home

1clickroot.com

Domain Information

Server location:
Arizona, United States (US)

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

avast!
Win32:Malware-gen
100.00%

F-Prot
ELF/Android.Exploit.B (exact, not disinfectable)
100.00%

ESET NOD32
multiple threats
100.00%

NANO AntiVirus
Riskware.DroidRtA.bfnewt
100.00%

Norman
Suspicious_Gen4.HLOZZ
100.00%

The domain 1clickroot.com has been seen to resolve to the following IP address.

50.63.51.1
p3nlhg350c1350.shr.prod.phx3.secureserver.net
February 12, 2015

File downloads found at URLs served by 1clickroot.com.

5 / 68      (PUP)
http://1clickroot.com/.../1ClickRoot.exe  (5e23226384e5c6276051174761d90476)

The following 3 files have been seen to comunicate with 1clickroot.com in live environments.

TCP » 50.63.51.1:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.63.51.1:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.63.51.1:21
ftpte.exe (CuteFTP Professional by GlobalSCAPE)

device-recovery.com

homiletica.org

juegosdefriv.com.ar

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.