home

pornfile.cz

Domain Information

Server location:
Hlavni Mesto Praha, Czech Republic (CZ)

ASN:
AS6830 LGI-UPC Liberty Global Operations B.V.

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/Injector.Autoit.BKM trojan
100.00%

F-Prot
W32/Agent.AFI.gen
100.00%

Vba32 AntiVirus
Backdoor.Androm
100.00%

IKARUS anti.virus
Trojan.Win32.Injector
100.00%

AVG
Autoit
100.00%

The domain pornfile.cz has been seen to resolve to the following IP address.

93.99.92.193
July 7, 2015

File downloads found at URLs served by pornfile.cz.

5 / 68      (Malware)
http://pornfile.cz/.../microsoft-office-2010-pro-plus-x64-x86-activator-keygen-exe?showDialog=1&do=directDownload  (microsoft_office_2010_pro_plus_x64_x86_activator_keygen.exe)

The following 4 files have been seen to comunicate with pornfile.cz in live environments.

TCP » 93.99.92.193:443
online-guardian-v2.0.9.exe

TCP » 93.99.92.193:443
seznam.cz.exe

TCP » 93.99.92.193:443
onlineguardian-v2.exe

TCP » 93.99.92.193:443
online-guardian-v2.exe

uloz.to

ulozto.cz

ulozto.net

ulozto.sk

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.