home

www.ranchtourhosting.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
ranchtourhosting.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bitberry.BitberrySoftware.Installer (M), PUP.InstallCore.RE11 (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE.Installer (M)
100.00%

The domain www.ranchtourhosting.com has been seen to resolve to the following 13 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 24, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 20, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 17, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 27, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 26, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 26, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 26, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
June 26, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 26, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
June 26, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
June 26, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 26, 2016

File downloads found at URLs served by www.ranchtourhosting.com.

1 / 68      (PUP)
http://www.ranchtourhosting.com/WVl6OTRQVmhNVVdWUU1FTkdiMk50ZVNVeVJsRkNXbmQxVjNCbGVYUnlVMjVVWm1KWVlubGlKVEpHUVZJd2VuTm9NeVV5UmtVbE0wUW1ZejFwVDA1cFQzRkNTVnA0YlRONE1razBkM2xaWjA1aVMxTjRhR2hXYjNSRVVITWxNa0pFWnlVeVJqbGxjVkJWUTJaTWRISnhOems0SlRKQ2NVVmxaMEpNZURaaFNXOUJVbk5CUzNBMFMwNVhVeVV5UWpoaFlVaGpNVWQ2TVZoSWEweDBSRW9sTWtablVDVXlSblJvUzBFNWJsUjVTbmQwZHpSNGFEbElPRmh6YVhrNU9XY3daV2RaUVhWdlMwZHVhR0pMZVRRbE1rSXlaMWxYYzBONVMya3diak5ZWnlVelJDVXpSQ1psUFRBbVpHOTNibXh2WVdSQmN6MUdjbVZsUm1sc1pWWnBaWGRsY2xObGRIVndMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um5kM2R5NW1jbVZsWm1sc1pYWnBaWGRsY2k1amIyMGxNa1prYjNkdWJHOWhaSE1sTWtadVpYZGxjM1F1WlhobA==  (freefileviewersetup.exe)

1 / 68      (PUP)
http://www.ranchtourhosting.com/WVl6OTRQV28wYUhkUFlsRjJZalZEVTJ0YVdteFBWbVJ3WmxWUVJYQlNlbVV5T0hBME1EZE9SMmxwYlRrM1UxVWxNMFFtWXoxb1lYRkpSVEJsYTFCbGNpVXlRbkZsWkdscFNHTnJNRmM0VlU1R1MwTnBSbWxTYlc1dVprTjBablJLU0ZCcVozcEtVRGxCV20wM05XUkZSRU5rWkV0SVZEVkJORTU0ZWs1WVR5VXlRbEp6WW1keVMyWjZZVVJzYjNwUk5FOWtUV1V4SlRKQ1pETkllVE5vU0daNFJXUjZabXBFVEdGblpXbzBjMDl5Y0hBNWRrWkVVVVJoZVRKbU1YQTRTRkZRUVdKdUpUSkNhelZwTmxaRlJFcE1RU1V6UkNVelJDWmxQVEFtWkc5M2JteHZZV1JCY3oxR2NtVmxSbWxzWlZacFpYZGxjbE5sZEhWd0xtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1bWNtVmxabWxzWlhacFpYZGxjaTVqYjIwbE1rWmtiM2R1Ykc5aFpITWxNa1p1WlhkbGMzUXVaWGhs  (freefileviewersetup.exe)

1 / 68      (Adware)
http://www.ranchtourhosting.com/c?x=UhbbWJHwPQ0U DO/t4rQ/NIgnXCm9xggKmdxYuN/TvQ=&c=77DIYaL1sFErmaXMCmmW6Gs2fIlj1h8t1jR8kmwcZoKgJk7vxyTTQCCV4Uv/reOqY5MsZndWDzWNChbBFOXh1RfLQRTmGOcZ9I03Nx3PXwditHQ9H8h0SA4rkKagmmpT&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (c6bbe3a3aabef6554fd5a63ce54667cc)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=EvjPpfiql4IorxAdzCYpd2KU5JPkkcUAS9oMrDdj0oU=&c=hTGkTCROZbxk6pMxmh09Wetv/f0RiLDHg9hHCFrUGk17QDKeQ7Dw7MCzOz4fOwj3rRu1C/E8mTjW3iLvxyjsO/REiKeetgrMGu4Xjxflk3Z gIjS7bvaQB1SCtlUJnnp&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (e46c2114736c3dcf9203f8a7fdc71ad0)

1 / 68      (PUP)
http://www.ranchtourhosting.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  (freefileviewersetup.exe)

