home

dl.s32.uloz.to

Domain Information

Server location:
Hlavni Mesto Praha, Czech Republic (CZ)

ASN:
AS6830 LGI-UPC Liberty Global Operations B.V.

Root domain:
uloz.to

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
W32.MalwarespyM.Trojan
100.00%

Malwarebytes
PUP.RemoveWGA
100.00%

Total Defense
Win32/Prigamb.A
100.00%

avast!
Win32:HackTool-CB [PUP]
100.00%

NANO AntiVirus
Riskware.Win32.RemoveWGA.cimpjb
100.00%

Comodo Security
ApplicUnsaf.Win32.WGAKill.~
100.00%

Dr.Web
Tool.RemoveWGA
100.00%

Sophos
RemoveWGA
100.00%

SUPERAntiSpyware
Trojan.Agent/Gen-PatchPak
100.00%

IKARUS anti.virus
not-a-virus.Risktool.RemoveWGA
100.00%

AVG
nbsp;
100.00%

XVirus List
Win.Detected
100.00%

The domain dl.s32.uloz.to has been seen to resolve to the following IP address.

93.99.92.193
September 10, 2015

File downloads found at URLs served by dl.s32.uloz.to.

12 / 68    (PUP)
http://dl.s32.uloz.to/Ps;Hs;fid=24447806;cid=2074279536;rid=2071153404;up=0;uip=95.103.77.239;tm=1349793823;ut=f;aff=uloz.to;cpid=15273;cpui=bnfe;He;ch=ae3d81a817f85351051513512840a034;cpnb=15273;cput=bnfe;cptm=;Pe/.../removewga-v1-3.exe  (removewga.exe)

The following 4 files have been seen to comunicate with dl.s32.uloz.to in live environments.

TCP » 93.99.92.193:443
online-guardian-v2.0.9.exe

TCP » 93.99.92.193:443
seznam.cz.exe

TCP » 93.99.92.193:443
onlineguardian-v2.exe

TCP » 93.99.92.193:443
online-guardian-v2.exe

pornfile.cz

ulozto.cz

ulozto.net

ulozto.sk

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.