www.pchealthboost.com

Boost Software, Inc

Domain Information

The domain www.pchealthboost.com registered by Boost Software, Inc was initially registered in June of 2010 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Incapsula Inc network.
Remove Malware from www.pchealthboost.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
New York, United States (US)

Create date:
Wednesday, June 09, 2010

Expires date:
Tuesday, June 09, 2020

Updated date:
Tuesday, June 09, 2015

ASN:
AS19551 INCAPSULA Incapsula.com

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.T, Win32.Generic.BoostSoftware.Installer.Meta
98.00%

Dr.Web
Win32.Sector.21, infected with BackDoor.Infector.133, riskware program Program.Unwanted.120, riskware program Program.Unwanted.123
82.00%

Qihoo 360 Security
Malware.QVM05.Gen
68.00%

Sophos
PUA 'Install Core Click run software'
34.00%

G Data
Win32.Application.PCHealthBoost
34.00%

Vba32 AntiVirus
Signed-Riskware.PCHealthBoost
34.00%

Total Defense
Win32/PCHealth.VFOFfAD
34.00%

IKARUS anti.virus
PUA.PCSpeedBoost
32.00%

AVG
Boostsoft, BoostSoftwareInc
30.00%

K7 AntiVirus
Riskware , Unwanted-Program
30.00%

K7 Gateway Antivirus
Riskware , Unwanted-Program , Dialer
30.00%

Rising Antivirus
PE:Trojan.Agent!6.250, PE:AdWare.Win32.Eorezo.a!1075356178
26.00%

ESET NOD32
Detection.Undefined
24.00%

Avira AntiVirus
W32/Sality.AT, ADWARE/InstallCore.Gen
14.00%

Zillya! Antivirus
Trojan.Virlock.Win32.29883
12.00%

The domain www.pchealthboost.com has been seen to resolve to the following 9 IP addresses.

June 18, 2015

June 18, 2015

May 2, 2015

May 2, 2015

December 29, 2014

192.230.67.104.ip.incapdns.net
August 17, 2014

199.83.132.104.ip.incapdns.net
April 20, 2014

March 20, 2014

199.83.128.104.ip.incapdns.net
January 14, 2014

File downloads found at URLs served by www.pchealthboost.com.

3 / 68      (PUP)

3 / 68      (PUP)

14 / 68    (PUP)

3 / 68      (PUP)

12 / 68    (PUP)
http://www.pchealthboost.com/download.php  (pchealthboost-setup.exe)

12 / 68    (PUP)

13 / 68    (PUP)

3 / 68      (PUP)

3 / 68      (PUP)

3 / 68      (PUP)

3 / 68      (PUP)

3 / 68      (PUP)

3 / 68      (PUP)

3 / 68      (PUP)

5 / 68      (false positives)

1 / 68      (PUP)
http://www.pchealthboost.com/.../PCHealthBoost-Setup.exe  (a0fd5b2145789f6aedbdaadb5e1498d0)

3 / 68      (PUP)

8 / 68      (PUP)

3 / 68      (PUP)

3 / 68      (PUP)

URL:
http://www.pchealthboost.com/

Title:
“PC HealthBoost® — Clean Up Your PC”

SSL certificate subject:
CN=sni104473.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx (PHP/5.5.31)

Facebook:
Likes:  41
Shares:  53
Comments:  10

Statistics are for the previous month.

Remove Malware from www.pchealthboost.com - Powered by Reason Core Security