xiazai.job391.com
zenglingbai
Domain Information
The domain xiazai.job391.com registered by zenglingbai was initially registered in October of 2013 through ENAME TECHNOLOGY CO., LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Shanghai, Shanghai within China which resides on the Asia Pacific Network Information Centre network.
Registrar:
ENAME TECHNOLOGY CO., LTD.
Server location:
Shanghai, China (CN)
Create date:
Tuesday, October 15, 2013
Expires date:
Saturday, October 15, 2016
Updated date:
Wednesday, September 16, 2015
ASN:
AS58466 CT-GUANGZHOU-IDC CHINANET Guangdong province network, CN
Scanner detections:
Detections (80% detected)
Scan engine
Details
Detections
Reason Heuristics
Adware.Downloader.Shanghai.Installer.Meta (M), Adware.Downloader (M)
64.44%
avast!
Win32:Malware-gen, Win32:Trojan-gen
33.33%
Dr.Web
Trojan.KillFiles.28526
26.67%
Kaspersky
HEUR:Trojan.Win32.Invader, not-a-virus:AdWare.NSIS.Agent
22.22%
ESET NOD32
Win32/Packed.NSISmod.A suspicious (variant)
17.78%
Clam AntiVirus
Win.Trojan.691128-1
17.78%
NANO AntiVirus
Riskware.Win32.ShouQu.dmnfjx
17.78%
AegisLab AV Signature
Troj.Generic, Troj.Generic.mmEX, Dangerousobject.Multi.Generic!c, Troj.W32.Invader!c
17.78%
Vba32 AntiVirus
Malware-Cryptor.Inject.gen
17.78%
IKARUS anti.virus
PUA.RiskWare.Yantai
17.78%
Fortinet FortiGate
W32/Generic.AC.18053
17.78%
AVG
Generic, Generic36, Malware
17.78%
ESET NOD32
Win32/Packed.NSISmod.A suspicious application
17.78%
VIPRE Antivirus
Trojan.Win32.Generic
15.56%
AhnLab V3 Security
PUP/Win32.Downloader, PUP/Win32.Agent, PUP/Win32.Agent.R182507
15.56%
The domain xiazai.job391.com has been seen to resolve to the following 2 IP addresses.
File downloads found at URLs served by xiazai.job391.com.
