home

tucebo.zhongruninvestment.com

Domain Information

Server location:
Beijing, China (CN)

ASN:
AS37963 CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.,Ltd.,CN

Root domain:
zhongruninvestment.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Application.Generic.1062809
100.00%

Quick Heal
RiskTool.Agent.g5 (Not a Virus)
100.00%

McAfee
Trojan-FFMU!2E852AE9DB1B
100.00%

Malwarebytes
PUP.Optional.ShouQu
100.00%

K7 AntiVirus
Riskware
100.00%

NANO AntiVirus
Trojan.Nsis.ShouQu.dflznl
100.00%

F-Prot
W32/Adware.AKXM
100.00%

avast!
Win32:Malware-gen
100.00%

Clam AntiVirus
Win.Trojan.691128
100.00%

Kaspersky
not-a-virus:RiskTool.Win32.Agent
100.00%

Bitdefender
Application.Generic.1062809
100.00%

Rising Antivirus
PE:Trojan.Win32.ShouQu.a!1075356133
100.00%

Lavasoft Ad-Aware
Application.Generic.1062809
100.00%

Sophos
GouDou
100.00%

Comodo Security
Application.Win32.ShouQu.B
100.00%

The domain tucebo.zhongruninvestment.com has been seen to resolve to the following IP address.

115.29.226.120
AY140212112610Z
February 3, 2015

File downloads found at URLs served by tucebo.zhongruninvestment.com.

25 / 68    (PUP)
http://tucebo.zhongruninvestment.com/fstp.exe  (guodou_137_1.exe)

bzjxxfqc.com

huafugongmao.com

liyanyanyake.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.