home

www.ranchappsquick.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
ranchappsquick.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.FC.Installer (M), PUP.InstallCore.11 (M), PUP.InstallCore.EST (M), PUP.InstallCore.FC (M)
100.00%

Kaspersky
not-a-virus:Downloader.Win32.InstallMonster
2.44%

ESET NOD32
Win32/InstallCore.AFO.gen potentially unwanted application
2.44%

The domain www.ranchappsquick.com has been seen to resolve to the following 24 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
September 4, 2016

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 4, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 15, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 15, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 15, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 3, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 3, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
July 3, 2016

54.200.103.60
ec2-54-200-103-60.us-west-2.compute.amazonaws.com
June 18, 2016

54.148.209.28
ec2-54-148-209-28.us-west-2.compute.amazonaws.com
June 18, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 2, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 2, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 2, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 21, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 11, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 11, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 11, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 11, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 11, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 11, 2016

File downloads found at URLs served by www.ranchappsquick.com.

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=ShO18jhp5k6zyBTYcCGQxQlFUdg8V0uIsmLlu0G0EN0=&c=BEe42DcTi5Z0ePn9Tx7/jqgLPnBsGL1MMVuOdFTvuEnK1J02im mTBPhj958BhiHHX0K1GsQbxlo3KjGjmn2syoJ7znU25EKHUKoPWD9ErHdzFKrI44Mq693s41Vnnsr&fallback_url=http://.../SUPERAntiSpyware.exe&downloadAs=SUPERAntiSpyware-Free-Edition-13150-dp.exe  (3d4ef25178255c9dddef050055329d07)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=MMnEJ qmWLWmgSxrLKxBGLcJhs7WbepPqGNr3WcFkEA=&c=LhZa5WzoExjHOpcthp6Ina7NrZHGAMkqf/nmeBIg0lq26e5TJAoJ2D t6dh0R15HqV6bo7xjFhlrg2FUsQinhpbFuoLcwaygerqRiM5sCGoiuX8MmBLjx N2mN15JOlg&fallback_url=https://update.cyberduck.io/.../Cyberduck-Installer-4.8.2.19063.exe&downloadAs=Cyberduck-22002-dp.exe  (d04e9aeafc292a673851c769de381e77)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=8/Aia3r0QsR fTybA2fStn/VIpclOa6rgkpndnmyFUs=&c=7RZdFaQAJz1OdPU/RMZiBzTf0jOg/BF05xspQtFkCmVmXZQ1VHKX7gO0AwgdGgwarNMjtHKTPDJXDLL0m4rTVt/vfhy1197DC08ucs860MHuAP5IFXmZY54zFBwqAGJk&fallback_url=http://storage.dobreprogramy.pl/.../Faktury_7_setup(dobreprogramy.pl).exe&downloadAs=Faktury-Express-12203-dp.exe  (4b844694517231da372eedaf5c01a8a0)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=giq2VJ/AYOGE39uF6X/qe8z26XYPXcwzX MjpxZRCd0=&c=1z pWKqXy/WKF1MbyUEzzFF6M/2gW0emHzGC4TbMb/ZWaMMJdbSvCfdlsBYaS2qChtdLCaKSmHgmyWYQ5 4lreqOmv65Rxu9D8pPDydQVrBetm2uVpocyS0oZtKzToFs&fallback_url=http://download.comodo.com/cis/download/installs/4020/.../cmd_fw_installer.exe&downloadAs=Comodo-Personal-Firewall-20399-dp.exe  (c7bd3503f1d49a9bbf3f39ec7657fb51)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=pbJIUyVOsucwWK47Orc/zhf229fJ6B3wkJR2eu /zng=&c=ZfLHl1zZg3SgAvB1GiA05nHIMLt3MwMHFQdesOgGhkZ 2ukk0uX29C1gjYGlwXpj27ZXN4Ii9fxGpsHL8DpsVjwyb9yq8mGNvZIdL/yM0/oh3 0bF8qUPJKUNm bm7Lb&fallback_url=http://blue.download.pdfforge.org/pdfcreator/.../PDFCreator-2_3_0-Setup.exe&downloadAs=PDFCreator-12691-dp.exe  (a6dcfa14843322d2555cfe947cb1bbd2)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=g8JLx9KPEfVKAwaKoMb2grrYSlc8JCXnOtcfkVHmaF0=&c=69GXT2tK5OHVJdwWwbREdfuFGVLv86ZnS5XiMuNPifaN 3Ao MRf8yffMBA3p9e6LALEJ2I6nkbTJSKvTT1gfubaIbn33P AFTdqZDGTPHaNNleSF w9hBHX7qssi26K&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (f52899cb852a615e34e67cf4c197d60f)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=se6xQ4wRv7 iBu3syiVVyOLP8H2aLEaHoXBRiIXqSFE=&c=3fd7cTfIzGuAAHqE1alF/5x1UyD4y9fzIIVAyWB54akl13ZOiS3aXh8xBhYDr53ziIsbgpmrILXXk9y80KNwI7W0TADQQWx85ljfhuK5I7BOO3EZVxPPPPdvp/1fyQud&fallback_url=http://.../bdcamsetup.exe&downloadAs=Bandicam-30315-dp.exe  (9537269d3f1d94d4854f522ac9f8fa2a)

