home

www2.rtu1yca135.2waky.com

Network OperationsZZZ ChangeIP

Domain Information

The domain www2.rtu1yca135.2waky.com registered by Network OperationsZZZ ChangeIP was initially registered in January of 2001 through RETHEM HOSTING LLC. Currently this domain has been known to host various forms of malware.
Registrar:
RETHEM HOSTING LLC

Create date:
Sunday, January 14, 2001

Expires date:
Saturday, January 14, 2017

Updated date:
Friday, June 12, 2015

Root domain:
2waky.com

Whois:
1 2waky.com record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

F-Secure
Variant.Kazy.82792
100.00%

avast!
Win32:Simda-IS [Trj]
100.00%

ESET NOD32
Win32/Kryptik.AMLP trojan
100.00%

VIPRE Antivirus
Threat.4782630
100.00%

Emsisoft Anti-Malware
Gen:Variant.Kazy.82792
100.00%

Microsoft Security Essentials
Threat.Undefined
100.00%

Dr.Web
Trojan.Rodricter.21
100.00%

F-Prot
W32/Simda.T.gen
100.00%

Norman
Gen:Variant.Kazy.82792
100.00%

McAfee
Trojan.Generic FakeAlert.ma
100.00%

Sophos
Virus 'Mal/EncpkLEE-B'
100.00%

Kaspersky
Backdoor.Win32.Simda
100.00%

File downloads found at URLs served by www2.rtu1yca135.2waky.com.

12 / 68    (Malware)
http://www2.rtu1yca135.2waky.com/.../t5JXuicSUcIrAjtClp6CrkpeloKWoaaeVmlemqc7c3Kinm5nbzNivqahX7dfNbmtm052ca6Gb2ZibmubnsmKsl5piZWWin55bztngxczir vsqKyR1mRjmqbWzGvRo6GW2tXd7aOU6NCHoaWf18mkqdPe39bd1pjm2pe2y9Wlo1qgqYxnsI lqtXV4tnloOvR1aaVmpvX2ZyPnLnLxODe2eeqnpWnmJSumtrIpc X4M3P3ebV56qelaeaoZnS4JWd3tffitbp1LfilbbWxp Xe9bUzFk=  (scandsk.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.