home

pjjoint.malekal.com

Domain Information

Server location:
Auvergne, France (FR)

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
malekal.com

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Bkav FE
W32.Clod9d4.Trojan
100.00%

McAfee
Artemis!38B393E038F3
100.00%

F-Prot
W32/AutoIt.CR.gen
100.00%

Norman
Suspicious_Gen4.CVUAE
100.00%

avast!
Win32:Malware-gen
100.00%

ViRobot
Backdoor.Win32.A.Ceckno.333056
100.00%

Vba32 AntiVirus
Trojan-Downloader.Autoit.gen
100.00%

IKARUS anti.virus
Trojan-Spy.Agent
100.00%

The domain pjjoint.malekal.com has been seen to resolve to the following IP address.

94.23.44.69
ns206195.ovh.net
January 9, 2015

File downloads found at URLs served by pjjoint.malekal.com.

8 / 68      (Malware)
http://pjjoint.malekal.com/pjjoint_uploader.exe  (38b393e038f3bd2201a64a4549948bee)

The following 2 files have been seen to comunicate with pjjoint.malekal.com in live environments.

TCP » 94.23.44.69:80
browser.exe (Browser)

TCP » 94.23.44.69:80
SBRender.exe (SlimBrowser Rendering Process by FlashPeak)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.