home

www.presentstocktour.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
presentstocktour.com

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.AC.Installer (M), PUP.InstallCore.RE11 (M), PUP.installCore.Garakeke.Installer.Meta (M), PUP.InstallCore.AC (M)
97.83%

Microsoft Security Essentials
Threat.Undefined
2.17%

avast!
Win32:SaliCode
2.17%

AVG
Win32/Sality
2.17%

ESET NOD32
Win32/Sality.NBA virus
2.17%

Kaspersky
Virus.Win32.Sality
2.17%

McAfee
Virus.W32/Sality.gen.z
2.17%

Dr.Web
Win32.Sector.30
2.17%

The domain www.presentstocktour.com has been seen to resolve to the following 8 IP addresses.

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 20, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 20, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 20, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 20, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 20, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 20, 2016

File downloads found at URLs served by www.presentstocktour.com.

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=C82KzTUlNdhNPjUPlvZdEjGMRrEBRE/jHTE8uaMVD88=&c=tRLgNeLoLsr4ewu8E/fm a3LudLDu8u2yInxFUDWTkPsd1GQbsK38y01D0TGpe3kkZzHJbEYkUwb1/RQE/Mhoewf/tneQqS dNTLDsBdqjfmy6M6InuQNHY/OprH4ZUFkkh8LX9cxDg/.../unsJpQGRB1EJNVjti0tUktuUD44d0hil2qzPop9 wzD29 D&e=0&downloadAs=WinRAR_Setup.exe  (53a228ac5d77891a53ea99acc2a4f163)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=csEiC kqkoYrTSc787C0dBd4v3s1hrQcPd9MOBHXZoc=&c=LJc1VbHhYT0GElK1g1tMWRQjMrF8nInJ9nfNyov6tzdDEfNL5Dwn7sLXsZO85Zy/d8yludOpP02M1WrSC0VY/.../AcbTyKVxAdCp63fzqHHSReux9NZ jeCu7B5p9Ikx5eisCaEffUpu aH4VZhodMZts493MjQaeSdXjfbLRr6H2qqSfeFGuU2sNHr&e=0&downloadAs=WinRAR_Setup.exe  (e52991bc31d25f1026c23d99233afb21)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=0Q825mh szQ4hDXCmftaretxmb8a1DxTARGfp/gZp6c=&c=H/R/QKos7R/JtFAKuxdTx JLMeG6NiILaIYVxk0zE4mU b8Sz YzRElBTKdiOV1xRGyfemshwfcjKhYBt/z HvySU824X7gMgOzdM6ZoZ 9IJ4KiDjlGWmGzwUdt793V8foMOqtIvU/.../ntyu7YSpRvvwRjRk1yzvOZxWnygXGviKnnC6pKX&e=0&downloadAs=Java_Setup.exe  (95d684cf62fc7d0247cd2028c06dcec7)

