home

vhdcuq.by3302.livefilestore.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation

Root domain:
livefilestore.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Quick Heal
HackTool.Wpakill (Not a Virus)
100.00%

VIPRE Antivirus
HackTool.Win32.Keygen
100.00%

NANO AntiVirus
Trojan.Win32.Genome.cylhgr
100.00%

avast!
Win32:FakeSys-BF [PUP]
100.00%

Comodo Security
UnclassifiedMalware
100.00%

Avira AntiVirus
SPR/Shutdown.G
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.137903F2!326697970
100.00%

Fortinet FortiGate
Riskware/SLICMod
100.00%

Qihoo 360 Security
HEUR/Malware.QVM06.Gen
100.00%

The domain vhdcuq.by3302.livefilestore.com has been seen to resolve to the following IP address.

134.170.108.176
December 3, 2014

File downloads found at URLs served by vhdcuq.by3302.livefilestore.com.

9 / 68      (PUP)
https://vhdcuq.by3302.livefilestore.com/.../K.J_121105.exe  (activator windows 8.exe)

The following 9 files have been seen to comunicate with vhdcuq.by3302.livefilestore.com in live environments.

TCP » 134.170.108.176:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 134.170.108.176:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 134.170.108.176:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 134.170.108.176:443
tortuga.exe (Tortuga by The Tortuga Authors)

TCP » 134.170.108.176:443
locaproxy.exe

TCP » 134.170.108.176:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 134.170.108.176:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 134.170.108.176:443
y2go.exe

TCP » 134.170.108.176:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

live.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.