home

www.businex.us

Domain Information

Server location:
California, United States (US)

ASN:
AS26008 NOMINUM-SKYE1 - SKYE

Root domain:
businex.us

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan.Generic.8378346
100.00%

Quick Heal
TrojanDownloader.Agent.nd
100.00%

McAfee
Artemis!54270E9D726B
100.00%

Norman
W32/Suspicious_Gen4.FYM
100.00%

Trend Micro House Call
TROJ_LOWZONE.BMC
100.00%

NANO AntiVirus
Trojan.Win32.Download.chcjm
100.00%

Comodo Security
UnclassifiedMalware
100.00%

F-Secure
Trojan.Generic.8378346
100.00%

Dr.Web
Trojan.FakeAV.3748
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

ESET NOD32
Win32/Agent.SZW (variant)
100.00%

Rising Antivirus
Trojan.Win32.Generic.12699B33
100.00%

Fortinet FortiGate
Riskware/AppZilla
100.00%

The domain www.businex.us has been seen to resolve to the following IP address.

199.101.28.20
search.dnsassist.verizon.net
December 18, 2013

File downloads found at URLs served by www.businex.us.

13 / 68    (Malware)
http://www.businex.us/RegistryCleanerSetup.exe  (54270e9d726b907dd286331aa5554039)

The following 46 files have been seen to comunicate with www.businex.us in live environments.

TCP » 199.101.28.20:80
suggestions.crx

TCP » 199.101.28.20:80
firstuse.crx

TCP » 199.101.28.20:80
google-search.crx

TCP » 199.101.28.20:80
whylogin.crx

TCP » 199.101.28.20:80
facebook.crx

TCP » 199.101.28.20:80
rss.crx

TCP » 199.101.28.20:80
viewlater.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
datapump.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
datapump.crx

 
Latest 20 of 46 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.