1 / 68      (Adware)
http://www.presentstocktour.com/WVl6OTRQWGMyZEdaUU0zQTFibE01SlRKQ1pUa3llV05pWWpRd2RVNVBNMkZoU1VZd1NXOTRZalJDWXlVeVJtNUpjV3hCSlRORUptTTlTbmd5WVZKMU0zcEtRM1ZUUTFGR09XODFlU1V5UmxOUGRsRktjVWhEZDJGbE1tUlhKVEpHVmxCR05XMUxXRU42TTNJMk5tZ3hOVVZsVVRreVZGaEhhVTVKT0VkU01FMUhkblpEVlZkSmRXbFZTbnBITjFKS05qTlBSVWN5VGxjbE1rWWxNa0kzTWxwWVEzTkVTRVZEY1RVMFVuWldNbVp6ZFhoV1luVmlXRFZqU0dSdWVYTklWaVV5UW5wWVVVNU1KVEpDWmpCSWFuRmpiRzF0TlZkSVFVbDNKVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFVwaGRtRmZVMlYwZFhBdVpYaGw=  (java_setup.exe)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=PPKb4Wv0KQkYjTWjVFYbTyVX2pstZ7lJNTn/HCS GE0=&c=RbqPgqPB1X57vnmrXCcofpzN89gFPxmWO6Hk4i8wNYr14snOLhI71YBNoJFad3qTJs8YXQP u0W5RGtVuBi8WZnuRJ2O5DioDaZZiEwi4oNTo7U5/.../eOzgaoLiOW4P0aWA8vKPV2jCBCTmO3lZvJmGKGKkGdy ZBbi76wD62xs=&e=0&downloadAs=XBMC_Setup.exe  (524db0f3f724e519630a3758951497c0)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=Jows5y4nYpywg4Ogxox1y0wnomSb/yT8IVNYVKY8ZYw=&c=qFslB3GmZSImZgDDhtarSbiXKThNEZFENt51cG3Uf6KGQlK9nNwOKYtzJ toZxUyMm85WOHz/HIyc7AMOFlnTNBkxO9lr/uWSooxOem9YCroOG8hfpc5G0Dtf5bnlVd4Qi34LI213ExugzwcSWVQYLIKzzVYLXRhSnkiUaeGZN3k566vg/.../4KqH&e=0&downloadAs=7Zip_Setup.exe  (9e5a5100a6f1f56e2debd7636dc9e019)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=oxrNjqq/XrHW6RFrb2nbN5gPru3qOoWhpZDJg8uDCiM=&c=2fO3/gqU E1gDR4woF7O3D1ZtPbFIClL7eX3dBwcazQtqsCc3t95kJCtHx1rWfVhtbRMuZ5xr78YJQDp1sTXwpoLJpiYAiCZqDiqirpdu szWRpUDQ60Ey/.../&e=0&downloadAs=7Zip_Setup.exe  (9e5a5100a6f1f56e2debd7636dc9e019)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=h0dSAzxByt108bTytU2NGm6wjnHziNQ5eg4Ar/RD9SA=&c=H/rk7vP34nnn3aovj6Z7n0ROFB6XptD pfXCrAet8VsH7GokRc/rNvcK1ZQRBOOzh/pmV77wsrRLh2s2OGq/LPPjz CqqyG6WlxPmcUVEIO6cnGG54BJLv4aUUB7zPuH3nTzOv2m/BBcut654qL1/.../wcOeopQwk=&e=0&downloadAs=Java_Setup.exe  (7f0814630ef62e99c1ed807ac08fa045)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=Ye3b4SSDoOwWGnwUpQLYV4De6I6qEqDAIdGN7l1EwtU=&c=fL15U8MfVQZeXg4UQmHjQhLLItC1KsMyKALICjD4QJZFDb12powGqCPE1tLL/c7Qx3YK1IdjdMRmiCk6vXUP2DQilV6kNHYwsPrypJzvQXBZhHBV6nC/.../igtXpMADKClChw06tTjUuSGMn8E3YDb1aZI7fPoEnkClBHuYStHS0vNq&e=0&downloadAs=WinRAR_Setup.exe  (544f5c5cdfc41d0986b41bc28d3cbe7f)

1 / 68      (Adware)
http://www.presentstocktour.com/WVl6OTRQWEZOUW5OSlkwdHNkSGxGUkU1YVVXOTVjVzVwVFVwNmN6Wm1TRTlyZFZsS1V6RnRRMDB5ZEU5RFIxRWxNMFFtWXoxa2MxQkRWVmhNYjA5WVJVUkxXVlk1WjBSRFltSlljSFF5VUNVeVJrcFVialJNY0dKSlZXWnpPR0Z5YkdseVEzSlNjR1UxWkRCQlQyVTNWbU5IYkd0dGVuTnFTMjlRYzJJNGRucE5TMHB1VURjM1dUQnJjamhGY0d4cFVuUjNUbFU0YUdVeUpUSkdjazhsTWtKM1VURXhhQ1V5UW1GdmVVOXBXR1JhYUdabWNWcDBTMlpsSlRKQ2RscEtWMWRVYVZoVGNuQlFUQ1V5UWt0SlVWQndWVmx1ZW1jbE0wUWxNMFFtWlQwd0ptUnZkMjVzYjJGa1FYTTlTbUYyWVY5VFpYUjFjQzVsZUdVPQ==  (java_setup.exe)

