fastpcfixes.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain fastpcfixes.com is registered by proxy through ENOM, INC. and was originally registered in March of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in West Chester, Ohio within the United States which resides on the Level 3 Communications, Inc. network.
Registrar:
ENOM, INC.

Server location:
Ohio, United States (US)

Create date:
Tuesday, March 25, 2008

Expires date:
Saturday, March 25, 2017

Updated date:
Wednesday, February 24, 2016

ASN:
AS30152 BEYOND-HOSTING - Beyond Hosting, LLC,US

Scanner detections:
Detections  (87% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.W, PUP.Optional.Installer.a, PUP.Optional.Installer.FF, PUP.Optional.Installer.T, PUP.ParetoLogic.Optional.Installer.Meta (L), Win32.Generic.Installer.Meta, Win32.Generic.BoostSoftware.Installer.Meta, PUP.PCSpeed.Optional.Installer.Meta (L)
93.10%

Dr.Web
Trojan.Siggen5.45084, infected with BackDoor.Infector.133, riskware program Program.Unwanted.123, riskware program Program.Unwanted.686
41.38%

G Data
Win32.Application.PCHealthBoost, Win32.Application.SpeedyPC
31.03%

Sophos
Install Core Click run software, PUA 'Install Core Click run software'
27.59%

Vba32 AntiVirus
Signed-Riskware.PCHealthBoost
27.59%

Qihoo 360 Security
Malware.QVM05.Gen
24.14%

IKARUS anti.virus
PUA.Distromatic, PUA.PCSpeedBoost
24.14%

AVG
Boostsoft, BoostSoftwareInc
24.14%

ESET NOD32
Win32/Distromatic.C potentially unwanted application, Detection.Undefined
17.24%

K7 Gateway Antivirus
Unwanted-Program , Dialer
17.24%

K7 AntiVirus
Unwanted-Program , Riskware
17.24%

Total Defense
Win32/PCHealth.VFOFfAD
17.24%

herdProtect (fuzzy)
a variant of f4a269982dfe7c9d9d223f6c2d9ad291a767a9b2, a variant of 357f8e85051143373427b46bb30ba09c69933b4c
6.90%

Rising Antivirus
PE:AdWare.Win32.Eorezo.a!1075356178
6.90%

Avira AntiVirus
ADWARE/InstallCore.Gen
6.90%

The domain fastpcfixes.com has been seen to resolve to the following 2 IP addresses.

8-29-155-148.bhsrv.net
August 19, 2014

192-185-155-4.unifiedlayer.com
April 30, 2014

File downloads found at URLs served by fastpcfixes.com.

1 / 68      (PUP)
http://fastpcfixes.com/1/.../download.php  (pchealthboost-setup.exe)

1 / 68      (PUP)

1 / 68      (PUP)

6 / 68      (PUP)
http://fastpcfixes.com/10/p/.../telechargez.php  (speedypc pro installer_73014b7f-39cc-4f69-8eb4-db5a81893e88_.exe)

1 / 68      (PUP)

1 / 68      (PUP)
http://fastpcfixes.com/adv/pc/en-int/.../  (pchealthboost-setup.exe)

0 / 68
http://fastpcfixes.com/7/.../download.php  (spyhunter-installer.exe)

1 / 68      (PUP)
http://fastpcfixes.com/adv/pc/.../download.php  (speedypc pro installer_c1acf4e_.exe)

1 / 68      (PUP)

1 / 68      (PUP)
http://fastpcfixes.com/adv/pc/.../download.php  (speedypc pro installer.exe)

1 / 68      (inconclusive)

1 / 68      (PUP)
http://fastpcfixes.com/adv/pc/.../download.php  (speedypc pro installer.exe)

1 / 68      (PUP)
http://fastpcfixes.com/adv/pc/.../download.php  (9a0c7f1dd2e3ec54c6bb81f322873ff6.exe)

URL:
http://fastpcfixes.com/

Web server:
LiteSpeed (PHP/5.4.34)

Facebook:
Shares:  1

Statistics above are for the previous month of September 2017.