home

www.download-more-files.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
download-more-files.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Amonetizeltd.DD, PUP.Amonetize.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.Amonetize
50.00%

NANO AntiVirus
Riskware.Win32.Amonetize.dffaha
50.00%

Agnitum Outpost
PUA.Amonetize
50.00%

Dr.Web
Adware.Downware.8564
50.00%

VIPRE Antivirus
Amonetize
50.00%

Sophos
Generic PUA MK
50.00%

Avira AntiVirus
ADWARE/Adware.Gen
50.00%

AhnLab V3 Security
PUP/Win32.Amonetize
50.00%

Baidu Antivirus
Adware.Win32.Amonetize
50.00%

ESET NOD32
Win32/Amonetize.BO (variant)
50.00%

AVG
Downloader.Generic14
50.00%

Qihoo 360 Security
Win32/Trojan.Adware.37e
50.00%

Emsisoft Anti-Malware
Win32.Virtob.Gen.12
50.00%

F-Prot
W32/Virut.E.gen
50.00%

The domain www.download-more-files.com has been seen to resolve to the following IP address.

54.245.104.86
ec2-54-245-104-86.us-west-2.compute.amazonaws.com
December 19, 2014

File downloads found at URLs served by www.download-more-files.com.

1 / 68      (Adware)
http://www.download-more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=14508046881411232699&AMt=1411232711453&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__6741_i1328260085_il37.exe)

1 / 68      (Adware)
http://www.download-more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=15903659591411231223&AMt=1411231237136&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__6741_i1328260085_il37.exe)

38 / 68    (Adware)
http://www.download-more-files.com/allddT.html?myref=dm&campid=5565&version=1.1.5.26&instid[appname]=Black Ice&instid[appsetupurl]=http://www.zoftwarez.com/ppi/GameCheatsGenerator.exe&instid[appimageurl]=http://www.zoftwarez.com/wp-content/uploads/2014/04/Black-Ice.jpg&prefix=Black Ice&instid[thankyoupage]=http://www.zoftwarez.com&AMt=1411223054454&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (minecraftinstaller__2490_il62.exe)

The following 4 files have been seen to comunicate with www.download-more-files.com in live environments.

TCP » 54.245.104.86:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.245.104.86:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.245.104.86:80
new_chrome.exe (Google Chrome by Google)

TCP » 54.245.104.86:80
Project1.exe (Pino by Microsoft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.