home

windll.dllsuite.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain windll.dllsuite.com is registered by proxy through ENOM, INC. and was originally registered in December of 2010. The hosted servers are located in Dallas, Texas within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Friday, December 31, 2010

Expires date:
Saturday, December 31, 2022

Updated date:
Monday, December 9, 2013

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.

Root domain:
dllsuite.com

Whois:
2 dllsuite.com records

The domain windll.dllsuite.com has been seen to resolve to the following IP address.

108.168.164.162
108.168.164.162-static.reverse.softlayer.com
February 6, 2014

File downloads found at URLs served by windll.dllsuite.com.

0 / 68
http://windll.dllsuite.com/Windows 7 Ultimate Edition Service Pack 1 32-bit/system32/driverstore/filerepository/prnbr00a.inf_x86_neutral_e9f0919e54780621/i386//brmzrd13.DLL  (d250e8540d33dad4b3ed9ec6330da3be)

0 / 68
http://windll.dllsuite.com/Windows 7 Ultimate Edition 32-bit/System32/DriverStore/FileRepository/oemprint.inf_x86_neutral_dca7bcb7115916d3/i386//TPPrndeu.dll  (402bf9a079623c4a22803f9b09586dee)

0 / 68
http://windll.dllsuite.com/Windows 7 Ultimate Edition Service Pack 1 32-bit/System32/DriverStore/FileRepository/oemprint.inf_x86_neutral_89ba53708c5cbb18/i386//TPPrnUIcsy.dll  (d1081401296362192519d726c145e9f5)

0 / 68
http://windll.dllsuite.com/Windows 7 Home Premium Edition Service Pack 1 64-bit/assembly/NativeImages_v2.0.50727_32/System.Windows.Forms/3afcd5168c7a6cb02eab99d7fd71e102//System.Windows.Forms.ni.dll  (936d80146803918d5d896659f4c6e736)

The following 8 files have been seen to comunicate with windll.dllsuite.com in live environments.

TCP » 108.168.164.162:80
dllsuite.exe

TCP » 108.168.164.162:80
dllsuite.exe

TCP » 108.168.164.162:80
dllsuite.exe

TCP » 108.168.164.162:80
dllsuite.exe

TCP » 108.168.164.162:80
ekrn.exe (ESET Smart Security by ESET)

TCP » 108.168.164.162:80
dllsuite.exe

TCP » 108.168.164.162:80
00697dad_10dc_crypt_io_copy.tmp

TCP » 108.168.164.162:8090
DLLSuite.exe (DLLSuite by VskSoft)

URL:
http://windll.dllsuite.com/

Web server:
Microsoft-IIS/7.0 (ASP.NET)

dlltool.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.