home

ajirghopy.kakaryib.alllsubmitter.ru

Domain Information

Server location:
Noord-Holland, Netherlands (NL)

ASN:
AS59711 FORTUNIX-AS Fortunix Networks L.P.,GB

Root domain:
alllsubmitter.ru

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/InstallMonstr.FF potentially unwanted application
100.00%

Dr.Web
Trojan.InstallMonster.1188
100.00%

G Data
Win32.Application.InstallMon
100.00%

Reason Heuristics
PUP.Amonitize
100.00%

The domain ajirghopy.kakaryib.alllsubmitter.ru has been seen to resolve to the following IP address.

5.149.255.172
March 2, 2015

File downloads found at URLs served by ajirghopy.kakaryib.alllsubmitter.ru.

4 / 68      (Adware)
http://ajirghopy.kakaryib.alllsubmitter.ru/dHRkeWtuaWVqaW56dWJvbHN5bWF4ZGRycGpza3p3c251bnsic2lkIjoiMjAzMCIsInVybCI6Imh0dHA6XC9cL3MyLmZpbGUtc3BhY2Uub3JnXC9kb3duXC9POW5SS3NYd0pEXC8xNDIzODMyMzAzXC9hZWJxRlZ4Uzk4a3IxX2RxMHRKeHp3XC8yMzI3XC8wXC8yMzI3XC9zcmhoamFhZWQzODM5N2ZyLnJhciIsIm5hbWUiOiJzcmhoamFhZWQzODM5N2ZyLnJhciIsInR5cGUiOiJyYXIiLCJzaXplIjoiMzcyMzczMiIsInZlciI6IjEiLCJybmQwIjoiM2ZmMzcxZTAxMTI2MzFkZGM5ZGFkYjFmNmMyMGEwM2QifQ,,  (srhhjaaed38397fr.exe)

wahand.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.