date started: Sat Jun 1 12:00:01 CEST 2013 checking domain: www.sockelwebshop.ch --> seems to be INFECTED: http://padmaraju.automotiveeventregistration.com/p --> DNS: padmaraju.automotiveeventregistration.com / 31.210.96.157 checking domain: www.michaelerberg.at --> seems to be INFECTED: http://costslaid.com/cgi-bin/r.cgi --> DNS: costslaid.com / 199.59.243.108, 199.59.243.109, 199.59.243.105, / checking domain: www.aquacrea.com --> seems to be INFECTED: http://mowdudur.myabadi.com/new2/www/delivery/ajs.php --> DNS: mowdudur.myabadi.com / 31.210.96.158 checking domain: www.welte.de --> seems to be INFECTED: http://ikhuichi.ahtcna.com/delivery/lg.php --> DNS: ikhuichi.ahtcna.com / 81.92.219.61 checking domain: www.la-mer-en-livres.fr --> seems to be INFECTED: http://vieka.pleinairolney.com/event.js --> DNS: vieka.pleinairolney.com / 81.92.219.60 checking domain: photos.ltahserver.com --> seems to be INFECTED: http://dechos.callumbush.com/url --> DNS: dechos.callumbush.com / 178.211.33.202 checking domain: images.wiltec.info --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.105, 199.59.243.106, 199.59.243.107, / checking domain: www.rci-jeux.com --> seems to be INFECTED: http://zarona.3tserver.net/url --> DNS: zarona.3tserver.net / 23.23.210.22, 74.86.197.160, 208.87.34.65 checking domain: repairgaragedoors.com --> seems to be INFECTED: http://iamprotectedfrom.net/cgi-bin/r.cgi --> DNS: iamprotectedfrom.net / 208.73.210.207 checking domain: leftiesshowroom.com --> seems to be INFECTED: http://agiula.agentonpoint.com/__utm.gif --> DNS: agiula.agentonpoint.com / 81.92.219.62 checking domain: leosat.at --> seems to be INFECTED: http://baygo.ata-contractors.com/spc.php --> DNS: baygo.ata-contractors.com / 81.92.219.62 checking domain: rhs-airco.com --> seems to be INFECTED: http://kaliosa.mrsstyleseeker.com/hb/i/sg/adv/infinity/sg_prom_ysm_iframe_20110425.html --> DNS: kaliosa.mrsstyleseeker.com / 31.210.96.157 checking domain: rhs-klima.de --> seems to be INFECTED: http://kaliosa.autoeventregistration.com/api/getCount2.php --> DNS: kaliosa.autoeventregistration.com / 31.210.96.157 checking domain: www.automania.ch --> seems to be INFECTED: http://rahpita.custom-chocolate-favors.com/new2/www/delivery/lg.php --> DNS: rahpita.custom-chocolate-favors.com / 31.210.96.155 checking domain: www.bootsboerse24.de --> seems to be INFECTED: http://karkala.elcevent.com/w/2.0/ajs --> DNS: karkala.elcevent.com / 31.210.96.155 checking domain: www.mc-ststephan.ch --> seems to be INFECTED: http://gauntsmith.southvalleyrugby.com/pview --> DNS: gauntsmith.southvalleyrugby.com / 31.210.96.155 checking domain: www.moratec.ch --> seems to be INFECTED: http://tweddy.devilwithacause.com/t.gif --> DNS: tweddy.devilwithacause.com / 31.210.96.155 checking domain: www.psicoterapeutas.org --> seems to be INFECTED: http://pantakit.registerforautoevent.com/lg.php --> DNS: pantakit.registerforautoevent.com / 31.210.96.158 checking domain: www.rebo-rohstoffe.de --> seems to be INFECTED: http://argles.autoeventregistration.com/lg.php --> DNS: argles.autoeventregistration.com / 31.210.96.157 checking domain: equestrianinfluence.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.165 checking domain: www.publibusiness24.com --> seems to be INFECTED: http://underbuild.net/cgi-bin/r.cgi --> DNS: underbuild.net / 62.116.181.25 checking domain: www.empfehlungsmarketing-studie.de --> seems to be INFECTED: http://cylla.softmn.com/pview --> DNS: cylla.softmn.com / 31.210.96.157 checking domain: stalders.com --> seems to be INFECTED: http://phalangy.hartford-capital.com/__utm.gif --> DNS: phalangy.hartford-capital.com / 31.210.96.155 checking domain: www.riviera-raptors.ch --> seems to be INFECTED: http://xaahie.southvalleyrugby.com/api/getCount2.php --> DNS: xaahie.southvalleyrugby.com / 31.210.96.155 checking domain: firstsaturday.hu --> seems to be INFECTED: http://vertica.reikisolar.com/__utm.gif --> DNS: vertica.reikisolar.com / 31.210.96.157 checking domain: www.nordicneurolab.com --> seems to be INFECTED: http://hormilla.jordandowney.net/__utm.gif --> DNS: hormilla.jordandowney.net / 31.210.96.155 checking domain: www.bestattungsinstitut-petri.de --> seems to be INFECTED: http://youremy.autoeventregistration.com/m2/chegginc/mbox/ajax --> DNS: youremy.autoeventregistration.com / 31.210.96.157 checking domain: www.saketattoo.com --> seems to be INFECTED: http://indanetwall.net/cgi-bin/r.cgi --> DNS: indanetwall.net / 199.59.243.105, 199.59.243.106, 199.59.243.107, / checking domain: www.clubescuelagr.com --> seems to be INFECTED: http://nakashian.mrsstyleseeker.com/new/www/delivery/lg.php --> DNS: nakashian.mrsstyleseeker.com / 31.210.96.157 checking domain: www.dreams4ever.de --> seems to be INFECTED: http://eredar.kalkanhorizon.com/url --> DNS: eredar.kalkanhorizon.com / 178.211.33.205 checking domain: www.tab-blog.de --> seems to be INFECTED: http://checkforsec.com/cgi-bin/r.cgi --> DNS: checkforsec.com / 8.5.1.45 checking domain: www.dream-edition.de --> seems to be INFECTED: http://yhulo.fightliberalmedia.com/b/ss/jobsdb-prd-id/1/H.23.6/s29160950270861 --> DNS: yhulo.fightliberalmedia.com / 81.92.219.60 checking domain: www.aceefrancophonie.org --> seems to be INFECTED: http://dahro.strevel.net/images/rt.gif --> DNS: dahro.strevel.net / 81.92.219.62 checking domain: www.zum-fliegenden-bauern.de --> seems to be INFECTED: http://hudgson.thehiddencorner.com/b --> DNS: hudgson.thehiddencorner.com / 31.210.96.155 checking domain: www.schmoove.fr --> seems to be INFECTED: http://mdrafiqul.wanderingwitchdoctor.com/url --> DNS: mdrafiqul.wanderingwitchdoctor.com / 178.211.33.203 checking domain: www.jawa-club.at --> seems to be INFECTED: http://matinisi.nitplus.com/www/delivery/spc.php --> DNS: matinisi.nitplus.com / 81.92.219.62 checking domain: boisdolivier.biz --> seems to be INFECTED: http://herocopter.com/cgi-bin/r.cgi --> DNS: herocopter.com / 199.59.243.108, 199.59.243.109, 199.59.243.105, / checking domain: www.holidayinn-mulhouse.com --> seems to be INFECTED: http://hunton.radiadoresautoair.com/api/getCount2.php --> DNS: hunton.radiadoresautoair.com / 178.211.33.203 checking domain: www.pforster.ch --> seems to be INFECTED: http://belchar.e-squares.com/__utm.gif --> DNS: belchar.e-squares.com / 81.92.219.61 checking domain: www.justin.it --> seems to be INFECTED: http://habibagahi.lynngoodpasture.com/url --> DNS: habibagahi.lynngoodpasture.com / 178.211.33.205 checking domain: www.forum-ofppt.com --> seems to be INFECTED: http://protechere.com/cgi-bin/r.cgi --> DNS: protechere.com / 69.43.161.177 checking domain: www.hostpix.de --> seems to be INFECTED: http://xlau.kalkanturqouise.com/dcsis0ifv10000gg3ag82u4rf_7b1e/dcs.gif --> DNS: xlau.kalkanturqouise.com / 31.210.96.156 checking domain: www.tumegl-tomils.com --> seems to be INFECTED: http://37024.soroki.info/url --> DNS: 37024.soroki.info / 176.53.112.108 checking domain: www.kreatividee.net --> seems to be INFECTED: http://szufnarowska.savedalyfield.com/event.js --> DNS: szufnarowska.savedalyfield.com / 31.210.96.157 checking domain: bramsche-basketball.de --> seems to be INFECTED: http://kinlichini.goldenpridewrestling.com/__utm.gif --> DNS: kinlichini.goldenpridewrestling.com / 31.210.96.155 checking domain: www.alexandria.ro --> seems to be INFECTED: http://vrenily.bedfordshirekitchens.com/imghover --> DNS: vrenily.bedfordshirekitchens.com / 31.210.96.155 checking domain: www.clicker.de --> seems to be INFECTED: http://blesyl.reikisolar.com/b --> DNS: blesyl.reikisolar.com / 31.210.96.157 checking domain: sivota-land.gr --> seems to be INFECTED: http://lewisentitled.com/cgi-bin/r.cgi --> DNS: lewisentitled.com / failed: Connection timed out. checking domain: laserme.de --> seems to be INFECTED: http://dauginas.mittromneyinternetcampaign.com/pview --> DNS: dauginas.mittromneyinternetcampaign.com / 81.92.219.62 checking domain: www.recrutam.ro --> seems to be INFECTED: http://dambalang.vehicleexchangeprogram.com/__utm.gif --> DNS: dambalang.vehicleexchangeprogram.com / 31.210.96.157 checking domain: boutique-hotel-chiangmai.com --> seems to be INFECTED: http://enenche.alloyradianttubes.com/s --> DNS: enenche.alloyradianttubes.com / 31.210.96.155 checking domain: www.xerox-drucker.de --> seems to be INFECTED: http://alothaim.mrsstyleseeker.com/__utm.gif --> DNS: alothaim.mrsstyleseeker.com / 31.210.96.157 checking domain: www.compta-geniale.com --> seems to be INFECTED: http://alipan.fantasyintro.com/f.gif --> DNS: alipan.fantasyintro.com / 31.210.96.156 checking domain: www.laufen-in-koeln.de --> seems to be INFECTED: http://46173.majesticbetta.com/url --> DNS: 46173.majesticbetta.com / 178.211.33.203 checking domain: www.agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 62.116.181.25 checking domain: www.niceshop.at --> seems to be INFECTED: http://perrugina.coreywasley.com/b --> DNS: perrugina.coreywasley.com / 31.210.96.155 checking domain: www.scmra.ca --> seems to be INFECTED: http://kitabevi.autoeventregistration.com/js_flat_1_0/ --> DNS: kitabevi.autoeventregistration.com / 31.210.96.157 checking domain: www.phuketvilla-elisabeth.com --> seems to be INFECTED: http://kovacina.heattreatalloy.com/api/getCount2.php --> DNS: kovacina.heattreatalloy.com / 31.210.96.155 checking domain: www.mazus-art.com --> seems to be INFECTED: http://allintercom.net/cgi-bin/r.cgi --> DNS: allintercom.net / 208.73.211.197 checking domain: www.artistas-americanos.com --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 173.212.56.245 checking domain: www.foto-weller.de --> seems to be INFECTED: http://praylu.nutritionbydesign.com/pview --> DNS: praylu.nutritionbydesign.com / 81.92.219.62 checking domain: www.golden-champion.com --> seems to be INFECTED: http://updude.glsfinancials.com/new/www/delivery/lg.php --> DNS: updude.glsfinancials.com / failed: Name or service not known. checking domain: shop.grostar-aquaristik.de --> seems to be INFECTED: http://42499.customshowerdoorsc.com/url --> DNS: 42499.customshowerdoorsc.com / 176.74.176.167 checking domain: www.riadcoram.com --> seems to be INFECTED: http://quintenz.advertisewiththedevil.com/new2/www/delivery/ajs.php --> DNS: quintenz.advertisewiththedevil.com / 31.210.96.155 checking domain: globalserve.com.cy --> seems to be INFECTED: http://weebam.fighttheliberalmedia.com/url --> DNS: weebam.fighttheliberalmedia.com / 81.92.219.60 checking domain: www.brichzin.de --> seems to be INFECTED: http://zhainia.prestigehonda.net/delivery/lg.php --> DNS: zhainia.prestigehonda.net / 31.210.96.157 checking domain: www.franken-gmbh.de --> seems to be INFECTED: http://grosaru.dunstablekitchens.com/__utm.gif --> DNS: grosaru.dunstablekitchens.com / 31.210.96.155 checking domain: www.pino-travel.com --> seems to be INFECTED: http://virtualmapping.org/cgi-bin/r.cgi --> DNS: virtualmapping.org / 82.98.86.175 checking domain: www.vonjowanka.de --> seems to be INFECTED: http://travelmeant.net/cgi-bin/r.cgi --> DNS: travelmeant.net / 199.59.243.106, 199.59.243.107, 199.59.243.108, / checking domain: vestidosnoivaoramatina.net --> seems to be INFECTED: http://kruch.zarrisgroup.com/__track/view --> DNS: kruch.zarrisgroup.com / 182.50.135.128 checking domain: www.greenfieldadvisorsltd.com --> seems to be INFECTED: http://moutsiouna.iretarpg.com/delivery/lg.php --> DNS: moutsiouna.iretarpg.com / 31.210.96.155 checking domain: www.hekimce.com --> seems to be INFECTED: http://merchx.automotiveservicesavings.com/navbar.g --> DNS: merchx.automotiveservicesavings.com / 31.210.96.157 checking domain: www.jordanbad.de --> seems to be