1 / 68      (Malware)
http://www.ranchappsquick.com/WVl6OTRQVzFxZFVaMWJXYzJWRmszWW10R2R6TlZWM0Y0ZGtVeWVXeEhiVEJZVkhwQlUwWTRZMU13WkVwUmRVVWxNMFFtWXowbE1rSXlibTF3TlRCM2MzcDFXbWh1TjBoa2JsZExlbk5IT1ZOS05FVnhSMjR4VmpWa2EydDBOR2N5TlcxcFdFNXhZV055ZWt4dGRISTJlRFJQSlRKQ1YxbGpZVlpxVTFSSVJIZDVTMFpNYmt4WUpUSkNkV3RDYUVKbVZHaHZSV3BaUVc5dU9YQWxNa1p2UWsxSmMzaDVWbFpKWm5NMVZVdG1OV2xQVWpkSk1VOTNSM0YzU2xaUEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTmhKVEptSlRKbWMzUnZjbUZuWlM1a2IySnlaWEJ5YjJkeVlXMTVMbkJzSlRKbWJYVnNkR2x0WldScFlTVXlaa1JVVEdsMFpVbHVjM1JoYkd4bGNpNWxlR1VtWkc5M2JteHZZV1JCY3oxRVFVVk5UMDR0Vkc5dmJITXRUR2wwWlMweE1qY3dPQzFrY0M1bGVHVT0=  (daemon-tools-lite-12708-dp.zip)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=jCX89XbLG7yJat7pW/UxiO4b/F9JubtmaqOAH8haVn8=&c=RvxBtJl 83sIsKw/Tr3c JScOHnTHEWfWhEdIKCPGi/5s smhrD3Vdj9LxgSTws3nI9wUueSbCxxhue8SUcEhn/rwhVKo0sKsGik2WHCJukJ5VVcF9pO9AXyDytcSb A&fallback_url=https://www.insert.com.pl/download/498704976/pub/aktualizacje/.../InsERT_GT_Ulepsz_1_42_SP2.exe&downloadAs=Subiekt-GT-12917-dp.exe  (484d647f8e3bf18e3601975a8f20274c)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=C8aKiSda3Fko/EgwA9gLf8Pf9vrhtuvQlETgCut5730=&c=DerD1uwefHrHBM62C4KLvETD9G4CVYFRP8z2ls3RIn0SMMnb9j1nNY8WZLtJKX4e4IRbg0f2iWKG4XOU5C0n62IvZJsXQl013olrqcTU397EyikebNN0fHI/WP5MaCL/&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (8bfbc250773410b9218e5340482baf41)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=/vnbfxE3kzv8c6DPEy8kEVIPn7eByGWSJVcbgfbxfvI=&c=IkI0xqhyM6Etku57vTAe2lxJifwUS66DV6M HbhV/pclE1N2UcYLt8UN9Ra6ehV/J6P7wKIvJc9QEa9m0Fv2Z/Xj2bpEcaEqjSfr3VJjY57Sxk5lzaWNfIXcPzmY/hIP&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (272a8ce3ed6c696a6943db30ce4131b7)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=FUoC6jMoVXTg4Wbh0cNnelIXG3WMSrWAFuxJItn/tA4=&c= h0rd8cHThAyQU5yI8mFsKTAhIz4cHXfEaSu4WaxdbUqLzZhJ6VdVobvv93h0/dGY9VpruH9JCl2 4Bh6lENmZ1Lz9IfXkcgirALD5ZBgg8toJDaOPzZbaBTuled5Yev&fallback_url=http://storage.dobreprogramy.pl/.../microsoftproducer.msi&downloadAs=Producer-for-PowerPoint-11667-dp.exe  (66f683546ea87301a1cb78aa4e7b9d91)

