home

ad.yieldads.com

YIELDADS MEDIA SDN. BHD.

Domain Information

The domain ad.yieldads.com registered by YIELDADS MEDIA SDN. BHD. was initially registered in February of 2010 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
ENOM, INC.

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Tuesday, February 2, 2010

Expires date:
Thursday, February 2, 2017

Updated date:
Sunday, January 3, 2016

Root domain:
yieldads.com

Whois:
3 yieldads.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.TUGUUSL.X, PUP.Awimba.W, PUP.Awimba.R, PUP.Air Software.AirSoftware.Bundler (M), PUP.Jottix.JottixinternationalmediaGM2007.Installer (M), PUP.Air Software.AirSoftw.Bundler (M)
100.00%

Malwarebytes
PUP.FakeFlash.Domaiq, Adware.DomaIQ, PUP.Optional.Bundle
75.00%

Sophos
Generic PUA CF, DomainIQ pay-per install, AirInstaller
75.00%

Comodo Security
Application.Win32.DomaIQ.~qk, ApplicUnwnt, Application.Win32.Downloader.Agent.WA, UnclassifiedMalware, Application.Win32.AirAdInstaller.A
75.00%

Dr.Web
Adware.W3i.29, Adware.Downware.1167
75.00%

VIPRE Antivirus
DomaIQ, AirInstaller
75.00%

Avira AntiVirus
APPL/DomaIQ.Gen, ADWARE/Adware.Gen7
75.00%

IKARUS anti.virus
AdWare.DomaIQ, APPL, Trojan.SuspectCRC, Trojan.Win32.Ceatrg, Win32.Malware
75.00%

K7 AntiVirus
Trojan , Unwanted-Program
62.50%

avast!
NSIS:DomaIQ-C [PUP], Win32:PUP-gen [PUP], Win32:DomaIQ-AI [PUP]
62.50%

G Data
Adware.DomaIQ, Adware.Generic.581938, Application.Bundler.DomaIQ, Win32.Application.DomaIQ, Win32.Adware.Airadinstaller
62.50%

ESET NOD32
Win32/DomaIQ
62.50%

AVG
MalSign.Skodna, Adware Generic_r
62.50%

Norman
Suspicious_Gen4.ERZRG, Obfuscated.gen!r, Gen:Variant.Application.Bundler.AirInstaller.4
50.00%

Bitdefender
Adware.DomaIQ.K, Adware.Generic.581938, Application.Bundler.DomaIQ.F, Gen:Variant.Application.Bundler.AirInstaller.4
50.00%

The domain ad.yieldads.com has been seen to resolve to the following 5 IP addresses.

92.242.140.21
unallocated.barefruit.co.uk
May 5, 2015

37.59.15.44
ns3321573.ovh.net
August 12, 2014

5.39.68.105
ns264381.ovh.net
August 12, 2014

188.165.201.133
ns310435.ovh.net
August 12, 2014

37.59.15.211
ns3325811.ovh.net
August 12, 2014

File downloads found at URLs served by ad.yieldads.com.

1 / 68      (Adware)
http://ad.yieldads.com/clk?3,eJydjV9rgzAUxT9N30TuTTp1yB6sUVjXSMtCWX2zRhP.QduFZe7TL8Wxve.H4XA43MtBGodteEZZ40OLAbZRFSOVEqoAkQQexHGMGIawBrr2bnn6lh5e6F6lehDZJrmzra-vNllQqbPnJe-ju2es.sBCLdXVAlkSA0my5P-w5vzJf7Lbc.uKRcnjIZiAwebvrNS8H3XZq3knxr74UoaLfOQddlwMsBPHqRT1fBJyOJFi4Or388nztDGXFU1WJHey1vrv5tZUE7GVqbU.Na6lAHPXjNLXZhq.AYKiYEo=,  (setup.exe)

12 / 68    (Adware)
http://ad.yieldads.com/clk?3,eJydTclugzAU.JrcCPJCEhDqwRGQRsUkVEbUvRFjloSlTa06zdfHEV3uHT29Gc2b0YPYBwfhFaLCQixkBValD7GEEgvsFsACvu8jhJce8lbO0oKul4Rh.JISUmmWrskd-2vEUjKhJidC-KT37n1HQf.EeD1Z7xqgSQVZjn5K.0HgVc.iW28J0eZ14JL8yN3Ho7P-i22vuw1d7ALuxHnoJBuuKIs62sKG9-lXzCimeQaTa6ZfGb1w.dt8sKxGqbcZJjMUmdFa26I4q3EcBqn0eD7ZYuzNoS56-WH4IAcIDKtGzouulcO8lJ-tkMZqh1Je7Eb13Q0aiGx0,  (flashplayer_v.74898783c.exe)

