dll513.usedfile.biz

Fundacion Private Whois  (Proxy Registrant)

Domain Information

The domain dll513.usedfile.biz is registered by proxy through INTERNET.BS CORP. and was originally registered in September of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chicago, Illinois within the United States which resides on the FDCservers.net network.
Registrar:
INTERNET.BS CORP.

Server location:
Illinois, United States (US)

Create date:
Monday, September 15, 2014

Expires date:
Monday, September 14, 2015

Updated date:
Monday, September 15, 2014

ASN:
AS6461 ABOVENET - Abovenet Communications, Inc,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Via Advertising.Bundler (M), PUP.Installer.RomirProduction.FF, PUP.Installer.RomirProduction.j, PUP.Installer.RomirProduction.l, PUP.Installer.RomirProduction.r, PUP.Installer.RomirProduction., PUP.Installer.RomirProduction.?, PUP.Installer.RomirProduction.U, PUP.Installer.RomirProduction.n, PUP.Installer.Via Advertising, PUP.Via Advertising.RomirProduction.Bundler (M), PUP.Via Advertising.RomirPro.Bundler (M), PUP.Via Advertising.ViaAdver.Bundler (M), PUP.Via Advertising (M)
95.00%

VIPRE Antivirus
Threat.4783941, Threat.4412893
52.50%

ESET NOD32
Win32/ExpressDownloader (variant)
45.00%

Agnitum Outpost
PUA.Downware, Riskware.Agent
40.00%

Dr.Web
Adware.Downware.8715, Adware.Downware.8934, Adware.Downware.8924, Adware.Downware, Adware.Downware.9213
37.50%

AVG
Generic, Adware Generic_r
35.00%

avast!
Win32:Adware-gen [Adw]
30.00%

Malwarebytes
PUP.Optional.Downloader
30.00%

AhnLab V3 Security
PUP/Win32.Downware
30.00%

Avira AntiVirus
APPL/Downloader.Gen4, TR/Kazy.3785336
30.00%

IKARUS anti.virus
PUA.Expressdownloader
25.00%

F-Prot
W32/A-42de288b
17.50%

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.24, Gen:Variant.Kazy.503477, Gen:Variant.Kazy.491253
15.00%

MicroWorld eScan
Gen:Variant.Application.Bundler.24, Gen:Variant.Kazy.491253
15.00%

K7 AntiVirus
Unwanted-Program
15.00%

The domain dll513.usedfile.biz has been seen to resolve to the following IP address.

October 20, 2014

File downloads found at URLs served by dll513.usedfile.biz.

 
Latest 30 of 40 download URLs

URL:
http://dll513.usedfile.biz/

Web server:
nginx/1.2.1 (PHP/5.3.3-7+squeeze14)