home

easy-file-converter.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain easy-file-converter.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Montreal, Quebec within Canada which resides on the OVH Hosting, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Quebec, Canada (CA)

Create date:
Sunday, March 2, 2014

Expires date:
Thursday, March 2, 2017

Updated date:
Monday, March 14, 2016

Whois:
2 easy-file-converter.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Somoto.Y, PUP.Somoto.i, PUP.Somoto.q, PUP.Somoto.p, PUP.Somoto.I, PUP.Somoto.Bundler (M)
100.00%

avast!
Somoto-R [PUP], Win32:Somoto-R [PUP]
63.64%

Dr.Web
Trojan.Packed.28357
63.64%

Sophos
Somoto BetterInstaller
63.64%

AhnLab V3 Security
Win-PUP/Somoto
63.64%

AVG
Generic
63.64%

Baidu Antivirus
Adware.Win32.Somoto, Adware.Win32.Agent
63.64%

Kaspersky
not-a-virus:AdWare.Win32.Agent, not-a-virus:Downloader.Win32.Agent
54.55%

Qihoo 360 Security
Malware.Radar03.Gen, HEUR/QVM42.0.Malware.Gen, Win32/Virus.Downloader.192
54.55%

SUPERAntiSpyware
PUP.Somoto/Variant
45.45%

NANO AntiVirus
Riskware.Nsis.Adware.dbnhrj, Riskware.Win32.Downware.digcac
45.45%

Clam AntiVirus
Win.Adware.Somoto
45.45%

Avira AntiVirus
APPL/Somoto.Gen2
45.45%

VIPRE Antivirus
Threat.4150696, Trojan.Win32.Generic
27.27%

K7 AntiVirus
Unwanted-Program
27.27%

The domain easy-file-converter.com has been seen to resolve to the following 4 IP addresses.

5.39.99.49
May 30, 2016

167.114.156.214
ns513839.ip-167-114-156.net
May 27, 2016

184.168.221.50
ip-184-168-221-50.ip.secureserver.net
April 6, 2016

78.138.105.134
October 20, 2014

File downloads found at URLs served by easy-file-converter.com.

12 / 68    (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-N6aMpRRkC.exe  (filedownloadedsuccessfully_downloader-n295rn8sp.exe)

1 / 68      (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-N9IbjApuy.exe  (07abed588a1a16eabbe64652ded7467d)

1 / 68      (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-NbqSxGBsX.exe  (9e4b5e9a6af293540723049f198750e4)

16 / 68    (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-N4SKxijKN.exe  (download-freakshare_downloader-icb6rpo1f.exe)

1 / 68      (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-Negck9Nsd.exe  (9da76a24dc7df139c5173620967e97c1)

12 / 68    (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-Nc339cBmb.exe  (thebigstorefrenchdvdrip2014_downloader-nduxaqqiu.exe)

1 / 68      (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-Nc8JIzrl5.exe  (404a8710835bc604ed220c22538ccae6)

15 / 68    (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-N7Oal3HqO.exe  (00000000)

14 / 68    (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-Nfd4HQZKr.exe  (filedownloadedsuccessfully_downloader-n9ozn5uze.exe)

13 / 68    (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-N1Vcyet6G.exe  (filedownloadedsuccessfully_downloader-nfe9xgiaj.exe)

28 / 68    (Adware)
http://easy-file-converter.com/.../FLVPlayerSetup-N1EphpeIS.exe  (19dccbc13d2c143db32f7a9f638005a1)

The following 828 files have been seen to comunicate with easy-file-converter.com in live environments.

TCP » 184.168.221.50:80
292205ff-08ff-4758-8936-fc1991ad7d34-1-7.exe (CinemaPlus-3.4cV06.05 by Cinema PlusV06.05)

TCP » 184.168.221.50:80
d3e9ee33-d5b4-46eb-8dd9-b0eb3a425239-1-7.exe (GoHD by InstallMoon)

TCP » 184.168.221.50:80
3eaa9b9e-31d5-4f50-a21f-cc4883b90f81-7.exe (CinemaPlus-3.2cV22.06 by Cinema PlusV22.06)

TCP » 184.168.221.50:80
5b7c820d-eb6f-413d-864d-2820569e568c-1-7.exe (CinemaPlus-3.2cV26.06 by Cinema PlusV26.06)

TCP » 184.168.221.50:80
cce36867-7808-4f49-b661-cd4459ca7466-1-7.exe (Cinema Plus v6V22.07)

TCP » 184.168.221.50:80
7a55f8c2-e46d-40d2-b9a2-e54da6297b47-1-7.exe (Cinem Plus 2.4cV22.06 by Cinema Plus ProV22.06)

TCP » 184.168.221.50:80
526617a0-6ef3-46e1-bfe9-84dfee40c326-1-7.exe (CinemaPlus-3.2cV07.05 by Cinema PlusV07.05)

TCP » 184.168.221.50:80
39ad035d-901f-4b2c-9f9b-33edaaf404dd-1-7.exe (Sense by Sense+)

TCP » 184.168.221.50:80
701faa3c-136d-4498-915e-eb230dfb798b-1-7.exe (Cinem Plus 2.4cV13.09 by Cinema Plus ProV13.09)

TCP » 167.114.156.214:3333
webproxy.exe

TCP » 184.168.221.50:80
5ee39801-2b7e-4181-8c66-6d2c92082641-1-7.exe (Sense by Sense+)

TCP » 184.168.221.50:80
2baf08be-a43a-44ab-950f-a58cdf6142a1-7.exe (SavePass 1.1 by OB)

TCP » 184.168.221.50:80
789c24d7-b520-4824-83ac-9bc2fbb7f58b-1-7.exe (I - Cinema by iCinema)

TCP » 184.168.221.50:80
1a6a8721-b58e-429f-80a4-bb17deea77ff-1-7.exe (CinemaP-1.9cV04.10 by Cinema PlusV04.10)

TCP » 184.168.221.50:80
acadbace-6ae9-4f78-bff5-8bf8870a9d75-1-7.exe (GoHD by InstallMoon)

TCP » 184.168.221.50:80
f958a4a4-bbe1-4c28-965d-52ca595048a4-1-7.exe (CinemaP-1.9cV05.07 by Cinema PlusV05.07)

TCP » 184.168.221.50:80
40db1533-f551-4998-8bca-934da85073e3-1-7.exe (CinemaP-1.9cV09.11 by Cinema PlusV09.11)

TCP » 184.168.221.50:80
73e1d639-ef1c-422b-8891-9cb26a444f2e-1-7.exe (CinemaPlus-3.2cV14.05 by Cinema PlusV14.05)

TCP » 184.168.221.50:80
cba20aaf-ef88-486b-bbec-1cf47bed7b76-1-7.exe (CinemaPlus-3.2cV24.06 by Cinema PlusV24.06)

TCP » 184.168.221.50:80
ed93f1dd-e15d-4ed8-b105-8ed8ec882abb-1-7.exe (CinemaPlus-3.2cV20.09 by Cinema PlusV20.09)

 
Latest 20 of 837 files

URL:
http://easy-file-converter.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

Facebook:
Shares:  1

Statistics above are for the previous month of November 2024.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.