home

www.msil.pw

Domain Information

Server location:
Singapore, Singapore (SG)

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:
msil.pw

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan.GenericKDZ.27589
66.67%

nProtect
Trojan.GenericKDZ.27589
66.67%

Malwarebytes
Trojan.MSIL
66.67%

Arcabit
Trojan.Generic.D6BC5
66.67%

avast!
Win32:Evo-gen [Susp]
66.67%

Bitdefender
Trojan.GenericKDZ.27589
66.67%

Lavasoft Ad-Aware
Trojan.GenericKDZ.27589
66.67%

Emsisoft Anti-Malware
Trojan.GenericKDZ.27589
66.67%

F-Secure
Trojan.GenericKDZ.27589
66.67%

Dr.Web
Trojan.DownLoader12.52144
66.67%

Avira AntiVirus
TR/Dropper.Gen
66.67%

G Data
Trojan.GenericKDZ.27589
66.67%

AhnLab V3 Security
Trojan/Win32.MDA
66.67%

ESET NOD32
MSIL/Injector.FPT (variant)
66.67%

Rising Antivirus
PE:Trojan.MSIL.Injector!1.9E1B
66.67%

The domain www.msil.pw has been seen to resolve to the following 2 IP addresses.

104.28.14.74
June 19, 2015

104.28.15.74
June 19, 2015

File downloads found at URLs served by www.msil.pw.

1 / 68      (PUP)
http://www.msil.pw/panel/files/.../Server  (server.exe)

17 / 68    (Malware)
http://www.msil.pw/panel/files/.../Server  (server.exe)

17 / 68    (Malware)
http://www.msil.pw/panel/files/.../Server369  (server369.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.