22 / 68    (Adware)
http://ad.yieldads.com/clk?3,eJydzclugzAUBdCv8Y4ijwxCXRgoERRC00Eoq4gQStwyNTgl4etr1CbZ98qL62PrPUQcwiizMWMYsrzYWsxBpCTEsiElhQYdx6GYIoRMgmwNT4.WQ7v2niq.j7zR5XOW-vjCryk4D2915F5gxXerP.kaIf5tbmUjyv8fF8v9ZWo47-GVb.GkSqNkou71mx-JdPE2LT9CGmeB6muZvAZ1IpBIFiGOs-dm2YSnZHI.02x1Tm8L7jVtL2UPCAc4UCff6V1bi7bMd0N5-NaLrlE6SEDU00ae-xIQX7wf8qYE2FA0iGkmAuEJM6hsKAspulYZhQaxDKysP243x0OtDGAKTPdyN.0fwdd1Mg==,  (flashplayer_v.82535170a.exe)

20 / 68    (Adware)
http://ad.yieldads.com/clk?3,eJydjdFygjAQRb8mb9RJNhHCMH0IgpYWaG2ZdvTFQYgaC0glFuvXN07VD-idfbh79u4uoV5ZEk4cMgQpmV24K49QyXmZA9jSwp7nAQNGh8zF3ILTEw-b2ehlHbSPo94XZ8Xb.k1ctBahENGf90NhAuOgiO-ml.FXj-Fia5cw8X.5oDfXq-Zfb14HXCzVQ64C5t9ik9dtAhFOJwmLPyL2nCU6ycZVoohK4P0zzgo2z1KVZmE.n0zpbHrbvLesjdYtogLB2FReDnZNpRqZl53cfw-KXW1opxE1o4X-aSWigVrt81oisA3q1OmMKMZHGGLDOllotWsMY9im3AbD2sNycdhXhiFgyPGvvRP8AtyldVk=,  (flashplayer_v.115743234c.exe)

20 / 68    (Adware)
http://ad.yieldads.com/clk?3,eJydjUlvgzAQhX8Nt6gyXsAR6sGI0KYNUtJSpckFGQNmDU5CwvLrS5Y2934aPc88zfjpyEqmcQQ4FoASanIMLB3FnMQ4JAmYAMuykI4opjox0IRdmC2-V8x-HT5r-zovVtEXuyPZjLH5rV.Sizru-t3fyJvlHMvwvrm0XwT7P840-fi9H.PaMdqhTJjLQvnYfqytiJd77Tb34GL9VnjOvPF8t.QyPd0Mslv4Am.9qPD8TecNUb5d.V0-TyZp0ygNMQ26Y52UPPAo7uvTocyS-EnUoynKTBTjm8v0WMJC7IdY9dWp7agyWpztuUrLHS66XBb9rmrzRLWIt6e-J72q6jQVQ5loyI3GGOdQdQE3dEINEwZqFGRAGJxBcKiLkqd1xTVIIBBZ0wdHDCiCJg2EPsUQQAqD0DSQTqAGjUjB8Tt-ISa1kqFxFjK8ziFujvyO5A8UvWiUtGIY7n6u0h.JGqib,  (flashplayer_v.115743234c.exe)

1 / 68      (PUP)
http://ad.yieldads.com/clk?3,eJydjUFvgkAQhX8NN9IsswssIT0MXUhoXQ3JaiM3WUkFAVslQv31XdTae18mme.NvMk4NHSBaQ2gA-Z6EBQ8dGhZlKVbcB3YJAyNpy54xOeuDZc3HnfxMcteFqPCCCcJ3S3xrgxTfIhPPorbtS.vk6-BwI0EFa3G.0vw-fj7Kk1xQPwQHFVRN-eaRX8xHPI6qhZCk9m7HHIhe6mSRlZONa-XbKY0y9V2L9WqlfC6X2ePy2fb3vX9p0XRgsTUoWuqrtxsT-Xx.KQPrRlVrVknF4sKYoF37eNEJ0MMfBJ4jnHfxgE1MBjgZArsDHlX6g3RH3Wvavo=,  (xvidly_setup.exe)

