The domain www.imp3tunes.com registered by MP3 Rocket Inc was initially registered in August of 2006 through DOMAIN.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Montreal, Quebec within Canada which resides on the iWeb Technologies Inc. network.
Registrant:
MP3 Rocket Inc
Registrar:
DOMAIN.COM, LLC
Server location:
Quebec, Canada (CA)
Create date:
Wednesday, August 16, 2006
Expires date:
Monday, August 16, 2021
Updated date:
Wednesday, April 16, 2014
ASN:
AS32613 IWEB-AS - iWeb Technologies Inc.,CA
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.MP3Support.K, PUP.MP3Support.J, PUP.MP3Support.I, Adware.MP3Support.J, Adware.MP3Support.N, PUP.MP3Support.V, PUP.MP3Support.P, PUP.MP3Support.N, PUP.MP3Support.O, PUP.Installer.MP3Support, Win32.Generic.SCCE.Installer.Meta, PUP.installCore.MP3TechSupport.Installer (M)
100.00%
ESET NOD32
Win32/OpenCandy, Win32/Bundled.Toolbar.Ask (variant), Win32/Kryptik.BVVE (variant), Win32/InstallCore.JE.gen (variant), Win32/OpenCandy (variant), Win32/InstallCore.PL (variant), Win32/OpenCandy.A potentially unsafe (variant)
61.76%
Dr.Web
Adware.Downware.1417, Adware.OpenCandy.4, Trojan.Packed.25266, Trojan.MulDrop5.10078, Adware.OpenCandy.139, Adware.OpenCandy.144
44.12%
Trend Micro House Call
TROJ_GEN.F47V1114, TROJ_GEN.F47V1119, TROJ_GEN.F47V1231, TROJ_GEN.F47V1214, TROJ_GEN.F47V0324, TROJ_GEN.F47V0123, TROJ_GEN.F47V0208, TROJ_GEN.F47V0816
38.24%
Rising Antivirus
PE:PUF.OpenCandy!1.9DE5, PE:Malware.XPACK/RDM!5.1, PE:Malware.XPACK-LNR/Heur!1.5594
26.47%
VIPRE Antivirus
Opencandy, Trojan.Win32.Generic
23.53%
McAfee
Artemis!E991C5E50E26, Artemis!4D68E3F49A97, Artemis!93D7ADC6E098, Artemis!3BEFAC0D397B, Artemis!A1462ABB9F46, Artemis!EF317EE22806, Artemis!6321344358BB
23.53%
Malwarebytes
PUP.Optional.Spigot.A, PUP.Optional.OpenCandy
20.59%
Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, Trojan.Agent.avfc, Downware.InstallCore
20.59%
Agnitum Outpost
Riskware.OpenCandy, Trojan.Kryptik, Riskware.Agent
14.71%
Baidu Antivirus
Adware.Win32.OpenCandy
14.71%
Qihoo 360 Security
Win32/Trojan.4bc, HEUR/Malware.QVM20.Gen, Win32/Trojan.8c6, HEUR/QVM41.2.Malware.Gen
11.76%
Zillya! Antivirus
Downloader.Agent.Win32.248040, Downloader.Agent.Win32.260269, Trojan.Kryptik.Win32.805012
11.76%
K7 AntiVirus
Unwanted-Program
8.82%
Fortinet FortiGate
W32/Kryptik.BVVE!tr, Riskware/OpenCandy
5.88%
The domain www.imp3tunes.com has been seen to resolve to the following 3 IP addresses.
File downloads found at URLs served by www.imp3tunes.com.
URL:
http://www.imp3tunes.com/
Web server:
Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 PHP/5.4.22