home

www.generalfiles.pw

Domain Information

Server location:
California, United States (US)

ASN:
AS26008 NOMINUM-SKYE1 - SKYE

Root domain:
generalfiles.pw

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

VIPRE Antivirus
Threat.4150696
75.00%

ESET NOD32
Win32/GeneralDownloader.A potentially unwanted application
75.00%

McAfee
Trojan-FDSS!445A57D3E109, Trojan-FDSS!A35DF3D094CD
50.00%

Malwarebytes
Trojan.Downloader.ns
50.00%

Zillya! Antivirus
Downloader.Genome.Win32.49328
50.00%

Kaspersky
not-a-virus:Downloader.NSIS.Agent
50.00%

Agnitum Outpost
PUA.Downloader
50.00%

F-Secure
Trojan.GenericKD.1639438, Trojan.Generic.11696888
50.00%

Vba32 AntiVirus
TrojanDownloader.Genome
50.00%

Panda Antivirus
PUP/MultiToolbar.A
50.00%

AVG
Win.Threat.High
50.00%

avast!
Win32:Downloader-VPA [Trj]
50.00%

Reason Heuristics
PUP.CJSCInve.Installer (M)
50.00%

IKARUS anti.virus
Trojan.SuspectCRC
25.00%

Emsisoft Anti-Malware
Trojan.Generic.11696888
25.00%

The domain www.generalfiles.pw has been seen to resolve to the following 2 IP addresses.

185.53.178.7
April 19, 2016

199.101.28.20
search.dnsassist.verizon.net
July 14, 2014

File downloads found at URLs served by www.generalfiles.pw.

4 / 68      (Adware)
http://www.generalfiles.pw/.../gs11bf5990hfi0  (outkast.southernplayalisticadillacmuzik.1994.zip.exe)

1 / 68      (Adware)
http://www.generalfiles.pw/.../gs4cc01465h17i0  (utv330.380.driver.sp3.rar.exe)

21 / 68    (PUP)
http://www.generalfiles.pw/.../gs4f92795ah32i0  (narayana.kavacham.malayalam.large.pdf.exe)

12 / 68    (PUP)
http://www.generalfiles.pw/.../gs54b034achfi0  (young.the.giant.2010.zip.exe)

The following 48 files have been seen to comunicate with www.generalfiles.pw in live environments.

TCP » 185.53.178.7:80
adobe_flash_player_chrome.crx

TCP » 185.53.178.7:443
translategenius.crx

TCP » 199.101.28.20:80
suggestions.crx

TCP » 199.101.28.20:80
firstuse.crx

TCP » 199.101.28.20:80
google-search.crx

TCP » 199.101.28.20:80
whylogin.crx

TCP » 199.101.28.20:80
facebook.crx

TCP » 199.101.28.20:80
rss.crx

TCP » 199.101.28.20:80
viewlater.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
datapump.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
composer.crx

 
Latest 20 of 48 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.