home

ultrafastdownloads.com

Domain Information

Server location:
British Virgin Islands, VG (VG)

ASN:
AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc,VG

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

K7 AntiVirus
Adware , Unwanted-Program
100.00%

avast!
Win32:GenMaliciousA-JPP [Adw], Win32:Adware-gen [Adw], Win32:GenMaliciousA-QMY [Adw]
100.00%

Dr.Web
Trojan.KillFiles.18730
100.00%

AhnLab V3 Security
PUP/Win32.Joedown
100.00%

McAfee
Artemis!E166D9DE050B, Artemis!3BE0FC78F39B, Artemis!857810254652, Artemis!6F1B82AC57B3
100.00%

ESET NOD32
MSIL/Adware.Joedown (variant)
100.00%

Fortinet FortiGate
Adware/Joedown
100.00%

Avira AntiVirus
Adware/Joedown.474840.1, ADWARE/Joedown.476896.15, ADWARE/Joedown.476896.10, ADWARE/Joedown.476896.13
100.00%

Agnitum Outpost
PUA.Joedown
75.00%

Comodo Security
ApplicUnwnt, Application.MSIL.Joedown.A
75.00%

Kaspersky
not-a-virus:AdWare.MSIL.Agent, not-a-virus:HEUR:AdWare.Win32.Generic, Trojan.Win32.StartPage
75.00%

Sophos
Generic PUA NF, Generic PUA AK (PUA), Generic PUA OC (PUA)
75.00%

Trend Micro House Call
Suspicious_GEN.F47V0218, Suspicious_GEN.F47V0416
50.00%

G Data
Win32.Application.Agent.WRG25H, Win32.Application.Agent.3TZOL4
50.00%

Panda Antivirus
Generic Suspicious
50.00%

The domain ultrafastdownloads.com has been seen to resolve to the following IP address.

204.11.56.48
July 2, 2016

File downloads found at URLs served by ultrafastdownloads.com.

19 / 68    (PUP)
http://ultrafastdownloads.com/downloader.aspx?s=3&filename=Vop&p=10446  (vop.exe)

9 / 68      (PUP)
http://ultrafastdownloads.com/downloader.aspx?s=2&filename=EsetNOD326.0.306.332Bit64BitTürkçeFullK&p=10493  (esetnod326.0.306.332bit64bittürkçefullk.exe)

19 / 68    (PUP)
http://ultrafastdownloads.com/downloader.aspx?s=2&filename=strandeddeep&p=  (onaylanmayan 619515.crdownload)

16 / 68    (PUP)
http://ultrafastdownloads.com/downloader.aspx?s=2&filename=gta3p&p=  (gta3p.exe)

The following 2 files have been seen to comunicate with ultrafastdownloads.com in live environments.

TCP » 204.11.56.48:80
chrome.crx

TCP » 204.11.56.48:80
chrome.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.