home

ams1.ib.adnxs.com

AppNexus Inc

Domain Information

The domain ams1.ib.adnxs.com registered by AppNexus Inc was initially registered in May of 2008 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Amsterdam, Noord-Holland within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
MARKMONITOR INC.

Server location:
Noord-Holland, Netherlands (NL)

Create date:
Tuesday, May 27, 2008

Expires date:
Friday, May 27, 2016

Updated date:
Saturday, April 26, 2014

ASN:
AS29990 ASN-APPNEXUS - AppNexus, Inc

Root domain:
adnxs.com

Whois:
2 adnxs.com records

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Wilmaonline.DD, PUP.Optional.Installer.Y, Threat.Win.Reputation.IMP, PUP.Installer.KOMPANIYAR.CC, PUP.Optional.Installer.X, PUP.Amonetize.Bundler (M), PUP.Brightcircle.Wilmaonl.Bundler (M), PUP.Adknowledge.BootComp.Installer (M), Adware.Amonetize.Installer.Installer.Meta (M), PUP.Outbrowse.Bundler (M), PUP.Adknowledge.TigerDow.Installer (M), PUP.Adknowledge.Liquidbu.Installer (M), Win32.Generic, PUP.Amonetize.ITLGROUP.Bundler (M), PUP.GadgetBox.saminves.Installer (M), PUP.Elex.Yac.Installer.Meta (M), Adware.Amonetize (M), PUP.Solimba (M), PUP.Brightcircle (M), PUP.GadgetBox (M), PUP.Outbrowse (M)
100.00%

avast!
Win32:Amonetize-N [PUP], Win32:Amonetize-AX [PUP], Win32:Amonetize-CI [PUP], Win32:Dropper-gen [Drp], Win32:Adware-gen [Adw], Win32:Amonetize-AM [PUP]
15.56%

Malwarebytes
PUP.Optional.Amonetize.A, PUP.Optional.Downloader
11.11%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize, not-a-virus:HEUR:AdWare.Win32.Amonetize, not-a-virus:Downloader.Win32.Agent
11.11%

ESET NOD32
Win32/Amonetize.AI (variant), Win32/Amonetize.AO (variant), Win32/Amonetize.BG (variant), Win32/Amonetize.BI (variant), Win32/Amonetize.BN (variant)
11.11%

Dr.Web
Adware.Downware.3081, Adware.Downware.5717, Adware.Downware.5822, Adware.Downware.5913, Adware.Downware.8379
11.11%

McAfee
Artemis!5663CD542E60, Artemis!17FD46A07B73, Artemis!C2020A9C23EC, PUP-Amonetize
8.89%

Sophos
Amonetize, Generic PUA NB, Generic PUA CM
8.89%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.Amonetize
8.89%

AVG
MalSign.Wilmo, Generic, Generic_r, Adware Generic_r.JX
8.89%

Baidu Antivirus
Adware.Win32.Amonetize, Adware.Win32.Elex
8.89%

G Data
Win32.Application.Amonetize, Win32.Trojan.Agent.4P134N, Application.Bundler.Amonetize, Win32.Trojan.Agent.SIKED8
8.89%

Avira AntiVirus
ADWARE/Adware.Gen2, Adware/Amonetize.tzv
6.67%

Fortinet FortiGate
Riskware/Amonetize, Riskware/Agent, Adware/Amonetize
6.67%

NANO AntiVirus
Riskware.Win32.Amonetize.dcckkw, Riskware.Win32.Amonetize.dchxoa, Riskware.Win32.Amonetize.delxsa
6.67%

The domain ams1.ib.adnxs.com has been seen to resolve to the following 344 IP addresses.

185.33.222.20
September 14, 2016

185.33.220.210
185.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 14, 2016

185.33.220.87
158.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 14, 2016

185.33.223.10
September 14, 2016

185.33.222.187
September 14, 2016

185.33.222.93
September 14, 2016

185.33.220.123
159.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 13, 2016

185.33.220.38
203.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 13, 2016

185.33.222.249
September 13, 2016

185.33.222.77
September 13, 2016

185.33.222.8
September 13, 2016

185.33.221.58
205.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 13, 2016

185.33.220.199
201.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 13, 2016

185.33.220.197
186.bm-nginx-loadbalancer.mgmt.ams1.adnexus.net
September 13, 2016

