home

download.install-imesh.com

Domain Information

Server location:
Tel Aviv, Israel (IL)

ASN:
AS6461 MFNX MFN - Metromedia Fiber Network

Root domain:
install-imesh.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.Bandoo.A
66.67%

Reason Heuristics
PUP.iMesh.Installer.Installer.Meta (L), PUP.iMesh.Installer (L)
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

ESET NOD32
Win32/Toolbar.SearchSuite (variant)
50.00%

Baidu Antivirus
PUA.Toolbar.SearchSuite, PUA.Win32.SearchSuite
33.33%

IKARUS anti.virus
PUA.SearchSuite
16.67%

Clam AntiVirus
Win.Adware.Searchsuite-3
16.67%

Dr.Web
Adware.Bandoo.167
16.67%

The domain download.install-imesh.com has been seen to resolve to the following IP address.

94.31.0.25
94.31.0.25.IPYX-076665-ZYO.above.net
December 2, 2014

File downloads found at URLs served by download.install-imesh.com.

1 / 68      (PUP)
http://download.install-imesh.com/iMeshSetup.exe  (imeshsetup-r1795-n-bc.exe)

3 / 68      (PUP)
http://download.install-imesh.com/iMeshSetup.exe  (lalitha ganam.exe)

1 / 68      (PUP)
http://download.install-imesh.com/iMeshSetup.exe  (imeshsetup-r1949-n-bc.exe)

5 / 68      (PUP)
http://download.install-imesh.com/iMeshSetup.exe  (imeshsetup-r0-n-bc.exe)

4 / 68      (PUP)
http://download.install-imesh.com/iMeshSetup.exe  (imeshsetup-r221-w-bc.exe)

4 / 68      (PUP)
http://download.install-imesh.com/iMeshSetup.exe  (imeshsetup-r1444-n-bc.exe)

The following 15 files have been seen to comunicate with download.install-imesh.com in live environments.

TCP » 94.31.0.25:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.31.0.25:80
FreeScreenVideo.exe (FreeScreen2Video by Koyote Soft)

TCP » 94.31.0.25:80
setup21_freeconverter.exe (Free mp3 Wma Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
setup_freevideoconverter.exe (Free Video Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
700d4b1585aaf7497320bf79add541c19984a2ee0ec7b733d0cac144b2136fd7 (Free Easy CD DVD Burner by Koyote-Lab Inc)

TCP » 94.31.0.25:80
freeflvconvertersetup-r20-n-bc.exe (Free FLV Converter by Koyote-Lab Inc)

TCP » 94.31.0.25:80
setup_31freevideoconverter.exe (Free Video Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
f_0002b2 (Free Easy CD DVD Burner by Koyote-Lab Inc)

TCP » 94.31.0.25:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 94.31.0.25:80
FreeFLVConverterSetup-r119-n-bc.exe (Free FLV Converter by Koyote-Lab Inc)

TCP » 94.31.0.25:80
freevideoconvertersetup-r144-n-bi.exe (Free Video Converter by Koyote-Lab Inc)

TCP » 94.31.0.25:80
setup_freeburner.exe (Free Easy CD DVD Burner by Bandoo Media Inc)

TCP » 94.31.0.25:80
VideosToDVD.exe (Videos To DVD Converter by Koyote Soft)

TCP » 94.31.0.25:80
setup_freeflvconverter.exe (Free FLV Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
freehdconvertersetup.exe (Free HD Converter by Koyote-Lab)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.