home

cdn.goodbundlelounge.com

Domain Information

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
goodbundlelounge.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.BornToBeNetConsulting, PUP.installCore.BornToBe.Installer (M)
100.00%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted application
50.00%

Bkav FE
W32.HfsAdware
50.00%

AVG
InstallCore
50.00%

Dr.Web
Trojan.InstallCore.550
50.00%

K7 AntiVirus
Adware
50.00%

Avira AntiVirus
TR/Crypt.XPACK.Gen
50.00%

F-Secure
Gen:Variant.Adware.Kazy
50.00%

Baidu Antivirus
Adware.Win32.InstallCore
50.00%

VIPRE Antivirus
Threat.4150696
50.00%

Panda Antivirus
PUP/Multitoolbar
50.00%

NANO AntiVirus
Riskware.Win32.InstallCore.drfvyi
50.00%

Malwarebytes
PUP.Optional.InstallCore
50.00%

AhnLab V3 Security
PUP/Win32.InstallCore
50.00%

Qihoo 360 Security
Win32/Virus.dbc
50.00%

The domain cdn.goodbundlelounge.com has been seen to resolve to the following IP address.

54.72.9.51
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
May 25, 2016

File downloads found at URLs served by cdn.goodbundlelounge.com.

1 / 68      (PUP)
http://cdn.goodbundlelounge.com/.../uyM Jsw==&downloadAs=Malavida_Download_Manager.exe  (0a4a08e43af53cc327a5109017df5312)

16 / 68    (PUP)
http://cdn.goodbundlelounge.com/c?x=GHH5lP0ZPjn0TLcJEhRqdXeKi/V3JrUK1HRvxwDfMGA=&c=y/.../oGLy8wPCZgZh29J5EwSQ==&downloadAs=Malavida_Download_Manager.exe  (icreinstall_malavida_download_manager.exe)

The following 215 files have been seen to comunicate with cdn.goodbundlelounge.com in live environments.

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
onedrvup.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80
1799877.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80
charles.exe (by Apple)

TCP » 54.72.9.51:80
onedrv.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80
install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
g.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

 
Latest 20 of 219 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.