37.252.163.112
float.2454.bm-impbus.prod.ams1.adnexus.net
September 1, 2016

37.252.163.229
float.2669.bm-impbus.prod.ams1.adnexus.net
June 22, 2016

37.252.163.162
float.2685.bm-impbus.prod.ams1.adnexus.net
June 17, 2016

37.252.163.213
float.2651.bm-impbus.prod.ams1.adnexus.net
June 17, 2016

37.252.163.26
float.1076.bm-impbus.prod.ams1.adnexus.net
May 29, 2016

37.252.163.230
float.2670.bm-impbus.prod.ams1.adnexus.net
May 22, 2016

37.252.163.101
float.2444.bm-impbus.prod.ams1.adnexus.net
May 22, 2016

37.252.163.196
float.2697.bm-impbus.prod.ams1.adnexus.net
May 21, 2016

37.252.163.233
float.2675.bm-impbus.prod.ams1.adnexus.net
May 21, 2016

37.252.162.100
float.2304.bm-impbus.prod.ams1.adnexus.net
May 20, 2016

37.252.163.78
float.2417.bm-impbus.prod.ams1.adnexus.net
May 20, 2016

37.252.163.100
float.2441.bm-impbus.prod.ams1.adnexus.net
May 19, 2016

37.252.163.110
float.2452.bm-impbus.prod.ams1.adnexus.net
May 17, 2016

37.252.163.239
float.2678.bm-impbus.prod.ams1.adnexus.net
May 16, 2016

37.252.162.62
float.2302.bm-impbus.prod.ams1.adnexus.net
May 16, 2016

37.252.163.109
float.2451.bm-impbus.prod.ams1.adnexus.net
May 16, 2016

 
Showing 30 of 344 IP Addresses

File downloads found at URLs served by ams1.ib.adnxs.com.

1 / 68      (PUP)
http://ams1.ib.adnxs.com/click?ehSuR-F6hD9YqDXNO06BP8HKoUW28-k_WKg1zTtOgT97FK5H4XqEP2ZiLzZFhpR3mdgSu1_R8RrO3KlTAAAAAJBiKgDIAQAAdgIAAAIAAABG5MYAdLIDAAAAAQBVU0QAVVNEACwB-gBPIAAARGoAAgUAAQIAAJIAbyejwQAAAAA./cnd=!tAbGPgj7h8sBEMbImwYY9OQOIAA./referrer=http://giydirme.oyunuoyna.com/clickenc=http://clickeu.tractionize.com/st?cipid=168000&ttype=1&crid=1658948&dast=Ym89MSZzbGlkPTAmc3ViaWQ9MTAwOSZzbz0xJmNpY21wPTcyMzk4JnB1YmlkPTQzMDAmY2lwaWQ9MTY4MDAwJmNpc2lkPTk2NjVEMjREQTgzMjY2ODcxMjI0OTY1MzU3JmNpcmlkPTk2NjVEMjREQTgzMjY2ODg1Mzg5MTA4MjgmY2l1aWQ9MjYwMzUzODQ1NzkxOTUwOTM0MSZjcmlkPTE2NTg5NDgmZXhjaWQ9MjImbW10PS0xJmNudHJ5PTIxOA==&cmcv=${CMCV}&tgtf=http://.../direct-download.html?version=1.1.7.40&ci=6147&capp=MediaPlayer&ti1=ams1CJmxy9j7q_T4GhACGObEvbHTyKHKdyIOODEuMjE1LjEyNS4yMzYoATDOuaedBQ..&ti2=PMZ&ti3=2777744  (mediaplayer__6147_i944710391_il60.exe)

