home

downprov10.downloadfasteasy.com

Whois Privacy Corp.

Domain Information

The domain downprov10.downloadfasteasy.com registered by Whois Privacy Corp. was initially registered in November of 2014 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
TLD REGISTRAR SOLUTIONS LTD

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Monday, November 10, 2014

Expires date:
Thursday, November 10, 2016

Updated date:
Wednesday, November 4, 2015

Root domain:
downloadfasteasy.com

Whois:
2 downloadfasteasy.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Trojan.Amonetize.353, infected with Trojan.Amonetize.353, Detection.Undefined
73.33%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
73.33%

Reason Heuristics
PUP.Amonetize (M), Adware.Amonetize.ET (M), Adware.Amonetize.DB (M)
73.33%

Trend Micro House Call
TROJ_SPNR.08LS14, TROJ_GEN.R047H07LQ14, Suspici.1CC0D1BF, TROJ_GEN.R047H07LP14, TROJ_GEN.R047H07LS14, TROJ_GEN.R08NH07A615
60.00%

Clam AntiVirus
Win.Adware.Amonetize-511
60.00%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize
60.00%

G Data
NSIS.Application.Crypted, Trojan.Generic.12505922
60.00%

Baidu Antivirus
Adware.Win32.Amonetize, PUA.Win32.Amonetize
60.00%

AVG
Generic
60.00%

Panda Antivirus
Generic Suspicious
60.00%

avast!
Win32:PUP-gen [PUP]
53.33%

ESET NOD32
Win32/Amonetize.CN potentially unwanted application, Win32/Amonetize.CT potentially unwanted application
53.33%

Rising Antivirus
PE:AdWare.Win32.Adpeak.c!1075356117, PE:Trojan.Win32.Generic.17E1DC57!400677975
46.67%

McAfee
Artemis!447D097B20A7, Artemis!8F00B3F9F161, RDN/Generic PUP.x!cs3, Artemis!E5EBBCE3FAAA, Trojan.Artemis!BDC5B31F7027, Artemis!48DDC0BBCC55
46.67%

Malwarebytes
PUP.Optional.Amonetize
40.00%

The domain downprov10.downloadfasteasy.com has been seen to resolve to the following IP address.

92.242.140.21
unallocated.barefruit.co.uk
May 5, 2015

File downloads found at URLs served by downprov10.downloadfasteasy.com.

22 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../telecharger el mashaf el charif gratuit_10924_i11142677_il345.exe  (1ce8b395d45291732b86210f73a58faf)

2 / 68      (PUP)
http://downprov10.downloadfasteasy.com/.../break every chain united pursuit_10924_i11228361_il345.exe  (a0ad3d5b29d4883bca7fef98bf98e5de)

2 / 68      (PUP)
http://downprov10.downloadfasteasy.com/.../ice age 3 dublat in romana_10924_i11259051_il345.exe  (punjab university degree verification form_10924_i11259034_il345.exe)

12 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../software samsung s3650 corby_10924_i11094413_il345.exe  (819afdf1d903cd066d19c75105432dcb)

11 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../vorpx keygen_10924_i11104301_il345.exe  (pllde 2014.mkv_10924_i11104247_il345.exe)

23 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../The.Interview.2014.720p.WEB DL.MaZiKa2daY.CoM ..._10924_i11130681_il345.exe  (the.interview.2014.720p.web dl.mazika2day.com..._10924_i11130681_il345.exe)

5 / 68      (PUP)
http://downprov10.downloadfasteasy.com/.../jendekhoneh.mp4_10924_i11140382_il345.exe  (bdc5b31f702702f3f310de3b7468ba94)

2 / 68      (PUP)
http://downprov10.downloadfasteasy.com/.../naruto shippuden characters bio_10924_i11193923_il345.exe  (7e11a57a7272fec7bcb9c87f8f29611d)

24 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../fl studio 11 crack zip file_10924_i11117360_il345.exe  (e5ebbce3faaa4caa620b5c9a0349fa63)

4 / 68      (PUP)
http://downprov10.downloadfasteasy.com/.../IDM.rar_10924_i11060104_il345.exe  (ff512ab5e098152fef667271801d7a16)

2 / 68      (PUP)
http://downprov10.downloadfasteasy.com/.../Xbox 360 Controller Emulator V3 0_10924_i11264163_il345.exe  (59fe609728477b9178ae853e270a1e4f)

12 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../the impossible game full version_10924_i11214145_il345.exe  (28d3b43cbb790366db58baf1b75d11e5)

17 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../Van Basco Karaoke Player 28000 .kar Songs_10924_i11243942_il345.exe  (doodle jump 2.7 ipa_10924_i11244016_il345.exe)

17 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../Van Basco Karaoke Player 28000 .kar Songs_10924_i11243881_il345.exe  (doodle jump 2.7 ipa_10924_i11244016_il345.exe)

19 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../Burnout Paradise: The Ultimate Box v.1.1.0.0 RELOADED_10924_i11258224_il345.exe  (burnout paradise- the ultimate box v.1.1.0.0 reloaded_10924_i11258224_il345.exe)

14 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../after the funeral dylan thomas_10924_i11087050_il345.exe  (b4af6c112a364e547db768dc4189d62f)

17 / 68    (PUP)
http://downprov10.downloadfasteasy.com/.../doodle jump 2.7 ipa_10924_i11244016_il345.exe  (447d097b20a7abcc3b79056de9481e57)

The following 230 files have been seen to comunicate with downprov10.downloadfasteasy.com in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

TCP » 92.242.140.21:80
ntp.crx

TCP » 92.242.140.21:80
3dayinvite.crx

TCP » 92.242.140.21:80
twitter.crx

TCP » 92.242.140.21:80
viewlater.crx

TCP » 92.242.140.21:80
rss.crx

TCP » 92.242.140.21:80
datapump.crx

 
Latest 20 of 230 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.