home

download18.cdn.installspeed.com

Domain Information

Server location:
Massachusetts, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
installspeed.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!7EFD1599C665
100.00%

Malwarebytes
PUP.Optional.Bandoo
100.00%

avast!
Win32:Rootkit-gen [Rtk]
100.00%

Dr.Web
Adware.Bandoo.19
100.00%

VIPRE Antivirus
Threat.5059975
100.00%

Avira AntiVirus
APPL/Downloader.Gen
100.00%

ESET NOD32
Win32/iLivid.A potentially unwanted application
100.00%

IKARUS anti.virus
PUA.iLivid
100.00%

Fortinet FortiGate
Riskware/ILivid
100.00%

AVG
Generic
100.00%

Baidu Antivirus
Adware.Win32.iLivid
100.00%

Reason Heuristics
PUP.Optional.Installer.W
100.00%

herdProtect (fuzzy)
a variant of 4c6dccbf763f59425cb6d8cdca7d5e314947e66e
100.00%

The domain download18.cdn.installspeed.com has been seen to resolve to the following 2 IP addresses.

23.15.8.225
a23-15-8-225.deploy.static.akamaitechnologies.com
December 19, 2014

23.15.8.233
a23-15-8-233.deploy.static.akamaitechnologies.com
December 19, 2014

File downloads found at URLs served by download18.cdn.installspeed.com.

13 / 68    (PUP)
http://download18.cdn.installspeed.com/cdn/r/.../iLividSetup-r295-n-bc.exe  (ilividsetup-r1720-n-bc.exe)

The following 69 files have been seen to comunicate with download18.cdn.installspeed.com in live environments.

TCP » 23.15.8.233:80
plugincontainer.exe

TCP » 23.15.8.233:80
apptrailers.exe

TCP » 23.15.8.225:80
updateframeddisplay.exe

TCP » 23.15.8.233:80
updateframeddisplay.exe

TCP » 23.15.8.225:80
gmlhiommmcgjgjbelpclndidncngoppb.crx

TCP » 23.15.8.225:80
klpggjfpipbfekkkmfopmhcjjlgfgbgf.crx

TCP » 23.15.8.225:80
hbdeghklojiflbkldlgkoikofknbnnlm.crx

TCP » 23.15.8.225:80
icekbnnocpjjpcegmllmjpedphcdkjod.crx

TCP » 23.15.8.225:80
wordwizard-setup-1.10.0.24.exe (WordWizard)

TCP » 23.15.8.225:80
gcibgeegoickfiojmgdbjfcejleiifag.crx

TCP » 23.15.8.225:80
knohcghjdlaehmlkciiohbelpaoocamm.crx

TCP » 23.15.8.225:80
chfpmfingabfmmoennkbpldlobfeleib.crx

TCP » 23.15.8.225:80
fajmebjmiollhhkpmmglkmkpehlhmkka.crx

TCP » 23.15.8.225:80
fcmihjjhagjnbphnmihchianoncccnmj.crx

TCP » 23.15.8.225:80
icekbnnocpjjpcegmllmjpedphcdkjod.crx

TCP » 23.15.8.225:80
fcmihjjhagjnbphnmihchianoncccnmj.crx

TCP » 23.15.8.225:80
oedbdopeomhfdadjfjalggcfjnfkilbn.crx

TCP » 23.15.8.225:80
loobkjfikkmijnpffjodahkhhlglemha.crx

TCP » 23.15.8.225:80
updateframeddisplay.exe

TCP » 23.15.8.233:80
kjfgakljmfjkogjpjlppogphbfphamnp.crx

 
Latest 20 of 72 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.