1 / 68      (PUP)
http://ams1.ib.adnxs.com/click?0KjQsQvngz8reixIUNGAPwrXo3A9Cu8_K3osSFDRgD_QqNCxC-eDP2Q_CeP6jGkumdgSu1_R8RogCqtTAAAAAKi6LAA_AQAAdgIAAAIAAACeKv4A5qEGAAAAAQBVU0QAVVNEACwB-gAZkwAAUrwAAQUAAQIAAJAA8SbodgAAAAA./cnd=!OQcCRQi3_P8BEJ7V-AcY5sMaIAA./referrer=k7x.com/clickenc=http://.../direct-download.html?version=1.1.7.40&epu=no&ci=6145&capp=FlashPlayer&ti1=ams1CJmxy9j7q_T4GhACGOT-pJiun-O0LiIOODEuMjE1LjExMy4yMjgoATCglKydBQ..&ti2=PMZ&ti3=2931368  (flashplayersetup__6145_i949726343_il81.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?3tRKL9qjoj-lJUuUZjKeP7ByaJHtfOs_pSVLlGYynj_e1Eov2qOiP7C6o9keRucydNrD5-k3OTFKgf9TAAAAAKCyMwCtCQAA_AcAAAIAAAAVOAIBkm0HAAAAAQBVU0QAVVNEAKAAWAKHkAAAc-AAAgUAAQIAAJQAcClRdAAAAAA./cnd=!CAbSOAi_t6ACEJXwiAgYktsdIAA./referrer=http://ib.adnxs.com/tt?size=160x600&cb=1774103&id=3388064/clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3388064&clickid=UAT_ams1CPS0j76e_c2cMRACGLD1js3tw9HzMiIMODkuMjQyLjc2LjE2KAEwyoL-nwU.  (installation.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?wYwpWONsoj_BjClY42yiP7gehetRuM4_wYwpWONsoj_BjClY42yiP818J_n5_tA3nkHRMfwEtwgFGKJRAAAAAImQEwB2AgAAdgIAAAIAAAAWR0wAfl4DAAAAAQBVU0QAVVNEACwB-gAlTQAA_mQAAgQCAQIAAIYAdyfbGAAAAAA./cnd=!vwVaMgiz3D0Qlo6xAhj-vA0gBA../referrer=http://95.211.219.178/get_Ad.php/clickenc=http://aff.dimds.com/tool/.../download.php?l=01&w=1000&wti=555&src=1080&typ=ams1CJ6DxY7Dn8HbCBACGM35ncmf37_oNyINNDEuMjI0LjIyNy4xNCgB  (setup.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?N4FMP08Wvz83gUw_Txa_P9ejcD0K19s_N4FMP08Wvz83gUw_Txa_P_rVD6bwDmp0HsWdNlyblXj7QmpTAAAAACAqJwB2AgAAdgIAAAIAAAAczuQAvh0GAAAAAQBVU0QAVVNEACwB-gCRqwAAMNgAAgQAAQIAAI4AvCKFugAAAAA./cnd=!WwZWPgj8vekBEJyckwcYvrsYIAQ./referrer=http://ads.qadserve.com/t?id=75198dcb-ddda-487b-99d2-ebe709961c41&size=300x250&iframe=true/clickenc=http://2.track342ut.com/d/.../ams1CJ6K97TD6-bKeBACGPqrv7CK3oO1dCIOMjE3LjIzLjIwMC4yNDAoATD7hambBQ..  (setup.exe)

1 / 68      (Malware)
http://ams1.ib.adnxs.com/click?n3vRNj6DnT81wKgJ2n6YP0w3iUFg5eA_NcCoCdp-mD-fe9E2PoOdP1n-240lgpsDD-bDjzvZ3EB7zo1TAAAAAMboKQCTBwAAdgIAAAIAAACs3c8A4n0GAAAAAQBVU0QAVVNEACwB-gBdVgAAcdgAAgUAAQIAAJAAuilAKwAAAAA./cnd=!mgbROwiJp_YBEKy7vwYY4vsZIAA./referrer=http://tver.dorus.ru/realestate/apartments-rent/page2.html/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=ams1CI_Mj_64p7buQBACGNn87-7YxODNAyIOODIuMTQwLjI0MC4xMjQoATD7nLecBQ..&ti2=2746566&ti3=${APN}  (flashplayersetup__5462_i784836942_il352.exe)

17 / 68    (Adware)
http://ams1.ib.adnxs.com/click?Zh1J7Jp5lz9dAfXn-HuTP4ts5_up8cI_XQH15_h7kz9nHUnsmnmXP0DK-fOa1WYED-bDjzvZ3ED5X8lTAAAAAG4cLwCTBwAAdgIAAAIAAACs3c8A4n0GAAAAAQBVU0QAVVNEACwB-gClLQAAUskAAgUAAQIAAJIAgyy1bwAAAAA./cnd=!dQY6OgiX1pMCEKy7vwYY4vsZIAA./referrer=http://cdn.sharedaddomain.com/slider_anchored5_300x250_203.htm?cat=47,101,107&clientId=aefbf41b-8274-4d71-bd77-66b8ae098824&l=http://yandex.ru/yandsearch?lr=14&clid=1989605&win=111&text=из рук в руки наем жилья город тверь&r=http://www.yandex.ru//clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5462&capp=FlashPlayer&ti1=ams1CI_Mj_64p7buQBACGMCU55-vs7WzBCIOODIuMTQwLjIzMi4yMjUoATD5v6WeBQ..&ti2=3087470&ti3=${APN}  (flashplayersetup__5561_i1058876728_il34.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?9Pt5gjytfD9YMixAWDt4PwrXo3A9Cu8_WDIsQFg7eD_1-3mCPK18P_2uimK8CZBfHcxIlK0AxCfB4bZTAAAAAJ2WLwA_AQAAdgIAAAIAAACeKv4A5qEGAAAAAQBVU0QAVVNEACwB-gD-XgAAH7wAAgUAAQIAAJIAnCawFAAAAAA./cnd=!OQcCRQi3_P8BEJ7V-AcY5sMaIAA./referrer=www.aol.meb.gov.tr/clickenc=http://.../direct-download.html?version=1.1.7.40&epu=no&ci=6145&capp=FlashPlayer&ti1=ams1CJ2Yo6LZlYDiJxACGP3dqpTGt4LIXyILNzguMTkxLjI5LjAoATDBw9udBQ..&ti2=PMZ&ti3=3118749  (flashplayersetup__6145_i996247958_il71.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?uR6F61G4nj-FfNCzWfWZP0w3iUFg5eQ_hXzQs1n1mT-4HoXrUbiePx7B-_Ij7AIpYqJpJf-cWlcDIvVTAAAAAET_MgA_AQAA_AcAAAIAAABtWgABMPkGAAAAAQBVU0QAVVNEACwB-gA_VAAAJM4AAgUAAQIAAJIAhiiEcAAAAAA./cnd=!fwZ3PQjG45wCEO20gQgYsPIbIAA./referrer=http://www.cinetrafic.fr/film-2013/10/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=280&capp=FlashPlayer&ti1=ams1COLEpqvyn6etVxACGJ6C75e_hLuBKSIOODUuMTcxLjEzMS4xOTEoATCDxNSfBQ..&ti2=3342148  (flashplayersetup__280_i1200190823_il38.exe)

