hs.2-95.zlkon.lv (94.247.2.95)

[CM_MWR]

First Reference
http://www.malwaredomainlist.com/forums/index.php?topic=2638.0

Todays is same thing but did notice something when it doesnt get a current response from host at 94.247.2.95

Lots of these re transmissions

Code: [Select]

52.4d.364a.static.theplanet.comHTTP[TCPRetransmission]GET/40E8001442563833373364346533642D66333835326220666C000001AB66000000007600000642EB000530B1B9BDC2

52.4d.364a.static.theplanet.com (74.54.77.82)

Code: [Select]

ca.87.364a.static.theplanet.comHTTP[TCPRetransmission]GET/40E8001442563833373364346533642D66333835326220666C000001AB6600000000760000005DEB0005301534383E
ca.87.364a.static.theplanet.com (74.54.135.202)

[SysAdMini]

You have posted some of them. I have checked them, but I can't detect what it is ?
Therefore I haven't listed those urls.
Do you know what it is ?

[CM_MWR]

Malware?? 

Pandex/Cutwail I spec is what it would be called.

[CM_MWR]

Ah holger, you need PM me, Ill send you somewhere get a tool make those links work for you, I cant recall dload link so Ill have to email somone....these links when save to disc are BN**.tmp usually dropped in temps.