home

www.pt.usbfix.net

SosVirus

Domain Information

The domain www.pt.usbfix.net registered by SosVirus was initially registered in September of 2013 through OVH. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Wednesday, September 4, 2013

Expires date:
Monday, September 4, 2017

Updated date:
Tuesday, October 6, 2015

ASN:
AS16276 OVH OVH Systems

Root domain:
usbfix.net

Whois:
3 usbfix.net records

The domain www.pt.usbfix.net has been seen to resolve to the following 4 IP addresses.

213.186.33.5
redirect.ovh.net
May 27, 2016

149.202.74.218
ns3013075.ip-149-202-74.eu
October 20, 2015

91.121.220.71
ns305499.ip-91-121-220.eu
July 16, 2015

37.59.43.222
ns317451.ip-37-59-43.eu
April 4, 2014

File downloads found at URLs served by www.pt.usbfix.net.

7 / 68      (Malware)
http://www.pt.usbfix.net/baixar/.../?wpdmdl=41  (UsbFix.exe)

2 / 68
http://www.pt.usbfix.net/baixar/.../?wpdmdl=41&wpdmtoken=qZiXo0eW6JijSQi70nMxdJm-r_4bpcYrMylk_2TOs0s  (UsbFix.exe)

0 / 68
http://www.pt.usbfix.net/?wpdmdl=41  (UsbFix.exe)

2 / 68
http://www.pt.usbfix.net/baixar/.../?wpdmdl=41&wpdmtoken=CNhh-ZjnPH-CP-8el_CRzC-eZqHhqTltMxTJHBPW1MQ  (UsbFix.exe)

0 / 68
http://www.pt.usbfix.net/baixar/.../?wpdmdl=41  (usbfix_2016_8.130.exe)

6 / 68      (false positives)
http://www.pt.usbfix.net/baixar/.../?wpdmdl=41  (UsbFix.exe)

1 / 68
http://www.pt.usbfix.net/baixar/.../?wpdmdl=41  (usbfix_2015_7.948.exe)

0 / 68
http://www.pt.usbfix.net/?wpdmdl=41  (UsbFix.exe)

3 / 68
http://www.pt.usbfix.net/?wpdmdl=41  (UsbFix.exe)

1 / 68      (inconclusive)
http://www.pt.usbfix.net/?wpdmdl=41  (UsbFix.exe)

0 / 68
http://www.pt.usbfix.net/?wpdmdl=41  (UsbFix.exe)

The following 22 files have been seen to comunicate with www.pt.usbfix.net in live environments.

TCP » 213.186.33.5:25
init.exe

TCP » 213.186.33.5:80
ContentSinder.exe (ContentSinder by ContentSinder Company)

TCP » 213.186.33.5:25
www.exe

TCP » 213.186.33.5:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 213.186.33.5:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.5:25
wrk.exe

TCP » 213.186.33.5:80
usbfix.exe

TCP » 213.186.33.5:25
vrt63.tmp

TCP » 213.186.33.5:80
usbfix.exe

TCP » 213.186.33.5:25
7eda.tmp.exe

TCP » 213.186.33.5:80
ContentFinder.exe (ContentFinder by ContentFinder Company)

TCP » 213.186.33.5:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 213.186.33.5:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.5:25
kb43070331.exe

TCP » 213.186.33.5:25
temp3501895252.exe

TCP » 213.186.33.5:25
w.exe

TCP » 149.202.74.218:80
usbfix.exe

TCP » 213.186.33.5:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.5:80
cfuwxqqr.exe

TCP » 213.186.33.5:25
init.exe

 
Latest 20 of 22 files

URL:
http://www.pt.usbfix.net/

Title:
“UsbFix (Usb Antivirus) - Oficial”

Description:
“UsbFix um software concebido por El Desaparecido. Limpe o seu pendrive com o poder UsbFix e ficar protegido!”

Web server:
nginx (WP Rocket/2.6.15)

Facebook:
Likes:  11
Shares:  25

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.