1 / 68      (Adware)
http://www.presentstocktour.com/.../9ai6Z5VrlONJcszi4ovOWpEO32SsQiOrin6Hf1QXDvouuKCBY60m5k=&e=0&downloadAs=Java_Setup.exe  (ad346bf41e6433f83814d141c74d6582)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=2AELKydIcplZ6FDO4cHLxkuW2HSfJDpjaOkXD1gtfPo=&c=o3rsBN1j861gkPrLF Iv0c4NuVSIyIxf80aVJWK4w rE fPa M 5MLsoAE866tAJ8kLopkb5vckkZMmpGjZenE6YiJgA3N6qo3NCHOWWSnS8koBAF3sIXk 0oy0dkVuz&downloadAs=Java_Setup.exe  (f0afdcf55e322509a599e8118e597223)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=VaP5wRPLdSf8LGRZgRgO1Y4CJUEXbbklo/7MN5H5v2Y=&c=dVsCqiKsgiRNTWxbLRDkDcKcgKxCSF6ATwGc5i9dSxRZkvVL0nPf6eBpdkwcDZ5S8RTXf9BIkGfhxHFwpSrqoIX6amx0 mE5D2KC78TAkhHlEgBOFneBqRxahMn3ATm 3yMcsn3Vxq/.../oH9gqZhEOFmbVDpKCuowDgce5bcCl&e=0&downloadAs=CCleaner_Setup.exe  (ac3e22765f94f5770fd9393b45d1e937)

1 / 68      (Adware)
http://www.presentstocktour.com/WVl6OTRQWGN5UTFORmEwWjFjV2RzTW5JeE9FTmphMjlRVTBSMFVVZFNUa1l6VXpSelVWUlBTMkZFZWtneGVHY2xNMFFtWXoxSWJFbFhlV05sUjNCb2JuaHJKVEpHV2xSSlpFeG5NR3A0TlhoV1ZsRlhValV4ZUdOWVN5VXlSa1p5WVV4TFdreHdSWFI1U1RsdWEyWlhUR28yVERSS01XbEtVWEZRVGxBNE5UUWxNa0pQY0hKdFozQlhSemgzVm5ST1ZYVmlSVkJKV2tReVRFNVFiR3NsTWtabVYyUjBVVXhFT0dwT1owMHdlWGt4VTFaaWN5VXlRbHBGTVdONVltYzBaR1pCVDFaaFEwTk9UbkpwTlc5dWVXd2xNa0o0VkVFbE0wUWxNMFFtWlQwd0ptUnZkMjVzYjJGa1FYTTlTbUYyWVY5VFpYUjFjQzVsZUdVPQ==  (java_setup.exe)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=pe17uKjvd Z1q5OOOJczdGAeiiqOQGT GZr6Ux 9xC0=&c=R/DsY7L8wTVGsa w7V SvPJlg/N LXNY/K4ZB0oP kFEnZP Rh28BUz/.../igjCVuzwZNpY VAViqGuIWen93rMYrffocHJlw6C1Aj5Z94Cc1AD2va1&downloadAs=Flash_Player_Setup.exe  (4a2381ac540be2b27bed5959ed2a3b83)

0 / 68
http://www.presentstocktour.com/c?x=qrZNVWJUGn06meic2SlK0Q ai jKBnY7GaiYLoq7Ovk=&c=mv9F XU2MWBHkvJOm7f2KMOSlW8c4BeJrbgriujgTuHP8mX/chTlkxX2KoJePAGBm0JUmmzFvQ/.../WNppSMSQP5q8qVuLr1zQL4VkXpnOcIkCNehlI2Ro5sm1HgW0zSwR7LZ9pUxCtPDH4GLeOpScR0568VRHclaAk7eXH0U=&e=0&downloadAs=iTunes_Setup.exe  (itunes6464setup.exe)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=fdE3k7GY72ZRmm3L7TIzWpCYF/3at1QtPbddO8RacF0=&c=YEWBJTVG2jGg/sXqUrcS1T6j2R1El3STELo22FxWDZsBhuDxpP5DQ2Qt/.../LUYY1wAX9MMwtmeM2&downloadAs=Flash_Player_Setup.exe  (bd7d3dbf048275ff026b4c945f7086ef)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x= Wdot37kzvYEMxL6GnA9BSsmNKE/ius4m/Tmr Jx4vs=&c=EyFv8YFKjSn5ycCt8iqd7YP8J5eSshev1Y ypsadxpkISwPsGTomq2IxbD64Z6XH7uGnjAAfwh0nZcnf3wLVmplUHq5raQegD0iEzySPFWw/.../fH5zsuIO94niCgIV1L8cgw7b2cMpZPxcfMeFME 6UVx&e=0&downloadAs=Cheat_Engine_Setup.exe  (55248092168f5d48af4560a00b26b71f)

