS: grosaru.glisinc.com / 31.210.96.155 checking domain: www.pino-travel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 141.8.224.67 checking domain: www.vonjowanka.de --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.107, 199.59.243.108, 199.59.243.109, / checking domain: vestidosnoivaoramatina.net --> seems to be INFECTED: http://kruch.zarrisgroup.com/a/244/d04f9a07/z --> DNS: kruch.zarrisgroup.com / 81.92.219.61 checking domain: www.greenfieldadvisorsltd.com --> seems to be INFECTED: http://moutsiouna.iretarpg.com/url --> DNS: moutsiouna.iretarpg.com / 31.210.96.155 checking domain: www.hekimce.com --> seems to be INFECTED: http://merchx.golfnewsmaine.com/__utm.gif --> DNS: merchx.golfnewsmaine.com / 31.210.96.157 checking domain: www.jordanbad.de --> seems to be INFECTED: http://facuri.chelseyfatula.com/tracker --> DNS: facuri.chelseyfatula.com / 31.210.96.155 checking domain: www.literatur-vsm.at --> seems to be INFECTED: http://wmanou.telecomindiana.com/t.gif --> DNS: wmanou.telecomindiana.com / 31.210.96.155 checking domain: www.oople.com --> seems to be INFECTED: http://assington.whhusainc.net/b --> DNS: assington.whhusainc.net / 81.92.219.62 checking domain: www.pssst.de --> seems to be INFECTED: http://yhulo.landscapesbygeorge.net/fpc.pl --> DNS: yhulo.landscapesbygeorge.net / 81.92.219.60 checking domain: www.sportmodelagency.com --> seems to be INFECTED: http://violoka.michigancity11thstreetplan.com/url --> DNS: violoka.michigancity11thstreetplan.com / 178.211.33.202 checking domain: www.windsorsuiteshotel.com --> seems to be INFECTED: http://mishor.ancestorworshippublishing.com/__utm.gif --> DNS: mishor.ancestorworshippublishing.com / 81.92.219.61 checking domain: agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 62.116.143.11 checking domain: kewb.co.ke --> seems to be INFECTED: http://ugwuezumba.iconarchitects.net/t.gif --> DNS: ugwuezumba.iconarchitects.net / 81.92.219.61 checking domain: www.weller.to --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / 64.74.223.30 checking domain: www.asia-federblumen.de --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / 69.43.161.153 checking domain: www.vitaminbude.de --> seems to be INFECTED: http://karepii.dealerholidayevent.com/imgres --> DNS: karepii.dealerholidayevent.com / 31.210.96.157 checking domain: www.mapet.de --> seems to be INFECTED: http://cielma.williespage.com/router/ --> DNS: cielma.williespage.com / 31.210.96.155 checking domain: www.bad-saulgau.de --> seems to be INFECTED: http://solent.alloyradianttubes.com/delivery/lg.php --> DNS: solent.alloyradianttubes.com / 31.210.96.155 checking domain: www.kelliewinnell.com.au --> seems to be INFECTED: http://yiceli.thecinema6.com/json --> DNS: yiceli.thecinema6.com / 31.210.96.156 checking domain: www.elektrolok.de --> seems to be INFECTED: http://malvaez.bvvk.com/__utm.gif --> DNS: malvaez.bvvk.com / 31.210.96.158 checking domain: www.cepsuisse.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: www.perfume-worldwide.com --> seems to be INFECTED: http://cosha.electhillary2016.com/__utm.gif --> DNS: cosha.electhillary2016.com / 81.92.219.60 checking domain: www.log-in-verlag.de --> seems to be INFECTED: http://wcameron.arrozconbeans.com/pview --> DNS: wcameron.arrozconbeans.com / failed: Name or service not known. checking domain: forum.adoptionefa.org --> seems to be INFECTED: http://delacuseta.invisabletread.com/url --> DNS: delacuseta.invisabletread.com / 178.211.33.205 checking domain: www.hese-project.org --> seems to be INFECTED: http://kaiserblueth.searchtrusted.com/api/getCount2.php --> DNS: kaiserblueth.searchtrusted.com / 81.92.219.62 checking domain: bgs-architekten.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.165 date finished: Fri Mar 22 08:43:09 CET 2013