home

exe.link.googlepages.com

Domain Information

Server location:
California, United States (US)

ASN:
AS15169 GOOGLE - Google Inc.

Root domain:
googlepages.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Generic.dx!ho
100.00%

Norman
Smalltroj.RGUX
100.00%

Comodo Security
ApplicUnsaf.Win32.RiskWare.Crack
100.00%

ViRobot
Trojan.Win32.A.ShipUp.1251761
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.123E8E6D!306089581
100.00%

Bkav FE
W32.Clodbe8.Trojan
100.00%

nProtect
Trojan/W32.Agent.1251761
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

F-Prot
W32/Downldr2.HGJR
100.00%

Total Defense
Win32/Tnega.AGFE
100.00%

Agnitum Outpost
Trojan.DL.Agent
100.00%

IKARUS anti.virus
not-a-virus.Crack.WinRAR
100.00%

The domain exe.link.googlepages.com has been seen to resolve to the following IP address.

74.125.29.121
qg-in-f121.1e100.net
May 31, 2014

File downloads found at URLs served by exe.link.googlepages.com.

17 / 68    (PUP)
http://exe.link.googlepages.com/winrar380pro.exe  (16806309676ccf03d2f17123a120beb7)

The following 6 files have been seen to comunicate with exe.link.googlepages.com in live environments.

TCP » 74.125.29.121:80
snackr.exe

TCP » 74.125.29.121:80
client.exe

TCP » 74.125.29.121:80
10100012.exe

TCP » 74.125.29.121:80
qupiaku.exe

TCP » 74.125.29.121:80
kukcavh.exe

TCP » 74.125.29.121:80
eenaosu.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.