See: htxp://zulu.zscaler.com/submission/show/11da9d4275d363861e1f6b95ad72434e-1335112600
VT gives it as clean: htxps://www.virustotal.com/file/ac86408d89840681f83bd22b73bba27e2dd9dc0db25cac3c065ce0c48b0d487a/analysis/
found blacklisted: hxtp://siteinspector.comodo.com/public/reports/show_log?id=745923
Malware response was closed no alerts detected, but according this recent anubis analysis: htxp://anubis.iseclab.org/?action=result&task_id=14a05c97974c5d524c1d04b836abaafb3&format=html
the executable issues HTTP Requests and downloads potential malicious executable code, bot?
Why then, Pondus, is it still reported on VrusWatch list and blacklisted somewhere else?
Sometimes the malware has long been cleansed, closed or response is dead before it is being blacklisted.
So I always have to evaluate and scan for real time results to check.
It is a good thing we check all we do here vice versa,