1 / 68      (PUP)
http://ams1.ib.adnxs.com/click?4BAM51KIsT-OgB_m5iyrPyGwcmiR7bw_joAf5uYsqz_gEAznUoixP-v0vHqWQtRXd-uHuNBTRCPFx5hTAAAAAB8GJgCqBwAAdgIAAAIAAAC-DcYAxvUFAAAAAQBVU0QAVVNEACwB-gATfwAAeNkAAgUAAQIAAI4AmSlTZwAAAAA./cnd=!CwYjNwickcwBEL6bmAYYxusXIAE./referrer=http://a.adorika.net/c/banner_s?tenant=AD&selection=8005&size=300x250&di=1&skin=iframe/clickenc=http://a.ad-sys.com/c/click?tenant=ad&context=LqOPtmbfswtzwwnMcKa0oaFebGfa_FPaDjas_V__JEbamdd2mvkAupm9auYaGgNgeIq9rnsIOFaHaaObK8q9ca0uHqKO90jtOP00IEanPbnOmb11RU7ZPv6mW5VsbhaTVSMKuLeBkKiCYxjtZPVWImu2qSGnscZeqc63yTsDIAjdKmB03hkl6oPMTrf3S0fNJeVFUDWCWhcpwuupCvZRQoc4FPuyCWcp6KQTbnHIvhJiwInnfCuDy9PcgaJmuyY5wVOWqz50FK8v88rT3rDMiQhdJXqkwjgx6lswlGsfdG-ka1jyp3Eq41rJkk8agIGdMrj6_Kqkm1dXA6Lzon6SjTvDl7DeEk0mt2p3uaw462rkQYtfJq1oNSwfJzOnzKjKmESJJHewn7Rm9ROqdxpt-hF9x8KC4ujuPbzJTaa&fwd=&log_click_as=click~~~http://.../direct-download.html?version=1.1.7.40&epu=no&ci=6145&capp=FlashPlayer&ti1=ams1CPfWn8SL-pSiIxACGOvp89X  (flashplayersetup__6145_i834673704_il54.exe)

1 / 68      (PUP)
http://ams1.ib.adnxs.com/click?WDGSQya5oT_iMrzolHibPxkEVg4tsq0_4jK86JR4mz9YMZJDJrmhP08QfB4uH5pxtEeFZ0FO1AW1o8xTAAAAANx1KQByBwAAdgIAAAIAAADyBegArm4GAAAAAQBVU0QAVVNEACwB-gD9yAAADHkAAgUAAQIAAJAALCVSqQAAAAA./cnd=!MAaQOQiHm_QBEPKLoAcYrt0ZIAA./referrer=http://www.fileshare.ro/cauta.fs?q=ion`surugeanu`/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=ams1CLSPlbyWyJPqBRACGM-g8PPh5YfNcSIMOTIuODcuMzEuMTk3KAEwtceyngU.&lplink=http://www.yac.mx/download/.../down.php?pt=broe  (yet_another_cleaner_broe.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAADMzMzMzM8M_AAAAAAAAAAAAAAAAAAAAABCgksJmI7I_WcUsXPlQnxTwWaNRAAAAANPgEAB2AgAAdgIAAAIAAAAWR0wA5OoCAAAAAQBVU0QAVVNEACwB-gAmgAAAeWMAAQQCAQIAAIYA0hXuXwAAAAA./cnd=!sQWcMQio3D0Qlo6xAhjk1QsgBA../referrer=http://luvcow.com/qs/249/clickenc=http://aff.dimds.com/tool/.../download.php?l=01&w=1000&wti=555&src=1080&typ=ams1CNmKs-GVn9TPFBACGJDAypTs7IjZPyIKNDEuNDMuMTkuMigB  (setup.exe)

