home

get.gentready.com

Domain Information

Server location:
Massachusetts, United States (US)

Root domain:
gentready.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Solimba
100.00%

VIPRE Antivirus
Threat.4758821
100.00%

Dr.Web
Trojan.DownLoader11.57090
100.00%

AVG
Adware BundleApp_r.AJ
100.00%

NANO AntiVirus
Trojan.Win32.Morstar.dmuxrd
100.00%

Comodo Security
Application.Win32.Firseria.GH
100.00%

Avira AntiVirus
APPL/Firseria.Gen
100.00%

Vba32 AntiVirus
Downware.Morstar
100.00%

ESET NOD32
MSIL/Solimba.AK.gen potentially unwanted application
100.00%

Panda Antivirus
Trj/Genetic.gen
100.00%

Malwarebytes
PUP.Optional.Firseria
100.00%

Kaspersky
not-a-virus:Downloader.Win32.Morstar
100.00%

Bkav FE
W32.HfsAdware
100.00%

Emsisoft Anti-Malware
Trojan.Generic.12663549
100.00%

F-Secure
Trojan.Generic.12663549
100.00%

The domain get.gentready.com has been seen to resolve to the following IP address.

184.51.126.112
a184-51-126-112.deploy.static.akamaitechnologies.com
March 19, 2015

File downloads found at URLs served by get.gentready.com.

31 / 68    (Adware)
http://get.gentready.com/n/3.2.85/.../AdBlock.exe  (f89643ce9c50388be15262bb2ef846ae)

The following 27 files have been seen to comunicate with get.gentready.com in live environments.

TCP » 184.51.126.112:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.112:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.112:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.51.126.112:80
dmjkioeiaalphfhaeenenpmehjohpnpg.crx

TCP » 184.51.126.112:80
dw20.exe (Microsoft .NET Framework by Microsoft)

TCP » 184.51.126.112:80
beafjmjhahhhnnfkcogmmcfimpiedcij.crx

TCP » 184.51.126.112:80
hmlfhpnljgebfagkpphakdfempapplcp.crx

TCP » 184.51.126.112:80
eaocgmbhjchlgecafikagndbkmklnmih.crx

TCP » 184.51.126.112:80
dbpidfolhbmgjpgkkjggflcodejogbem.crx

TCP » 184.51.126.112:80
figcfgdfmnockhmfafaehiiakakkhpjm.crx

TCP » 184.51.126.112:80
dklnbenchkafdpfpnlbacfjafmbdjlhe.crx

TCP » 184.51.126.112:80
phonjakcnabalpcokfoppdainngglipc.crx

TCP » 184.51.126.112:80
kcohodmhafihohbcahhhmmkfdnejobji.crx

TCP » 184.51.126.112:80
chmgdjhjefnjmglechdciekcdibgegcj.crx

TCP » 184.51.126.112:80
fgpmagplgkkbmikimfapikefghocmjoa.crx

TCP » 184.51.126.112:80
hpihbneloieafloidikpffamnemlpnfp.crx

TCP » 184.51.126.112:80
onldiaejaflhjigpeibdknkcmhgbhcip.crx

TCP » 184.51.126.112:80
cjonnlhapkkbplifnemglhgaaloplebm.crx

TCP » 184.51.126.112:80
iegmdhfpmdcclcopdoncogjidbgjnnif.crx

TCP » 184.51.126.112:80
cjonnlhapkkbplifnemglhgaaloplebm.crx

 
Latest 20 of 30 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.