home

www.earthquake-file.com

Moniker Privacy Services  (Proxy Registrant)

Domain Information

The domain www.earthquake-file.com is registered by proxy through Moniker Online Services and was originally registered in September of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
Moniker Online Services

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Tuesday, September 23, 2014

Expires date:
Wednesday, September 23, 2015

Updated date:
Tuesday, September 23, 2014

Root domain:
earthquake-file.com

Whois:
1 earthquake-file.com record

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.DOZDEKORUM.I, PUP.Installer.VEBTORG.k, PUP.Installer.VEBTORG.AA, PUP.Installer.ShetefSolutionsConsulting1998.I, Threat.Win.Reputation.IMP, PUP.Amonetize.VEBTORG.Bundler (M), PUP.Amonetize.ShetefSolutionsConsulting1998.Bundler (M), PUP.Amonetize.ITLGROUP.Bundler (M), PUP.Amonetize.DOZDEKOR.Bundler (M), PUP.Amonetize.ShetefSo.Bundler (M), PUP.Amonetize (M)
100.00%

ESET NOD32
Win32/Amonetize.BT (variant), Win32/Amonetize.BW (variant), Win32/Amonetize.BY (variant), Win32/Amonetize.CK (variant), Win32/Amonetize.CS (variant)
37.78%

AhnLab V3 Security
PUP/Win32.Amonetize
33.33%

Dr.Web
Adware.Downware.8818, Adware.Downware.8860, Adware.Downware.8868, Adware.Downware.8876, Trojan.Amonetize.341, Trojan.Adfltnet.70
31.11%

Avira AntiVirus
ADWARE/Adware.Gen4, Adware/Amonetize.576704.7, Adware/Amonetize.574656, Adware/Amonetize.478400.1, Adware/Amonetize.477888
31.11%

McAfee
Artemis!7C254E3442E5, Artemis!EA1901016619, Artemis!45708F35FE52, Artemis!3FA32850FA0B, Artemis!56DEDAB5F2C3, Artemis!F1D479CB19CD, Artemis!6D74EE3210A8, Artemis!97DAB16580AF, Artemis!6DCAE2D07FE5
31.11%

AVG
Generic, BundleApp
28.89%

Sophos
Amonetize, Generic PUA PB, Generic PUA LK, Generic PUA ML, Generic PUA ED, Generic PUA JG, Generic PUA FK, Generic PUA BA
26.67%

Fortinet FortiGate
Riskware/Amonetize, Adware/Amonetize
26.67%

NANO AntiVirus
Riskware.Win32.Downware.dgsnhp, Riskware.Win32.Downware.dhaxhs, Riskware.Win32.Amonetize.dlgsuu, Trojan.Win32.Adfltnet.dlsvsx, Trojan.Win32.Adfltnet.dlwosi
22.22%

MicroWorld eScan
Gen:Variant.Graftor.161218, Application.Bundler.Amonetize.AO, Gen:Variant.Application.Bundler.Amonetize.21, Gen:Variant.Adware.Strictor.68509, Gen:Variant.Zusy.126934
22.22%

Bitdefender
Gen:Variant.Graftor.161610, Gen:Variant.Adware.Graftor.161610, Application.Bundler.Amonetize.AO, Gen:Variant.Application.Bundler.Amonetize.21
22.22%

Lavasoft Ad-Aware
Gen:Variant.Graftor.161610, Gen:Variant.Adware.Graftor.161610, Application.Bundler.Amonetize.AO, Gen:Variant.Application.Bundler.Amonetize.21
22.22%

F-Secure
Gen:Variant.Graftor.161610, Gen:Variant.Adware.Graftor.161610, Trojan.GenericKD.2067331, Application.Bundler.Amonetize, Gen:Variant.Application.Bundler
22.22%

G Data
Gen:Variant.Graftor.161610, Gen:Variant.Adware.Graftor.161610, Application.Bundler.Amonetize.AO, Gen:Variant.Application.Bundler.Amonetize.21
22.22%

The domain www.earthquake-file.com has been seen to resolve to the following 3 IP addresses.

92.242.140.21
unallocated.barefruit.co.uk
March 30, 2016

54.214.33.160
ec2-54-214-33-160.us-west-2.compute.amazonaws.com
November 1, 2014

54.245.104.86
ec2-54-245-104-86.us-west-2.compute.amazonaws.com
November 1, 2014

File downloads found at URLs served by www.earthquake-file.com.

1 / 68      (Adware)
http://www.earthquake-file.com/.../aljzeera2.CaM.MaZiKa2daY.CoM.rar__9841_il1504816.exe  (8120c25088bb6981b3aeec8c796945ee)

1 / 68      (Malware)
http://www.earthquake-file.com/.../BrowserUpdate__10957_i1453394468_il657.exe  (84c88ed3f919202a8fa15c32cc624065)

1 / 68      (Malware)
http://www.earthquake-file.com/.../Download Film Rurouni Kenshin The Legend Ends (2014) BDRip Subtitle Indonesia__4987_il3954.exe  (damnvid__6629_i1453278513_il86.exe)

26 / 68    (Adware)
http://www.earthquake-file.com/.../PhotoEditor.apk__11070_il524471.exe  (microsoftoffice2013proplusx86x64fullserialkey,licensefreedownload__11057_il1437.exe)

13 / 68    (Adware)
http://www.earthquake-file.com/.../HouseOfTheDead1PcGameFreeDownload__7828_il282.exe  (free mp3 cutter and editor 2.6.0 build 2401 gratis__3228_il5448.exe)

