home

www.4s.io

Domain Information

Server location:
Florida, United States (US)

ASN:
AS40824 WZCOM-US - WZ Communications Inc.

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

NANO AntiVirus
Trojan.Win32.Downware.cumjmn
100.00%

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
100.00%

Reason Heuristics
PUP.Optional.NewITSolutions.Meta (L)
100.00%

The domain www.4s.io has been seen to resolve to the following 9 IP addresses.

199.101.134.236
September 9, 2014

199.101.134.234
September 9, 2014

199.101.133.176
c-k330-u1012-176.webazilla.com
September 9, 2014

199.101.133.174
c-k330-u1010-174.webazilla.com
September 9, 2014

199.101.133.79
c-k330-u1236-79.webazilla.com
September 9, 2014

74.117.178.93
c-b390-u0744-93.webazilla.com
September 9, 2014

74.117.178.90
c-b390-u0741-90.webazilla.com
September 9, 2014

74.117.178.84
c-b390-u0735-84.webazilla.com
September 9, 2014

74.117.178.83
c-b390-u0734-83.webazilla.com
September 9, 2014

File downloads found at URLs served by www.4s.io.

3 / 68      (PUP)
http://www.4s.io/downloadDesktop  (4shared_desktop_4.0.11.26663a.exe)

The following 47 files have been seen to comunicate with www.4s.io in live environments.

TCP » 74.117.178.90:443
desktop.exe (Desktop by New IT Solutions)

TCP » 74.117.178.93:443
desktop.exe (Desktop by New IT Solutions)

TCP » 74.117.178.93:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.93:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.90:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.90:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.90:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.93:443
desktop.exe (4shared Desktop by New IT Solutions)

TCP » 74.117.178.93:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.90:443
desktop.exe (Desktop by New IT Solutions)

TCP » 74.117.178.93:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 74.117.178.90:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 199.101.133.79:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.93:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 74.117.178.90:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 74.117.178.93:443
desktop.exe (Desktop by New IT Solutions)

TCP » 74.117.178.90:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.93:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 74.117.178.90:443
desktop.exe (4shared Desktop by New IT Solutions)

 
Latest 20 of 162 files

4shared-china.com

4shared.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.