home

www-squid.cluster12.fb-hosting-apps.com

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain www-squid.cluster12.fb-hosting-apps.com is registered by proxy through DOMAIN STOPOVER LLC and was originally registered in March of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
DOMAIN STOPOVER LLC

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Wednesday, March 23, 2016

Expires date:
Thursday, March 23, 2017

Updated date:
Wednesday, March 23, 2016

Root domain:
fb-hosting-apps.com

Whois:
5 fb-hosting-apps.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Ukra2006.w, PUP.Installer.Ukra2006.p, PUP.Installer.Ukra2006.s, PUP.Installer.Ukra2006.?, PUP.Installer.Ukra2006.t, Threat.Win.Reputation.IMP, PUP.Amonetize.Ukra2006.Bundler (M), PUP.Amonetize (M)
100.00%

Sophos
Amonetize, Amonetizer
78.79%

AVG
Ukra, Generic, Adware BundleApp.CUB
78.79%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize
75.76%

ESET NOD32
Win32/Amonetize.BT (variant), Win32/Amonetize.BW (variant), Win32/Amonetize.BY (variant)
75.76%

Baidu Antivirus
Adware.Win32.Amonetize
72.73%

Dr.Web
Adware.Downware.8798, Adware.Downware.8818, Adware.Downware.8868, Adware.Downware.8860
69.70%

AhnLab V3 Security
PUP/Win32.Amonetize
69.70%

Avira AntiVirus
ADWARE/Adware.Gen4, Adware/Amonetize.519376.14, Adware/Amonetize.519376.24, Adware/Amonetize.519888.7, Adware/Amonetize.kpa
66.67%

NANO AntiVirus
Riskware.Win32.Downware.dgtmls, Riskware.Win32.Downware.dgsnhp, Riskware.Win32.Downware.dhaxhs, Riskware.Win32.Downware.dgzodg
60.61%

McAfee
Artemis!7C254E3442E5, Artemis!4DEA3BC51530, Artemis!F1BEDD9E1845, Artemis!B7855FEEC668, Artemis!E8EF27780FC3, Artemis!4B202011C182, Artemis!C22B3C7EB41F, Artemis!86834281A11C, Artemis!7861591E6CE3
60.61%

Malwarebytes
PUP.Optional.Amonetize, PUP.Optional.Bundler
57.58%

Fortinet FortiGate
Riskware/Amonetize, Adware/Amonetize
42.42%

MicroWorld eScan
Gen:Variant.Kazy.472536, Gen:Variant.Graftor.161218, Gen:Variant.Application.Bundler.Amonetize.15, Gen:Variant.Adware.Graftor.167075, Gen:Variant.Application.Bundler.Amonetize.18
33.33%

Bitdefender
Gen:Variant.Kazy.472536, Gen:Variant.Graftor.161610, Gen:Variant.Application.Bundler.Amonetize.15, Gen:Variant.Adware.Graftor.167075
33.33%

The domain www-squid.cluster12.fb-hosting-apps.com has been seen to resolve to the following 6 IP addresses.

185.53.177.10
July 20, 2016

185.53.179.9
April 12, 2016

54.72.130.67
ns1.ibspark.com
January 27, 2016

92.242.140.21
unallocated.barefruit.co.uk
May 3, 2015

104.28.21.113
October 20, 2014

104.28.20.113
October 20, 2014

File downloads found at URLs served by www-squid.cluster12.fb-hosting-apps.com.

1 / 68      (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=Games.rar_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-10-24T17:06:05.135014 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=Games.rar&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-24T17:06:05.135014 00:00&parameter=Games.rar&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-24T17:06:05.135014 00:00&parameter=Games.rar&ti1=1460000&ti2=0&ti3=DD1_2014-10-24T17:06:05.135014 00:00  (games.rar__3516_i1383397837_il4736551.exe)

15 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=crying girls sketches_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-10-15T05:43:53.440394 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=crying girls sketches&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-15T05:43:53.440394 00:00&parameter=crying girls sketches&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-15T05:43:53.440394 00:00&parameter=crying girls sketches&ti1=1460000&ti2=0&ti3=DD1_2014-10-15T05:43:53.440394 00:00  (codec for mv2 player__3516_i1373158224_il1032311.exe)

1 / 68      (Malware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=nvidia geforce 210 1gb ddr3 driver_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:09.785491 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=nvidia geforce 210 1gb ddr3 driver&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:09.785491 00:00&parameter=nvidia geforce 210 1gb ddr3 driver&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:09.785491 00:00&parameter=nvidia geforce 210 1gb ddr3 driver&ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:09.785491 00:00  (nvidia geforce 210 1gb ddr3 driver__3038_i1378982876_il3249704.exe)

