home

ll.static.vshare.tv

Whois LLC

Domain Information

The domain ll.static.vshare.tv registered by Whois LLC was initially registered in December of 2014 through NAME109, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Hollywood, Florida within the United States which resides on the Prolexic Technologies, Inc. network.
Registrar:
NAME109, INC.

Server location:
Florida, United States (US)

Create date:
Tuesday, December 30, 2014

Updated date:
Friday, January 1, 2016

ASN:
AS32787 PROLEXIC-TECHNOLOGIES-DDOS-MITIGATION-NETWORK - Prolexic Technologies, Inc.,US

Root domain:
vshare.tv

Whois:
1 vshare.tv record

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Dr.Web
Adware.Searcher.1298
85.71%

Reason Heuristics
PUP.Optional.ExtradreamVenturesLimited.N, PUP.Optional.ExtradreamVenturesLimited.Q, Win32.Generic.Installer.Meta
85.71%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
57.14%

ESET NOD32
Win32/TopMedia
42.86%

ESET NOD32
Win32/TopMedia.A potentially unwanted application
28.57%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
14.29%

F-Secure
Application:W32/Generic.70053c248f!Online
14.29%

Trend Micro House Call
TROJ_GEN.F47V1107
14.29%

Bkav FE
W32.Clod959.Trojan
14.29%

McAfee
Artemis!385F6537402C
14.29%

The domain ll.static.vshare.tv has been seen to resolve to the following 3 IP addresses.

72.52.4.120
unknown.prolexic.com
April 18, 2016

85.159.232.131
January 4, 2014

85.159.232.132
January 4, 2014

File downloads found at URLs served by ll.static.vshare.tv.

2 / 68      (false positives)
http://ll.static.vshare.tv/.../vshare-plugin.exe  (wrar420.exe)

6 / 68      (PUP)
http://ll.static.vshare.tv/.../vshare-plugin.exe  (385f6537402c1827aba055aeffad1060)

0 / 68
http://ll.static.vshare.tv/.../vshare-plugin.exe  (74223dbc55e8fa5bb192e54861a6f6c3)

3 / 68      (PUP)
http://ll.static.vshare.tv/.../vshare-plugin.exe  (8865e8cfe2a525cd7600a3ab3e9c9137)

4 / 68      (PUP)
http://ll.static.vshare.tv/.../vshare-plugin.exe  (3f598cba2edff26339a7938a6c558dfb)

5 / 68      (PUP)
http://ll.static.vshare.tv/.../vshare-plugin.exe  (29f4a9b8800d792852149dd125b44ce8)

2 / 68      (PUP)
http://ll.static.vshare.tv/.../vshare-plugin.exe  (18e0c865fca7d017378e87c4a6742bf5)

4 / 68      (PUP)
http://ll.static.vshare.tv/.../vshare-plugin.exe  (9bdb3cf2b19b315f69927bc93d2bd4ba)

The following 74 files have been seen to comunicate with ll.static.vshare.tv in live environments.

TCP » 72.52.4.120:80
kb799693963.exe

TCP » 72.52.4.120:80
whAgent.exe (webHancer Customer Companion by webHancer)

TCP » 72.52.4.120:80
monhost.exe (monhost.exe by Vested Development, Inc)

TCP » 72.52.4.120:80
online-guardian-v2.0.9.exe

TCP » 72.52.4.120:80
winalert.exe

TCP » 72.52.4.120:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.52.4.120:80
guacuilanmog.exe

TCP » 72.52.4.120:80
cssrs.exe

TCP » 72.52.4.120:80
Alternative Flash Player Auto-Updater.exe (Flash Player Auto-Updater by Wecode.biz)

TCP » 72.52.4.120:80
adobe online.com

TCP » 72.52.4.120:80
hbpzabffmyx.exe

TCP » 72.52.4.120:80
onlineguardian-v2.exe

TCP » 72.52.4.120:80
apptrailers.exe

TCP » 72.52.4.120:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.52.4.120:80
ContentFinder.exe (ContentFinder by ContentFinder Company)

TCP » 72.52.4.120:80
updates.exe

TCP » 72.52.4.120:80
mirc.exe (mIRC by mIRC Co)

TCP » 72.52.4.120:80
csrss.exe

TCP » 72.52.4.120:80
photo.exe

TCP » 72.52.4.120:80
adobe online.com

 
Latest 20 of 81 files

URL:
http://ll.static.vshare.tv/

Title:
“vshare.tv - This website is for sale! - vshare Resources and Information.”

Description:
“This website is for sale! vshare.tv is your first and best source for all of the information you’re looking for. From general topics to more of what you would expect to find here, vshare.tv has it all. We hope you find what you are searching for...”

Web server:
Apache/2.2.22 (Debian)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.