home

www.cityclearcurrent.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
cityclearcurrent.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OpenCandy.Installer (L), (M), PUP.InstallCore.Huaxinwa.Installer.Meta (M)
100.00%

ESET NOD32
Win32/OpenCandy.A potentially unsafe application, Win32/InstallCore.AFF.gen potentially unwanted application
50.00%

VIPRE Antivirus
Threat.4150696
18.75%

Kaspersky
not-a-virus:AdWare.Win32.OpenCandy
6.25%

The domain www.cityclearcurrent.com has been seen to resolve to the following 14 IP addresses.

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 7, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 3, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 3, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 3, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 3, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 5, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 5, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 5, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
May 22, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 22, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 22, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 22, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 22, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
May 22, 2016

File downloads found at URLs served by www.cityclearcurrent.com.

1 / 68      (PUP)
http://www.cityclearcurrent.com/WVl6OTRQVU5uVFZSSE5GVlFNMGx3TkdaMk9XMU1Va3AzY25waGQzVk5RMko2TWt4MWNHTTFNVlJSVWpJM1dXc2xNMFFtWXoweGIzVkdUVWhDTkhBNVprVnhZMXBOUzBWS1Z6WjFlRm9sTWtaT0pUSkdZMjlXU0RSMVQzRnlRazVqVmtOQ2VrSmpOVmRIVTBrNEpUSkNOMWs1WmsxamNFeEpUbWxxTmxKemFGSkdibmg2TTNoUE9HWkZXSFZyTVhkTFlsVmljVWwxVUdWNmRISWxNa1l3SlRKQ04zRjBPVTE1Y210SWNIRm5iMUJyWlZWeVVXTldhR0pFYUhGc04wNG1aRzkzYm14dllXUkJjejFHY21WbFVHaHZkRzlUYkdsa1pYTm9iM2ROWVd0bGNpNWxlR1VtWm1Gc2JHSmhZMnRmZFhKc1BXaDBkSEFsTTBFbE1rWWxNa1ozZDNjdVpHOTNibXh2WVdSdmJtbGpMbU52YlNVeVJtWnlaV1ZoZFdScGIzWnBaR1Z2YzI5bWRDNWpiMjBsTWtabWFXeGxjMlJ2ZDI1c2IyRmtKVEpHUm5KbFpWQm9iM1J2VTJ4cFpHVnphRzkzVFdGclpYSmZTVk11WlhobA==  (freephotoslideshowmaker.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.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  (freedvdripperplatinum.exe)

1 / 68      (Malware)
http://www.cityclearcurrent.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  (coolrecordeditpro.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.com/WVl6OTRQVWxJYlhWWVJFdE5ZelUyZVV0eGMwbGFaR1o2VTJvd2EyaFZKVEpDTlVsd1VWaGhUeVV5Um5WUEpUSkNRM2sxTVRnbE0wUW1ZejFHVVRGYU1tOHhjemwwVTB0MmMwbDNXVVJKZEVOc1dGZExWRlJIU2tKalJHZHdSRzEwVWlVeVJrNXFWV1ExU1RKeFZVeEVkRmcxZHpjNVJFWnBKVEpDWWtoTFYwbGxORlZRWjNOQ01FMUhUbEExZFRFM1NUTjJka0kyYUhsSWJIZFVUV3hSV1RWNVltTnhVRlpOWm1GdmVVVkpTWHBtT1doclNVbE9Vbm8zVDA5dmNVMG1aRzkzYm14dllXUkJjejFHY21WbFYybEdhVWh2ZEhOd2IzUXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHZDNkM0xtUnZkMjVzYjJGa2IyNXBZeTVqYjIwbE1rWm1jbVZsTFhkcFpta3RhRzkwYzNCdmRDNWpiMjBsTWtabWFXeGxjMlJ2ZDI1c2IyRmtKVEpHUm5KbFpWZHBSbWxJYjNSemNHOTBYMGxUTG1WNFpRPT0=  (freewifihotspot.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.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  (freesoundrecorder.exe)

2 / 68      (PUP)
http://www.cityclearcurrent.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  (freeyoutubedownloaderhd.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.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  (freewifihotspot.exe)

2 / 68      (PUP)
http://www.cityclearcurrent.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  (freeavimpegwmvmp4flvvideojoiner.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.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  (freedvdtoavimp4wmvmpeg3gpflvconverter.exe)

