home

web.pchelpsoft.com

PC HelpSoft Labs Inc

Domain Information

The domain web.pchelpsoft.com registered by PC HelpSoft Labs Inc was initially registered in March of 2010 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Boulogne-Billancourt, Ile-De-France within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GODADDY.COM, LLC

Server location:
Ile-De-France, France (FR)

Create date:
Tuesday, March 30, 2010

Expires date:
Thursday, March 30, 2017

Updated date:
Thursday, March 31, 2016

ASN:
AS34006 VEEPEE-ASN Veepee SAS

Root domain:
pchelpsoft.com

Whois:
4 pchelpsoft.com records

Scanner detections:
Detections  (83% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DriverSoft.DriverIn.Installer.Meta (L), PUP.Optional.SmartPCSolutions.T, PUP.Optional.SmartPCSolutions.P, PUP.Optional.SmartPCSolutions.Q, PUP.PC Utilities.SmartPCSolutions.Installer (M), PUP.PC Utilities (M)
93.75%

ESET NOD32
Win32/Adware.SpeedingUpMyPC (variant), Win32/SpeedingUpMyPC (variant), Win32/MyPCBackup
62.50%

Malwarebytes
PUP.Optional.PCCleaner.A
37.50%

Comodo Security
UnclassifiedMalware, ApplicUnwnt
31.25%

Trend Micro House Call
TROJ_GEN.F47V1107, TROJ_GEN.F47V0724
12.50%

Avira AntiVirus
TR/ATRAPS.Gen
6.25%

herdProtect (fuzzy)
a variant of 66f6d680409785ddc1da5151c6ef6af981457013
6.25%

Dr.Web
Program.Unwanted.54
6.25%

Baidu Antivirus
PUA.Win32.MyPCBackup
6.25%

XVirus List
Win32.Detected
6.25%

The domain web.pchelpsoft.com has been seen to resolve to the following 2 IP addresses.

217.195.25.239
web.avanquest.com
May 3, 2015

217.195.25.238
www.avanquest.com
March 7, 2014

File downloads found at URLs served by web.pchelpsoft.com.

5 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=&go=http://cdn2.pchelpsoft.com/.../pc-cleaner-3214.exe  (pchs_pcc32_es_id3214.exe)

1 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=LPFRCO-ROW&go=http://cdn2.pchelpsoft.com/.../PCHS_PCC32_FR_ID3218.exe  (52ae6c4804dd4fffeaaed953f8de79da)

6 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=PH_EN_PP_GO_SE_PCC&go=http://cdn2.pchelpsoft.com/.../PCHS_PCC32_EN_ID399.exe  (adb05f6d6da3099c203569df128fb8b1)

0 / 68
http://web.pchelpsoft.com/download/download.cfm?tracking=PH_EN_PP_GO_SE_PST_ROW&keyword=repair outlook 2013&campaignID=Outlook_PST_Repair_SE_ROW&gclid=CKOx39_XobwCFSTmwgodoFEAeA&go=http://cdn2.pchelpsoft.com/.../outlook-pst-repair-501.exe  (44b96e9cd360f8b747d463b8fe05062c)

1 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=&go=http://cdn2.pchelpsoft.com/.../hardware-helper-140.exe  (7deae91941df7e21420c34d4bf7aee91)

1 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?go=http://cdn2.pchelpsoft.com/.../pc-cleaner-362.exe  (698dd22f6c51a420c485174b67758cf2)

3 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?go=http://cdn2.pchelpsoft.com/.../PCHS_PCC32_EN_ID3210.exe  (b42704e7610a99c363844a9e3aa56ef7.exe)

3 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=&go=http://cdn2.pchelpsoft.com/.../pc-cleaner-3230.exe  (791f6098d7b42b19665c92bb01078629)

5 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=PH_EN_PP_GO_SE_PCC&go=http://cdn2.pchelpsoft.com/.../pc-cleaner-3231.exe  (pc-cleaner-3231c.exe)

2 / 68      (inconclusive)
http://web.pchelpsoft.com/download/download.cfm?filter=PH_US_PP_GO_SE&go=http://cdn2.pchelpsoft.com/.../hardware-helper-133.exe  (d02c097d92fb3a7baa6a770cd7961de9)

2 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=PH_US_PP_GO_BA&go=http://cdn2.pchelpsoft.com/.../hardware-helper-135.exe  (b247faff1f04d5cad54bb151adda2f9d)

0 / 68
http://web.pchelpsoft.com/download/download.cfm?filter=PH_US_PP_GO_SE_PRW_502&go=http://cdn2.pchelpsoft.com/.../photo-recovery-win-502.exe  (cardrecovery_setup.exe)

1 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?go=http://cdn2.pchelpsoft.com/.../hardware-helper-1210.exe  (353c52269e3e1f827e7b561d7812bb69)

4 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?go=http://cdn2.pchelpsoft.com/.../hardware-helper-131.exe  (3e8931ac7f96aa44a64f123939cf3ea1)

3 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=PH_EN_PP_GO_CO_PCC&go=http://cdn2.pchelpsoft.com/.../pc-cleaner-3233.exe  (0379585141cfc07325497943f6a8b9a8)

2 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?go=http://cdn2.pchelpsoft.com/.../hardware-helper-150.exe  (ce7f92810f582cc2710ee0b10eb88144)

3 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=&go=http://cdn2.pchelpsoft.com/.../pc-cleaner-3230.exe  (5f670f3c4b68a24b466f0ad5c11fa817)

1 / 68      (PUP)
http://web.pchelpsoft.com/download/download.cfm?filter=PH_EN_PP_GO_CO_HH&go=http://cdn2.pchelpsoft.com/.../hardware-helper-1221.exe  (3ee34b9ed095a5cad7afcf0345f0cb1c)

The following 5 files have been seen to comunicate with web.pchelpsoft.com in live environments.

TCP » 217.195.25.238:80
UCBrowser.exe (by UCWeb)

TCP » 217.195.25.238:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 217.195.25.238:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 217.195.25.238:80
sysTPLService.exe (sysTPLService by Tlapia)

TCP » 217.195.25.238:80
beamrise.exe (Beamrise by The Beamrise Authors)

URL:
http://web.pchelpsoft.com/

Google Analytics:
UA-16420375

Title:
“Utility Software Applications for Windows and Mac Computers | PC HelpSoft”

Description:
“Quality utility software to clean and improve performance on Windows and Mac computers.”

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.