home

gtacards.turbodisk.net

See PrivacyGuardian.org  (Proxy Registrant)

Domain Information

The domain gtacards.turbodisk.net is registered by proxy through NAMESILO, LLC and was originally registered in January of 2016. Currently this domain has been known to host various forms of malware. The hosted servers are located in Beauharnois, Quebec within Canada.
Registrar:
NAMESILO, LLC

Server location:
Quebec, Canada (CA)

Create date:
Wednesday, January 27, 2016

Expires date:
Saturday, January 27, 2018

Updated date:
Thursday, January 28, 2016

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
turbodisk.net

Whois:
1 turbodisk.net record

Google Safe Browsing:
unwanted

Scanner detections:
Malware distribution  (55% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/InstallMonetizer.AN potentially unwanted application, Win32/Sality.NBA virus
100.00%

Microsoft Security Essentials
Threat.Undefined
83.33%

avast!
Win32:SaliCode
50.00%

F-Prot
W32/Sality.gen2
50.00%

Reason Heuristics
PUP.InstallMonetizer.ET (M)
33.33%

Emsisoft Anti-Malware
Win32.Sality
33.33%

Norman
Win32.Sality.3
33.33%

AVG
Win32/Sality
33.33%

McAfee
Virus.W32/Sality.gen.z
16.67%

Dr.Web
Win32.Sector.30
16.67%

Kaspersky
Virus.Win32.Sality
16.67%

VIPRE Antivirus
Threat.4721115
16.67%

The domain gtacards.turbodisk.net has been seen to resolve to the following IP address.

192.95.62.230
May 29, 2016

File downloads found at URLs served by gtacards.turbodisk.net.

2 / 68      (PUP)
http://gtacards.turbodisk.net/InstallGTACars.exe  (80ca10a9b66465728fcc12fb2a5c4e2b)

0 / 68
http://gtacards.turbodisk.net/InstallGTACars.exe  (c91d25fd-4605-4894-4a41-61b38d276d25_1d1e1b76b999de6)

7 / 68      (Infected)
http://gtacards.turbodisk.net/InstallGTACars.exe  (bf4bf5f6c103190129dbea02f7b09f7c)

0 / 68
http://gtacards.turbodisk.net/InstallGTACars.exe  (48a608228570f041524c02e47e5b8e21)

6 / 68      (Malware)
http://gtacards.turbodisk.net/InstallGTACars.exe  (3fa7b160bc83413274d1c89f82627fe9)

0 / 68
http://gtacards.turbodisk.net/InstallGTACars.exe  ({6f0f05eb-cdc2-439c-87b6-8ca53b5a9087}-sin confirmar 55510.crdownload)

0 / 68
http://gtacards.turbodisk.net/InstallGTACars.exe  (installcrazycars.exe)

3 / 68      (PUP)
http://gtacards.turbodisk.net/InstallGTACars.exe  (gtasanandreasplaystore.exe)

2 / 68      (PUP)
http://gtacards.turbodisk.net/InstallGTACars.exe  (9c7acb425a3da789ec74519020e33f80)

0 / 68
http://gtacards.turbodisk.net/InstallGTACars.exe  (01684b375c2b96fae9494d824e08ad8e)

9 / 68      (Infected)
http://gtacards.turbodisk.net/InstallGTACars.exe  (9875ec5c369598435b38b249d56bd811)

URL:
http://gtacards.turbodisk.net/

Web server:
Apache

gtaplaystore.com

luckycitygames.com

softomato.com

uploadtobox.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.