home

www.presentcurrentclean.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
presentcurrentclean.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.FC.Installer (M)
100.00%

The domain www.presentcurrentclean.com has been seen to resolve to the following 10 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 18, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 18, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 18, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
March 2, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
March 2, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
March 2, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
March 2, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
March 2, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
March 2, 2016

File downloads found at URLs served by www.presentcurrentclean.com.

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=EErovZqjL/KJKdmqHt/d1g/j5rO1Y0vclexrbbl40CQ=&c=DDNhj4gV9sFmvIA1LqMC8AQol3vvFoZQv4AbOL42i9ShBOSzDZVUjHyTVvdGar7UCAh1Xc1kroHpihSJADekcmCEqzF6tujQz998K5Fk/DKnPwicGDOiOeg2v2RJC2uv&downloadAs=barbie_super_model.exe&fallback_url=http://gamefabrique.com/dl/.../barbie_super_model.exe  (icreinstall_barbie_super_model.exe)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=WJqaH417rTwrF4fwNWyJ /jeixAZyHNccNjcQtRSb/8=&c=3mYwF73jxdYHuSpNLJy7tFG0kEEX4OAD89mgPcMsnBYw7uXopTl6hacE2rVE/jLukTho5YqQHGKUveEw4aecqhzYTg4m5oJC6vzGTSjMycee7BxGPVUsg9HeADShcosG&downloadAs=bomberman.exe&fallback_url=http://gamefabrique.com/dl/.../bomberman.exe  (44f73e9bbd9050cb052a0b37e6aba1c7)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=pzm4K2J3ejbrz4zWnhR2h4vCpeSMn413J2A9j0snxlY=&c=Dw3I4g/lTovoXpThedtcsZc0YoNEivcQJEwLtCQ/8eXEA3 22nmFkMWSwA1vSsjQ6Vahk OPyks8mLy7Wt0gOt8Q2aJinLo92y9dpgxVA0sLWNg6fHkPsZk PNgXUPw2&downloadAs=michael_jacksons_moonwalker.exe&fallback_url=http://www.games4win.com/download/.../michael_jacksons_moonwalker.exe  (c518b82299eecc2ed93e329b70746f27)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=sk6u2/do6Zrk6hjg2QTUIF1qOr2euMhafModdVpJaUo=&c=//0vYRjBas7O8Tnmwx6CuV4RafnLAIgMDrNEAkHWAbO5fHrpKAUCqvkukrMn1vHh6PpxqEigD0svCdrA 2CJFwHgYb0XjRaho3nMsjavJscCZgcu7UzkPNhHt6e0d1YI&downloadAs=road_rash_3.exe&fallback_url=http://gamefabrique.com/dl/.../road_rash_3.exe  (7da979e6108029908739fe009a0ffe32)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=GodJEE33bJYojhEAyUQB/RlXTXbncdD zvrscNqb5x0=&c=2MQ50EQRX2PU6x4M7Sg6 hH8z0Q/DySBlKoT9kQ2ZnuiMWupu1QeZZdzau0nOz2ZnxIORgLlzAZHAwmrrgl3oT6WlJp7aMZ/T071A72hkI NBFHTTyED4uSD9wbCO3gt&downloadAs=tiny_toon_adventures.exe&fallback_url=http://gamefabrique.com/dl/.../tiny_toon_adventures.exe  (22db1d8e3d9518cf716161477186ca00)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=tY8U4HIU6ADlSk5gEOihFChAQ3e32V4kYKL4Vz6sr7U=&c=vf4buRqqli7YgPi9P4EkY89vrF66Wb/4lqVojHOhvVwShXjqEDYdU9F3RituvHkBJ0C2K7Hrc8MTtxYjtzaq5CfN7iotKTrctsC25dKYTwpWG5dVgFDr2F2yA8YWu/ao&downloadAs=tiny_toon_adventures_busters_hidden_treasure.exe&fallback_url=http://gamefabrique.com/dl/.../tiny_toon_adventures_busters_hidden_treasure.exe  (edb66f309becd1e41eed223db1d7d85f)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=hAMCX542IM2Nu A7VpLaJoL5uPuPS8VfocwSGKjfF98=&c=zpdNzNT630VjbYl9ws TGU1Nnp75DG5oWdzOupkgdao9GDvOIfzqTAudMowVLPpCk7OXIXYNJXp5uHSz62Pkkoj6I6LtQD8Jx4wI5EdYMGtFxx6cQYrVrZF WRTnLxTT&downloadAs=aladdin.exe&fallback_url=http://gamefabrique.com/dl/.../aladdin.exe  (c.exe)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=of91Umi7e2n OH7kxMwFnCKs1W5fxqpyoOBF0pQI/XE=&c=Ca 3YiPS3/z3OlqgqE/Ugv8w5VjSeQd2qwx3K42cAuvFwH7veQkNfEHOJYi0wK2VJY70eF0pDxHDNZudPVd8nLHwDRNleANfXgv9eZ2AKK56xSl3Q0BifUIt41Y0X8UX&downloadAs=sonic_the_hedgehog_2.exe&fallback_url=http://gamefabrique.com/dl/.../sonic_the_hedgehog_2.exe  (2f0238bbc6ee7a28cc34b1cd12f7809e)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=72Zbp5Bl27VJmCrlWHb2RENdmVrKc 0wgxO6giV1IN8=&c=IIv4/radjk8HK6wwKK7HMKQLp2cClxpSOlQa6tCw5NubOQvP tHkGsD16mWG a3YbZxTWPejx9RSCDakiQXqVhJD2YaeL1W69Ok3jKouTXOjdJjpkUcAoGdVa44w/Di/&downloadAs=sonic_the_hedgehog.exe&fallback_url=http://gamefabrique.com/dl/.../sonic_the_hedgehog.exe  (8f39bb659cd48eb0da2ac73f2ff5fd5f)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=/9D/udKMrdz2I/yu86vSnruYP9Cya3EvQNvZrpC35C8=&c=eNxOr4bfuohh85QwlT1e3QnNZ7eXk497THey6TdOh7s6c3y9mC8 gEWwheChuY2zbWs zWMblrR1hlVbX6DIJF8yV XAPGJsEuqHRRZf4YLelUT5vlod3bTlpDhuX6T1&downloadAs=harvest_moon.exe&fallback_url=http://gamefabrique.com/dl/.../harvest_moon.exe  (f4de5c04f7258ee6fdd41be742ca31f9)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=V25XWEPQI2MtQmTr xWXTivn089 KmcIs RAc5OdDf4=&c=n qss1hRFiUUUH1h0Jr9AJqkzl5uw1pRJJkgpZnHNJ2fBLryPlYIus9HGSozvo5WXmjWhz0CDmSBIgBu2nmnkPHvdWWK0qehWfAn9UfThVUsmVkdxKKeHgMnhIqztlrE&downloadAs=super_mario_bros.exe&fallback_url=http://gamefabrique.com/dl/.../super_mario_bros.exe  (9e43e704775506024c7be4cc5334d9ec)

1 / 68      (Adware)
http://www.presentcurrentclean.com/c?x=MHitZ hNZrd6xQTtzTXP/V6YrqERBX0IEZoQd3qWXZc=&c=x2DqWp3LGSeJubUOOhHQFpn7ByKxLh4EoMxvGuS6Ppw2sQPRglKvVWwlmpcMxZb k7BqNYIUSBn1bCMXdjYDvbQc8ROJVA74E/ EOV8Km 9VIgqY2dDdinIpNH/8zFkI&downloadAs=road_rash_2.exe&fallback_url=http://gamefabrique.com/dl/.../road_rash_2.exe  (01d234670572c20b50ea7705e3ee6a50)

The following 6 files have been seen to comunicate with www.presentcurrentclean.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.