3 / 68      (PUP)
http://www.ranchappsquick.com/c?x=TyNO8/q7tY1R7hovyX12Cw2Dcu/PtlkVaq6goixBCyQ=&c=DFqhiEVJs/fJi/yUQ7EX0ZiXTYrhpj FLQuTAv71Rn/ULoAe0OHI/vmyFjLdTNHjRsgkoDmI4QLMcnNkI24Upj8/d2IKZkr5FSdqLbZJxAu RkE2vnvkHMCL7Z5GVTlK&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (667261e4955339e66e5b79b8d9aac83f)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=T UFyWpnMXfxSkz6dnul0IcWZKib48aK0RU9X1ctxow=&c=XFiaZiwS2iOxukJuDhddSOlwTh5maO0W0/iCoSKwc8CCNgDSIk6PuN7r1dEBCO0MjWQEnyPbvjt2MniCghjjtTzQ bEKabRTwhZaONUkZ9wKCVNee7SAdLl5JcCumeZi&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (272a8ce3ed6c696a6943db30ce4131b7)

1 / 68      (Malware)
http://www.ranchappsquick.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  (firefox-13108-dp.zip)

1 / 68      (Malware)
http://www.ranchappsquick.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  (musescore-27325-dp.zip)

1 / 68      (Malware)
http://www.ranchappsquick.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  (webcammax-13274-dp.zip)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=bRXthTRoW7/mt/rFo g/RglsEIyMA7c 38Y3T9HQ94Y=&c=4TQCUNQbTdXWqJZsHtX0/pw4IqeiE5HuMSJk8A/02WxTsggf uPxpryF9GPNG8/kHL//DsOMc9mahRDIJphucLQOoh7zvFLOxcFodqFkv2oMaBmydCzRpGO1Juh0 3AG&fallback_url=http://storage.dobreprogramy.pl/.../everesthome220(dobreprogramy.pl).exe&downloadAs=Everest-Home-Edition-11558-dp.exe  (4c91c3030dbefa68cf00490fd8f5012a)