1 / 68      (Adware)
http://www.presentstocktour.com/WVl6OTRQVmRyUjB0Q05WRlhkMUk1ZGpNNGRIUkhiSEkzVkRWcVNsaDBZWHBPWWtWU1FqQnBkMEUzVkZsSFZHTWxNMFFtWXoxV05TVXlRbmMyZEdGUVpreHNlVVFsTWtaT2RsRkRTbVExYTI1SGNVbEJhRzl2UjNsdFFYSkpRVGRFU2poMFdrMGxNa0p4V2twcU5XRXpUMHRPZFhVeVRrNVpWeVV5UW5aek1IUnRaRzgwWmxaRWFqTmtNV2gyTlhZNVRtYzJhalIzWTBoMlRXOVFSWEFsTWtKbGVXUTBKVEpHUlVRbE1rSnVXRFUwV1hSSU0yUnVRMFpLZFVGc1ptaGlSWEpFZUVoalZFUkpSVmhSVjBWTmJITnpNa2R6YUhsdlFTVXpSQ1V6UkNabFBUQW1aRzkzYm14dllXUkJjejFLWVhaaFgxTmxkSFZ3TG1WNFpRPT0=  (java_setup.exe)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=jLHWjxjBsjldJ0dFjUvI38fA7LO47TPjhsPc8YFVvRk=&c=E8/A/eqgIrt8Y UPJ Ks1fnZqxdi7nDqAiKun867kQ5lCbh7AkSEOQ0NzGDcUUBNmOswXG/j//ZzXyzt73XOd55YpN 4n58nerpKkviwxSIEj230Kn46uu0fMDCWxqmtlN6quPS97rYKj2xrq0xhV/.../6WD3y4OVNwwahCZAEIuXQyVb&e=0&downloadAs=Java_Setup.exe  (9ab7576fa9c0705a56b7bd26a81821d0)

