home

ftp16-dg.pconline.com.cn

Domain Information

Server location:
Guangdong, China (CN)

ASN:
AS17622 CNCGROUP-GZ China Unicom Guangzhou network,CN

Root domain:
pconline.com.cn

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Baidu Antivirus
PUA.Win32.Gaofenquming
100.00%

ESET NOD32
Win32/Gaofenquming.A potentially unwanted (variant), Win32/Gaofenquming.B potentially unwanted (variant)
100.00%

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Gaofenquming (M)
100.00%

Bkav FE
W32.HfsAdware
50.00%

McAfee
Artemis!6C7D62CD97EA
50.00%

K7 AntiVirus
Adware
50.00%

avast!
Win32:Adware-gen [Adw]
50.00%

Dr.Web
Adware.Downware.10523
50.00%

Sophos
Generic PUA KA (PUA)
50.00%

G Data
Win32.Trojan.Agent.QBF1DC
50.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
50.00%

IKARUS anti.virus
Trojan-Banker.Win32.Delf
50.00%

Fortinet FortiGate
Riskware/Gaofenquming
50.00%

The domain ftp16-dg.pconline.com.cn has been seen to resolve to the following IP address.

210.21.118.146
January 4, 2016

File downloads found at URLs served by ftp16-dg.pconline.com.cn.

3 / 68      (PUP)
http://ftp16-dg.pconline.com.cn/pub/download/ftpdown/gamepack/gameapp/downer_20/.../downer_20.exe  (tortoisecvs 1.12.5_3@57178.exe)

13 / 68    (PUP)
http://ftp16-dg.pconline.com.cn/pub/download/ftpdown/gamepack/gameapp/downer_20/.../downer_20.exe  (downer_20@57954.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.