home

java.warerefree.com

Domain Information

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
warerefree.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Tightrope.Bundler, PUP.InstallCore.FC (M), PUP.Outbrowse.ClickYes.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.DownloadAdmin
33.33%

VIPRE Antivirus
DownloadAdmin
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

Agnitum Outpost
Riskware.Agent
33.33%

Trend Micro House Call
Suspicious_GEN.F47V1125
33.33%

Clam AntiVirus
Win.Adware.Downloadadmin
33.33%

NANO AntiVirus
Riskware.Win32.Downware.djahkt
33.33%

Sophos
Generic PUA DC
33.33%

Comodo Security
ApplicUnwnt
33.33%

F-Secure
Adware:W32/WebInstallBundle
33.33%

Dr.Web
Adware.Downware.2220
33.33%

Avira AntiVirus
ADWARE/Adware.Gen
33.33%

G Data
Win32.Application.DownloadAdmin
33.33%

AhnLab V3 Security
PUP/Win32.Downware
33.33%

The domain java.warerefree.com has been seen to resolve to the following IP address.

54.72.9.51
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
July 30, 2016

File downloads found at URLs served by java.warerefree.com.

1 / 68      (Adware)
http://java.warerefree.com/.../download?p=REVENUE&trckid=006696560016463784859&track_curl=0  (installer_java_English.exe)

1 / 68      (Adware)
http://java.warerefree.com/.../download?p=VELISMEDIA2&trckid=nl1MJApsoPYF9R2Fq14D2MTWZOLJ9G8ufUNEARZyte5q8IbR09B0LycHWDOGrUIhAQH2RLAaA_BWTJr-mC_r30YlR9_juRzmWc9rXTcdFJjb2y3rdvO-cz_vOmnRRyPLmNMAOqIgd8Gq3jGNi2ZEqQe6BCeZ8itelJu9C4m6GMGCxlcufwNEKWBtvY6f__LDazn-IkLvBPS8PKqD7EHgQgtVerT4DfzRRoMUjUhOCzqE4k8b9GUDfKCeeTRJvg  (installer_java_rusian.exe)

21 / 68    (Adware)
http://java.warerefree.com/.../download?p=REVENUE&trckid=009794096016291004315  (installer_java_english.exe)

The following 215 files have been seen to comunicate with java.warerefree.com in live environments.

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
onedrvup.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80
1799877.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80
charles.exe (by Apple)

TCP » 54.72.9.51:80
onedrv.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80
install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
g.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

 
Latest 20 of 219 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.