home

24upgradecheck.fixbugs2update.org

Domain Information

Server location:
Victoria, Australia (AU)

ASN:
AS133618 TRELLIAN-AS-AP Trellian Pty. Limited, AU

Root domain:
fixbugs2update.org

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ProfitServis.OOOPREME.Bundler (M), PUP.Coinis.installCore.Installer (M)
100.00%

The domain 24upgradecheck.fixbugs2update.org has been seen to resolve to the following IP address.

103.224.182.230
lb-182-230.above.com
June 19, 2016

File downloads found at URLs served by 24upgradecheck.fixbugs2update.org.

1 / 68      (Adware)
http://24upgradecheck.fixbugs2update.org/.../zt6rgL3QHwhW1KyelqCkHumREu1psLoHEz2Y=&dist_id=227&channel=qws_efff&subid=010486484020333473228&cat=010486484  (adobe_flash_setup.exe)

1 / 68      (Adware)
http://24upgradecheck.fixbugs2update.org/dl.php?conversion_id=14251652487292&app_id=4&lp_id=554&v=icrs&stub_id=111&v_id=5JHUzcTPjsr3x4S GmIiIEB7jdqvrM7biqgx2uFthoo=&dist_id=635&channel=qws_efbp&subid=009293053020443361634&cat=009293053  (adobe_flash_setup.exe)

The following 2 files have been seen to comunicate with 24upgradecheck.fixbugs2update.org in live environments.

TCP » 103.224.182.230:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 103.224.182.230:80
Survey Bypasser.exe (Survey Bypasser by ROSeik Team)

anayimovilyeuros.net

ierairosihanari.org

red-2-small-button.com

rooshpictureme.org

torntvz.org

zehuurelaxbbs.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.