INFECTED: http://facuri.chelseyfatula.com/tracker --> DNS: facuri.chelseyfatula.com / 31.210.96.155 checking domain: www.literatur-vsm.at --> seems to be INFECTED: http://wmanou.telecomindiana.com/b/ss/wmg,wmgatl,wmgd2cparamore,wmgparamoreall/1/H.20.3/s58898978792130 --> DNS: wmanou.telecomindiana.com / 31.210.96.155 checking domain: www.oople.com --> seems to be INFECTED: http://assington.outbreakm3dia.com/b --> DNS: assington.outbreakm3dia.com / 81.92.219.62 checking domain: www.pssst.de --> seems to be INFECTED: http://yhulo.fightliberalmedia.com/b/ss/jobsdb-prd-id/1/H.23.6/s29160950270861 --> DNS: yhulo.fightliberalmedia.com / 81.92.219.60 checking domain: www.sportmodelagency.com --> seems to be INFECTED: http://violoka.benahavisrealestate.com/aclk --> DNS: violoka.benahavisrealestate.com / 31.210.96.156 checking domain: www.windsorsuiteshotel.com --> seems to be INFECTED: http://mishor.ancestorworshippublishing.com/__utm.gif --> DNS: mishor.ancestorworshippublishing.com / 81.92.219.61 checking domain: agroservis.rs --> seems to be INFECTED: http://voictoall.com/cgi-bin/r.cgi --> DNS: voictoall.com / 62.116.181.25 checking domain: kewb.co.ke --> seems to be INFECTED: http://ugwuezumba.iconarchitects.net/b --> DNS: ugwuezumba.iconarchitects.net / 81.92.219.61 checking domain: www.asia-federblumen.de --> seems to be INFECTED: http://metromanias.com/cgi-bin/r.cgi --> DNS: metromanias.com / 69.43.161.153 checking domain: www.lesmotsdelle.ch --> seems to be INFECTED: http://udumeighe.thecaregrouppc.net/__utm.gif --> DNS: udumeighe.thecaregrouppc.net / 81.92.219.62 checking domain: www.mschaer.ch --> seems to be INFECTED: http://waziona.greatserviceforless.com/pview --> DNS: waziona.greatserviceforless.com / 31.210.96.157 checking domain: www.brillenpesche.ch --> seems to be INFECTED: http://brayley.telecommichigan.com/t.gif --> DNS: brayley.telecommichigan.com / 31.210.96.155 checking domain: www.mastermusic.ch --> seems to be INFECTED: http://pakipot.heattreatalloy.com/go.asp --> DNS: pakipot.heattreatalloy.com / 31.210.96.155 checking domain: www.vitaminbude.de --> seems to be INFECTED: http://karepii.dealerholidayevent.com/__utm.gif --> DNS: karepii.dealerholidayevent.com / 31.210.96.157 checking domain: www.mapet.de --> seems to be INFECTED: http://cielma.williespage.com/hb/i/sg/adv/infinity/sg_prom_ysm_iframe_20110425.html --> DNS: cielma.williespage.com / 31.210.96.155 checking domain: www.bad-saulgau.de --> seems to be INFECTED: http://solent.alloyradianttubes.com/delivery/lg.php --> DNS: solent.alloyradianttubes.com / 31.210.96.155 checking domain: www.kelliewinnell.com.au --> seems to be INFECTED: http://yiceli.thecinema6.com/json --> DNS: yiceli.thecinema6.com / 31.210.96.156 checking domain: www.elektrolok.de --> seems to be INFECTED: http://malvaez.bvvk.com/b --> DNS: malvaez.bvvk.com / 31.210.96.158 checking domain: www.cepsuisse.com --> seems to be INFECTED: http://trialworld.net/cgi-bin/r.cgi --> DNS: trialworld.net / 69.43.161.177 checking domain: www.perfume-worldwide.com --> seems to be INFECTED: http://cosha.electhillary2016.com/www/delivery/spc.php --> DNS: cosha.electhillary2016.com / 81.92.219.60 checking domain: www.log-in-verlag.de --> seems to be INFECTED: http://wcameron.powerplaycreative.com/__utm.gif --> DNS: wcameron.powerplaycreative.com / 31.210.96.158 checking domain: forum.adoptionefa.org --> seems to be INFECTED: http://delacuseta.ancestorworshippublishing.com/s --> DNS: delacuseta.ancestorworshippublishing.com / 81.92.219.61 checking domain: bgs-architekten.com --> seems to be INFECTED: http://capitalinformer.com/cgi-bin/r.cgi --> DNS: capitalinformer.com / 82.98.86.165 checking domain: www.natalshopping.com.br --> seems to be INFECTED: http://watchingsquare.com/cgi-bin/r.cgi --> DNS: watchingsquare.com / 173.212.56.245 date finished: Sat Jun 1 12:04:02 CEST 2013