home

mywatchtones.com

erdem baysal

Domain Information

The domain mywatchtones.com registered by erdem baysal was initially registered in March of 2008 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the ThePlanet.com Internet Services, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Texas, United States (US)

Create date:
Monday, March 17, 2008

Expires date:
Friday, March 17, 2017

Updated date:
Thursday, March 17, 2016

ASN:
AS21844 THEPLANET-AS - ThePlanet.com Internet Services, Inc.

Whois:
3 mywatchtones.com records

Scanner detections:
Detections  (86% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.FaglaroEnterprisesLimited.R, PUP.FaglaroEnterprisesLimited.Q, PUP.FaglaroEnterprisesLimited.P, PUP.FaglaroEnterprisesLimited.J
100.00%

McAfee
Artemis!BA6208CB5C33, Artemis!3DF8716A2273, Artemis!062BDA96A95E, Artemis!E4D4C16046FE, Artemis!EED57610B3C9, Artemis!93AB60794E97
100.00%

Malwarebytes
PUP.Optional.ExpressFiles.A
100.00%

avast!
Win32:Downloader-TSH [PUP]
100.00%

Sophos
Express Files
100.00%

VIPRE Antivirus
ExpressFiles Installer
100.00%

AhnLab V3 Security
PUP/Win32.ExpressFiles
100.00%

ESET NOD32
Win32/ExpressFiles (variant)
100.00%

K7 AntiVirus
Unwanted-Program
83.33%

Trend Micro House Call
TROJ_GEN.F47V1201, TROJ_GEN.F47V1108, TROJ_GEN.F47V1118, TROJ_GEN.F47V1115, TROJ_GEN.F47V1101
83.33%

Bkav FE
W32.Clod935.Trojan, W32.Clod217.Trojan, W32.Clod58d.Trojan, W32.Clod697.Trojan
83.33%

AVG
MalSign.Faglaro Enterprises Limited
66.67%

herdProtect (fuzzy)
a variant of 6818642e61ab31cab135183567c97f430a79d232, a variant of 2b80df6571c45c48ae793fb3a8aca31af677b1e8, a variant of 7a268514cfc9b35c7492a03c6bcc4e6b3d70ec7f
66.67%

Avira AntiVirus
ADWARE/Adware.Gen2
66.67%

G Data
Win32.Application.ExpressFiles
66.67%

The domain mywatchtones.com has been seen to resolve to the following 3 IP addresses.

104.28.10.45
July 8, 2016

104.28.11.45
July 8, 2016

174.132.231.10
ns1.glitx.com
February 6, 2014

File downloads found at URLs served by mywatchtones.com.

22 / 68    (Adware)
http://mywatchtones.com/.../do.php?s=mp3bear_4&q=donia music  (uninstall.exe)

23 / 68    (Adware)
http://mywatchtones.com/.../do.php?s=mp3bear_4&q=descargar gratis my inmortal evanescence  (uninstall42703417.exe)

23 / 68    (Adware)
http://mywatchtones.com/.../do.php?s=mp3bear_4&q=musica instrumental rapida  (uninstall42703417.exe)

0 / 68
http://mywatchtones.com/.../do.php?s=mp3bear_4&q=descargar gratis musica pelicula rocky 4  (firefox setup stub 44.0.exe)

14 / 68    (Adware)
http://mywatchtones.com/.../do.php?s=mp3bear_4&q=sarà natale se  (uninstall2227023.exe)

14 / 68    (Adware)
http://mywatchtones.com/.../do.php?s=mp3bear_4&q=g wiz teddy bear  (uninstall29354162.exe)

14 / 68    (Adware)
http://mywatchtones.com/.../do.php?s=mp3bear_5&q=Wham - Last Christmas  (uninstall40618651.exe)

10 / 68    (Adware)
http://mywatchtones.com/.../do.php?s=mp3bear_4&q=happy piano music  (uninstall234594.exe)

URL:
http://mywatchtones.com/

Web server:
Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.3.21 (PHP/5.3.21)

softwcdf.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.