http://{BLOCKED}49.130/boston.avi_______.exe

 Analysis by: Jerowin Santillan

 URL BLOCKING DATE/TIME: 17 Apr 2013 11:30:00 AM GMT-8
 RATING: HIGH
 DOMAIN: 94.28.49.130
 CATEGORY: Disease Vector
 DESCRIPTION:

WORM_KELIHOS.NB can be downloaded from this site. This worm used spammed messages about the Boston Marathon bombings to infect computers.