us01.procloudstorage.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain us01.procloudstorage.com is registered by proxy through ENOM, INC. and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Providence, Utah within the United States which resides on the Hosting Services, Inc. network.
Registrar:
ENOM, INC.

Server location:
Utah, United States (US)

Create date:
Tuesday, August 5, 2014

Expires date:
Friday, August 5, 2016

Updated date:
Monday, July 6, 2015

ASN:
AS29854 WESTHOST - WestHost, Inc.,US

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Avira AntiVirus
ADWARE/InstallCore.Gen9, Adware/InstallCore.A.194, ADWARE/InstallCore.Gen7, Adware/InstallCore.737512, Adware/InstallCore.736776
100.00%

Reason Heuristics
PUP.Installer.Fileorg.R, PUP.Installer.Fileorg.CC, PUP.Installer.Fileorg.f, PUP.Installer.Fileorg.X, PUP.Installer.Fileorg.Z, PUP.Installer.Fileorg.e, PUP.Installer.Fileorg.U, PUP.Installer.Fileorg.c, PUP.installCore.Fileorg.Installer (M)
100.00%

Sophos
Install Core Click run software, PUA 'Install Core Click run software'
100.00%

K7 AntiVirus
Trojan , Adware , Unwanted-Program
96.00%

ESET NOD32
Win32/InstallCore.PR (variant), Win32/InstallCore.QH (variant), Win32/InstallCore.RR (variant), Win32/InstallCore.QF (variant)
90.00%

Dr.Web
Adware.Downware.4757, Trojan.InstallCore.24
88.00%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
74.00%

Qihoo 360 Security
Win32/Virus.Adware.f22, Win32/Virus.Adware.94c, Win32/Virus.Adware.e85, Win32/Virus.Adware.8dd, Win32/Virus.Adware.3a7
62.00%

AhnLab V3 Security
PUP/Win32.Downloader
56.00%

Baidu Antivirus
Adware.Win32.Agent, Adware.Win32.InstallCore, Trojan.Win32.InstallCore
54.00%

Zillya! Antivirus
Adware.InstallCore.Win32.200
44.00%

McAfee
Artemis!FD9F49D84AB9, Artemis!7EAF2FA87B26, Artemis!5EC8CC403128, Artemis!46EB10D38CB0, Artemis!BA0FC11AEC2B, Artemis!33CBD52DF665, Artemis!AC493ED6BFF6, Artemis!E42268AEEEA4, Artemis!DB66E5312BE2, Artemis!4EA04542D8CF, Artemis!27599B5E868E
42.00%

herdProtect (fuzzy)
a variant of 36e9d2ccdd9d371bac59be2e2e19e9f0f1386724, a variant of a8089520aa79c7ad5d02b21a10e9d5f9af9673da, a variant of eb176f5446661e963824b63a8ca7bd8ca92b0de3
34.00%

Fortinet FortiGate
Riskware/InstallCore, Adware/InstallCore
34.00%

Malwarebytes
PUP.Optional.Installcore, PUP.Optional.InstallCore
34.00%

The domain us01.procloudstorage.com has been seen to resolve to the following IP address.

206.190.138.54.static.midphase.com
September 2, 2014

File downloads found at URLs served by us01.procloudstorage.com.

20 / 68    (PUP)

14 / 68    (PUP)

12 / 68    (PUP)

10 / 68    (PUP)

12 / 68    (PUP)

10 / 68    (PUP)

12 / 68    (PUP)

13 / 68    (PUP)

8 / 68      (PUP)

13 / 68    (PUP)

5 / 68      (PUP)

7 / 68      (PUP)

12 / 68    (PUP)
http://us01.procloudstorage.com/.../QuickTimeSetup-21908437.exe  (icreinstall_quicktimesetup-21908437.exe)

10 / 68    (PUP)

16 / 68    (PUP)

12 / 68    (PUP)

16 / 68    (PUP)

16 / 68    (PUP)

14 / 68    (PUP)

9 / 68      (PUP)

7 / 68      (PUP)

23 / 68    (PUP)

9 / 68      (PUP)

13 / 68    (PUP)

14 / 68    (PUP)

10 / 68    (PUP)

11 / 68    (PUP)

10 / 68    (PUP)

7 / 68      (PUP)

 
Latest 30 of 56 download URLs

URL:
http://us01.procloudstorage.com/

Web server:
Apache