3 / 68      (PUP)
http://www.cityclearcurrent.com/WVl6OTRQVEpPVFZsU1RIWnZZemxrYjJWc1RYcE1WMlIzVjFOT2IzaElXa1JRY3pSMFRVeHdiU1V5UWlVeVJsZHNNMlZaSlRORUptTTlOelozUTB0Q1FqWnllRGhGU1dKdlRTVXlSbTh3UjFNMVdUQjRhVU53UzAxd1lXUmxXRVpSVFhCS1YyOUJZbTl4TkZwcFJpVXlRbmxYT0hSWFRrdFdVSGhKY21oUmR6SkdaVXR1VmxKaE5rOTFSV3MzVUZSdVRXMDNaRUl5Y3pWa2RYWnFkMjlKVDAxb2QxVnRaMDUxY3pCU2NuWXlWVmxuVkdvemJUSWxNa1owU1VRbE1rWlJjQ1prYjNkdWJHOWhaRUZ6UFVaeVpXVlhhVVpwU0c5MGMzQnZkQzVsZUdVbVptRnNiR0poWTJ0ZmRYSnNQV2gwZEhBbE0wRWxNa1lsTWtaM2QzY3VaRzkzYm14dllXUnZibWxqTG1OdmJTVXlSbVp5WldVdGQybG1hUzFvYjNSemNHOTBMbU52YlNVeVJtWnBiR1Z6Wkc5M2JteHZZV1FsTWtaR2NtVmxWMmxHYVVodmRITndiM1JmU1ZNdVpYaGw=  (freewifihotspot_is.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.com/WVl6OTRQWEYyUmtGSldIRlFORU53VG5OMGJqQjNWbGxvWlVWWldVZERaMkY2UWxaNlZtOVFkMWxrUVcxUFZWa2xNMFFtWXowbE1rSjJOa2xTT0ZONU5YTldWVTF0YTFsUVoxRmtkRlZrTmxablNqaDJUa0ZRZUdKeU5WTlllRkFsTWtKdFdYUjBaSEUzZEV0bmJtZDFURTkwWnpWQ2JuSmlhazBsTWtadEpUSkdWRXQxVDNCS2NISkJTa0ZQZVc5dWMyeFBUWGRNTUd4NWFHNUxXRFFsTWtKSUpUSkdVU1V5UWtOeFJqZDJhRzAxZVRoellVMVRkM1pPUVhack4xSk9TVzlWSm1SdmQyNXNiMkZrUVhNOVJuSmxaVmRwUm1sSWIzUnpjRzkwTG1WNFpTWm1ZV3hzWW1GamExOTFjbXc5YUhSMGNDVXpRU1V5UmlVeVJuZDNkeTVrYjNkdWJHOWhaRzl1YVdNdVkyOXRKVEpHWm5KbFpTMTNhV1pwTFdodmRITndiM1F1WTI5dEpUSkdabWxzWlhOa2IzZHViRzloWkNVeVJrWnlaV1ZYYVVacFNHOTBjM0J2ZEY5SlV5NWxlR1U9  (freewifihotspot.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.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  (freewifihotspot.exe)

3 / 68      (PUP)
http://www.cityclearcurrent.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  (freeaudioconvertwizard.exe)

2 / 68      (PUP)
http://www.cityclearcurrent.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  (screenrecorderfree.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.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  (freewifihotspot.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.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  (freewifihotspot.exe)

1 / 68      (Malware)
http://www.cityclearcurrent.com/WVl6OTRQVFpXYUROUk5UbEljVTlqTkNVeVJucHhiMDlRVjFkdFkwZFdOeVV5UW1kek5rVnlTR0psTlVoTmQxWjZVQ1V5Um5NbE0wUW1ZejFPVFZwVE9TVXlSbXhKUzJWS05WTnpaemhzU1hobGVVVlBjbWxPU1dWSVYyeFdXVXhZZVVnbE1rSkxZVEJTY2tzek0xZFRjbHBRVEdKVGVGZFBjbmd4VEV3bE1rWjRWMVpvVG1aR2RsZzVWWEZ2WTNrek1VeEhKVEpDUVZWcGRIRnRjbWhUWkVVd2NrRlFjelkzWlVKWFowOTVWVEJIYlhORVVtbG1TQ1V5UW0xeU1IQTVWMEZ3ZFRFbVpHOTNibXh2WVdSQmN6MUdjbVZsUVhWa2FXOUZaR2wwYjNJdVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdkM2QzTG1SdmQyNXNiMkZrYjI1cFl5NWpiMjBsTWtabWNtVmxMV0YxWkdsdkxXVmthWFJ2Y2k1amIyMGxNa1ptYVd4bGMyUnZkMjVzYjJGa0pUSkdSbkpsWlVGMVpHbHZSV1JwZEc5eVgwbFRMbVY0WlE9PQ==  (107327cf_stp.exe)

1 / 68      (PUP)
http://www.cityclearcurrent.com/c?x=NAGKhLVJty9JsWVglEFn90c03DwdJciyBEKzWsJTtsQ=&c=RCSFnYwhFFNI0ZEh875f8FmuyBmL54wH4qlBiygaFGJu4 YthWI3hTsXhdruuw9RCuHk6Jh sZn3s2HdYPxQOlsES/YNtE8UdNf1QDRCPnO8PdlLR/p9oWzCLZpb33OJ&downloadAs=FastStartup.exe&fallback_url=http://www.downloadonic.com/faststartup.net/.../FastStartup_IS.exe  (5fa9f1520094000324d6487eb88dccae)

3 / 68      (PUP)
http://www.cityclearcurrent.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  (allfreeyoutubetomp3converter.exe)

3 / 68      (PUP)
http://www.cityclearcurrent.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  (audioextractorforfree.exe)

2 / 68      (PUP)
http://www.cityclearcurrent.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  (coolyoutubetomp3converter.exe)

The following 23 files have been seen to comunicate with www.cityclearcurrent.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.