home

www.appclearfiles.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
appclearfiles.com

Scanner detections:
Detections  (92% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M)
92.31%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
7.69%

F-Secure
Application:W32/Generic.70053c248f!Online
7.69%

The domain www.appclearfiles.com has been seen to resolve to the following 16 IP addresses.

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 27, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 27, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
August 27, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 27, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
August 27, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 17, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 19, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 1, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 1, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 1, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 1, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 1, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 1, 2016

File downloads found at URLs served by www.appclearfiles.com.

2 / 68      (false positives)
http://www.appclearfiles.com/c?x=r8PNIUG33cTS1fWzCv8cJdg6NcoQcwYN45x7lYUkBpE=&c=NmXKzl99ciBP5Us5ry9zMdg5swFJWTcLTgSgyVwcs8MtE6unEeCWrwwpOlWRgggVILrRqCVcou2uYcmW/HhLgXO1P9JHCStVKhUA9xolZmoGVRjr1xwTTVbApdgf7FDL&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe  (wrar420.exe)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=XLDLmVqVFbMf92use0kktrR8PzpS6hm7iHpCn1YfrA4=&c=rbzWu9fM5XDpQEU7hgreOYZx IbqIUBQE3KisXwGHmF/xNCDHP4ZMTKnfbikOQ1ybtqNONXQAi3S7usSkev1VKHeDyGj5rQQC6C Q8yoXV9ooHfxui3ENHcIoJ NckXg&fallback_url=http://bi.sciagnij.pl/0/.../AutoMapa_6.17_1502_PL_demo.exe&downloadAs=installer_AutoMapa_sciagnij.exe  (icreinstall_installer_automapa_sciagnij.exe)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=qeF3T35 DFwtQ0OlDReA806PXdIhG4267HT2auNWrbo=&c=HbGignzr9csHnOzzLAjP8IWUDvM338SSX5Z3zwHOs6YM9svqNUBsjJgMTGf5eufSfSbm6s71u M9L4AqC5Ty1qkX 4nzO5j5cE80yEFPm4/Z4Qm9q0iKDSNVy 34mjAC&fallback_url=http://sourceforge.net/projects/gpsrecord/files/.../download?source=files&downloadAs=installer_GPS_Record_sciagnij.exe  (e37435a0304d3b167b4b1d05dfd4bd1f)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=6tWTqbLPaZCyRgcaQSwa3lwUExMThndN7WogS0Bb0Gc=&c=r xWeavq6X JYAJI95sUBBJkYnkeUSDWjnxsDXC85Y6Wh075uYT2xlSHLXfnQxr6bnBIMQBbVQxKPsTHbDxn5Kn/i4s0Yh5yuPN7tL54dK Ij6tX4B2OPVkmECo F2w9&fallback_url=http://bi.sciagnij.pl/0/.../uTorrent.exe&downloadAs=installer_uTorrent_sciagnij.exe  (icreinstall_installer_utorrent_sciagnij.exe)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=wYsdZMmTyXU/TvYeVoXDHscyvTA5EJiMGPIh3fOxNa4=&c=AHtMqbiiECJkHJO5WbtM0h8X8AWG63XWUm2V28SxoTZEg7IVPUA4ksqX8aC00Mj/Qu5Hd6liHHS950zajGwMKMFyhShwbiWWMoJJYvUvlualvP7Jp6vNQDoXVoA06ZLY&fallback_url=http://bi.sciagnij.pl/0/.../dxwebsetup.exe&downloadAs=installer_DirectX_11_sciagnij.exe  (75cdb520f375f4ea1108df44a33b2d07)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=mRCcgEOH5ceeobiaPhPbWagM98PcdqHG6O5IxO6exio=&c=iNu04EzwTWyTiIyA3wBDOHvmmq6R6vSHxdmPSqYMz3tzWFKjwHfDL6eAt8plKTcCPn7PHpfqnqk4KuuL35iZBfju5E1xn8M6oROPCT4TEPhgEFqfOR8acmfwZYH/o7lK&fallback_url=http://bi.sciagnij.pl/0/.../woz_demo.zip&downloadAs=installer_World_of_Zoo_sciagnij.exe  (2344e9790d97afdb1f6c9b414f6f1167)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=8lpjmmat9J4DyGW1Q5XC9sgJQvgsSb8RlaqI7Uj7ar8=&c=/YH60s6x59 0WxNClwkBKzBM JfQub2ADqzZDPpPcgPfy5pGoy847xuGpyyjajSfYERIjNjvoWv4T/uPrj4QYNS8ywG/5Or5Y6p4kcrIb9OwU8lsEwF7xPPfoL3NCDFE&fallback_url=http://bi.sciagnij.pl/0/.../zyczu-mc.zip&downloadAs=installer_Minecraft_Launcher_by_Zyczu_sciagnij.exe  (62acefc2d4bb16747b166dd23f8244de)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=uCZ2bgBzs y2Hajw6ygbzFEwE8JsxC/Rlk2jHzTcH4Q=&c=IDn54iXh6XyliuU6ffrPzghUvqQ9xwalx1vSiSftmRJbwMNbcE4jR7clY7Z2zcDDmHZXQz909/Sbz x3sq3YP24jzVvLYIavVeSLov1q4BvN SHftmYcp5jRv8GLydYA&fallback_url=https://.../adblockplusie-1.1.exe&downloadAs=installer_AdBlock_Plus_sciagnij.exe  (3d402a441e9a37a4b0ef73df42e79932)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=flK BtJQS344wnRSrUVvlNInGHbIQiqaNrZyy1xIRoo=&c=ThhKIDTVoNFc8kw0xl EvdN7UvHNp0P5ewgyKCkqswPsphQGcZQyegQRBP2YkYYU3FZkS46ZI6Ni7Tdc2yoQeqrPdQ62z/2SE4v t6aWt5hDpQ9h9elClTl8EMxAeMEw&fallback_url=https://.../adblockplusie-1.1.exe&downloadAs=installer_IE_AdBlock_sciagnij.exe  (72f84ef4880f608d4e198f51c682b02d)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=TY2DorIIITyclnOv65A7xcSVuOZb5mGWWSHugQtTSaw=&c=HL6k41cyObxMqjXEW8v7tdhbILMg EfxgFc4LTj62v2bRR7ZAIc3WBpc1YL4PoPfEBe3gQTkuxZbvRk0mroBtG14SMemFVD84FpaoWipd23VwveRDOwbChQRVLZcJ8TK&fallback_url=http://office.microsoft.com/pl-pl/.../bezpatna-wersja-probna-produkty-microsoft-office-i-office-365-FX102858196.aspx&downloadAs=installer_Microsoft_PowerPoint_sciagnij.exe  (icreinstall_installer_microsoft_powerpoint_sciagnij.exe)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=xFrIHCa8szTpToGbVVFDGz2L6pzSKDvLSXQcG8bN88Y=&c=NgQlruI2y1YyzepakCVZNxiB1uZ2wVY/O5g9ebOxeoTM6A4ZjiAAKxegNPH2WOanwLPhrPEgEeyvBxwouplK1FRmDALvKPVeKxQYA/VuZLwSEKSgbKB73QDIJcl6YcGh&fallback_url=http://sourceforge.net/projects/childsplay/files/.../download&downloadAs=installer_Childsplay_sciagnij.exe  (7df28e758a9529e7dd7233f989a7d840)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=76FwA6ikH0xbx3dmHf4tDz4BBk8/238D8R0i7PngnkQ=&c=zfmPKjr6aCyEnsUkYDKZlRo/BOcstoGs8ad9KnPFDGyEo1/SVj8d53h6rWhOYQa9E8Ef46R8NyhDmyeU7n/SZz6RG6kMVrc5pQoXzURoo 3SU3N6WBkMeI4cs1KyPE3p&fallback_url=http://bi.sciagnij.pl/0/.../crazylunch.zip&downloadAs=installer_Crazy_Lunch_sciagnij.exe  (ead7221bdcea49c61b2a65ebe60fc48c)

1 / 68      (Adware)
http://www.appclearfiles.com/c?x=Rs5Ejf08aDmEZEgDKUQppvp7JU22MzQHURtGA hmcMA=&c=Y26gYkufl8evL2DdhbKEBhmU7EcGu7dtBn7kkBtsaUAKf1Bt9O igtIbT/baYFzTVbU2piBG8qM2pRkmWV7RvzsjC6TtBs0p0SeM2Z1qWyafP2v6bKI6Qi udF0yLh9u&fallback_url=http://www.spolszczenia.pl/.../4ffc09c15a342.Mass3_PL_FIX_v2.0.rar&downloadAs=installer_Mass_Effect_3_spolszczenie_sciagnij.exe  ({blocked}.exe)

The following 27 files have been seen to comunicate with www.appclearfiles.com in live environments.

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
client.exe (ClientWrapper)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

 
Latest 20 of 61 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.