home

www.better-file.com

Domain Information

Server location:
Florida, United States (US)

ASN:
AS32787 PROLEXIC-TECHNOLOGIES-DDOS-MITIGATION-NETWORK - Prolexic Technologies, Inc.,US

Root domain:
better-file.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonetize.InstallPath.Installer (M), PUP.Amonetize.InstallP.Installer (M)
100.00%

MicroWorld eScan
Gen:Variant.Application.Bundler.Amonetize.15
50.00%

Quick Heal
AdWare.Amonetize.r5 (Not a Virus)
50.00%

McAfee
PUP-FQT
50.00%

Malwarebytes
PUP.Optional.Amonetize
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

K7 AntiVirus
Trojan
50.00%

NANO AntiVirus
Riskware.Win32.Downware.dfqeij
50.00%

Trend Micro House Call
TROJ_GEN.R00JC0EJD14
50.00%

avast!
Win32:Amonetize-EI [PUP]
50.00%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize
50.00%

Bitdefender
Gen:Variant.Application.Bundler.Amonetize.15
50.00%

Agnitum Outpost
PUA.Amonetize
50.00%

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.Amonetize.15
50.00%

Sophos
Generic PUA JL
50.00%

The domain www.better-file.com has been seen to resolve to the following IP address.

72.52.4.91
unknown.prolexic.com
August 3, 2016

File downloads found at URLs served by www.better-file.com.

1 / 68      (Adware)
http://www.better-file.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=31951311091411445117&AMt=1411445137452&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i1334053252_il39.exe)

30 / 68    (Adware)
http://www.better-file.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=11985655091411452439&AMt=1411452421061&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i1334177774_il39.exe)

The following 17 files have been seen to comunicate with www.better-file.com in live environments.

TCP » 72.52.4.91:80
jingling.exe

TCP » 72.52.4.91:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 72.52.4.91:80
crossbrowse.exe (Crossbrowse)

TCP » 72.52.4.91:80
hbpzabffmyx.exe

TCP » 72.52.4.91:80
pbiiuvda.exe

TCP » 72.52.4.91:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 72.52.4.91:80
winsysapp.exe

TCP » 72.52.4.91:80
chromeplugin.crx

TCP » 72.52.4.91:80
winalert.exe

TCP » 72.52.4.91:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 72.52.4.91:80
autoDENGI.exe (autoDENGI by autodengi.com)

TCP » 72.52.4.91:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 72.52.4.91:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 72.52.4.91:80
emuletorrent.exe

TCP » 72.52.4.91:8080
smu.exe (W by Search Module)

TCP » 72.52.4.91:80
ContentFinder.exe (ContentFinder by ContentFinder Company)

TCP » 72.52.4.91:80
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.