home

download.downloadjzip.com

Domain Information

Server location:
Tel Aviv, Israel (IL)

ASN:
AS6461 MFNX MFN - Metromedia Fiber Network

Root domain:
downloadjzip.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.R, PUP.Bandoo.BandooMe.Installer (M), Win32.Generic
100.00%

McAfee
SearchSuite
33.33%

Zillya! Antivirus
Adware.SearchSuite.Win64.20
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

Kaspersky
not-a-virus:WebToolbar.Win64.SearchSuite
33.33%

Dr.Web
Adware.Bandoo.13
33.33%

VIPRE Antivirus
Threat.4150696
33.33%

Sophos
SearchSuite
33.33%

G Data
Win32.Adware.Bandoo
33.33%

ESET NOD32
Win32/Toolbar.SearchSuite.J potentially unwanted application
33.33%

Fortinet FortiGate
Riskware/SearchSuite
33.33%

AVG
Generic
33.33%

Panda Antivirus
Trj/Chgt.G
33.33%

herdProtect (fuzzy)
a variant of 10872ac05476ad0789fe10ac5e47141ebbb145ad
33.33%

Malwarebytes
PUP.Optional.Bandoo
33.33%

The domain download.downloadjzip.com has been seen to resolve to the following IP address.

94.31.0.25
94.31.0.25.IPYX-076665-ZYO.above.net
March 9, 2015

File downloads found at URLs served by download.downloadjzip.com.

1 / 68      (PUP)
http://download.downloadjzip.com/jZipSetup.exe  (jzipsetup-r230-n-bc.exe)

1 / 68      (PUP)
http://download.downloadjzip.com/jZipSetup.exe  (jzipsetup-r411-n-bc.exe)

15 / 68    (PUP)
http://download.downloadjzip.com/jZipSetup.exe  (jzipsetup-r0-n-bf.exe)

The following 15 files have been seen to comunicate with download.downloadjzip.com in live environments.

TCP » 94.31.0.25:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.31.0.25:80
FreeScreenVideo.exe (FreeScreen2Video by Koyote Soft)

TCP » 94.31.0.25:80
setup21_freeconverter.exe (Free mp3 Wma Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
setup_freevideoconverter.exe (Free Video Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
700d4b1585aaf7497320bf79add541c19984a2ee0ec7b733d0cac144b2136fd7 (Free Easy CD DVD Burner by Koyote-Lab Inc)

TCP » 94.31.0.25:80
freeflvconvertersetup-r20-n-bc.exe (Free FLV Converter by Koyote-Lab Inc)

TCP » 94.31.0.25:80
setup_31freevideoconverter.exe (Free Video Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
f_0002b2 (Free Easy CD DVD Burner by Koyote-Lab Inc)

TCP » 94.31.0.25:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 94.31.0.25:80
FreeFLVConverterSetup-r119-n-bc.exe (Free FLV Converter by Koyote-Lab Inc)

TCP » 94.31.0.25:80
freevideoconvertersetup-r144-n-bi.exe (Free Video Converter by Koyote-Lab Inc)

TCP » 94.31.0.25:80
setup_freeburner.exe (Free Easy CD DVD Burner by Bandoo Media Inc)

TCP » 94.31.0.25:80
VideosToDVD.exe (Videos To DVD Converter by Koyote Soft)

TCP » 94.31.0.25:80
setup_freeflvconverter.exe (Free FLV Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
freehdconvertersetup.exe (Free HD Converter by Koyote-Lab)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.