1 / 68      (Adware)
http://www.ranchtourhosting.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  (icreinstall_finaltorrentsetup.exe)

1 / 68      (Adware)
http://www.ranchtourhosting.com/c?x=3Ri L1WT/6BY5LE31cLAbVvxxxBqi7Z39PkwbiPgMCI=&c=cAxJYIzZRr2WNxU0imzQdeR9h5EdIaSv7gFOJBLTrLMmz97VCzSCdwdjKvYmoZUA/jsHVOuuzbRzQL5ybfb0ostOCwtvlaOPazvjYgNMVog3NSsOHe2RZwKqUUVn/POs&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (3a2a988570d7f4c47935cea1fb561ddf)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=0umQbAy1dCxry3Lrq2JwAA7FcboiXRz mJuAFn79Emc=&c=Tg4tqnDXCw1b/U4IXh5qfAaSnqfEvxnT1Xc3TPwltViWwy3xWmO49HOSjMoKROCdqKrCG6kKv5DLWr SwdTvKFcYTL1MuA1mTRXdVHl95Hz163lERdZHvLJSWVcXgjH8pvbCid5Tjfx8mVYMcxAzVf2v9N7Ojpn2hRCzzY MeMqZ2i/ORMpb3WSPQnWeW/aV&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (cf29d77f9eab461a418b430b585e913d)

1 / 68      (PUP)
http://www.ranchtourhosting.com/WVl6OTRQWE5UTkVkeVUyTjZOVkJ4VUZWWmVYcDBWVWRQVUhsYVdUVklaVWhtZGs1aGRYQXdhekZLSlRKQ1VFb2xNa1pGSlRORUptTTlhU1V5Umt0UWJGRlJaR040VjFOeGRHOVRTRTVxUTNKUGVqbHdPVXBxYmpaVlF5VXlRamhqVVRaRWIyZEpiWHB2YXpneVZtZzNWMmRCVDB4S01VNTFiWE0xWTJoblV6Sm1jaVV5Um1OdlFuUk9TRVU1TmpaUUpUSkdZVGhXZUc0eEpUSkNKVEpHZUhKUU5Gb3hOMU40T0d4MVFqSlBkRlYyVFRWVmFrTm9PVVJGU21aWGFucGlSRUp4YkRGcU5rVm1aVzB3ZDI5blJsWlVWbXBLVm5FMlYxTjNKVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFVaeVpXVkdhV3hsVm1sbGQyVnlVMlYwZFhBdVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdkM2QzTG1aeVpXVm1hV3hsZG1sbGQyVnlMbU52YlNVeVJtUnZkMjVzYjJGa2N5VXlSbTVsZDJWemRDNWxlR1U9  (freefileviewersetup.exe)

1 / 68      (PUP)
http://www.ranchtourhosting.com/WVl6OTRQV2NsTWtKTGJqSldWbXBrTlRGdU9FNTBSVlZ6Ym5WNWJqVnpNV3RHUjNvbE1rWndkVVp2WlRsSU9FZHBUVmRqSlRORUptTTljVWRrUkVKNGRXMVdUSGx5U1VwRGFIZGFNMDAwUTBaNlV6TjZWVWQ0YjBGalduVk1aR2RtTWxkNlNVeHBhRkp6ZVdVMVRqTndTbmxJVjNRNWJYaFFSRzA1SlRKQ1VqSWxNa0pETUZKVGVWTTNXbXM1TjBaYU5Xb2xNa0pwVDFSemVrWkllbkpNYVZOVVNGUjVPQ1V5UmtKeWRDVXlRbkl6UlZGc2FtUm1TSE5MYVRkd09EUnFRV2wzYjA1SGVFSnVNSEJhYVc1bVpUaFphRmRhZVZOc1p5VXpSQ1V6UkNabFBUQW1aRzkzYm14dllXUkJjejFHY21WbFJtbHNaVlpwWlhkbGNsTmxkSFZ3TG1WNFpTWm1ZV3hzWW1GamExOTFjbXc5YUhSMGNDVXpRU1V5UmlVeVJuZDNkeTVtY21WbFptbHNaWFpwWlhkbGNpNWpiMjBsTWtaa2IzZHViRzloWkhNbE1rWnVaWGRsYzNRdVpYaGw=  (freefileviewersetup.exe)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=XIKUhTOiMciq0LEzFQGXx0S0a2t09f75upeYsxUvyy0=&c=54ltaJzaf5o/CJyXJIemBNo 4XoUVFi2zXoV5aJQoqw/1c3weR4rH9y2aKkc3bBQNX75SErUj1mFBqm S6N9KvF8CZ9B12N0rUz2IJRtZtVmiy9vy17jYaz54EwcccH5Lqx9ftbSfaiFJl7ZHOAKRhhuypzbAYpPm32H30xksGHt/thte2shmeRZdFbXpVpK&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (89a4ef099a49c40aa2c0d1048cf1fc7f)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=Ffg0jGEzxZZMQ2J71uFdm6Uj4qU0Gr0MRg6FAQNGWWA=&c=jVZhDXYCBLNJOcbmcaXFL1ng3eemKVl8fMZexiYdrrNSzSRkBkm0Z9OCfaHjw3SPlXfw10EIoPoPgrN8g89dqn1XoaID78uW0eynMVBo5/F6ew05ClvCZhW4RYEBiwSSqcspG3L3sVTr52hBZwrbr4bI4O 3wcosigj0AD5toaRa05y9MD2sBKouEvMgr8dk&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (cf29d77f9eab461a418b430b585e913d)

