home

z4lsan6u.gyw8rfu.com

Domain Information

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
gyw8rfu.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.DigitalPluginSL.F
100.00%

VIPRE Antivirus
Threat.4150696
100.00%

Dr.Web
Trojan.DownLoader11.36367
100.00%

Kaspersky
Trojan.Win32.Buzus
100.00%

MicroWorld eScan
Gen:Variant.Application.Bundler.SoftPulse.2
100.00%

nProtect
Trojan/W32.Buzus.1623056
100.00%

McAfee
SoftPulse
100.00%

Malwarebytes
PUP.Optional.DomaIQ
100.00%

AegisLab AV Signature
AdWare.W32.Agent
100.00%

K7 AntiVirus
Trojan
100.00%

NANO AntiVirus
Trojan.Win32.LMN.dgkmmt
100.00%

avast!
Win32:SoftPulse-AK [PUP]
100.00%

Clam AntiVirus
Win.Trojan.Softpulse-57
100.00%

Bitdefender
Gen:Variant.Application.Bundler.SoftPulse.2
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

The domain z4lsan6u.gyw8rfu.com has been seen to resolve to the following IP address.

5.135.246.48
December 8, 2014

File downloads found at URLs served by z4lsan6u.gyw8rfu.com.

26 / 68    (Adware)
http://z4lsan6u.gyw8rfu.com/7DeUEi4AYmSDI5GSCtnomT_fKr_3qR4tOCwswtQODLpqlhWSChfgSscRtuqPvEoEetQUP0vlRg_kaFMqxt6SLRyPQGQIYSDLqOQPnkP3IkOSAbYucCl3BiL91bSMQrsp?sbb=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  (setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.