home

www.pcerrorfix.net

c/o PCERRORFIX.NET

Domain Information

The domain www.pcerrorfix.net registered by c/o PCERRORFIX.NET was initially registered in July of 2012 through DOMAIN.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Antonio, Texas within the United States.
Registrar:
DOMAIN.COM, LLC

Server location:
Texas, United States (US)

Create date:
Tuesday, July 3, 2012

Expires date:
Sunday, July 3, 2016

Updated date:
Saturday, August 8, 2015

ASN:
AS33070 RMH-14 - Rackspace Hosting

Root domain:
pcerrorfix.net

Whois:
3 pcerrorfix.net records

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ChengDuVToolsInformationTechnology.P, PUP.ChengDuVToolsInformationTechnology.Installer (M), PUP.ChengDuV.Installer (M)
66.67%

Dr.Web
riskware program Program.Unwanted.34, Trojan.Inject1.28681
55.56%

Kaspersky
not-a-virus:Downloader.Win32.Agent, Virus.Win32.Renamer
44.44%

avast!
NSIS:Malware-gen [Trj], NSIS:Adware-LU [PUP], Win32:Agent-AODJ [Trj]
44.44%

ESET NOD32
multiple threats, Win32/Delf.NRJ worm
33.33%

NANO AntiVirus
Trojan.Win32.MulDrop4.cxfqjx, Trojan.Win32.Lyrics.cqznxn
33.33%

Avira AntiVirus
APPL/Day.BD, Adware/Graftor.131459.1
33.33%

K7 AntiVirus
Adware , Riskware
33.33%

Comodo Security
UnclassifiedMalware
22.22%

ESET NOD32
Win32/AdWare.AddLyrics.AB
22.22%

IKARUS anti.virus
PUA.PCErrorFix
22.22%

Qihoo 360 Security
Win32/Trojan.845
22.22%

Trend Micro House Call
TROJ_GEN.F47V0403
22.22%

Microsoft Security Essentials
Threat.Undefined
11.11%

AVG
Worm/Delf.KKS
11.11%

The domain www.pcerrorfix.net has been seen to resolve to the following IP address.

98.129.229.226
March 20, 2014

File downloads found at URLs served by www.pcerrorfix.net.

1 / 68      (PUP)
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner2&site=www.pogo.com&k=eusing&l=US&gclid=CLKlwfWEhLsCFWrNOgodnkEATQ  (windows-cleaner.exe)

9 / 68      (Malware)
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner1&ref=dp-was-after  (windows-cleaner.exe)

1 / 68      (PUP)
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner2&site=login.frontier.com&k=registry cleaner reviews&l=US&ref=&aff=  (windows-cleaner.exe)

12 / 68    (PUP)
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner1&site=&k=&l=&ref=dp-win8&aff=  (windows-cleaner.exe)

1 / 68
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner1&ref=dp-win8  (windows-cleaner.exe)

1 / 68
http://www.pcerrorfix.net/download.php?product=windows-cleaner1&ref=dp-win8  (windows-cleaner.exe)

1 / 68
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner1&ref=dp-was-before  (windows-cleaner.exe)

12 / 68    (PUP)
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner5&site=&k=&l=&ref=wenxuecity720160&aff=  (windows-cleaner.exe)

1 / 68
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner10&site=&k=&l=&ref=cb&aff=  (windows-cleaner.exe)

1 / 68
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner1&ref=dp-was-after  (windows-cleaner.exe)

1 / 68      (PUP)
http://www.pcerrorfix.net/download.php?down&ref=dp-fn-before  (windows_cleaner.exe)

1 / 68      (PUP)
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner&site=&k=&l=&ref=dp-fn-before&aff=  (windows_cleaner.exe)

6 / 68      (PUP)
http://www.pcerrorfix.net/download.php?down&ref=dp-was-home  (windows_cleaner.exe)

0 / 68
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner1&site=&k=&l=&ref=dp-fn-before&aff=  (Windows-Cleaner.exe)

0 / 68
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner1&site=&k=&l=&ref=dp-fn-before&aff=  (Windows-Cleaner.exe)

3 / 68      (PUP)
http://www.pcerrorfix.net/downloadcenter.php?product=windows-cleaner1&site=&k=&l=&ref=dp-fn-before&aff=  (windows-cleaner.exe)

The following file have been seen to comunicate with www.pcerrorfix.net in live environments.

TCP » 98.129.229.226:80
colorific.crx

URL:
http://www.pcerrorfix.net/

Google Analytics:
UA-33222039

Title:
“Windows Cleaner”

Web server:
Apache/2.4

Facebook:
Likes:  3
Shares:  6
Comments:  2

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.