1 / 68      (Adware)
http://www.ranchtourhosting.com/c?x=K3/sLqd85QoTBOtLfSLkCZuub4CbGKwxoYdssJD2qss=&c=vXoK8n3wGsA0YYSmnrAw4eX4XcwTrxr2mIpdSzkfnpRTLM5pVuRbsU5ruGFxVPvzGdVL9ZiaZxJv0pzNJ3MXTKqk8lUtbKuRFavGriqxjN bpP1KGJLafGiY2AQJHvux&downloadAs=FinalTorrentSetup.exe&fallback_url=http://www.finaltorrent.com/.../newest.exe  (6fbf5f942d90c0abd766f6dee0d081ce)

1 / 68      (PUP)
http://www.ranchtourhosting.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  (finalmediaplayer2014u1setup.exe)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=7WNMWBzniHa8afQ0RrGIQe/1IXZNpucLpeZbr1weqCU=&c=6A7 VmaB01AdJl QU5cXLaznw9MhdQakPG2XJnW aG2bCrJKym9zV8usRO1fk2mI3L9OrE341lgheHqkTsg98/qRNcmmo9 UWGkkPvgrM8fFDIi/WqCQCxyeQZfFjh7 1OpfObIbbiq/l1POYtvADM35sfPO9z4siNwiTpz/veS6wnjtJu0fgagKEYFYg54l&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (cf29d77f9eab461a418b430b585e913d)

1 / 68      (Adware)
http://www.ranchtourhosting.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  (finalmediaplayer2014u1setup.exe)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=rr0HteBQFo/GMDwC9g4j9bf4N1aMJUac7O5JCxEnzDw=&c=KTXXT667VFiU0mrZ4b/TE5rezkXX6AxrEtQahDZsHTG7GC1FMPuMolmeGmgGAYmLI/Eo4zPxGVnGZwJfO8HVX GBq/WbXeEcU AxH NlUcrS/C/fC/nJQL83LBD5Yr/MMgl 8RlBg6RMwmIwsH67VsfdW5Wn1c73vc2cTIBWJFl6wI0bVwmTCAVrszJ6zBDC&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (cf29d77f9eab461a418b430b585e913d)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=MkklRKozE0LPqC9XDucqEU kpbmnXi7nJzS2fEWk/sg=&c=j/7wmAY/YJAQplcqHaj7NHOnJGpz5uwZQVsarsXuDK1ji0tsmFG2fmqYNxcJD5JIsocac5Z tPpu 4PVr/HdaYjRjkKN7ReT0yw6w8zEooTUq2CRgNT6boinTH5868bRNLe49rqm4eWiFb4DbkYfOAx0Cd1Kf4qcw1jSE48v3H5XlmJi5TAxp3Kk69X66vRD&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (6d6cd0b1_stp.exe)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=MywisT9Aa0YE7kIRjujBZ2XQlUHqpDteZv1KZalUShE=&c=xqqyCsxH9lbW8pSinxoP fQmk8j3Z75r2YyWcY004mfKUR54MB2Tc3nzFqYLmefCOkaFCnfSEyvw27AS0sp9UOXYPtSPOrUx NsK9uX2R7mwtS35yXA6zj92skOQmrwnrkO4gbMRXIDu/uM5ovA4K4 m/gfJI2mnNKtd7FpdsPuKYIovNS61mj0nf7Hxk8a&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe  (d2c54d6f89253ee5d3f02480191f5a82)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=Bds6B7G//JvVvVFOuhgfKqiCQTuqTDlfTljJBL/FFVg=&c=xwrgqxg0il5uElZp6TGEQMkezC8xo7TQpgFZFQR51Umv/gVBinb/JXP4l0rTGp/S/bCr8p13Fc/9WFMWs69KZz2ZIy984UdwErC9YvZlDgnv0iAoljWchNyMRfmZxeZHcLZ2Dcxew0N3lIZtBp1Tgrj05oPBd4i0357B94jJyGRRVm3/mIX/3kQsUiLT/XTS&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (cf29d77f9eab461a418b430b585e913d)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=1h8PkHquwirOkj9WsOulIWYrUCL8zzclBwjqHu5Eo8Y=&c=C676JXOtWyfo2V2dZ9qkEQYuQheWwl79F5F2uomgUH4zV/8j8ji3Gq48flSNl/AAeknkBdh7pUMfj8o/S9SB48c56mwz/86YsPz0f6OudSw4MmWXN2SRU5IxkrezTHoigd0G4/9BispvO4JvCGcOXtY2SW8x/MrJ4Mzfax6 myuuQtUD22LRZiUT w3pgpYb&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (89a4ef099a49c40aa2c0d1048cf1fc7f)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=YRXFt3V504N0oGJ0/aAxkZmmatF2TEmvslwMsUtcFfI=&c=pmv5LfRCru5ieTyQ9ntgK1Qf7Lcznp4zT1 PsHis2sUhQj4L9Ew7V3 d1dNTnZXaDeHWxnOv8m8IyFwFgFT2VBTXPrTfCfEGf561Dr0ZO LriJyoW2IuT/m4WswlCZmpzW2ochvPLCboI7E1MFzxw5LprxxnLN914p0DiDPWZyaemzz9wPgLnWgr7b68pG5O&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe  (cf29d77f9eab461a418b430b585e913d)

