home

sub.ejetes.info

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ejetes.info

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

avast!
Win32:Somoto-R [PUP]
100.00%

Clam AntiVirus
Win.Adware.Somoto
100.00%

NANO AntiVirus
Riskware.Nsis.Adware.dbnhrj, Riskware.Win32.Downware.digcac
100.00%

Sophos
Somoto BetterInstaller
100.00%

Dr.Web
Trojan.Packed.28357
100.00%

Avira AntiVirus
APPL/Somoto.Gen2
100.00%

SUPERAntiSpyware
PUP.Somoto/Variant
100.00%

AhnLab V3 Security
Win-PUP/Somoto
100.00%

AVG
Generic
100.00%

Baidu Antivirus
Adware.Win32.Somoto, Adware.Win32.Agent
100.00%

Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen
100.00%

Reason Heuristics
PUP.Somoto.DD, PUP.Somoto.p
100.00%

K7 AntiVirus
Unwanted-Program
50.00%

Comodo Security
Application.Win32.Somoto.CK
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

The domain sub.ejetes.info has been seen to resolve to the following 5 IP addresses.

54.230.192.21
server-54-230-192-21.iad53.r.cloudfront.net
January 4, 2015

54.192.192.151
server-54-192-192-151.iad53.r.cloudfront.net
January 4, 2015

54.192.192.106
server-54-192-192-106.iad53.r.cloudfront.net
January 4, 2015

54.239.152.192
server-54-239-152-192.iad53.r.cloudfront.net
January 4, 2015

54.230.195.151
server-54-230-195-151.iad53.r.cloudfront.net
January 4, 2015

File downloads found at URLs served by sub.ejetes.info.

13 / 68    (Adware)
http://sub.ejetes.info/IddGkeUWY9e65c04e278702d9ff93340f859225b80hiFK3aJ2leYToyOntzOjI6InRzIjtpOjE0MTY0MjUwNDg7czoxOiJmIjtzOjcyOiIvaG9tZS93d3cvYXNzZXRzL2JldHRlcl9pbnN0YWxsZXIvaW5zdGFsbGVycy9jbGkvc2V0dXBfMTQxMDg4MTY5MjQ3My5leGUiO30=  (filedownloadedsuccessfully_downloader-nfe9xgiaj.exe)

16 / 68    (Adware)
http://sub.ejetes.info/Icbh4RCWp598a3091a5beffdf76e7ac87e6f341263FIrmgNsl2oYToyOntzOjI6InRzIjtpOjE0MTYzNTI5Nzg7czoxOiJmIjtzOjcyOiIvaG9tZS93d3cvYXNzZXRzL2JldHRlcl9pbnN0YWxsZXIvaW5zdGFsbGVycy9jbGkvc2V0dXBfMTQxNDcwNjgxMDk5OC5leGUiO30=  (sevenzip_downloader-i2ecvwlry.exe)

The following 10 files have been seen to comunicate with sub.ejetes.info in live environments.

TCP » 54.192.192.151:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.192.192.106:443
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.192.192.151:443
browser.exe (Browser)

TCP » 54.192.192.106:443
browser.exe (speed browser by Fast Applications)

TCP » 54.192.192.106:443
stormwatchapp.exe

TCP » 54.192.192.151:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.192.192.151:80
browser.exe (Browser)

TCP » 54.192.192.106:443
ssn.exe (ssn)

TCP » 54.192.192.106:443
stormwatchapp.exe

TCP » 54.192.192.106:443
stormwatchbrowser.exe

TCP » 54.192.192.151:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 54.239.152.192:80
browser.exe (Browser)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.