home

www.freemoresoft.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.freemoresoft.com is registered by proxy through ENOM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
ENOM, INC.

Create date:
Tuesday, September 18, 2012

Expires date:
Sunday, September 18, 2016

Updated date:
Saturday, December 19, 2015

ASN:
AS21844 THEPLANET-AS - ThePlanet.com Internet Services, Inc.,US

Root domain:
freemoresoft.com

Whois:
2 freemoresoft.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.X, PUP.Optional.TechEvolveGMBH.c, PUP.FusionCore.ICDP (L), Win32.Generic.TechEvolveGMBH.Bundler.Meta
100.00%

VIPRE Antivirus
InstallCore
66.67%

Norman
InstallCore.CERT
66.67%

Malwarebytes
PUP.Optional.Amonetize
50.00%

K7 AntiVirus
Trojan , Unwanted-Program
50.00%

Avira AntiVirus
ADWARE/InstallCore.Gen9
50.00%

ESET NOD32
Win32/InstallCore.PY (variant), Win32/InstallCore.TB (variant)
50.00%

F-Prot
W32/InstallCore.AC.gen
33.33%

Dr.Web
Trojan.InstallCore.11
33.33%

NANO AntiVirus
Riskware.Win32.InstallCore.djedzw, Riskware.Win32.InstallCore.dnxknh
33.33%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
16.67%

McAfee
Artemis!57D204FECC35
16.67%

Sophos
Generic PUA BC
16.67%

Comodo Security
ApplicUnwnt
16.67%

Baidu Antivirus
Adware.Win32.InstallCore
16.67%

The domain www.freemoresoft.com has been seen to resolve to the following 2 IP addresses.

184.173.227.113
184.173.227.113-static.reverse.softlayer.com
May 5, 2015

174.123.129.100
64.81.7bae.static.theplanet.com
November 29, 2014

File downloads found at URLs served by www.freemoresoft.com.

12 / 68    (PUP)
http://www.freemoresoft.com/FreemoreAudioVideoSuite.exe  (icreinstall_freemoreaudiovideosuite.exe)

9 / 68      (PUP)
http://www.freemoresoft.com/package/.../FreemoreRingtoneMaker.php  (icreinstall_freemoreringtonemaker.exe)

9 / 68      (PUP)
http://www.freemoresoft.com/FreemoreRingtoneMaker.exe  (icreinstall_freemoreringtonemaker.exe)

4 / 68      (PUP)
http://www.freemoresoft.com/package/.../FreemoreRingtoneMaker.php  (freemoreringtonemaker.exe)

3 / 68      (PUP)
http://www.freemoresoft.com/FreemoreAudioRecorder.exe  (8a73c305b254080b9f92175ade288cbf)

4 / 68      (PUP)
http://www.freemoresoft.com/FreemoreRingtoneMaker.exe  (dd181080ed54e36a9aa69108527533ca)

1 / 68      (PUP)
http://www.freemoresoft.com/FreemoreAudioVideoSuite.exe  (a0bd48fa49a1f362e7c0c3e93f4c8ff8)

8 / 68      (PUP)
http://www.freemoresoft.com/FreemoreAVIWMVMP4MPEGDIVXConverter.exe  (916d4eaf6b28de52ba34415ab07c4fbe)

The following 15 files have been seen to comunicate with www.freemoresoft.com in live environments.

TCP » 184.173.227.113:80
goup.exe

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
goup.exe

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
freemore-avi-wmv-mp4-mpeg-divx-video-converter.exe

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.173.227.113:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://www.freemoresoft.com/

Google Analytics:
UA-35478763

Title:
“FreeMoreSoft - Freemore Audio Video Suite - Free Multimedia & Documentation Creation Suite”

Description:
“Freemore Audio Video Suite enables you to create your multimedia and documente with ease.”

Web server:
Apache/2.4.7 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Likes:  8
Shares:  23
Comments:  3

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.