1 / 68      (Malware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=nvidia geforce 210 1gb ddr3 driver_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:32.373789 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=nvidia geforce 210 1gb ddr3 driver&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:32.373789 00:00&parameter=nvidia geforce 210 1gb ddr3 driver&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:32.373789 00:00&parameter=nvidia geforce 210 1gb ddr3 driver&ti1=1500000&ti2=0&ti3=DD1_2014-10-20T08:43:32.373789 00:00  (nvidia geforce 210 1gb ddr3 driver__3516_i1378983043_il3249771.exe)

13 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=blog musique aim a nou_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-10-15T15:35:44.796737 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=blog musique aim a nou&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-15T15:35:44.796737 00:00&parameter=blog musique aim a nou&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-15T15:35:44.796737 00:00&parameter=blog musique aim a nou&ti1=1405000&ti2=0&ti3=DD1_2014-10-15T15:35:44.796737 00:00  (skype blocker v5 92__3516_i1373569203_il1184367.exe)

15 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=cambridge objective first certificate cd_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-24T11:49:00.983368 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=cambridge objective first certificate cd&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-24T11:49:00.983368 00:00&parameter=cambridge objective first certificate cd&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-24T11:49:00.983368 00:00&parameter=cambridge objective first certificate cd&ti1=1405000&ti2=2&ti3=DD1_2014-10-24T11:49:00.983368 00:00  (all stars 2- old stars__3515_i1383103566_il4664788.exe)

14 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=tdu 2 save game_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-16T16:27:05.573910 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=tdu 2 save game&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-16T16:27:05.573910 00:00&parameter=tdu 2 save game&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-16T16:27:05.573910 00:00&parameter=tdu 2 save game&ti1=1405000&ti2=2&ti3=DD1_2014-10-16T16:27:05.573910 00:00  (www-squid_cluster12_fb-hosting-apps_com)

8 / 68      (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=hamdy a taha solution manual_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-19T09:12:34.076805 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=hamdy a taha solution manual&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-19T09:12:34.076805 00:00&parameter=hamdy a taha solution manual&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-19T09:12:34.076805 00:00&parameter=hamdy a taha solution manual&ti1=1405000&ti2=2&ti3=DD1_2014-10-19T09:12:34.076805 00:00  (myegy.progdvb.7.07.0.x32.elk ng.rar__3038_i1378084246_il2936754.exe)

1 / 68      (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=convertir word en pdf téléchargement gratuit_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-10-21T00:01:47.854460 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=convertir word en pdf téléchargement gratuit&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-21T00:01:47.854460 00:00&parameter=convertir word en pdf téléchargement gratuit&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-21T00:01:47.854460 00:00&parameter=convertir word en pdf téléchargement gratuit&ti1=1405000&ti2=0&ti3=DD1_2014-10-21T00:01:47.854460 00:00  (minecraft air force base map__3039_i1379640541_il3478436.exe)

11 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=principles of physics halliday 9th edition_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-17T08:03:02.622380 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=principles of physics halliday 9th edition&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-17T08:03:02.622380 00:00&parameter=principles of physics halliday 9th edition&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-17T08:03:02.622380 00:00&parameter=principles of physics halliday 9th edition&ti1=1405000&ti2=2&ti3=DD1_2014-10-17T08:03:02.622380 00:00  (windows 10 black tech preview x64.egyup.com.iso__3515_i1375707805_il2032722.exe)

13 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=tunis 7 ardia en direct gratuit_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-10-15T17:40:32.891489 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=tunis 7 ardia en direct gratuit&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-15T17:40:32.891489 00:00&parameter=tunis 7 ardia en direct gratuit&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-15T17:40:32.891489 00:00&parameter=tunis 7 ardia en direct gratuit&ti1=1405000&ti2=0&ti3=DD1_2014-10-15T17:40:32.891489 00:00  (badoo hack pack version 1.0__3038_i1373965356_il1332259.exe)

13 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=think first certificate audio_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-10-17T21:05:59.265486 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=think first certificate audio&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-17T21:05:59.265486 00:00&parameter=think first certificate audio&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-17T21:05:59.265486 00:00&parameter=think first certificate audio&ti1=1405000&ti2=0&ti3=DD1_2014-10-17T21:05:59.265486 00:00  ({sd memory card formatting software.rar}__3516_i1376293622_il2280220.exe)

