dll513.yfdownloader.com

Whois Privacy Corp.

Domain Information

The domain dll513.yfdownloader.com registered by Whois Privacy Corp. was initially registered in January of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Salt Lake City, Utah within the United States which resides on the Hosting Services, Inc. network.
Registrar:
TLD REGISTRAR SOLUTIONS LTD

Server location:
Utah, United States (US)

Create date:
Tuesday, January 27, 2015

Expires date:
Friday, January 27, 2017

Updated date:
Monday, January 11, 2016

ASN:
AS29854 WESTHOST - WestHost, Inc.,US

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Via Advertising, PUP.Via Advertising.Bundler, PUP.Via Advertising.Supers.Bundler (M), PUP.Via Advertising.ViaAdvertisingGroup.Bundler (M), PUP.Bundler (M), PUP.Via Advertising.ViaAdver.Bundler (M), PUP.Via Advertising (M), Threat.Win.Reputation.IMP
94.44%

avast!
Win32:Downloader-UEO [PUP]
19.44%

ESET NOD32
Win32/ExpressDownloader.K potentially unwanted application
19.44%

VIPRE Antivirus
Threat.4758264, Via Advertising
19.44%

Sophos
PUA 'Go For Files'
19.44%

Avira AntiVirus
APPL/Downloader.Gen4, PUA/EDownloader.Gen, TR/Trash.Gen
19.44%

AVG
Generic, Generic_r, Adware Generic_r.YX
19.44%

Comodo Security
Virus.Win32.Virut.CE, Application.Win32.ExpressDownloader.CA
16.67%

Dr.Web
Adware.Downware.9685, Threat.Undefined, Adware.Downware.10330
16.67%

Emsisoft Anti-Malware
Adware.Agent.PGP, Gen:Variant.Kazy.607135, Gen:Variant.Graftor.186945
13.89%

F-Secure
Adware.Agent.PGP, Gen:Variant.Kazy.607135, Gen:Variant.Graftor.186945
13.89%

Lavasoft Ad-Aware
Adware.Agent.PGP, Gen:Variant.Kazy.607135, Gen:Variant.Graftor.186945
13.89%

MicroWorld eScan
Adware.Agent.PGP, Gen:Variant.Application.Bundler.24, Gen:Variant.Kazy.607135, Gen:Variant.Graftor.186945
13.89%

K7 AntiVirus
Unwanted-Program , Trojan
13.89%

Bitdefender
Adware.Agent.PGP, Gen:Variant.Application.Bundler.24, Gen:Variant.Kazy.607135, Gen:Variant.Graftor.186945
13.89%

The domain dll513.yfdownloader.com has been seen to resolve to the following 3 IP addresses.

199.195.196.180.static.midphase.com
January 6, 2016

209.95.43.22.static.midphase.com
May 5, 2015

February 18, 2015

File downloads found at URLs served by dll513.yfdownloader.com.

 
Latest 30 of 37 download URLs

The following 19 files have been seen to comunicate with dll513.yfdownloader.com in live environments.

URL:
http://dll513.yfdownloader.com/

Title:
“SmileFiles”

Web server:
nginx/1.2.1 (PHP/5.4.45-0+deb7u2)

30 of 40 related domains