home

gridunesp.unesp.br

Carlos J. R. Coletti

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Sao Paulo, Sao Paulo within Brazil which resides on the Latin American and Caribbean IP address Regional Registry network.
Server location:
Sao Paulo, Brazil (BR)

ASN:
AS53166 UNIVERSIDADE ESTADUAL PAULISTA,BR

Root domain:
unesp.br

Whois:
1 unesp.br record

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan.GenericKD.2701798
100.00%

nProtect
Trojan.GenericKD.2701798
100.00%

K7 AntiVirus
Riskware
100.00%

Arcabit
Trojan.Generic.D2939E6
100.00%

avast!
Win32:Dropper-gen [Drp]
100.00%

Kaspersky
UDS:DangerousObject.Multi.Generic
100.00%

Bitdefender
Trojan.GenericKD.2701798
100.00%

NANO AntiVirus
Trojan.Win32.Agent.dwvnwq
100.00%

Lavasoft Ad-Aware
Trojan.GenericKD.2701798
100.00%

Emsisoft Anti-Malware
Trojan.GenericKD.2701798
100.00%

F-Secure
Trojan.GenericKD.2701798
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

Trend Micro
TROJ_GEN.R00JC0EI815
100.00%

Sophos
Troj/Banloa-BZU
100.00%

Avira AntiVirus
TR/Agent.75264.201
100.00%

The domain gridunesp.unesp.br has been seen to resolve to the following IP address.

200.145.6.90
yoda.unesp.br
April 12, 2016

File downloads found at URLs served by gridunesp.unesp.br.

21 / 68    (Malware)
http://gridunesp.unesp.br/.../chrome_update.exe  (770171ccd0cc55854af909f6dc95b19c)

URL:
http://gridunesp.unesp.br/

Google Analytics:
UA-7191221

Title:
“UNESP: Reitoria - Portal da Universidade”

Web server:
Apache (PHP/5.3.3-7+squeeze19)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.