home

dl.pconline.com.cn

Domain Information

Server location:
Guangdong, China (CN)

ASN:
AS58466 CT-GUANGZHOU-IDC CHINANET Guangdong province network,CN

Root domain:
pconline.com.cn

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/Gaofenquming.A potentially unwanted (variant), Win32/Gaofenquming.B potentially unwanted (variant)
60.00%

K7 AntiVirus
Adware
60.00%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696, Threat.46249
60.00%

IKARUS anti.virus
Trojan-Banker.Win32.Delf, PUA.Gaofenquming
50.00%

avast!
Win32:Malware-gen, Win32:Parite
50.00%

McAfee
Artemis!C9CE72F66D7D, Trojan.Artemis!B2EC2D7DC979, Artemis!2EA315CEACFD, Virus.Generic Downloader.c
40.00%

Rising Antivirus
PE:Malware.Generic(Thunder)!1.A1C4 [F]
40.00%

Emsisoft Anti-Malware
Gen:Variant.Symmi.60792, Win32.Parite
40.00%

Baidu Antivirus
PUA.Win32.Gaofenquming
30.00%

AVG
Generic, Win32/Parite
30.00%

ESET NOD32
Win32/Gaofenquming.B potentially unwanted application, Win32/Parite.B virus
30.00%

MicroWorld eScan
Gen:Variant.Symmi.60792
30.00%

Bitdefender
Gen:Variant.Symmi.60792
30.00%

Lavasoft Ad-Aware
Gen:Variant.Symmi.60792
30.00%

F-Secure
Gen:Variant.Symmi.60792
30.00%

The domain dl.pconline.com.cn has been seen to resolve to the following IP address.

219.136.244.108
December 19, 2015

File downloads found at URLs served by dl.pconline.com.cn.

15 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=8264&ipType=2&riYueToken=N06O6eGZ  (sogou_pinyin_79c_8100000377427033054.exe)

8 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=40908&ipType=1&riYueToken=UvaHhgBg  (mathtype6.9_5100000054476978265.exe)

10 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=62941&ipType=1&riYueToken=c5KGBBRZ  (vtut6rg9.exe)

1 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=356452&ipType=1&riYueToken=tVPawGXZ  (ha_joytokey3.7.8_81000000475143059.exe)

8 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=155&ipType=1&riYueToken=Ad2TDlYT  (mathtype6.9_5100000054476978265.exe)

1 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=51229&ipType=1&riYueToken=7XqeG2PA  (ha_joytokey3.7.8_81000000475143059.exe)

10 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=362255&ipType=1&riYueToken=t7vtJ8G7  (vtut6rg9.exe)

1 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=359531&ipType=1&riYueToken=YatJmQl9  (ha_joytokey3.7.8_81000000475143059.exe)

15 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=37973&ipType=1&riYueToken=4nNFC2nA  (sogou_pinyin_79c_8100000377427033054.exe)

3 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=42443&ipType=1&riYueToken=y1nZAxxz  (wps2015_8100000619656978100.exe)

11 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=365532&ipType=1&riYueToken=UTJyk2w7  (heikegjb_gr_8100003655327033128.exe)

3 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=51224&ipType=1&riYueToken=auR4fLn9  (签名设计_1@113164.exe)

15 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=91155&ipType=2&riYueToken=RaqWsEkS  (winrar_5.30_8100000001687019769.exe)

15 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=356452&ipType=1&riYueToken=KA4elHBR  (winrar_5.30_8100000001687019769.exe)

4 / 68      (inconclusive)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=51224&ipType=1&riYueToken=fQyBYHMy  (adberdr11000_zh_cn_5100000013226950695.exe)

15 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=356397&ipType=1&riYueToken=9OjA7Uug  (winrar_5.30_8100000001687019769.exe)

10 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=356452&ipType=1&riYueToken=UqaOU2fw  (vtut6rg9.exe)

8 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=354037&ipType=1&riYueToken=NpbRyGhX  (mathtype6.9_5100000054476978265.exe)

10 / 68    (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=61843&ipType=1&riYueToken=J03FUH5m  (vtut6rg9.exe)

3 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=356397&ipType=1&riYueToken=t8rhDTzL  (wps2015_8100000619656978100.exe)

1 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=90833&ipType=1&riYueToken=6HzhM1W3  (ha_joytokey3.7.8_81000000475143059.exe)

8 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=10356&ipType=1&riYueToken=GibxVo3h  (mathtype6.9_5100000054476978265.exe)

6 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=358872&ipType=1&riYueToken=h03veore  (我的世界暮色森林mod_31@99522.exe)

4 / 68      (inconclusive)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=354037&ipType=1&riYueToken=TzB8FeeN  (adberdr11000_zh_cn_5100000013226950695.exe)

8 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=8870&ipType=1&riYueToken=7hnplVxF  (mathtype6.9_5100000054476978265.exe)

6 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=54012&ipType=1&riYueToken=pGrkCu9m  (我的世界暮色森林mod_31@99522.exe)

6 / 68      (PUP)
http://dl.pconline.com.cn/intf/.../downLoadTool.jsp?masterId=62940&ipType=1&riYueToken=cxTCULRa  (我的世界暮色森林mod_31@99522.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.