MalwarePatrol

09 Nov 08
A major hardware failure in the Data Center that hosts some of our servers, got the web site unavailable for some time during this weekend. Everything is up and running again, no data was lost and now we are rebuilding our database of URLs. We strongly apologize for any inconvenience the downtime may have caused. Please let us know if you find any problems.

26 Oct 08
After more than three years of the Malware Block List project we have a new web site and a new name. We are now the Malware Patrol - www.malwarepatrol.net. Our Block Lists are available at the same addresses. New features and services are under development. We hope you like this new look&feel. Please let us know if you have any trouble using our new web site. Our special thanks to all friends who helped during the development stage.

08 Sep 08
The SpamAssassin and Postfix lists were slightly changed according to users' suggestions for improvements. We are also working hard on even more crawlling features and since late August we are monitoring additional mailing lists for suspect URLs.

02 Sep 08
We added SWF (Shockwave) to our list of dangerous file extensions. Feel free to report any links to malicious swf files.

15 Aug 08
In a quick poll ours users decided that the Malware Block List shoul d change its name to Malware Patrol. Thanks for voting, we registered the .n et, .org and .com.br domains and will start using then soon.

01 Jun 08
We proudly announce that FRISK donated one year of their Anti-Virus product, F-Prot, that is now being used by our automated engines. Our special thanks for their support to this project.

15 May 08
Some users are experiencing DNS problems since this morning. This is because on e of our Service Providers restored a Virtual Server from an old snapshot with outdated DNS in formation. That server, which works as DNS and URL extractor, is now back to its current state . We sincerely apologize for the inconvenience.

14 May 08
We are proud to announce that since April/08 our list of URLs is been included in the PH list of SURBL. It is a great achievement having our data included in one of the largest RBLs out there.

17 Apr 08
For the third year Kaspersky d onated an 1 year license of their great Anti-Virus for Linux File Servers. We greatly appreci ate their contribution and continued support to our project and hope to keep cooperating with then. Their software plays an important role in our daily fight against the Malware thread.

03 Feb 08
We moved to a new web server today with faster CPU and more bandwidth. H opefully nothing was left behind and nobody noticed the move. Please let us know if you have any trouble. Have fun!

02 Feb 08
Yesterday our main web server suffered of extremely slow I/Os for more then 10 hours. Our service provider took too much time but early today noved us to a new server and the problem is gone. Apologies for the inconveniece.

08 Dec 07
For two and a half years we ran almost without downtimes, but today a major network outage at a Gnax Data Center put our service unreachable for hours. We feel this is unacceptable and a new server in another Data Center is been installed to provide redundancy. We apologize for the inconvenience and urge users to keep sending suspect URLs and to donate helping us pay for server hosting and bandwidth.
Update at 0600UTC: We finally have everything up online. Crawlers are also running again. Thanks for the patience and support.

28 Nov 07
A power outage caused a network disruption rendering 2 of our servers unreachable. It took two hours for our Data Center to fix the problem. We apologize for the inconvenience.

30 Oct 07
According to CVE-2007-5020, specially crafted PDF files that exploit vulnerabilities to download Malware, are actively been included in SPAM messages, therefore we are including PDF to our list of verified extensions.

24 Oct 07
We suffered a DoS attack that caused a very high load in our servers today. New security measures are implemented trying to prevent future attacks. We apologize for the inconvenience.

29 Sep 07
We added the .bmp to the list of extensions verified by our system as the MIRT team informed us that trojans are hidden inside bitmaps.

11 Sep 07
A hard drive crash put our lists inacessible for a couple of hours today. The problem is solved now. We apologize for the inconvenience.

01 Jul 07
We learned that some contributors are using our hosts list with MaraDNS - "A security-aware DNS server". The format used by MaraDNS is called CSV2 and is similar to Hosts. We created a new list for MaraDNS, please test it and let us know the results.