1 / 68      (PUP)
http://www.presentstocktour.com/c?x=ogGQB1/.../0nJJQlxrJVTInaoLUxQJ9B55uftR3yfFvfGpSIwd3qO5s1mW6n6yAbWF16QxSiJGRKLgzwfn wZTfi7tGLvbs0CG0wfNeV0fST1&downloadAs=Java_Setup.exe  (icreinstall_java_setup.exe)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=ObQ0C2HuK i8QkKuh3pWXbadvn qnOAOUCc2SccA9Gk=&c=8FuMoMQvGGCol4sqqhSg/.../Lk6A3NxfjSOgCMKHI3jV0u nZfXFMFcUMJkfbfOW267VWXOxosDkhTbYKqIg41YTmZUW9Z1Zb5AfUuO2zenL Mcye7L2NUF4a3dEYVaX6 w0Zt2pT2FURiMexZ1QMHVBPbnTvs7dzbmRDs=&e=0&downloadAs=XBMC_Setup.exe  (926f2eb5f373ab3936e4736634d69eb3)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=oa5tSoTW ZVVUf83XW5DIs/dkX1gn/N1JQ4b vCMAKI=&c=cCjXvt9T5BVtq8MciqhHoDb/BjMndmXJAyBrIyyLn9NPLjuxsJm/.../bD9JAzjxuFUGI3y4aZ6zJrqiQ25pk5PAgqwgbzQ0ncieIRfKN73f7vzI48mtjsr1dt1ZxhsZK&downloadAs=Avast_Setup.exe  (9e7ce3b8dd8982eb1a4e051e108e6ccb)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=jgFNNeAc7XUDz/yDEdF8UsK4ej8UmqqQTL//6AeTqzg=&c=gbGz4ag4xfiSz bgW PE2MfGAe0qNVLLL6sWERSblthGIYqiTwqVsWtpHzkEByMnYOkDaFKk5zTXide /.../HuSHDkp5Dc8zjJpqqWtvUkWl ySFRp EwIUv&e=0&downloadAs=Dropbox_Setup.exe  (29f2b445bf0eed8fa00f4291104fb402)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=tyDCvqVq5M4CwCNy2LeZI2RjET6td0jesWco/Aj95DE=&c=w8Ldy OxR0We7xeYhbW/wEkwcb9ukjUAm4WJ FHJfbzEAAwoLtj8BtZf4Re4P4C8HjbZMQkXWU8QXlt4r8sDw2/bjea w3xAn71X1iUrMIcHO6Y/.../nJ8ORB1JsYwMaIfCFeEel9TWq7ROMGVz qDMY=&e=0&downloadAs=iTunes_Setup.exe  (b726d3eecb44e420a708bb1c857c5284)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=hEI7JfuxWsn9715O8MC2HP1iJ/W19o7nUFYcHvvNctc=&c=UfGZd6Mi14RHdCvfgAoNlt7dhTKUzmpzquAoQvgJFZ2E9aqZIbVXd39ZMszk0Om/goKs1MRVzK9EY1EXbJtp2nQcZS EWN2dIgwCmP3QpzcrM9gWwT6IIyekBLaxU5RUto6xCUg8TZoQXBy/.../dB oPqEQqsPg4nPjiZic=&e=0&downloadAs=WinRAR_Setup.exe  (572b2eb67a492e744d0f84efe7a49d5b)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=vVhfSDBKCjw0WFFDYe4ulzJcQsIvOBBXRM4 /f0ys1g=&c=SPUI5wlpxREzabdwFBh0WG6HtzBYwvZ1Xez tC3ZLEvmlniwPPdD4PYY82c7XXFGRS9G0KtLHsIyq01H ZJP6Acl0t/.../dR1HgEii7fzE9g4x9hBsvkr6FaH2ebZKSjCxUCGZsTuGuLTx7bI4A4f7UobP4Yn0=&e=0&downloadAs=XBMC_Setup.exe  (926f2eb5f373ab3936e4736634d69eb3)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=sbSZBeoUPoh2Ny8kYTdckJEmjWRdiRQPfjWRcYPCUj4=&c=X5PvEZtp4//iww4zwEp934V0kqGmCoXqDWOMZbjB4Rg 79HQmQn8nduuorAxFKR/QcpFabpTH4aMA0TGefeDQiVla2TWz5r8y3x0ew4phwMnHopnKoBousGIZNIsf5xr50ipGTw9QyqmTaCXb5W8DheUDtk/.../WgyJZ9ifJnTDcB Io9gc&e=0&downloadAs=Dropbox_Setup.exe  (29f2b445bf0eed8fa00f4291104fb402)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=nMqcRj8mkgyAYo6e UqbUMICkx423CtONLCEEcDO1mk=&c=JKYZtjDURXPqMcWMm jB7YKnhmBhqWYIeg8BrM8KP9dpNAB6jaLSBHgHUnLd3FCbiHDxdvwAFbywjf7wuogOIe0hNaSW4PFIGXiJkim5Cyikcmf8zWwDg0qXvZEvrRfuuAwEueMin0lP8sBHM6nOYqFUrdHsU6QEmwo7ORAvDRg=&e=0&downloadAs=WinRAR_Setup.exe  (80324baf196fa26c6ec5a6473ba7159c)

1 / 68      (Adware)
http://www.presentstocktour.com/c?x=S5LZkh4BxXUTHRGf5qLGw99zEYKdJY7ds6SCSJBVWgE=&c=lh9brBpmi/zpg7f3nPWxWaurX3q8x/NeXvj3NpVJf6jVf/lkT/OmsksgBEq/.../6tA8821zQc5S3u6s7xLks9GOY0Y3h&downloadAs=Flash_Player_Setup.exe  (203c39956061ab6601c64a9717145080)

 
Latest 30 of 57 download URLs

The following 6 files have been seen to comunicate with www.presentstocktour.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.