home

tradestore.ws

Domain Information

Server location:
California, United States (US)

ASN:
AS3561 SAVVIS - Savvis,US

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan.Encpk.Gen.4
100.00%

nProtect
Trojan.Encpk.Gen.4
100.00%

Quick Heal
Worm.Gamarue.I5
100.00%

Malwarebytes
Trojan.Crypt.NKN
100.00%

Zillya! Antivirus
Backdoor.Androm.Win32.5899
100.00%

K7 AntiVirus
Trojan
100.00%

NANO AntiVirus
Trojan.Win32.Zbot.cssfrh
100.00%

Trend Micro House Call
TSPY_ZBOT.SM51
100.00%

avast!
Win32:Zbot-SKQ [Trj]
100.00%

Kaspersky
Backdoor.Win32.Androm
100.00%

Bitdefender
Trojan.Encpk.Gen.4
100.00%

Agnitum Outpost
Backdoor.Androm
100.00%

Lavasoft Ad-Aware
Trojan.Encpk.Gen.4
100.00%

Emsisoft Anti-Malware
Trojan.Encpk.Gen
100.00%

Comodo Security
UnclassifiedMalware, TrojWare.Win32.Injector.AVXY
100.00%

The domain tradestore.ws has been seen to resolve to the following IP address.

64.70.19.202
mailrelay.202.website.ws
April 7, 2016

File downloads found at URLs served by tradestore.ws.

37 / 68    (Malware)
http://tradestore.ws/download.php  (installer.exe)

33 / 68    (Malware)
http://tradestore.ws/download.php  (install.exe)

The following file have been seen to comunicate with tradestore.ws in live environments.

TCP » 64.70.19.202:80
dllhost.exe (COM Surrogate by Microsoft)

arabeam.ws

download1click.ws

keygen-0day.ws

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.