14 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=designer shisha_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-10-17T11:46:47.223571 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=designer shisha&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-17T11:46:47.223571 00:00&parameter=designer shisha&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-17T11:46:47.223571 00:00&parameter=designer shisha&ti1=1460000&ti2=0&ti3=DD1_2014-10-17T11:46:47.223571 00:00  (avenir next font__3039_i1375938307_il2135947.exe)

1 / 68      (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=language leader coursebook pdf_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-18T16:44:06.496564 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=language leader coursebook pdf&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-18T16:44:06.496564 00:00&parameter=language leader coursebook pdf&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-18T16:44:06.496564 00:00&parameter=language leader coursebook pdf&ti1=1405000&ti2=2&ti3=DD1_2014-10-18T16:44:06.496564 00:00  (carte anniversaire 18 ans gratuit__3515_i1377490194_il2719245.exe)

9 / 68      (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=abu dhabi al oula tv en direct gratuit_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-10-16T03:31:31.359362 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=abu dhabi al oula tv en direct gratuit&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-16T03:31:31.359362 00:00&parameter=abu dhabi al oula tv en direct gratuit&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-16T03:31:31.359362 00:00&parameter=abu dhabi al oula tv en direct gratuit&ti1=1500000&ti2=0&ti3=DD1_2014-10-16T03:31:31.359362 00:00  (hitomi my stepsister__3516_i1374180760_il1421032.exe)

15 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=blueprint css framework_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-10-14T17:50:58.620888 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=blueprint css framework&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-14T17:50:58.620888 00:00&parameter=blueprint css framework&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-14T17:50:58.620888 00:00&parameter=blueprint css framework&ti1=1405000&ti2=0&ti3=DD1_2014-10-14T17:50:58.620888 00:00  (cy.me.sh.del.6.0.6731.by.mr..hero.rar__3039_i1372667156_il818300.exe)

31 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=master p rock it_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-10-14T04:31:12.425098 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=master p rock it&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-14T04:31:12.425098 00:00&parameter=master p rock it&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-14T04:31:12.425098 00:00&parameter=master p rock it&ti1=1460000&ti2=0&ti3=DD1_2014-10-14T04:31:12.425098 00:00  (rust [cracked] [no steam] [eng] (v19.12.2013)__3515_i1371848067_il493562.exe)

1 / 68      (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=musique take my breath away_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-10-18T01:58:41.671141 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=musique take my breath away&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-18T01:58:41.671141 00:00&parameter=musique take my breath away&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-18T01:58:41.671141 00:00&parameter=musique take my breath away&ti1=1405000&ti2=0&ti3=DD1_2014-10-18T01:58:41.671141 00:00  (7loader_1.6_2_by_hazar__3039_i1376716104_il2451502.exe)

13 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=musique zou le zebre_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-10-17T14:39:11.845318 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=musique zou le zebre&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-17T14:39:11.845318 00:00&parameter=musique zou le zebre&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-17T14:39:11.845318 00:00&parameter=musique zou le zebre&ti1=1405000&ti2=0&ti3=DD1_2014-10-17T14:39:11.845318 00:00  (office 2013 profesional__3039_i1376182074_il2240366.exe)

1 / 68      (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=minecraft pokemon trainer skin_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-18T00:11:08.175487 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=minecraft pokemon trainer skin&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-18T00:11:08.175487 00:00&parameter=minecraft pokemon trainer skin&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-18T00:11:08.175487 00:00&parameter=minecraft pokemon trainer skin&ti1=1405000&ti2=2&ti3=DD1_2014-10-18T00:11:08.175487 00:00  (minecraft pokemon trainer skin__3039_i1376672452_il2431588.exe)

1 / 68      (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=minecraft air force base map_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-20T22:44:19.507759 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=minecraft air force base map&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-20T22:44:19.507759 00:00&parameter=minecraft air force base map&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-20T22:44:19.507759 00:00&parameter=minecraft air force base map&ti1=1405000&ti2=2&ti3=DD1_2014-10-20T22:44:19.507759 00:00  (minecraft air force base map__3039_i1379640541_il3478436.exe)

31 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=mine little pony skin maker_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-14T23:55:38.275286 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=mine little pony skin maker&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-14T23:55:38.275286 00:00&parameter=mine little pony skin maker&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-14T23:55:38.275286 00:00&parameter=mine little pony skin maker&ti1=1405000&ti2=2&ti3=DD1_2014-10-14T23:55:38.275286 00:00  (mine little pony skin maker__3515_i1372902083_il923990.exe)

