www.removepcrisk.com
YinSi BaoHu Yi KaiQi (Hidden by Whois Privacy Protection Service)
Domain Information
The domain www.removepcrisk.com registered by YinSi BaoHu Yi KaiQi (Hidden by Whois Privacy Protection Service) was initially registered in February of 2014 through HICHINA ZHICHENG TECHNOLOGY LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Washington, District of Columbia within the United States which resides on the SoftLayer Technologies Inc. network.
Registrant:
YinSi BaoHu Yi KaiQi (Hidden by Whois Privacy Protection Service)
Registrar:
HICHINA ZHICHENG TECHNOLOGY LTD.
Server location:
District of Columbia, United States (US)
Create date:
Tuesday, February 18, 2014
Expires date:
Monday, February 18, 2019
Updated date:
Monday, February 1, 2016
ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Bkav FE
W32.HfsAdware
100.00%
Malwarebytes
FraudTool.YAC, PUP.Optional.ELEX
100.00%
ESET NOD32
Win32/ELEX.GB potentially unwanted (variant), Win32/ELEX.CC potentially unwanted (variant)
100.00%
Dr.Web
Adware.Mutabaha.790, Adware.Mutabaha.174
100.00%
Fortinet FortiGate
Riskware/Elex
100.00%
Reason Heuristics
Win32.Generic.ELEX.Installer.Meta
100.00%
SUPERAntiSpyware
PUP.Elex/Variant
50.00%
G Data
Win32.Application.Elex
50.00%
McAfee
Artemis!E497222C8947
50.00%
Trend Micro House Call
Suspicious_GEN.F47V0330
50.00%
avast!
Win32:Adware-gen [Adw]
50.00%
AhnLab V3 Security
PUP/Win32.Generic
50.00%
K7 AntiVirus
Trojan
50.00%
Agnitum Outpost
Riskware.Agent
50.00%
Avira AntiVirus
APPL/Elex.jjsd
50.00%
The domain www.removepcrisk.com has been seen to resolve to the following IP address.
eb.ce.1632.ip4.static.sl-reverse.com
December 7, 2015
File downloads found at URLs served by www.removepcrisk.com.
The following 3 files have been seen to comunicate with www.removepcrisk.com in live environments.
URL:
http://www.removepcrisk.com/
Google Analytics:
UA-48520822
Title:
“RemovePcRisk.com - Fix PC Problems!”
Description:
“Need help to remove a browser hijacker, toolbar, pop-up ads or any other threats? See our resolutions here!”
Web server:
ngx_openresty (ThinkPHP)
