home

www.minecraftprojects.net

Patrick Bauer

Domain Information

The domain www.minecraftprojects.net registered by Patrick Bauer was initially registered in March of 2012 through WORLD4YOU INTERNET SERVICES GMBH. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Linz, Oberosterreich within Austria which resides on the RIPE Network Coordination Centre network.
Registrar:
WORLD4YOU INTERNET SERVICES GMBH

Server location:
Oberosterreich, Austria (AT)

Create date:
Friday, March 30, 2012

Expires date:
Thursday, March 30, 2017

Updated date:
Thursday, March 31, 2016

ASN:
AS38955 WORLD4YOU World4You Internet Services GmbH

Root domain:
minecraftprojects.net

Whois:
3 minecraftprojects.net records

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MaxSetup.T, PUP.Bundler.installCore, PUP.Bundler.ironSource, PUP.installCore.DoveSourceFriedCooke (M), PUP.InstallCore.Installer.Installer (M), PUP.installCore.STMSetup (M)
85.71%

McAfee
Artemis!E429970097D1, Artemis!1B5DFCA5548A, Artemis!2F39F30557FD
42.86%

Trend Micro House Call
TROJ_GEN.F47V0506, TROJ_GEN.R00UC0EAM15, Suspicious_GEN.F47V1204
42.86%

Dr.Web
Trojan.MulDrop5.10078, Trojan.InstallCore.49, Trojan.InstallCore.19
42.86%

VIPRE Antivirus
Adware.Win32.InstallCore.ba, Trojan.Win32.Generic
42.86%

Sophos
Install Core Click run software, Generic PUA HC, InstallCore ToDownload
42.86%

ESET NOD32
Win32/InstallCore.MJ (variant), Win32/InstallCore.UN (variant), Win32/InstallCore.TS (variant)
42.86%

AVG
MalSign.InstallCore, Generic
42.86%

K7 AntiVirus
Unwanted-Program
28.57%

G Data
Win32.Application.InstallCore, Win32.Application.Agent.Y0QGUM
28.57%

Baidu Antivirus
Adware.Win32.InstallCore
28.57%

Avira AntiVirus
Adware/InstallCo.zlw, Adware/InstallCore.A.360
28.57%

Fortinet FortiGate
Riskware/InstallCore
28.57%

Norman
InstallCore.WTXG
14.29%

Trend Micro
TROJ_GEN.R00UC0EAM15
14.29%

The domain www.minecraftprojects.net has been seen to resolve to the following 2 IP addresses.

81.19.145.161
www91.world4you.com
February 14, 2015

81.19.145.155
www85.world4you.com
May 31, 2014

File downloads found at URLs served by www.minecraftprojects.net.

0 / 68
http://www.minecraftprojects.net/attachments/article/.../X-Ray-Mod-1.7.2.zip  (026cc92a405d95217d818934bbdaa84e)

1 / 68      (Adware)
http://www.minecraftprojects.net/xray_installer.exe  (48bc7d0d9ee7581a0252ef909ba4ba50)

0 / 68
http://www.minecraftprojects.net/lucky_block.exe  (839e500521598d3b0228f5daf58779d7)

1 / 68      (Adware)
http://www.minecraftprojects.net/x_ray_installer.exe  (f39561132313adb70be1f2bce5eec985)

1 / 68      (Adware)
http://www.minecraftprojects.net/.../luckyblock.exe  (763c894f9828938b02a0832e42035113)

12 / 68    (Adware)
http://www.minecraftprojects.net/x_ray_installer.exe  (2f39f30557fdd4800b4a37c4bfd00c75)

15 / 68    (Adware)
http://www.minecraftprojects.net/.../xray.exe  (1b5dfca5548a7ec722eae389459263a0)

11 / 68    (Adware)
http://www.minecraftprojects.net/.../mcpatcher_installer.exe  (e429970097d11a080f8ded26fb9b215b)

The following 2 files have been seen to comunicate with www.minecraftprojects.net in live environments.

TCP » 81.19.145.161:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 81.19.145.155:80
onlineguardian-v2.exe

URL:
http://www.minecraftprojects.net/

Google Analytics:
UA-36802492

Title:
“Minecraftprojects.net - Mods, Texture Packs, Maps and Tools”

Description:
“Minecraftprojects.net - The place where you can find the best mods, texture packs maps and tools”

Web server:
Apache

Facebook:
Likes:  6
Shares:  10

Statistics are for the previous month.

minecraft-downloads.com

mineloads.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.