3 / 68      (PUP)
http://ams1.ib.adnxs.com/click?C2e3lslwtD9Yuz9B1hGvP-XQItv5fuI_WLs_QdYRrz8KZ7eWyXC0P69aX0DCJU5KnckRkJbgNWv6cFZTAAAAAMfdJQCZBwAAdgIAAAIAAAC43cMAF9cFAAAAAQBVU0QAVVNEANgCWgDXNwAAgcgAAgUCAQIAAI4AcymULQAAAAA./cnd=!TQaVPgjE8eIBELi7jwYYl64XIAA./referrer=http://usnasuperbio.com.ua/page/vitaminy-dlja-koshek-biotinom-ot-vypadenija-shersti-kozhnyh-vospalenij/clickenc=http://.../direct-download.html?version=1.1.5.89&ci=7343&capp=FlashPlayer&ti1=ams1CJ2Tx4DpkviaaxACGK-1_YKkuImnSiIKODMuNjkuMi41NigBMPrh2ZoF&ti2=PMZ&ti3=2481607  (flashplayersetup__7343_i587381635_il7.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?OxkcJa_OkT8r9SwI5X2MPzMzMzMzM8M_K_UsCOV9jD87GRwlr86RP09ntQwxmPVQFK6cEGeRbRM7Ap1RAAAAAIV2DgAdAgAAdgIAAAIAAAASR0wAVaMCAAAAAQBVU0QAVVNEANgCWgA7OAAAOWUAAgUCAQIAAIQAgB7E0QAAAAA./cnd=!tgUnMwjL0k8Qko6xAhjVxgogAQ../referrer=http://www.tvfun.ma/ads-c1/cpx-728-90.html/clickenc=http://aff.dimds.com/tool/.../download.php?l=01&w=1000&wti=555&src=1080&typ=ams1CJTc8oTxrOS2ExACGM_O1eWQhub6UCIMMTk3LjIuMTY5Ljk1KAE.  (setup.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAADMzMzMzM8M_AAAAAAAAAAAAAAAAAAAAAMRkqHGBgIMNQCDy9C1caiw3MmxRAAAAACzdCgB2AgAAdgIAAAIAAAAWR0wApiwCAAAAAQBVU0QAVVNEACwB-gBhNQAATWcAAgQCAQIAAIIA6xLywgAAAAA./cnd=!WwUPLwiP3D0Qlo6xAhim2QggBA../clickenc=http://aff.dimds.com/tool/.../download.php?l=01&w=1000&wti=555&src=1080&typ=ams1CMDAyKffhZe1LBACGMTJoY2XkODBDSIONDYuMTg1LjIzNy4xNjQoAQ..  (setup.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?uI-vvgkTqD_ZeQdUUvujP0oMAiuHFuk_2XkHVFL7oz-5j6--CROoP08cJyqFrRddtqKZ9AiL5zYzFepTAAAAAKLLMgCTBwAA_AcAAAIAAABYLwUBHE4HAAAAAQBVU0QAVVNEANgCWgDROgAAAM4AAgUAAQIAAJQArCOneAAAAAA./cnd=!AQaDOQinyZcCENjelAgYnJwdIAA./referrer=http://www.vtech-jouets.com/view-telechargements/?id=13486/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=280&capp=FlashPlayer&ti1=ams1CLbF5qSP4eLzNhACGM-4nNHSsOuLXSILMi42LjE0NC4yNDAoATCzqqifBQ..&ti2=3328930  (flashplayersetup__280_i1160472678_il35.exe)

13 / 68    (PUP)
http://ams1.ib.adnxs.com/click?zzZtVzYBwT80EtyjROO7P5huEoPAyu0_NBLco0Tjuz_ONm1XNgHBP2xD8HgDe-dYby951lXs9m9Wnl5TAAAAAM2EJwA-CQAAdgIAAAIAAAC_DcYAzCwGAAAAAQBVU0QAVVNEAFABGAFlowAAwsgAAQUAAQIAAI4AXiZFQQAAAAA./cnd=!DQbANwidocgBEL-bmAYYzNkYIAA./referrer=http://www.worlderror.org/http/?code=404&lang=tr_tr&pname=yacnvd&ref=wpm0425;NULL&uid=st9500325as_6vegye3h/clickenc=http://.../direct-download.html?version=1.1.7.40&ci=6147&capp=MediaPlayer&ti1=ams1CO_e5LPdirv7bxACGOyGwce34N7zWCINODguMjI0LjIxLjEzNigBMNa8-poF&ti2=PMZ&ti3=2589901  (flashplayersetup__6145_i611009067_il87.exe)

