www.pchelp-app.com
Privacy Protection Service INC d/b/a PrivacyProtect.org (Proxy Registrant)
Domain Information
The domain www.pchelp-app.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in October of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrant:
Privacy Protection Service INC d/b/a PrivacyProtect.org
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM
Server location:
Dublin City, Ireland (IE)
Create date:
Sunday, October 6, 2013
Expires date:
Tuesday, October 6, 2015
Updated date:
Monday, September 29, 2014
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.PersonalCleaner.Q, PUP.installCore.Personal.Installer (M)
100.00%
Dr.Web
Trojan.Packed.24524
80.00%
ESET NOD32
Win32/InstallCore.PK potentially unwanted application, Win32/InstallCore.OZ potentially unwanted application, Win32/InstallCore.QH potentially unwanted application
80.00%
VIPRE Antivirus
Threat.4788237
80.00%
McAfee
CryptInno, Trojan.Artemis!53A9540ECDBF
80.00%
Sophos
Install Core Click run software
80.00%
herdProtect (fuzzy)
a variant of b454143cbfe27ddc3d83c8173f2393034e48d876, a variant of c09c3d361ecf4c143144a0ed1327d20b24c9677f
60.00%
K7 AntiVirus
Unwanted-Program
60.00%
G Data
Win32.Application.InstallCore.AE
60.00%
Malwarebytes
PUP.Optional.InstallCore
40.00%
SUPERAntiSpyware
PUP.InstallCore/Variant
40.00%
F-Prot
W32/InstallCore.AC.gen
20.00%
The domain www.pchelp-app.com has been seen to resolve to the following 5 IP addresses.
ec2-52-4-0-73.compute-1.amazonaws.com
May 17, 2016
ec2-54-164-190-20.compute-1.amazonaws.com
October 9, 2014
ec2-107-23-191-83.compute-1.amazonaws.com
August 17, 2014
ec2-54-229-93-133.eu-west-1.compute.amazonaws.com
July 3, 2014
ec2-176-34-137-180.eu-west-1.compute.amazonaws.com
July 3, 2014
File downloads found at URLs served by www.pchelp-app.com.
URL:
http://www.pchelp-app.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
Statistics are for the previous month.
