home

windows-pcrepair.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain windows-pcrepair.com is registered by proxy through GODADDY.COM, LLC and was originally registered in October of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Worthington, Ohio within the United States which resides on the MadeIT inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Ohio, United States (US)

Create date:
Wednesday, October 28, 2015

Expires date:
Friday, October 28, 2016

Updated date:
Wednesday, October 28, 2015

ASN:
AS54455 MADEIT - MadeIT inc.,US

Whois:
1 windows-pcrepair.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PCSpeedupPro.Installer.Meta (L)
100.00%

The domain windows-pcrepair.com has been seen to resolve to the following IP address.

67.219.144.82
February 9, 2016

File downloads found at URLs served by windows-pcrepair.com.

1 / 68      (PUP)
http://windows-pcrepair.com/download_ip_ad.asp?x-context=nym1CL3Xrt_Q6OvoexACGJaN2tGq7b3IOiIONjcuMjM3LjE3NS4yMjMoATDX0IWyBQ..&utm_source=adp1&utm_campaign=adp1&pxl=ADP95_ADP87_RUNT&utm_pubid=5513617_10960228_728x90_http://www.thefootballfeed.com/nfl-news/.../  (pcspsetupafp1.exe)

1 / 68      (PUP)
http://windows-pcrepair.com/download_ip_ad.asp?x-context=fra1CO6cmJLEmp7GDxACGJyMjJv29eLfcSILODguMTgzLjg4LjAoATC7zYGyBQ..&utm_source=adp1&utm_campaign=adp1&pxl=ADP95_ADP87_RUNT&utm_pubid=5746013_10960610_300x250_https://.../as.php?type=profil&ban=medban300  (pcspsetupafp1.exe)

The following 64 files have been seen to comunicate with windows-pcrepair.com in live environments.

TCP » 67.219.144.82:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 67.219.144.82:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 67.219.144.82:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 67.219.144.82:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 67.219.144.82:80
UCBrowser.exe (by UCWeb)

TCP » 67.219.144.82:80
UCBrowser.exe (by UCWeb)

TCP » 67.219.144.82:80
aptdu.exe (Driver Updater by driverdetails.com)

TCP » 67.219.144.82:80
UCBrowser.exe (by UCWeb)

TCP » 67.219.144.82:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 67.219.144.82:80
UCBrowser.exe (by UCWeb)

TCP » 67.219.144.82:80
new_chrome.exe (1stBrowser by The 1stBrowser Authors)

TCP » 67.219.144.82:80
online-guardian-v2.0.9.exe

TCP » 67.219.144.82:80
UCBrowser.exe (by UCWeb)

TCP » 67.219.144.82:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 67.219.144.82:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 67.219.144.82:80
UCBrowser.exe (by UCWeb)

TCP » 67.219.144.82:80
browser.exe (Browser)

TCP » 67.219.144.82:80
amigo.exe (Amigo by Mail.Ru)

TCP » 67.219.144.82:80
crossbrowser.exe (CrossBrowser by The CrossBrowser Authors)

TCP » 67.219.144.82:80
browser.exe (CocCoc by Coc Coc Co.)

 
Latest 20 of 79 files

February 9, 2016
cdn.windows-pcrepair.com

URL:
http://windows-pcrepair.com/

Google Analytics:
UA-69757600

Title:
“Windows PC Repair - Get an error free, smooth and fast PC”

Description:
“Windows PC Repair keeps your PC error free and clean. It boosts up the speed and performance of your PC. It comprises of a registry cleaner, add-on remover, startup manager and a very robust malware / adware cleaner.”

Web server:
Microsoft-IIS/8.5 (ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.