dc153.4shared.com

New IT Solutions Ltd.

Domain Information

The domain dc153.4shared.com registered by New IT Solutions Ltd. was initially registered in January of 2005 through GODADDY.COM, LLC. The domain hosts various software downloads. The hosted servers are located in Fort Lauderdale, Florida within the United States which resides on the WZ Communications Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Florida, United States (US)

Create date:
Tuesday, January 11, 2005

Expires date:
Friday, January 11, 2019

Updated date:
Thursday, January 23, 2014

ASN:
AS40824 WZCOM-US - WZ Communications Inc.,US

Root domain:

Scanner detections:
Detections  (60% detected)

Scan engine
Details
Detections

VIPRE Antivirus
Conduit, Threat.4657539, Trojan.Win32.Generic
57.14%

Reason Heuristics
PUP.Installer.NewITLimited.T, PUP.New IT Limited.NewIT.Bundler (M)
57.14%

avast!
Win32:Malware-gen, Win32:Evo-gen [Susp]
42.86%

ESET NOD32
Win32/Toolbar.Conduit (variant), Win32/HackTool.Inject (variant)
42.86%

Dr.Web
Adware.Conduit.35, Trojan.DownLoader8.62080, Trojan.Popuper.40681
42.86%

Malwarebytes
PUP.Optional.4Shared
28.57%

Trend Micro House Call
TROJ_GEN.F47V1115, Suspici.3DDF1A39
28.57%

Comodo Security
Application.Win32.NewIT.B, UnclassifiedMalware
28.57%

G Data
Win32.Adware.Conduit, Gen:Variant.Strictor.3898
28.57%

Panda Antivirus
PUP/Conduit.A, Trj/Genetic.gen
28.57%

McAfee
Trojan.Artemis!6D6D15C1BDD9, Generic PUP.z!ny
28.57%

Sophos
PUA 'CrackTool' (of type Hacktool), Generic PUA IP
28.57%

F-Prot
W32/Conduit.A.gen
14.29%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
14.29%

Baidu Antivirus
PUA.Win32.Conduit
14.29%

The domain dc153.4shared.com has been seen to resolve to the following IP address.

c-n160-uc0603-185.webazilla.com
December 1, 2014

File downloads found at URLs served by dc153.4shared.com.

0 / 68

23 / 68    (PUP)

1 / 68
http://dc153.4shared.com/download/.../___online.exe  (رحلة الخط العربي.exe)

5 / 68      (Adware)

12 / 68    (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

7 / 68      (PUP)
http://dc153.4shared.com/download/.../P8_v25.exe  (346d67aeeea3ee0bff5f4be5a4bc2c1b)

5 / 68      (Adware)

The following file have been seen to comunicate with dc153.4shared.com in live environments.

URL:
http://dc153.4shared.com/

Google Analytics:
UA-306602

Title:
“4shared.com - free file sharing and storage”

SSL certificate subject:
CN=*.4shared.com, OU=Domain Control Validated

SSL certificate issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:
571