9 / 68      (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=goodie mob soul food zip_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-16T03:17:17.544927 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=goodie mob soul food zip&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-16T03:17:17.544927 00:00&parameter=goodie mob soul food zip&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-16T03:17:17.544927 00:00&parameter=goodie mob soul food zip&ti1=1405000&ti2=2&ti3=DD1_2014-10-16T03:17:17.544927 00:00  (hitomi my stepsister__3516_i1374180760_il1421032.exe)

17 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=gza liquid swords zip_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-25T01:55:44.842014 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=gza liquid swords zip&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-25T01:55:44.842014 00:00&parameter=gza liquid swords zip&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-25T01:55:44.842014 00:00&parameter=gza liquid swords zip&ti1=1405000&ti2=2&ti3=DD1_2014-10-25T01:55:44.842014 00:00  (gza liquid swords zip__3039_i1383783550_il4851229.exe)

30 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=administracion stephen robbins pdf_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-21T23:57:50.523474 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=administracion stephen robbins pdf&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-21T23:57:50.523474 00:00&parameter=administracion stephen robbins pdf&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-21T23:57:50.523474 00:00&parameter=administracion stephen robbins pdf&ti1=1405000&ti2=2&ti3=DD1_2014-10-21T23:57:50.523474 00:00  (administracion stephen robbins pdf__3516_i1380673309_il3832220.exe)

19 / 68    (PUP)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=andy tavalodet mobarak_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-20T19:22:09.084803 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=andy tavalodet mobarak&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-20T19:22:09.084803 00:00&parameter=andy tavalodet mobarak&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-20T19:22:09.084803 00:00&parameter=andy tavalodet mobarak&ti1=1405000&ti2=2&ti3=DD1_2014-10-20T19:22:09.084803 00:00  (andy tavalodet mobarak__3516_i1379501011_il3428654.exe)

20 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=give peace a chance_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-10-13T17:42:45.833409 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=give peace a chance&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-13T17:42:45.833409 00:00&parameter=give peace a chance&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-13T17:42:45.833409 00:00&parameter=give peace a chance&ti1=1460000&ti2=0&ti3=DD1_2014-10-13T17:42:45.833409 00:00  (htc unlock codes calculator__3515_i1371393195_il390615.exe)

15 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=good truth or dare questions to ask a girl over skype_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-10-14T19:10:37.505155 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=good truth or dare questions to ask a girl over skype&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-14T19:10:37.505155 00:00&parameter=good truth or dare questions to ask a girl over skype&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-10-14T19:10:37.505155 00:00&parameter=good trut  (cy.me.sh.del.6.0.6731.by.mr..hero.rar__3039_i1372667156_il818300.exe)

21 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=new english file advanced class cd_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-22T13:28:16.048828 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=new english file advanced class cd&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-22T13:28:16.048828 00:00&parameter=new english file advanced class cd&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-22T13:28:16.048828 00:00&parameter=new english file advanced class cd&ti1=1405000&ti2=2  (pro facebook hack v 2.0__3038_i1381148935_il3989861.exe)

21 / 68    (Adware)
http://www-squid.cluster12.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=new english file advanced class cd_Downloader&instid[appsetupurl]=http://go.downloadboutique.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-22T13:28:10.808602 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.downloadboutique.com/d1/logo150x150.png&prefix=new english file advanced class cd&instid[thankyoupage]=http://download.downloadboutique.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-22T13:28:10.808602 00:00&parameter=new english file advanced class cd&instid[interrupted]=http://download.downloadboutique.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-22T13:28:10.808602 00:00&parameter=new english file advanced class cd&ti1=1405000&ti2=2  (pro facebook hack v 2.0__3038_i1381148935_il3989861.exe)

 
Latest 30 of 60 download URLs

The following 372 files have been seen to comunicate with www-squid.cluster12.fb-hosting-apps.com in live environments.

TCP » 54.72.130.67:80
simplefilesupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall12590625.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall5322109.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall190602.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
googleupdate.exe

TCP » 54.72.130.67:80
browserserver.exe

TCP » 54.72.130.67:80
sm.exe (System Monitor)

TCP » 54.72.130.67:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.72.130.67:80
uninstall129231.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
sfupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 54.72.130.67:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 54.72.130.67:80
pepperzip.exe

TCP » 54.72.130.67:80
internetenhancer.exe (Internet Enhancer)

TCP » 54.72.130.67:80
ssn.exe (ssn)

TCP » 54.72.130.67:443
mintcast_updater_service.exe (AutomaticUpdater)

 
Latest 20 of 384 files

URL:
http://www-squid.cluster12.fb-hosting-apps.com/

Title:
“fb-hosting-apps.com”

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.