home

winzip.todownload.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
todownload.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.WeDownload, PUP.InstallCore.Installer.Installer (M), PUP.WeDownload.Bundler (M)
100.00%

MicroWorld eScan
Gen:Variant.Adware.Graftor.121372
33.33%

nProtect
Trojan-Clicker/W32.DownloadWare.1160856
33.33%

McAfee
Downloader-FMA!2A5878F4FF62
33.33%

Malwarebytes
PUP.Optional.Soft32.A
33.33%

K7 AntiVirus
Trojan
33.33%

NANO AntiVirus
Trojan.Win32.Siggen.cqteqe
33.33%

F-Prot
W32/Soft32Download.C.gen
33.33%

avast!
Win32:Downloader-TOV [PUP]
33.33%

Kaspersky
not-a-virus:AdWare.Win32.DownloadWare
33.33%

Bitdefender
Gen:Variant.Adware.Graftor.121372
33.33%

Agnitum Outpost
Adware.DownloadWare
33.33%

SUPERAntiSpyware
PUP.Downloader/Variant
33.33%

Lavasoft Ad-Aware
Gen:Variant.Adware.Graftor.121372
33.33%

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.121372
33.33%

The domain winzip.todownload.com has been seen to resolve to the following 2 IP addresses.

50.19.214.118
ec2-50-19-214-118.compute-1.amazonaws.com
May 27, 2016

50.16.204.217
ec2-50-16-204-217.compute-1.amazonaws.com
May 27, 2016

File downloads found at URLs served by winzip.todownload.com.

1 / 68      (Adware)
http://winzip.todownload.com/get/file/id/.../?lp=adwords&gclid=CMT3hamj1rcCFYFhMgodJQUAJg  (winzip setup.exe)

1 / 68      (Adware)
http://winzip.todownload.com/get/file/.../855119?lp=adwords&gclid=CIO3ssSdmbcCFZFr7AodhmMABQ  (winzip setup.exe)

35 / 68    (Adware)
http://winzip.todownload.com/get/file/id/.../?lp=adwords&tg=us&kw=Winzip&mt=e&ad=25224559638&pl=&ds=s&gclid=CLvLnPz-5LgCFYFhMgodkQsAXw  (winzip setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.