Site, see: http://support.clean-mx.de/clean-mx/viruses?virusname=Virus.Win32.Neshta.a
hxtp://www.fontviewer.de/
See analysis: http://www.virustotal.com/url-scan/report.html?id=ad6f4e50296b6e330671ca09a89071e5-1299263914 (1 out of 6)
nothing found here: http://www.virustotal.com/file-scan/report.html?id=4fa3006677f8f4a19652fad9495bce455f5f3f1ea59eef3e47f8e8e8abc09069-1299267680
Found to be suspicious here:
http://wepawet.iseclab.org/view.php?hash=f565299cbf58b4bde325ef46e6d08be8&t=1299268031&type=js
DrWeb’s Linkscanner gives this a green:
Checking: htxp://www.fontviewer.de/fonts.exe
Engine version: 5.0.2.3300
Total virus-finding records: 1923690
File size: 360.50 KB
File MD5: eae538350fa427003e011e142042e73e
htxp://www.fontviewer.de/fonts.exe packed by PESTUB
htxp://www.fontviewer.de/fonts.exe - Ok
See for the above: htxp://jsunpack.jeek.org/dec/go?report=a33f5f9ff7a965df0a89df6ed8295bb79010d431
See: suspicious and malicious status at: http://www.mywot.com/en/scorecard/fontviewer.de
can be found listed here: http://www.malware.com.br/cgi/submit?action=stats&s=domains
Sucuri scan gives it the all green,
Here also: http://www.garyshood.com/virus/results.php?r=eae538350fa427003e011e142042e73e
Sites has not yet got any rating in avastWebRep ?
TrendMicro scan is clear for hxtp://www.fontviewer.de/fonts.exe: Is it safe?
Dangerous
The latest tests indicate that this site contains malicious software or could defraud visitors.
How would you categorize this site?
Disease Vector
Sites that directly or indirectly facilitate the distribution of malicious software or source code,
Additionally, folks, there is a buffer overflow issue via the following facebook link on mentioned site:
htxp://connect.facebook.net/de_de/all.js#xfbml=1
^iframe src=“htxp://www dot facebook dot com/plugins/like.php?href=…htxp%3A%2F%2Fconnect dot facebook dot net%2Fde_de%2Fall dot js%23xfbml%3D1…” scrolling=“no” frameborder=“0” style=“height: 62px; width: 100%” allowTransparency= “true”^^/iframe^
[munged by me]
polonus