home

lesvirus.fr

Ano Nymous

Domain Information

The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH SAS,FR

Whois:
2 lesvirus.fr records

The domain lesvirus.fr has been seen to resolve to the following 2 IP addresses.

46.105.174.43
cluster015.proxy1.rbx4.hostedssl.ovh.net
February 2, 2016

213.186.33.3
cluster015.ovh.net
February 7, 2014

File downloads found at URLs served by lesvirus.fr.

0 / 68
http://lesvirus.fr/.../stopzilla.exe  (stopzillapro_downloader.exe)

0 / 68
http://lesvirus.fr/.../hunter.exe  (spyhunter-installer.exe)

0 / 68
http://lesvirus.fr/.../hunter.exe  (spyhunter-installer.exe)

0 / 68
http://lesvirus.fr/.../hunter.exe  (ws100a5cc8.dat)

0 / 68
http://lesvirus.fr/.../stopzilla.exe  (stopzillapro_downloader.exe)

0 / 68
http://lesvirus.fr/.../stopzilla.exe  (stopzillapro_downloader.exe)

0 / 68
http://lesvirus.fr/.../stopzilla.exe  (stopzillapro_downloader.exe)

1 / 68
http://lesvirus.fr/.../hunter.exe  (spyhunter-installer.exe)

0 / 68
http://lesvirus.fr/.../defender-pro.exe  (dp_ultimate.exe)

1 / 68
http://lesvirus.fr/.../hunter.exe  (spyhunter-installer.exe)

1 / 68      (inconclusive)
http://lesvirus.fr/.../hunter.exe  (spyhunter-installer.exe)

0 / 68
http://lesvirus.fr/.../hunter.exe  (spyhunter-installer.exe)

0 / 68
http://lesvirus.fr/.../stopzilla.exe  (szsetup_aid10121_av.exe)

0 / 68
http://lesvirus.fr/.../hunter.exe  (spyhunter-installer.exe)

1 / 68      (inconclusive)
http://lesvirus.fr/.../hunter.exe  (SHDownloader.exe)

The following 36 files have been seen to comunicate with lesvirus.fr in live environments.

TCP » 213.186.33.3:80
cykimhegigka.exe

TCP » 213.186.33.3:80
1799877.exe

TCP » 213.186.33.3:80
bosadgypujuz.exe

TCP » 213.186.33.3:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.3:80
browser.exe (Speed Browser by Smart Applications)

TCP » 213.186.33.3:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.3:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.3:80
jingling.exe

TCP » 213.186.33.3:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 213.186.33.3:443
apptrailers.exe

TCP » 213.186.33.3:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 213.186.33.3:80
onlineguardian-v2.exe

TCP » 213.186.33.3:25
wrk.exe

TCP » 213.186.33.3:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 213.186.33.3:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 213.186.33.3:80
abb1213.tmp

TCP » 213.186.33.3:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.3:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 213.186.33.3:80
online-guardian-v2.exe

TCP » 213.186.33.3:80
online-guardian-v2.exe

 
Latest 20 of 40 files

URL:
http://lesvirus.fr/

Google Analytics:
UA-67467569

Title:
“Comment faire pour supprimer les virus informatiques - lesvirus.fr”

Description:
“lesvirus.fr Centre de recherche offre gratuitement des instructions de suppression de virus et mises à jour régulières sur les événements les plus importants liés à la sécurité informatique et de ses problèmes.”

SSL certificate subject:
CN=www.lesvirus.fr, OU=Domain Control Validated, C=FR

SSL certificate issuer:
CN=AlphaSSL CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Web server:
Apache (PHP/5.4.45)

bedynet.ru

senzavirus.it

utanvirus.se

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.