1 / 68      (PUP)
http://www.ranchappsquick.com/c?x=Spil5i9hhv3wRDwOXIETz5MKwSYfbdhmfgPtVGTtHvU=&c=oDzru2u/YdH/KSUzTvGCqOyFHGeaXjjLz7Oh5MxlZDikw0FfNvf0KGZ8pbRu 1xKPC3T3M E9VV5veeOj/OCalK5Vkp0i3zRzLQeE7jsUkrEXBhQ7BsDZD/znRAosKps&fallback_url=http://storage.dobreprogramy.pl/.../microsoftproducer.msi&downloadAs=Producer-for-PowerPoint-11667-dp.exe  (fdb081cd756ad100253cea50b1336bf3)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=7 yavwSOFyrgtoLDag30pm5EuG/n3KZKQKaW/e4Y7vA=&c=L4PGbSs7YDSZGSHTLzVW 68j86C9f6/YVvMQNCJQH7qQfl9ii5My2g/SdySCVNOiuPxrTNRQF6axvxu7pv/CYnIg7QBHOVXMpEXvJdW2YEreN b8zDLm3BCe7tZK9Mcj&fallback_url=http://download.microsoft.com/download/9/E/4/.../PowerPointViewer.exe&downloadAs=PowerPoint-Viewer-12204-dp.exe  (e4aa53a98e104747407dc627c2f51fac)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=xA ZSxeIZ46hQBQ8U8h1OiIbOqS8jlg0 Zzckchd8Kk=&c=q3k4FNi6dh21jbNUkSw6qBOB97SjQnXfkhl2KAUNl0fR6rT4FLdw5BDxo2ElQPEyD9O1qy0YhJ10qGec4eUF4AQvIKqbhhjDHXK/HSs40ikq59xPKzb2gnSlG5yKhKRY&fallback_url=http://www.dotpdn.com/.../paint.net.4.0.9.install.zip&downloadAs=Paint.NET-12332-dp.exe  (2190e7ebcdefb9bf99357a3e16d4f12b)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=HNgJkKmIKufMA424k4VTW3GhUa8MOJVZCYF8N8WKPT0=&c=UrnqlltzrFHUE1EJCyMSHDK6gkvIVRqnORw6zRZHOdFsKkZw1l k6V E0L AzY42N6OPju z5obvQDjfev 2bCc21CTG0QPkOcc8QwSTEO6TiPCzQNkGXVVCVEbCyXyc&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (1fd63f01a6bf62bd29ce031919e763a2)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=OKuNVdNiFQerTPsnjKllvdH/jEWiNJvq7uvMQ6Bncvw=&c=a6ZARBkXyRZl1bPwZcwz2hNtmGgz zGtxNBdiMdpmZJpLkLGYC4mkK1FgV09u27Zw5mtsbRpVQQoOIJydihlLy1pPHAsPwKazMrKT5JvBOBC7ugb0UqL2Rj5FC4yXqId&fallback_url=http://ardownload.adobe.com/pub/adobe/reader/win/9.x/9.5.0/.../AdbeRdr950_pl_PL.exe&downloadAs=Adobe-Reader-12627-dp.exe  (09f75fdb5f74388177848b7761908f76)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=u 06kNzuQ3a4DflwvYWPwNcj0/V9lLjPIR1ia3YmrBE=&c=ZnATd5CCKWFtF7rm6Bw 7W24iB2kucsJk/NkQC8uaQShza2jTtH5WVYuFo8/51VbXlKQouklt6twwPKaT/yx5btlfr7jsL2Hc7tRoIXTcq3ua6mx/LIjAaOH6fwBqmwK&fallback_url=http://download.techsmith.com/camtasiastudio/.../camtasia.msi&downloadAs=Camtasia-Studio-12665-dp.exe  (56f8ba68b8cffa82bacdfba3a2674499)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=7Mcod8idXc3VkGhOaneRez/CSTYsxYDWXzsSzzlv9TQ=&c=uK5v9pZLWkMdkGmlhb/xeyZRqUrb81mQe65300kJAQ5gZmsrOgAzk2h y8FjDVis 20j9CfU5mw67S7txV0rWLgDFe1ZgmtHwd0VSGVaMTxJnrScivLhB6aSnsi3AI2s&fallback_url=http://dspcdn.sonycreativesoftware.com/.../moviestudiope13.0.955_64bit.exe&downloadAs=Sony-Vegas-Movie-Studio-Platinum-12465-dp.exe  (d2402b0cd121b437c1348ab81998d8c0)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=jyfUoHS4YORRUBWWoBVM16r7ZgIwhjbhKfp3/ 490ds=&c=7gWUmk2Rn1ZlvrQBYodWa1i4TgQ CyVAdKNULt3gsJ8P7H1KA55Bmbx7Kl5rqomVPI9 zKvzg6CAQWxRYH1d95m4p0jNX7p83NlkOUH8eHx68yMfkC1awdYXupeBrnzl&fallback_url=http://download.microsoft.com/download/f/0/9/.../office2007sp1-kb936982-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-2007-PL-Service-Pack-1-12126-dp.exe  (48926b2d36fd39cdd415cbdbc5086339)

1 / 68      (Malware)
http://www.ranchappsquick.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  (opera-12614-dp.zip)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=BCjos3xwQqSmdARhwOFPIBT05Fluuq3Rn 42/0K0glI=&c=uf4uEgihwOEXPFxq6mchRACyBj2lmXpzv5j4wUtdrspS090JPbG8xX1pUpynmSnPHA/8WQN3lHOisHgzx7ZqE6XSuuDJN6GNqxk9Qqs34N88voXT0VGyEUcd/VwTIsgY&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (1fd63f01a6bf62bd29ce031919e763a2)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=bKuCMORiu54D6j4kdudK62HYJ1tIP/NBEKawtsu4FtY=&c=h0RUFdYFkyEYJI/vC3fiJVXqG/mdZS36SkeIDKJOURIF2h4aOWBXLc5 VppNLbt/xAG/bZNyOJwkFtNU3USisWDwhYoEGQeBjmajjXNSo28KFIcz QGXC/UHCHFGmShR&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (8ff2a61089e21dd9c0c9856716a6916c)

1 / 68      (Adware)
http://www.ranchappsquick.com/c?x=xPn1TqLI2gc6b7C3hjdbP6wj/BW pYke88b5rUNknLk=&c=tIZJvOR2M0HeL4s2kR8OWx/zuepsy0NwPP/3JAGNEfydGRvix5uNBYeiPPw2Dq9u2tlLT9Er2O11pEkmmUCosdOiP/PAB X75q SsKSN7PLgpsTJZjKOxHxAzXN60sO0&fallback_url=http://download.microsoft.com/download/c/e/1/.../wordview_pl-pl.exe&downloadAs=Word-Viewer-12113-dp.exe  (8842d7b58e06cfcaab558e7af760be24)

 
Latest 30 of 64 download URLs

The following 50 files have been seen to comunicate with www.ranchappsquick.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.