30 Jun 07
Due to a Data Center move from our Service Provider this site will be unavailable starting July 1th 2007 04:00 GMT for 3-4 hours. We apologize for any troubles this may cause, but it is a required move forced upon us.

24 Apr 07
Today one of our engines just got crazy and by mistake sent e-mail messages to some users. The problem is already corrected. We apologize for the inconvenience.

15 Apr 07
One of our users asked for a list of Malware hashes. It is useful for comparing with hashes of e-mail attachments. Please test it and let us know.

09 Apr 07
We are excited to announce the inclusion of a FreeBSD server dedicated to crawling. This will enable us to grab URLs from more sources without compromising the quality of our lists. Each in every URL in our database is checked daily to make sure its status didn't changed. This keeps our data as fresh as possible. Let's 'crawl'!!!

06 Apr 07
We are proud to announce the availability of testing block lists to Firekeeper. This is a Firefox extension that works like a Intrusion Detection and Prevention System. Please test it and let us know the results.

11 Mar 07
A bug was found in our engines when archives contain multiple infected files. The engines were fixed and some URLs revisited. Soon we will start showing multiple infections in the Malware details page.

09 Mar 07
We are pround to announce that Kaspersky donated us a license for another year of their Anti-Virus product. Its been nice working with Kaspersky. It is now perfectly integrated into our automated engines. Thanks for helping our project.

26 Dec 06
Next Thursday, 29/Dec/2006 at 0000UTC, services will be unavailable for about 15 minutes for server maintenance. We apologize for the inconvenience.

17 Dec 06
Donations are now accepted. You can use your PayPal account or Credit Card. Please Donate and help us block and remove Malware from the Internet.

04 Dec 06
Today we had a 20 minute outage caused by a server reboot. Reasons are still unclear but we expect to have details from our Service Provider soon. No submitted URLs were lost. We apologize for the inconvenience.

12 Nov 06
We noticed that several Phishing Scams are using URL redirects evading Anti-Spam regex that look for file extensions. To catch Malware hidden behind redirects we are checking and following multiple levels of redirects.

Some of the block lists that were in testing mode are now considered production. We are also planning to start a DNS "RBL like" list. Stay tunned for news soon.

30 Sep 06
It was a busy month and we have 6 new lists for testing. Keep in mind that, for now, these lists are for testing purposes only. Please send us your feedback.

We also have some new graphs in the stats page showing statistics on the last 180 days.

08 Sep 06
We have some new stuff on the Stats page. Have a look on the Malware found link.

Some other new stuff are on the way, including IODEF lists and automated information on new Malware found.

20 Aug 06
A minor bug in the URL processing system was reported by a contributor and fixed. The list of processed URL extensions is posted in the FAQ.

02 Aug 06
A problem in the Alert system put the main server load too high (>80.00) two times today, during these periods users experienced problems acessing MBL lists. It took us a while to figure this out but everything should be fine by now. We apologize for any inconvenience caused.

17 Jun 06
We made some minor corrections to ClamAV lists and now they are considered in production. Please let us know if you experience any problem.

Our thanks to ClamAV users who contributed to the creation and tests of these lists.

20 May 06
A search engine is now available on the left side menu. If you get one of our alert e-mail messages, fill the form with the MBL# and get full information about the URL and Malware hosted.

19 May 06
We are experiencing some high server load related to daily crawling. The appropriate measures are under way to avoid this problem. We apologize for any inconvenience caused.

22 Apr 06
We reviewed all list creation algorithms to avoid short-length URLs and duplicates (even when they were valid). Thanks for all the reports on list problems. Please let us know if you have any trouble using the MBLs.

15 Apr 06
The migration to the new server07 is completed with almost no downtime. Hopefully nothing was left behind. Please let us know if you experience any difficulties.

This new server has more CPU, memory and runs MySQL 5.0 which will help serving lists and pages faster. Enjoy!