11 / 68    (Adware)
http://ams1.ib.adnxs.com/click?eH3mrE85xD9GgbpYg72-P3_7OnDOiARARoG6WIO9vj94feasTznEPynKWYDt8FYmDf4En2miJg3qAyZTAAAAAON0IQCqBwAAdgIAAAIAAADjILIAqGQFAAAAAQBVU0QAVVNEACwB-gATOAAAn9gAAgUCAQIAAIwASSfVzAAAAAA./cnd=!rwZ3QAjK8KsBEOPByAUYqMkVIAE./referrer=http://a.ad-sys.com/FRONT_DB_AD/BANNERS/21/01/210127.html/clickenc=http://.../direct-download.html?version=1.1.1.72&ci=5221&capp=FlashPlayer&ti1=ams1CI38k_iZzaiTDRACGKmU54LYnbyrJiIOMTk1LjEzMi40Ny4yNTIoATDqh5iZBQ..&ti2=2192611&ti3=${APN}  (fdm__3472_i447214783_il377407.exe)

14 / 68    (Adware)
http://ams1.ib.adnxs.com/click?aRsz4txAMUBpGzPi3EAxQAAAAAAAADVAaRsz4txAMUBpGzPi3EAxQHoqbLRya0tus1QJ5vEySgLltDZUAAAAACQsIgB2AgAAdgIAAAIAAAARkP8A1YYFAAAAAQBVU0QAVVNEANgCWgABYQAACrUAAgQAAQIAAIwAFx_4lgAAAAA./cnd=!NQYJOwjA440CEJGg_gcY1Y0WIAQ./referrer=http://www.win-install.com/geogebra/thanks/clickenc=http://www.mydownloadhome.com/.../201?pub_id=90&sub_id=ams1CLOppbCe3oylAhACGPrUsKOr7tqlbiIOODIuMjQzLjIxOS4xMjEoATDl6dqhBQ..&tag=2239524  (setup.exe)

2 / 68      (PUP)
http://ams1.ib.adnxs.com/click?Um_W4P4apz_g8NpEci2jP5qZmZmZmak_4PDaRHItoz9Sb9bg_hqnPyw0XXOYhgRBFvjnEvU0_TPlbsFTAAAAAMXoKQCTBwAAdgIAAAIAAADyBegA4n0GAAAAAQBVU0QAVVNEACwB-gBcVgAAmtcAAgUAAQIAAJAAjSvbJAAAAAA./cnd=!ggYMOwiHm_QBEPKLoAcY4vsZIAA./referrer=http://eurotube.do.am/publ/filme_online_de_comedie/2-3-11/clickenc=http://adm.soft365.com/ads/adsavess?sid=yac&ptid=broe&subid=ams1CJbwn5fRns3-MxACGKzo9JqH06GCQSILNS4xMy45Mi4xOTEoATDl3YWeBQ..&lplink=http://www.yac.mx/download/.../down.php?pt=broe  (yet_another_cleaner_dmga.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?xGLUtfY-7D82gkNexZjmPzMzMzMzM8M_NoJDXsWY5j_DYtS19j7sP51enjESYg0UuoUn4ihcknqL1WpRAAAAAHqCEAAdAgAAdgIAAAIAAABTR0wAAtkCAAAAAQBVU0QAVVNEACwB-gBCiAAAomIAAQUCAQIAAIQAHSUkPQAAAAA./cnd=!ZAVcMQil3D0Q046xAhiCsgsgAg../referrer=http://mips.tv/embedplayer/cgfghfdhbgfhgfhfdhyfggfj/1/580/450/clickenc=http://aff.dimds.com/tool/.../download.php?l=01&w=1000&wti=555&src=1080&typ=ams1CLqLnpGOhZfJehACGJ29-YyjwtiGFCIOMjEyLjEwNi43Ni4xOTMoAQ..  (setup.exe)

9 / 68      (Adware)
http://ams1.ib.adnxs.com/click?nPvMSXU3lz-1vFn3l2mRP7gehetRuJ4_tbxZ95dpkT-d-8xJdTeXP8Mwxy_p2zI2gb5kxuuMHDE0er5TAAAAAHMKJQCZBwAArwcAAAIAAADvWuIAF9cFAAAAAQBVU0QAVVNEACwB-gBzDwAANMkAAgUAAQIAAI4A3Ck91wAAAAA./cnd=!eAY_QAjT2-YBEO-1iQcYl64XIAI./referrer=http://www.youtube.com/watch?v=P2LgggI9UoM/clickenc=http://.../direct-download.html?version=1.1.5.89&ci=7343&capp=FlashPlayer&ti1=ams1CIH9krO8naOOMRACGMPhnP6S_baZNiIOOTUuMTM0LjIyMC4yNDgoATC09PmdBQ..&ti2=SBZ&ti3=2427507  (7zip__6626_i1022998592_il271.exe)

