dc97.4sharedhelper.com

China Capital Investment Limited

Domain Information

The domain dc97.4sharedhelper.com registered by China Capital Investment Limited was initially registered in August of 2015 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
LEATHERNECKDOMAINS.COM, LLC

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Tuesday, August 04, 2015

Expires date:
Thursday, August 04, 2016

Updated date:
Monday, March 07, 2016

ASN:
AS16265 LEASEWEB LeaseWeb B.V.

Root domain:

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.NewITLimited.R, PUP.ITMANAGEMENTGROUP.c, PUP.NewITLimited.j, PUP.New IT Limited, PUP.New IT Limited.NewIT.Bundler (M), PUP.New IT Limited.NewIT (M)
92.31%

ESET NOD32
Win32/4Shared.D potentially unwanted application, Win32/4Shared.C potentially unwanted application, Win32/Jeefo.A virus
30.77%

Dr.Web
Adware.Toolbar.111, Adware.Downware.2538, Adware.Siggen.26344, Win32.HLLP.Jeefo.36352
30.77%

avast!
Downloader-TQP [PUP], FourShared-D [PUP], Win32:Gardih
30.77%

McAfee
PUP-FIV, PUP-FIV!91886FA6C8CB, Program.PUP-FIV
30.77%

F-Prot
W32/4Shared.G.gen, W32/A-98e3043d, W32/Jeefo.A
30.77%

VIPRE Antivirus
Threat.4150696, 4Shared, Threat.4758582
23.08%

AVG
Adware MultiBundle, Adware MultiBundle.AI, Potentially harmful program Skodna.Downloader.K
23.08%

K7 AntiVirus
Unwanted-Program
23.08%

K7 Gateway Antivirus
Unwanted-Program
23.08%

Agnitum Outpost
PUA.4Shared
23.08%

NANO AntiVirus
Riskware.Win32.Toolbar.dbxkdu, Trojan.Win32.Siggen.cxgqun
23.08%

Comodo Security
Application.Win32.NewIT.A, Application.Win32.4Shared.G, Application.Win32.NewIT.B
23.08%

McAfee Web Gateway
PUP-FIV, BehavesLike.Win32.Downloader.jh, BehavesLike.Win32.Downloader.dc
23.08%

Sophos
4Share Downloader, PUA '4Share Downloader'
23.08%

The domain dc97.4sharedhelper.com has been seen to resolve to the following 6 IP addresses.

199.83.132.93.ip.incapdns.net
June 24, 2016

April 17, 2016

March 3, 2016

November 9, 2015

hosted-by.leaseweb.com
November 2, 2014

c-r111-uc0054-137.webazilla.com
February 27, 2014

File downloads found at URLs served by dc97.4sharedhelper.com.

8 / 68      (PUP)

1 / 68      (Adware)

1 / 68      (Adware)
http://dc97.4sharedhelper.com/downloadhelper/named/xeroxep32190_th/NNuV6XnZ/.../18 ??-???? ????.mp3 - 4shared.com - ????????????????????????????????????? - ?????????.exe  (18 ฝน-เสือ ธนพล.mp3 - 4shared.com - การจัดเก็บแฟ้มและใช้งานร่วมกันออนไลน์ - ดาวน์โหลด.exe)

1 / 68      (Adware)

The following 7 files have been seen to comunicate with dc97.4sharedhelper.com in live environments.

URL:
http://dc97.4sharedhelper.com/

Web server:
nginx/1.8.1