home

software-files-lrl.cnet.com

CBS Interactive Inc.

Domain Information

The domain software-files-lrl.cnet.com registered by CBS Interactive Inc. was initially registered in March of 1994 through MARKMONITOR INC.. The domain hosts various software downloads. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
MARKMONITOR INC.

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Saturday, March 5, 1994

Expires date:
Monday, March 6, 2017

Updated date:
Monday, February 2, 2015

Root domain:
cnet.com

Whois:
1 cnet.com record

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
Bundler.PPI.CBSInteractive.X, Bundler.PPI.Installer.CBS, PUP.CBS (M)
100.00%

F-Prot
W32/InstallCore.I.gen
75.00%

Agnitum Outpost
Adtool.InstallCore.Gen.2
75.00%

SUPERAntiSpyware
PUP.CNETInstaller
75.00%

Dr.Web
Adware.InstallCore.2, Adware.Zugo.38
75.00%

G Data
Win32.Trojan.Agent.AM83Y7
75.00%

Vba32 AntiVirus
WebToolbar.InstallCore, Signed-Adware.InstallCore
75.00%

ESET NOD32
Win32/InstallCore (variant)
75.00%

Rising Antivirus
PE:PUF.InstallCore!1.9DE1, Suspicious
75.00%

Trend Micro House Call
TROJ_GEN.F47V1218, TROJ_GEN.F47V0518
50.00%

Comodo Security
Heur.Suspicious, UnclassifiedMalware
50.00%

Fortinet FortiGate
Riskware/InstallCore
50.00%

Clam AntiVirus
Adware.Downloader-207
50.00%

herdProtect (fuzzy)
a variant of c2ab7a57961e718b03efa0ae3651e0bde7098ff7
50.00%

Bkav FE
W32.HfsAdware
25.00%

The domain software-files-lrl.cnet.com has been seen to resolve to the following 3 IP addresses.

92.242.140.21
unallocated.barefruit.co.uk
May 15, 2015

69.164.37.125
cds918.lga.llnw.net
March 15, 2014

69.164.48.197
cds21.lga.llnw.net
March 15, 2014

File downloads found at URLs served by software-files-lrl.cnet.com.

1 / 68      (PUP)
http://software-files-lrl.cnet.com/s/software/.../49/03/.../cnet_stubbspcdemoinstaller_exe.exe  (58f5df031f394de2fcc208519112d8ca)

11 / 68    (PUP)
http://software-files-lrl.cnet.com/s/software/10/24/84/.../cnet_ultimatevicecity2_exe.exe  (c84e000fed68e8688249a1874d97d33a)

14 / 68    (PUP)
http://software-files-lrl.cnet.com/s/software/10/22/90/.../cnet_bf1942_mp_demo_exe.exe  (fca1fae371791a6cd7613c2b9951c356)

14 / 68    (PUP)
http://software-files-lrl.cnet.com/s/software/10/22/90/.../cnet_battlefield_1942_secret_weapons_of_WWII_demo_exe.exe  (530d4cd7cfbb8c3f8b1d731654a376c0)

0 / 68
http://software-files-lrl.cnet.com/s/software/.../23/56/.../halotrialsetup.exe  (35634126_stp.exe)

The following 230 files have been seen to comunicate with software-files-lrl.cnet.com in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

TCP » 92.242.140.21:80
ntp.crx

TCP » 92.242.140.21:80
3dayinvite.crx

TCP » 92.242.140.21:80
twitter.crx

TCP » 92.242.140.21:80
viewlater.crx

TCP » 92.242.140.21:80
rss.crx

TCP » 92.242.140.21:80
datapump.crx

 
Latest 20 of 230 files

URL:
http://software-files-lrl.cnet.com/

Web server:
nginx/1.0.15

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.