Server location:
Nordrhein-Westfalen, Germany (DE)
ASN:
AS8972 PLUSSERVER-AS PlusServer AG,DE
Scanner detections:
Malware distribution (73% detected)
Scan engine
Details
Detections
Emsisoft Anti-Malware
Gen:Heur.SMHeist, Trojan.Generic.15321397, Win32.Parite, Win32.Sality
77.78%
Dr.Web
Adware.AdClick.2, Threat.Undefined, Win32.Parite.2, Win32.Sector.30
55.56%
McAfee
Artemis!C800A563539F, Artemis!4D8F7F3F92E3, Virus.W32/Pate.b, Trojan.Artemis!C800A563539F
55.56%
AVG
Win32/DH{Bw?}, Win32/Parite, Win32/Sality
55.56%
Norman
Gen:Heur.SMHeist.3, Win32.Parite.B, Win32.Sality.3
55.56%
ESET NOD32
Detection.Undefined, Win32/Parite.B virus, Win32/Sality.NBA virus
55.56%
Kaspersky
Trojan.Win32.Qhost, Virus.Win32.Parite, Virus.Win32.Sality
44.44%
avast!
Win32:Evo-gen [Susp], Win32:Parite, Win32:SaliCode
44.44%
MicroWorld eScan
Gen:Heur.SMHeist.3, Trojan.Generic.15321397
33.33%
K7 AntiVirus
Riskware
33.33%
G Data
Gen:Heur.SMHeist, Trojan.Generic.15321397
33.33%
Bitdefender
Gen:Heur.SMHeist.3, Trojan.Generic.15321397
33.33%
VIPRE Antivirus
Trojan.Win32.Generic, Threat.4721115
33.33%
Arcabit
Trojan.SMHeist.3, Trojan.Generic.DE9C935
33.33%
Fortinet FortiGate
Riskware/Sim
33.33%
The domain onlinestudy.pk has been seen to resolve to the following 2 IP addresses.
static-ip-188-138-71-72.inaddr.ip-pool.com
February 24, 2016
loft10279.serverprofi24.com
December 1, 2015
File downloads found at URLs served by onlinestudy.pk.
The following 2 files have been seen to comunicate with onlinestudy.pk in live environments.
Subdomains