home

db2.gamersky.com

sun zhonghai

Domain Information

The domain db2.gamersky.com registered by sun zhonghai was initially registered in January of 2003 through HICHINA ZHICHENG TECHNOLOGY LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Wangluo, Henan within China which resides on the Asia Pacific Network Information Centre network.
Registrar:
HICHINA ZHICHENG TECHNOLOGY LTD.

Server location:
Henan, China (CN)

Create date:
Tuesday, January 14, 2003

Expires date:
Tuesday, January 14, 2020

Updated date:
Friday, April 25, 2014

ASN:
AS4134 CHINANET-BACKBONE No.31,Jin-rong Street,CN

Root domain:
gamersky.com

Whois:
1 gamersky.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
W32.FamVT.YantaiTTc
71.43%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
71.43%

F-Prot
W32/Yantai.A.gen, W32/ShouQu.C.gen
71.43%

Clam AntiVirus
Win.Trojan.691128
71.43%

NANO AntiVirus
Riskware.Win32.ShouQu.dmnfjx
71.43%

Fortinet FortiGate
Riskware/Generic.AC.18053, W32/Generic.AC.18053
71.43%

Dr.Web
Trojan.KillFiles.28526
71.43%

McAfee
Artemis!F9545A61E638, Artemis!532A7C55BB93, Artemis!2EC51D388719, Artemis!8C2620D88FA2
57.14%

ESET NOD32
Win32/RiskWare.Yantai (variant)
57.14%

ESET NOD32
Win32/RiskWare.Yantai.A application
42.86%

IKARUS anti.virus
PUA.RiskWare.Yantai
42.86%

K7 AntiVirus
Unwanted-Program
42.86%

Comodo Security
UnclassifiedMalware
42.86%

Baidu Antivirus
Trojan.Win32.Yantai
28.57%

G Data
Application.Generic.1160223, Win32.Application.Agent.HR3GI4
28.57%

The domain db2.gamersky.com has been seen to resolve to the following 2 IP addresses.

115.238.129.197
April 18, 2016

115.238.129.185
June 30, 2015

File downloads found at URLs served by db2.gamersky.com.

11 / 68    (PUP)
http://db2.gamersky.com/.../GetUrl.aspx?urlid=0&id=487540  (setup_364.exe)

2 / 68      (Malware)
http://db2.gamersky.com/.../GetUrl.aspx?urlid=0&id=505481  (game_358.exe)

11 / 68    (PUP)
http://db2.gamersky.com/.../GetUrl.aspx?urlid=0&id=505481  (setup_337.exe)

2 / 68      (Malware)
http://db2.gamersky.com/.../GetUrl.aspx?urlid=0&id=505481  (game_358.exe)

19 / 68    (PUP)
http://db2.gamersky.com/.../GetUrl.aspx?urlid=0&id=505481  (setup_322.exe)

16 / 68    (PUP)
http://db2.gamersky.com/.../GetUrl.aspx?urlid=0&id=505481  (game_358.exe)

15 / 68    (PUP)
http://db2.gamersky.com/.../GetUrl.aspx?urlid=0&id=505481  (game_358.exe)

URL:
http://db2.gamersky.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.