home

dll-files-fixer.com

Tilf AB

Domain Information

The domain dll-files-fixer.com registered by Tilf AB was initially registered in February of 2011 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US East (Northern Virginia) region datacenter.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Thursday, February 24, 2011

Expires date:
Saturday, February 24, 2018

Updated date:
Tuesday, May 31, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Whois:
1 dll-files-fixer.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DllFixer.TilfAB.Installer.Meta (M)
100.00%

The domain dll-files-fixer.com has been seen to resolve to the following IP address.

54.231.120.161
s3-website-us-east-1.amazonaws.com
August 24, 2016

File downloads found at URLs served by dll-files-fixer.com.

1 / 68      (PUP)
http://dll-files-fixer.com/dffsetup.exe  (dll-files.fixer.3.3.90.3079_soft98.ir.exe)

The following 15 files have been seen to comunicate with dll-files-fixer.com in live environments.

TCP » 54.231.120.161:80
4bfac299-a6dd-484d-951f-988ba708d5b9-1-7.exe (CinemaPlus-3.2cV22.10 by Cinema PlusV22.10)

TCP » 54.231.120.161:80
ee513a64-3d36-4736-a294-f5f86c20414a-7.exe (App Lid by Lid)

TCP » 54.231.120.161:80
182315f6-6171-4c3c-999f-4796da56120c-10.exe (Cinem Plus 2.4cV22.06 by Cinema Plus ProV22.06)

TCP » 54.231.120.161:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.231.120.161:80
the wedownload manager-codedownloader.exe (The weDownload Manager by weDownload)

TCP » 54.231.120.161:80
disco_games_notification_service.exe (FileProperties_ProductName by FileProperties_CompanyName)

TCP » 54.231.120.161:80
{blocked}.exe (SavePass by OutBrowse)

TCP » 54.231.120.161:80
63ad0963-2b94-4b80-b7af-66fb45fb6e91-10.exe (App Lid by Lid)

TCP » 54.231.120.161:80
fae6befe-afe6-4301-af77-c091d7713f8b-11.exe (Ge-Force by iWebar)

TCP » 54.231.120.161:80
e37a29b8-4195-4b69-abb5-08ad011cfaba-6.exe (SavePass 1.1 by OB)

TCP » 54.231.120.161:80
efba7dd2-bf83-415d-83c6-4595239075a3-3.exe (CinemaPlus-3.2cV23.10 by Cinema PlusV23.10)

TCP » 54.231.120.161:80
efba7dd2-bf83-415d-83c6-4595239075a3-10.exe (CinemaPlus-3.2cV23.10 by Cinema PlusV23.10)

TCP » 54.231.120.161:80
1a787d8f-90c2-465e-9906-c1315aaa4fe8-1-7.exe (CinemaP-1.9cV21.09 by Cinema PlusV21.09)

TCP » 54.231.120.161:80
f7dab28f-9769-4a5d-9f56-e45da253027f-10.exe (CinemaP-1.9cV31.07 by Cinema PlusV31.07)

TCP » 54.231.120.161:80
disco_games_updating_service.exe

URL:
http://dll-files-fixer.com/

Google Analytics:
UA-78620032

Title:
“DLL-Files Fixer download”

Network:
Amazon Web Services (AWS)

Web server:
AmazonS3

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.