1 / 68      (PUP)
http://www.ranchtourhosting.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  (bitzipper2015setup.exe)

1 / 68      (PUP)
http://www.ranchtourhosting.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  (finalmediaplayer2014u1setup.exe)

1 / 68      (Adware)
http://www.ranchtourhosting.com/c?x=7fB8eQ7dmJ2yncdB82T moQ30Tcjb9sogP1XzBFByGU=&c=H4Oh5GBrNx8E7ENOaSPtSqWtCAJpzIpeK6A6Mr6jv/UTBNzgUe6VO1rZpm3PytB/XMsHVZK0bsJkR1iulsBzXG4/KHKoWjMM0OgJrMJvYH/BcPkZPD0d1JYhhJ8uf9a/1DO4Ju9/xgNVkn9yMfWSvPS fnNtYaFiDuT2tWV2Pd4=&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (354e28a3cc48bac4cddebc374d80a0ac)

1 / 68      (PUP)
http://www.ranchtourhosting.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  (freefileviewersetup.exe)

1 / 68      (PUP)
http://www.ranchtourhosting.com/c?x=AXYVX91GGy8OnxZ0d RZVSVBVDMgLMcbQrCWsyCp AE=&c=1Z7thYyGxauUeTXU0i3W4q6nuDMWrlbVRENgp6HRDndfdUFd8v25TgqFF3O1I1zdeEDy9upmTwJrIpoeidcvd7vMCFWtrYdq5uM5boLhuFLH1L9/ubXRcHdYpDZQNlNNkIQRtytEfn7aLF PNgH xDpkdateg80kzFW5EggtIJLA hcCtJjrnPLonyfOS 0j&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (89a4ef099a49c40aa2c0d1048cf1fc7f)

1 / 68      (PUP)
http://www.ranchtourhosting.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  (freefileviewersetup.exe)

1 / 68      (Adware)
http://www.ranchtourhosting.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  (finalmediaplayer2014u1setup.exe)

1 / 68      (Malware)
http://www.ranchtourhosting.com/c?x=vVlBCzvIf0kNc0ZrNLCMbG48N64uC6kHfDQ9tS/rB/0=&c=iJXbFgK4wBEs21T672GKHRJAEnp BfsLRMCBuOlJ1fwJiwTudSaZMIhmAcY1ZErH1SWmyAObqCxg/KMTtPdV1yhXgMqmWXoC1pE5J9Zl7WCLALMrDgt7dnJZe7Ms/Arn&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe  (+onv+dvh.exe)

 
Latest 30 of 36 download URLs

The following 36 files have been seen to comunicate with www.ranchtourhosting.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.