12 Apr 06
The Malware Block List will be moved to a new server until Easter. Please be advised that some instability may occur during this period but we are working to keep it minimum. We apologize for any inconvenience. Running this new server we'll be able to serve lists quicker and add new services to the MBL.

10 Mar 06
A power failure on JVDS got this server down for more than 1 hour. Our understanding is that power failures are not acceptable on professional Data Centers. We hope JVDS will give us further information about this issue and work to avoid future problems.

We sincerely apologise for any inconvenience caused.

03 Mar 06
By popular demand we have an XML block list for testing. This list has a lot of information about infected URLs, including: ASN, ASN data, date of inclusion and Malware found. Please send us feedback.

24 Feb 06
We have a testing version of a block list to Mozilla Adblock Plugin. Please give it a try and let us know your results.

23 Feb 06
The Postfix MTA block list is set as production. New lists will be available soon.

09 Feb 06
We have a testing version of a block list to Postfix MTA. Please give it a try and let us know your results. With user feedback we can fix eventual problems and have a stable list faster.

If you use any product that can work with block lists and we still don't have one formated to it, please let us know.

05 Feb 06
Now you can find a list of ASNs that host malware in the Stats page.

31 Jan 06
The Malware Block List has new Terms and Conditions of use. Please READ the new terms, to be made effective as of 10/feb/06. If you have any question about those terms, please contact us.

29 Jan 06
I'm excited to announce that all crawlling is now multi-threaded which means that for a considerable amount of time we can garantee that all listed URLs are visited at least once a day.

We are also running Apache2.2 + mod_perl which should speed things up.

20 Jan 06
There are some new features on the way for next weeks. Right now multi threading is what I need to work on as crawlling time is getting too long.

Also, I want to thank Jeff Santana for taking care of these servers while I was on vacations. Good job.

13 Dec 05
The MBL works on DansGuardian and SmoothWall. Please let us know if you have any trouble using it.

07 Dec 05
MBL now monitors some newsgroups where spam/email abuse in general is reported.

28 Nov 05
The block list is available for SquidGuard. Agressive lists are still under test, please send us feedback.

20 Nov 05
Agressive block lists are under tests now. Some general list corrections are under way too.

16 Nov 05
FortressITX, the ISP that hosts this server, will be conducting network maintenance on Friday, November 18, starting at 12:00 AM EDT until 02:00 AM EDT. This will involve an estimated 5 minutes of downtime. We apologize for the inconvenience.

20 Oct 05
The issues regarding more then one malware hosted on the same URL directory have being fixed. Duplicates are still shown on reports where it makes sense to do so.

19 Oct 05
The list is being update every 1 hour now. Please keep URLs comming.

19 Sep 05
From today on all MBL lists are available under the Free Documentation License from GNU.org

18 Sep 05
Please update your block lists at most every 2 hours as its not updated more often then this (except on special circunstances). This way our server load keeps low and you'll be up-to-date.

05 Sep 05
Now you can contribute to the list by sending suspect messages to: void@malware.com.br.

01 Sep 05
A block list prepared for SpamAssassin is available. Please test it and let us know your results.

21 Ago 05
The Malware Block List now runs at: www.malware.com.br. Feel free to use any of the addresses as they will coexist.

20 Ago 05
The web site is completely translated to english.

19 Ago 05
A new way to report Malware URLs is being developed. Soon you'll be able to redirect suspect e-mail messages to us and all checking will be done automagically. Stay tunned.

04 Ago 05
The virus scanning is now performed using Jotti's AV engine. With that, 14 anti-virus are used to checked the downloaded files and the malware is redistributed to all those vendors. Thanks to Jordi Bosveld for allowing its usage.

02 Ago 05
The Malware Block List web site is being translated to english. Please allow a couple of days until everything gets translated and double checked.

27 Jul 05
A lista de Malware agora é atualizada a cada 4 horas.

25 Jul 05
Lista preparada para uso no Squid agora formatada com expressões regulares.

07 Jul 05
Primeira versão do Malware Block List disponível para uso gratuito.