1 / 68      (Adware)
http://www.earthquake-file.com/.../ShadowFight2Hack6__7462_il180392.exe  (94590e83fdbb12a0b4d27653770549ee)

1 / 68      (Malware)
http://www.earthquake-file.com/.../CityCarDrivingv1.2freedownloadfullversion.rar__10609_il232074.exe  (d60c1a0cc13ea1977b7e89166bb614b7)

1 / 68      (Malware)
http://www.earthquake-file.com/.../best.book.to.self.learn.italian__6090_i1451454128_il2448533.exe  (00000000)

1 / 68      (Malware)
http://www.earthquake-file.com/.../Free __6629_i1460057965_il30.exe  (3f55528914ff54f5f6495a593f098f12)

17 / 68    (Adware)
http://www.earthquake-file.com/.../AutoCAD2011FullVersionWithCrack__4986_il349.exe  (00000000)

17 / 68    (Adware)
http://www.earthquake-file.com/.../TwilightoftheGods:TheMayanCalendarandtheReturnoftheExtraterrestrials[Audiobook]__11093_il343129.exe  (7.data recovery suite home 3.1 multilingual serial key patch crack__7787_il160305.exe)

1 / 68      (Malware)
http://www.earthquake-file.com/.../Download Film Doraemon Stand By Me [2014] 3D Subtitle Indonesia__6490_il845.exe  (download film doraemon stand by me 3d subtitle indonesia__6490_il845.exe)

19 / 68    (Adware)
http://www.earthquake-file.com/.../ZeroMotivationMovie__10609_il145400.exe  (dvmediaplayer__6701_i1389468452_il197.exe)

1 / 68      (Adware)
http://www.earthquake-file.com/.../DownloadProjectIGI1:IMGoingInFreeFullVersion__4508_il650.exe  (downloadprojectigi1-imgoinginfreefullversion__4508_il650.exe)

1 / 68      (Malware)
http://www.earthquake-file.com/.../setup__6090_i1452126240_il77.exe  (39c834485e28b5a721c950befcdcf806)

1 / 68      (Malware)
http://www.earthquake-file.com/.../BrowserUpdate__10882_i1452260355_il83.exe  (00e3712f77b646ae8fdf6ade20b71ca0)

14 / 68    (Adware)
http://www.earthquake-file.com/.../[FREE PDF] USMLE Step 1 Made Ridiculously Simple (6th Ed.) . FREE PDF DOWNLOAD__9016_il487819.exe  (00000000)

15 / 68    (Adware)
http://www.earthquake-file.com/.../cambridgeobjectivefirstcertificatecd__10609_il4647591.exe  (www_hypersonicdownload_com)

1 / 68      (Malware)
http://www.earthquake-file.com/.../BrowserUpdate__10957_i1454863163_il657.exe  (84c7f60a3553c7b6b28033e91a7a236a)

1 / 68      (Malware)
http://www.earthquake-file.com/.../Download Autodesk AutoCAD 2015 x86 x64 Full Version Keygen__10456_il33297.exe  (00000000)

9 / 68      (Adware)
http://www.earthquake-file.com/.../FreeDownloadAutoCAD2010FullVersionWithCrack__4508_il524.exe  (winrar5.10finalterbaru(32bit__3067_il288749.exe)

1 / 68      (Adware)
http://www.earthquake-file.com/.../TheSims4:DeluxeEditionDownload[2014][One2up]__3365_il14479.exe  (mozillafirefox30.0finalterbaru2014__3067_il315625.exe)

1 / 68      (Malware)
http://www.earthquake-file.com/.../DownloadFilmMessi2015FullSubtitleIndonesiaEnglish__10503_il8308.exe  (4c4f38bc7823d20b7f8fd284552d72d4)

1 / 68      (Malware)
http://www.earthquake-file.com/.../BrowserUpdate__10958_i1455721664_il657.exe  (3ad36e20dcf34b108b9f3b2edb02471b)

0 / 68
http://www.earthquake-file.com/.../Warcraft 3 Reign of Chaos Full Version Free Download__5064_il66058.exe  (14799893525d46c52905d804b40b39ea)

26 / 68    (Adware)
http://www.earthquake-file.com/.../IV.14.mkv__11070_il1927210.exe  (microsoftoffice2013proplusx86x64fullserialkey,licensefreedownload__11057_il1437.exe)

1 / 68      (Malware)
http://www.earthquake-file.com/.../Download Aplikasi Alquran Untuk PC lengkap dengan Terjemah Dan tafsir__5701_il666.exe  (e98d1d2f044eb5f0ad1b66b5796c8344)

27 / 68    (Adware)
http://www.earthquake-file.com/.../Game Onet 2__5695_il2906.exe  (f_0002c2)

11 / 68    (Adware)
http://www.earthquake-file.com/.../Download Hotspot Shield 3.37 Elite Full Version with Crack__2773_il147849.exe  (00000000)

25 / 68    (Adware)
http://www.earthquake-file.com/.../DownloadCounterStrike1.6GamesFullVersionFree__4508_il9978.exe  (avsallproductactivator__4869_il2318996.exe)

 
Latest 30 of 121 download URLs

The following 234 files have been seen to comunicate with www.earthquake-file.com in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 54.245.104.86:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 54.245.104.86:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 54.214.33.160:80
new_chrome.exe (Google Chrome by Google)

TCP » 54.245.104.86:80
new_chrome.exe (Google Chrome by Google)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 54.214.33.160:80
Project1.exe (Pino by Microsoft)

TCP » 54.245.104.86:80
Project1.exe (Pino by Microsoft)

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

 
Latest 20 of 236 files

URL:
http://www.earthquake-file.com/

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.