25 / 68    (Adware)
http://ams1.ib.adnxs.com/click?BmYBZBB_cT8JGQKWmD5qP1TjpZvEILA_CRkClpg-aj8GZgFkEH9xP2Z_vR7GabdXgb5kxuuMHDGUYgBUAAAAALZEMQDaBgAArwcAAAIAAACcYdUA-0QEAAAAAQBVU0QAVVNEACwB-gAw0wAAZMYAAgUAAQIAAJIA8iE9IAAAAAA./cnd=!SQZFOwic85cCEJzD1QYY-4kRIAE./referrer=http://korosten.zht.slando.ua/clickenc=http://ams1.ib.adnxs.com/click?fBSuR-F6dD-gPCzUmuZtP_yp8dJNYqA_oDws1JrmbT97FK5H4Xp0P3LZFT2Rmqc2gb5kxuuMHDGTYgBUAAAAABFvLwByBwAAtgcAAAIAAACibhMBg48GAAAAAQBVU0QAVVNEACwB-gD8VwAA-L8DAQUAAQIAAJIAEiio2wAAAAA./cnd=!uAXNNQiIspsCEKLdzQgYg58aIAA./referrer=http://korosten.zht.slando.ua/rabota/?gclid=CjwKEAjwyYCgBRCMmbWl5beV_RQSJABESqHArBVx2mLQo2lddMKiOFyITfqnpOfrDG3tClSQjkV2ghoCG5nw_wcB/clickenc=http://.../direct-download.html?version=1.1.5.89&ci=7343&capp=FlashPlayer&ti1=ams1CIH9krO8naOOMRACGOb-9fXhuNrbVyIONDYuMjAxLjE3NS4xODkoATCUxYGgBQ..&ti2=SBZ&ti3=3228854  (flashplayersetup__3890_i1236389199_il7.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?_z9OmDCalT-ZmT7gJkiRPzMzMzMzM8M_mZk-4CZIkT__P06YMJqVPx3Hs_uBvBNsg3zOeo4Rh1gye5xRAAAAAIV2DgAdAgAAdgIAAAIAAABgpFwAVaMCAAAAAQBVU0QAVVNEANgCWgA7OAAAKWoAAgUCAQIAAIQAISMVbwAAAAA./cnd=!bwZlOQjGx04Q4MjyAhjVxgogAg../referrer=http://www.tvfun.ma/ads-c1/cpx-728-90.html/clickenc=http://aff.dimds.com/tool/.../download.php?l=01&w=1000&wti=555&src=1080&typ=ams1CIP5udbnscTDWBACGJ2Oz92fkO-JbCIMODIuMjA1Ljk2Ljg0KAE.  (setup.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?S0Vj7e9srz-h3LbvUX-rPwAAAAAAAPA_ody271F_qz9KRWPt72yvP4STbXWVkwwyRWISjP5GsTFlMK1RAAAAAOjAEADjBAAAdgIAAAIAAAASR0wA9-UCAAAAAQBVU0QAVVNEANgCWgDhlAAAtWoAAgUCAQIAAIQAYyc6ggAAAAA./cnd=!vwVDMgiz3D0Qko6xAhj3ywsgAg../referrer=http://yllix.com/show.php?vs=&ad=446556&f=728x90&a=335539&s=OTYyYTdhZDY5NTc1MDEzZjA4YzA4M2NjNzE0YmU1ZmI=&u=951597&si=727552444&di=711798&ci=16&cc=TN/clickenc=http://aff.dimds.com/tool/.../download.php?l=01&w=1000&wti=555&src=1080&typ=ams1CMXEyeDo39HYMRACGISntqvX8qSGMiIPMTk2LjIwMy4yMzcuMTQ5KAE.  (setup.exe)

