home

i1.zoomex.net

Domain Information

Server location:
New York, United States (US)

ASN:
AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc,VG

Root domain:
zoomex.net

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Adware.Downware.448, Adware.BGuard.11
100.00%

Vba32 AntiVirus
Downware.TSU, Backdoor.Hupigon
100.00%

Baidu Antivirus
Trojan.Win32.StartPage, Adware.InstallRex, Trojan.Win32.SProtector
100.00%

MicroWorld eScan
Trojan.Generic.8543085, Adware.BGuard.A
66.67%

nProtect
Trojan/W32.Agent.268288.FI, Trojan/W32.Agent.188928.MY
66.67%

McAfee
RDN/Generic StartPage!c, Artemis!4EF4BA836BE1
66.67%

Trend Micro House Call
TROJ_SPNR.0CD513, TROJ_GEN.R0CBB01IK13
66.67%

Bitdefender
Trojan.Generic.8543085, Adware.BGuard.A
66.67%

Agnitum Outpost
Trojan.StartPage, Backdoor.Hupigon
66.67%

Lavasoft Ad-Aware
Trojan.Generic.8543085, Adware.BGuard.A
66.67%

Emsisoft Anti-Malware
Trojan.Generic.8543085, Adware.BGuard
66.67%

Comodo Security
Application.Win32.Bundledz.C, UnclassifiedMalware
66.67%

F-Secure
Trojan.Generic.8543085, Adware.BGuard.A
66.67%

VIPRE Antivirus
Trojan.Win32.Generic
66.67%

Avira AntiVirus
TR/Rogue.8543085, DR/Hupigon.282398
66.67%

The domain i1.zoomex.net has been seen to resolve to the following IP address.

208.73.211.70
June 4, 2016

File downloads found at URLs served by i1.zoomex.net.

22 / 68    (PUP)
http://i1.zoomex.net/addons/.../prvtzd_dup.exe  (4ef4ba836be14eb30f3b034cf74b42e4)

31 / 68    (PUP)
http://i1.zoomex.net/.../pvtzd_agent_setup.exe  (0c154f58f9649cc00bbb459abf89269c)

6 / 68      (PUP)
http://i1.zoomex.net/.../uninstaller.exe  (803a9ede81c06788d115109f22552ab4)

The following 3 files have been seen to comunicate with i1.zoomex.net in live environments.

TCP » 208.73.211.70:80
videostream-elfana.crx

TCP » 208.73.211.70:443
droppad.crx

TCP » 208.73.211.70:443
droppad.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.