35 / 68    (Adware)
http://ad.yieldads.com/clk?3,eJydkMtugzAQRb.GOxQZm6dQFyaGNE0gjYRapZsIsEMMBCiQkPL1MaKPfa9GoztnRrrSqNhBRmIY3DTME0ss2zIdFXNd0zlUWapAx3GQqmOkQ9WCCho3lpdtxj1ZMi46l0x6tttoT2ZlU1vP.tWa-pJkxf2QzehzgGh2VNgoIP-Xa1f39NvLvEFGU4uMN5u9Uc39PVv5IozK4mP1ct6-r4dd5PVB5JeBgHqYZ2gbeUOYE3jIyyKgodj9BTwpyrnvG4AJQL6smC3qqhQVj1nH29sirS-Sdj3AcnXsvxoOMBWnNr5wgAyJOjFOCEN4l9-TrONpL-pKMg1pUMUTa67J8dqWkgGkAdP9mU36ACo0duU=,  (setup.exe)

29 / 68    (Adware)
http://ad.yieldads.com/clk?3,eJydzV1PgzAUBuBfwx0hLS1sDfHidAWzCMYpkcGNYeXDMpBFGh379XYZ0XvfnIs3T87JwSQgB9asfcZII.3awzLApEbVqmmqA7NREASE4BWlnodcu2SvDMJ4v4NNB13I4RpezC.fsEQkAOPSW-AtbHj2kObtTUqK72-N7-cshP9HsOZZLn0LYP63Yg1fT2dHpJT.rRUqEVH.2B1pnIU4v4Q6SaM-Ucgrhu0cp5IWaXVM0nzO3RwXu9.LO9t-1.pkEbDcyExZObOq-6qsJkeOg5FJW8Twm55PtUWEaj7LobZc39CkLlfCPjr7CBmbaqnV-GGMupRRjH4Aj4dsSw==,  (flashplayer_v.71759558c.exe)

21 / 68    (Adware)
http://ad.yieldads.com/clk?3,eJydjVtrg0AQhX9N3rTsJau7SB.GqNDiBcmmoG9Gl-5abUNr2Ka.vhtaYp.7McMc5hw4mEaI46FnGA1KUSF4EGE6qCA89oJSD0VRRJkIWbBlgnnHHegsl8OjTfbKvMVwJemCPfzlYb01xOl0SKv654Oe2vLXbM7TFv7P7nL5LNYeC.CccDjzNmQjim-x5ECqpCbF16BzOc0NqZdCZlNhsGmlnnOZ2nIE1IwvpJKlLteCe8.Ty3LaUNiQzI2Z1GzuTspJjDAl.Crc2m7ptW-t8u27-lhcqns1nU-E874BsLJjQQ==,  (player_v.58961052c.exe)

20 / 68    (Adware)
http://ad.yieldads.com/clk?3,eJydzdFugjAUBuCn4Y6YlhaEkF1UUbIJOhaUwQ3BUqBOhECNg6dfCSbe789J8-frSQ5ENjVNTLPijFFGqX7WbYiYxQzETJqrwLZtDUOsIx3BpZpZJ4tsvO-AOAs99FdkirsT4YPMKUlPSDP3T3N612t3F8blTOCU7OfmLKsoJv-PYxVf9NnfCZH3S8ck93t-uV3w6rXmD74bjIl7HLzogyduIPxwe.U5rPzL.upFp.rgBkMcbcA-Oj4OrwNvqloJ0SqIKNpWTpYvBs6ueZb3C9rUUnqhIMmpGFqmIIcXXVYzRTMk9XycCBrg1wBAWs-o4M1NGtawheFk4w-nbVeLDumG.EA4fe6n4A93GXXR,  (flashplayer_v.115743234c.exe)

The following 233 files have been seen to comunicate with ad.yieldads.com in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 188.165.201.133:80
jingling.exe

TCP » 37.59.15.211:80
jingling.exe

TCP » 37.59.15.211:80
barre.exe (MaBarreV2)

TCP » 37.59.15.44:80
jingling.exe

TCP » 5.39.68.105:80
vxhost.exe (windows player)

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

TCP » 92.242.140.21:80
ntp.crx

 
Latest 20 of 235 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.