» sub.yentirp.info
Overview
Analysis
IPs Addresses (1)
Downloads (18)
Related Domains (15)

sub.yentirp.info

Domain Information

Server location:

Ohio, United States (US)

ASN:

AS32392 OPENTRANSFER-ECOMMERCE - Ecommerce Corporation,US

Root domain:

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Somoto.K, PUP.Somoto.Bundler (M)

100.00%

Malwarebytes

PUP.Optional.Somoto.A

33.33%

avast!

Win32:Somoto-R [PUP]

33.33%

Sophos

Somoto BetterInstaller

33.33%

Dr.Web

Trojan.Packed.28357

33.33%

Avira AntiVirus

APPL/Somoto.Gen2

33.33%

AhnLab V3 Security

PUP/Win32.101Alemi

33.33%

AVG

Generic

33.33%

Panda Antivirus

PUP/MultiToolbar.A

27.78%

ESET NOD32

Win32/Somoto

27.78%

Baidu Antivirus

Adware.Win32.Somoto

27.78%

McAfee

Artemis!1864FBE5069B, Artemis!0677CDE8DD41, Artemis!8D8240713641, Artemis!006F40010FFD

22.22%

Qihoo 360 Security

Win32/Virus.Downloader.192

22.22%

Trend Micro House Call

Suspicious_GEN.F47V1118, Suspicious_GEN.F47V1116

11.11%

ESET NOD32

Win32/Somoto.G potentially unwanted application

5.56%

The domain sub.yentirp.info has been seen to resolve to the following IP address.

May 18, 2016

File downloads found at URLs served by sub.yentirp.info.

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nso5e.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsh3d28.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsi724a.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nswe302.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsb653b.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsc18cc.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nste47a.tmp)

13 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsx8e61.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (ff2f6bacae4cabe3425a88e5997b1994)

13 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsebbf5.tmp)

12 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsjb32e.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (9b0db9d26fcc13825a37ac320f71d6cd)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsy8031.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsc154e.tmp)

13 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsfa08a.tmp)

12 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nscf22b.tmp)

12 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nss9986.tmp)

1 / 68 (Adware)

http://sub.yentirp.info/installers/bi_downloader/.../setup.exe (nsl8db.tmp)

Related Domains

drivercardusa.info

forallwebestv.info

getdottamy.info

getusaaall.info

installbox1.info

reportbox3.info

securemyfun.info

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.