www.chris-pc.com

CHRISPC SOFTWARE SRL

Domain Information

The domain www.chris-pc.com registered by CHRISPC SOFTWARE SRL was initially registered in December of 2003 through REGISTER.COM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Leland, North Carolina within the United States which resides on the Net2EZ network.
Registrar:
REGISTER.COM, INC.

Server location:
North Carolina, United States (US)

Create date:
Wednesday, December 10, 2003

Expires date:
Sunday, December 10, 2017

Updated date:
Tuesday, December 08, 2015

ASN:
AS558 NET2EZ - Net2EZ

Root domain:

Scanner detections:
Detections  (84% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ChrisPCsrl.DD, PUP.Installer.ChrisPCsrl.h, PUP.Installer.ChrisPCsrl.m, PUP.Installer.ChrisPCsrl.t, PUP.Installer.ChrisPCsrl.FF, Threat.Installer.ChrisPCsrl, PUP.ChrisPCsrl.Installer (M), PUP (M)
97.44%

Dr.Web
DLOADER.Trojan
17.95%

Kingsoft AntiVirus
VIRUS_UNKNOWN, Win32.Malware.Heur_Generic.B.(kcloud)
17.95%

McAfee
Artemis!08E839162909, Artemis!A358AC0AAF40, Artemis!0F6F8E11C868
7.69%

Trend Micro House Call
Suspicious_GEN.F47V1114, Suspicious_GEN.F47V1112, Suspicious_GEN.F47V0415
7.69%

McAfee Web Gateway
Artemis, Artemis!Trojan
7.69%

Antiy Labs AVL
VCS/Environment.DigitalFN.a, Trojan/Win32.Tgenic, GrayWare[AdWare]/Win32.Adware.EoRezo.ay
7.69%

Vba32 AntiVirus
Downloader.Agent
5.13%

G Data
Win32.Application.Complitly
5.13%

Quick Heal
(Suspicious) - DNAScan
5.13%

avast!
NSIS:Relevant-I [PUP], Win32:Bundlore-E [PUP]
5.13%

ESET NOD32
Win32/BundleLoader.B potentially unwanted, Win32/BundleLoader.C potentially unwanted (variant)
5.13%

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F], Trjoan.Generic-e718D0Y2PRG (Cloud)
5.13%

Bkav FE
W32.HfsAdware
2.56%

ESET NOD32
Detection.Undefined
2.56%

The domain www.chris-pc.com has been seen to resolve to the following 2 IP addresses.

server2.pgware.com
April 30, 2014

skylock.net
December 27, 2013

File downloads found at URLs served by www.chris-pc.com.

2 / 68      (PUP)

2 / 68      (Malware)

7 / 68      (PUP)
http://www.chris-pc.com/chrisdownload.php?action=count&id=9  (setup_christv_online_free_9_80.exe)

0 / 68
http://www.chris-pc.com/chrisdownload.php?action=count&id=16  (setup_chrispc_free_anonymous_proxy_6_50.exe)

1 / 68      (Malware)

1 / 68      (PUP)

0 / 68

1 / 68      (Malware)

1 / 68      (PUP)

1 / 68      (Malware)
http://www.chris-pc.com/chrisdownload.php?action=count&id=14  (setup_chrispc_free_anonymous_proxy_6_45.exe)

1 / 68      (Malware)

1 / 68      (PUP)

1 / 68      (Malware)

1 / 68      (PUP)

1 / 68      (PUP)

2 / 68      (PUP)

1 / 68      (Malware)

1 / 68      (PUP)

2 / 68      (Malware)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (Malware)

1 / 68      (PUP)

1 / 68      (PUP)

1 / 68      (Malware)

 
Latest 30 of 115 download URLs

The following file have been seen to comunicate with www.chris-pc.com in live environments.

URL:
http://www.chris-pc.com/

Google Analytics:
UA-964897

Title:
“Chris P.C. srl - The best software applications created for you - FREE shareware downloads - ChrisTV PVR, RAM Booster, Game Booster, Anonymous Proxy, Ads Blocker, Windows Experince Index on Windows ...”

Description:
“Chris P.C. srl - Software Company - The best software applications created for you - FREE download for our software products : ChrisTV PVR, YouTube, Video Converter, Windows Experience Index, FREE Anonymous Proxy, JTV Player, Ads Blocker, ChrisTW...”

SSL certificate subject:
CN=www.chris-pc.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
Apache/2.4.18 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4

Facebook:
Likes:  12
Shares:  7

Statistics are for the previous month.