home

adwcleaner.pro.de

Domain Information

Server location:
Nordrhein-Westfalen, Germany (DE)

ASN:
AS20773 HOSTEUROPE-AS Host Europe GmbH,DE

Root domain:
pro.de

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Dr.Web
Trojan.DownLoader9.20206, Trojan.DownLoader11.26049
100.00%

Bkav FE
HW32.CDB
50.00%

AegisLab AV Signature
Troj.Dropper.Gen
50.00%

G Data
Win32.Application.DownloadGuide
50.00%

ESET NOD32
MSIL/DownloadGuide (variant)
50.00%

Reason Heuristics
PUP.Installer.CovusProGmbH.M
50.00%

avast!
Win32:Malware-gen
50.00%

AVG
Generic
50.00%

The domain adwcleaner.pro.de has been seen to resolve to the following 2 IP addresses.

92.51.171.39
mail.mail-proxma.com
August 17, 2014

87.230.83.65
ds87-230-83-65.dedicated.hosteurope.de
February 16, 2014

File downloads found at URLs served by adwcleaner.pro.de.

4 / 68      (Adware)
http://adwcleaner.pro.de/.../download_do.php?id=16850  (Multiproduct.exe)

5 / 68      (Malware)
http://adwcleaner.pro.de/.../download_do.php?id=16850  (adwcleaner_setup_download.exe)

The following file have been seen to comunicate with adwcleaner.pro.de in live environments.

TCP » 92.51.171.39:80
myphoneexplorer-download.exe

treiber-windows.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.