0 / 68
http://ams1.ib.adnxs.com/click?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA_AAAAAAAAAAAAAAAAAAAAAAMBtdgvBb4bGCycuCKmCggoKmRRAAAAAAYoEgB2AgAAdgIAAAIAAAAWR0wAIyoDAAAAAQBVU0QAVVNEACwB-gB_8wAAiGgAAgQCAQIAAIQAYw9VZgAAAAA./cnd=!wAW3NAj52z0Qlo6xAhij1AwgBA../referrer=http://fancystreams.com/apnad300x2505.php/clickenc=http://aff.dimds.com/tool/.../download.php?l=01&w=1000&wti=555&src=1080&typ=ams1CJjY8MSrxKmFCBACGIOC1MX9pYHfGyINODUuMTU0Ljc0LjIxNSgB  (setup.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?ZmZmZmZm5j9kO99PjZfiP1yPwvUoXO8_ZDvfT42X4j9mZmZmZmbmPwsOKMhn-fk78dhNSRGuy1Zv9BxUAAAAAG4HNQCTBwAAdgIAAAIAAACrTCcBwZcHAAAAAQBVU0QAVVNEACwB-gBKMwAArb8AAgUAAQIAAJQA_SZjngAAAAA./cnd=!5gV8NwiF2rwCEKuZnQkYwa8eIAA./referrer=http://www.v9.com/?type=hp/clickenc=http://download131bucket.com/.../flashplayerpro?source=marimedia_lightspark-GB-ddl-cpa&creative_id=player &adprovider=marimedia&ce_cid=ams1CPGxt8qUwuvlVhACGIucoMH8rP78OyIMOTAuMjAwLjUuMTU3KAEw7-jzoAU.  (flashplayerpro_setup.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?zDrnWrEI3j8mTR8U1a3ZPwrXo3A9Cu8_Jk0fFNWt2T_LOudasQjeP0HVFZtPlYAOLQjN-4ALE0--0ldUAAAAALPGMgBfAAAAdgIAAAIAAADH9ikBrBAHAAAAAQBVU0QAVVNEANgCWgAVJgAAd8AAAgUAAQIAAJgAzyT40wAAAAA./cnd=!twaGQgj796UCEMftpwkYrKEcIAA./referrer=http://propccleaner.com/uninstall/clickenc=http://fabulous-wealth2d3fd5.com/.../serve?c=marimedia&s=marimedia_lightspark-us-ddl-cpa&ce_cid=ams1CK2QtN6P8MKJTxACGMGq19j5qaXADiIONzAuMTcxLjE5Ny4yMDMoATC-pd-iBQ..  (flashplayerpro_setup.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?Mxe4PNaMrD9Src_mgkSoPylcj8L1KNw_Uq3P5oJEqD8zF7g81oysP20DHGWSKsBcnPvyvfmpF1gCsX9RAAAAAGBCEABSBQAAdgIAAAIAAAAXR0wATtICAAAAAQBVU0QAVVNEANQBPAD2eAAAqWMAAgUCAQIAAIQAzSYeoAAAAAA./cnd=!dAUMMQiz3D0Ql46xAhjOpAsgAg../referrer=http://yllix.com/show.php?vs=&ad=127246&f=468x60&a=815331&s=OGQ5MmNmMjIwOWNjMWY5MzZkOThlNTM3ZWQ2OWM0ZGM=&u=373278&si=182681221&di=430925&ci=16&cc=TN/clickenc=http://aff.dimds.com/tool/.../download.php?l=01&w=1000&wti=555&src=1080&typ=ams1CJz3y--bv-qLWBACGO2G8Kim0orgXCINMTk3LjEuMTc5LjEzMygB  (setup.exe)

1 / 68      (Adware)
http://ams1.ib.adnxs.com/click?Us0sIZJxpD8MC5_mCLCfP1K4HoXrUeg_DAuf5giwnz9SzSwhknGkPwVPaLUK4f4lRNCSNVR7RADeh_tTAAAAAGf3MgBXAwAA_AcAAAIAAAD7NwIB2rkGAAAAAQBVU0QASU5SANgCWgBceAAAZbUAAgUAAQIAAJQAjCWSvgAAAAA./cnd=!ygaEPgi_t6ACEPvviAgY2vMaIAA./referrer=http://www.fairytail.tv/watching/fairy-tail-s2-episode-14-189//clickenc=http://ams1.ib.adnxs.com/click?9UX0tp5nlT-8eD9uv3ySP_yp8dJNYqA_UrQEfoiqkz9sKDCrB8WWP_jyQrLrkuhhRNCSNVR7RADdh_tTAAAAAKWxCwDLAQAAEAkAAAIAAADKXBYBEAoBAAAAAQBVU0QAVVNEANgCWgC2XpYDusYDAQUAAQMAAIIA6ikrrAAAAAA./cnd=!9AW3OQiD56sCEMq52QgYkJQEIAA./referrer=http://www.fairytail.tv/watching/fairy-tail-s2-episode-14-189//clickenc=http://get.file2desktop.com/.../Get?p=8723&d=12098&l=11517&n=1&productname=GoogleChrome&d1=103&d2=3340135&clickid=UAT_ams1CMSgy6zD6p4iEAIYhZ6hq6uhuP8lIg44Ni4xNjYuMTkwLjEwMCgBMN6P7p8F  (installation.exe)

 
Latest 30 of 226 download URLs

The following 242 files have been seen to comunicate with ams1.ib.adnxs.com in live environments.

TCP » 185.33.220.199:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.199:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.220.38:443
citrio.exe (Citrio by CatalinaGroup)

TCP » 185.33.220.197:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.220.210:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.221.58:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 185.33.220.210:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.221.58:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.221.58:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.220.197:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.221.58:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.197:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.221.58:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.38:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.197:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.38:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 185.33.221.58:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.220.38:80
GPlayer.exe (by Exent Technologies)

TCP » 185.33.220.199:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 185.33.221.58:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 570 files

URL:
http://ams1.ib.adnxs.com/

Google Analytics:
UA-4057742

Title:
“error page for redirects from product”

Web server:
Apache/2.2.22 (Ubuntu)

aim4media.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.