home

www.kloster-walkenried.de

Domain Information

Server location:
Berlin, Germany (DE)

ASN:
AS6724 STRATO STRATO AG

Root domain:
kloster-walkenried.de

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
W32.Clodebc.Trojan
100.00%

MicroWorld eScan
Trojan.Generic.9993272
100.00%

McAfee
RDN/Generic.dx!cqq
100.00%

Malwarebytes
Trojan.Agent.AI
100.00%

K7 AntiVirus
Spyware
100.00%

F-Prot
W32/Trojan2.NWGR
100.00%

Norman
Suspicious_Gen4.EYFQK
100.00%

Trend Micro House Call
TROJ_GEN.R01TH07L113
100.00%

avast!
Win32:Downloader-UGJ [Trj]
100.00%

Kaspersky
Trojan.Win32.Autoit
100.00%

Bitdefender
Trojan.Generic.9993272
100.00%

ViRobot
Adware.Agent.803580
100.00%

Lavasoft Ad-Aware
Trojan.Generic.9993272
100.00%

Sophos
Mal/Generic-S
100.00%

Comodo Security
Worm.Win32.P2P-Worm.Palevo.fqau
100.00%

The domain www.kloster-walkenried.de has been seen to resolve to the following IP address.

81.169.145.156
w9c.rzone.de
February 29, 2016

File downloads found at URLs served by www.kloster-walkenried.de.

30 / 68    (PUP)
http://www.kloster-walkenried.de/db/cms_imgs/kkk/get//get.exe  (226e45beff5a3d494db02f1fa4aa72fc)

The following 9 files have been seen to comunicate with www.kloster-walkenried.de in live environments.

TCP » 81.169.145.156:80
online-guardian-v2.0.9.exe

TCP » 81.169.145.156:80
online-guardian-v2.0.9.exe

TCP » 81.169.145.156:80
42fe.tmp.exe

TCP » 81.169.145.156:80
onlineguardian-v2.exe

TCP » 81.169.145.156:80
online-guardian-v2.exe

TCP » 81.169.145.156:80
bestvideodownloaderv3.5.crx

TCP » 81.169.145.156:80
bestvideodownloaderv1.2.1.crx

TCP » 81.169.145.156:80
bestvideodownloaderv3.3.crx

TCP » 81.169.145.156:80
bestvideodownloaderv1.2.3.crx

durwedefiets.com

edi-fuchs.de

forward-audio.de

jgoodies.com

open-store.net

radioparadisagasy.com

schubert-it.com

tweakers.fr

ulligabsch.de

wilkes.es

yunqa.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.