home

www.alert24.pl

Domain Information

Server location:
Mazowieckie, Poland (PL)

ASN:
AS8535 AGORA Agora TC Sp.z.o.o.,PL

Root domain:
alert24.pl

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Emsisoft Anti-Malware
Application.Downloader.YB
50.00%

ESET NOD32
Win32/Sciagnij.A potentially unwanted application
50.00%

avast!
Win32:PUP-gen [PUP]
50.00%

Kaspersky
not-a-virus:Downloader.Win32.Sciagnij
50.00%

F-Secure
Riskware.Application.Downloader.YB
50.00%

McAfee
Trojan.Artemis!3F9C5CD04637
50.00%

Norman
Application.Downloader.YB
50.00%

Reason Heuristics
PUP.Agora.SciagNij.Meta (L)
50.00%

The domain www.alert24.pl has been seen to resolve to the following IP address.

80.252.0.132
poczta.gazeta.pl
April 11, 2016

File downloads found at URLs served by www.alert24.pl.

1 / 68      (PUP)
http://www.alert24.pl/.../install.servlet?id=311335&systemId=26  (fifa_13_sciagnij.pl.exe)

7 / 68      (PUP)
http://www.alert24.pl/.../install.servlet?id=16825&systemId=23  (free_hd_converter_sciagnij.pl.exe)

The following 4 files have been seen to comunicate with www.alert24.pl in live environments.

TCP » 80.252.0.132:80
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 80.252.0.132:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 80.252.0.132:80
internetenhancer.exe (Internet Enhancer)

TCP » 80.252.0.132:80
produpd.exe (produpd.exe by Vested Development, Inc)

autotrader.pl

edulandia.pl

esciagnij.pl

gamecorner.pl

gazetapraca.pl

moto.pl

sciagnij-24.pl

sciagnij-online.pl

sciagnij.pl

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.