home

www.screen1book.info

WhoisGuard, Inc.  (Proxy Registrant)

Domain Information

The domain www.screen1book.info is registered by proxy through NameCheap, Inc. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
NameCheap, Inc

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
screen1book.info

Whois:
1 screen1book.info record

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonetize (M), Adware.Amonetize.Bundler (M), Adware.Amonetize (M), Adware.Amonetize.Meta (M)
84.62%

ESET NOD32
Win32/Amonetize.MZ potentially unwanted application, Win32/Amonetize.NG potentially unwanted application, Win32/Amonetize.MF.gen potentially unwanted application
17.95%

Kaspersky
not-a-virus:AdWare.Win32.Amonetize
10.26%

McAfee
Trojan.Artemis!51AEC6D52E25, Trojan.Artemis!143364AA3491, Trojan.Artemis!DCB8A90F44CA, Trojan.Artemis!A00A82715986
10.26%

NANO AntiVirus
Riskware.Win32.Amonetize.dzbkzd
10.26%

Panda Antivirus
Generic Suspicious
10.26%

Dr.Web
infected with Trojan.Amonetize.11638
10.26%

avast!
Win32:Adware-gen [Adw], Win32:Malware-gen
7.69%

Avira AntiVirus
ADWARE/Amonetize.Gen
7.69%

AVG
Generic, BundleApp
7.69%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.56%

F-Secure
Application:W32/Generic.70053c248f!Online
2.56%

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
2.56%

IKARUS anti.virus
AdWare.Amonetize
2.56%

The domain www.screen1book.info has been seen to resolve to the following 7 IP addresses.

198.54.117.50
February 28, 2016

54.244.122.70
ec2-54-244-122-70.us-west-2.compute.amazonaws.com
February 15, 2016

54.245.89.116
ec2-54-245-89-116.us-west-2.compute.amazonaws.com
February 15, 2016

54.245.87.78
ec2-54-245-87-78.us-west-2.compute.amazonaws.com
January 29, 2016

54.244.231.205
ec2-54-244-231-205.us-west-2.compute.amazonaws.com
January 29, 2016

54.244.233.188
ec2-54-244-233-188.us-west-2.compute.amazonaws.com
December 17, 2015

54.245.91.20
ec2-54-245-91-20.us-west-2.compute.amazonaws.com
December 17, 2015

File downloads found at URLs served by www.screen1book.info.

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&pf=Setup&ti1=MzM5MHwxNDQ1MDF8MTc3fDExNTIyOXwxNDUwNTY5MjM1fDA5YThkYzJmLTU1ODEtNDIzZi1jMjBiLTYxODQ0YzY2NGMwMnwzNy4zNC44Ni4xNDd8YWI2YzFjMmYyYTNjNmY1M2NkY2JiMzhiMzNhMTE5MWE=&appname=Setup  (setup__4692_i1790590696_il66.exe.tar.gz)

3 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MTR8MTE1MjM1fDE0NTAxMTc3ODd8OTg5Y2MxNmItYmFlOC00NmVmLWM2YTYtMDdiN2NjNzFiOGRmfDE5MC4xMzcuMjQuMTkzfGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (lego worlds free download full version pc game__2965_il78353.exe.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NzIxOHwxNDQ1MTF8MTgzfDExNTIzMHwxNDUwMTYwNjg1fGYxMWU3MTMxLWU1OTUtNDQxZS1jNDEwLWQxMmQ4YTQ1Yjg5OHw4Ni4xMjIuODUuMTYxfGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (launcher__4692_i1784248870_il66.exe.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MTR8NDAzNzR8MTQ1MDQ5NzcwM3w2YjJjNjcxMy1kY2Y1LTRhM2QtY2FhZC1kNTNhNTcwMGE1YTB8MjAwLjEyNi4yMDEuMTAwfGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (launcher__4692_i1789481575_il66.exe.tar.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MTR8MTE1MjMyfDE0NTA1MTAyNzl8N2ZhOWUwZDUtNGRjOC00M2UzLWMzY2EtYTIyOGFmNjUyMGVmfDE5MS44Mi4yNDYuMjUwfGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (launcher__4692_i1789616094_il66.exe.tar.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MzM5MHwxNDQ0OTR8MTAwfDExODMwOHwxNDUwNDQ4NTA4fGM3NzM4NDg2LTc2NTMtNGNkNi1jYzYxLTRmNDE5MWRjNjFjMXwxODAuMjUxLjU0LjE5fGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (launcher__4692_i1788848425_il66.exe.tar.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MTUzNzB8MTQ0NTAzfDE4Nnw0MDM2N3wxNDQ5OTg2MTU4fDI3ODZhNWM1LTI0MmUtNGQ0NC1jZGUwLTA0ZDJhOTM2NmEyN3w5NS4xODcuMTcuMTk1fGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (launcher__4692_i1781672867_il714.exe.gz)

1 / 68      (Malware)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MTR8MTE1MjMwfDE0NTAxNjk0NzV8NjU5ZWRiNzEtNDMxNS00NGQ2LWM0MGUtNTdkMDUxNGI3YjE3fDE5MC4xMzcuMTc0LjQ0fGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (file__16450_i1784398938_il3.exe.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8NjN8MTE1MjMyfDE0NTAxMjA2OTl8NDZkN2YyNzktYzEyZC00M2VmLWMzOWEtODdiNDk2M2M3OTI5fDIwMC4xMjUuMjQ0LjE3fGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (launcher__4692_i1783738544_il66.exe.gz)

9 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=13140&prefix=&ti1=1989685932.455892.b113b95e1c.4970.4fc358bc6ace054218c80f4230a968aa&appname=Setup  ((idm) idman621build15 full crack with key__16556_il214854.exe.gz)

5 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NzIxOHwxNDQ1MTF8MTgzfDExNTIyOXwxNDQ5OTM3MzQ1fDRmMTZkZGFhLWU1NjQtNDJlNC1jMmIyLTNjYjljZmQzNzgwOXw3OS4xMTYuMTE3LjM4fGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (call of duty black ops 2 game__14973_il193862.exe.gz)

9 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MzI0M3wxNDQ1MDd8MjE1fDExNTIyOXwxNDUwMDA0MDE3fDRmZmUxNzU3LTExNGUtNDgzMy1jODcyLTM2N2U1Y2JiZTZlZHw3OC4xNjIuMTM3LjEwOXxhYjZjMWMyZjJhM2M2ZjUzY2RjYmIzOGIzM2ExMTkxYQ==&appname=Setup  ((idm) idman621build15 full crack with key__16556_il214854.exe.gz)

1 / 68      (Malware)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MTY5fDExNTIyOXwxNDUwMTU0MjI5fGExYjg2OWNlLTY5NDAtNDJjOS1jMjU0LWExZDBlM2Y4YmIyMXwxNzkuNy45Ni4yMjl8YWI2YzFjMmYyYTNjNmY1M2NkY2JiMzhiMzNhMTE5MWE=&appname=Setup  (launcher__4692_i1784182344_il66.exe.gz)

2 / 68      (false positives)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NzIxOHwxNDQ1MTF8MTgzfDExNTIzMHwxNDUwMDA5NTI5fGI3ZGNkYjA2LTkyMjItNDFkZi1jMWYyLTZhZGM2NzA0ZjU2OXwxODguMTczLjEwOC4xNDJ8YWI2YzFjMmYyYTNjNmY1M2NkY2JiMzhiMzNhMTE5MWE=&appname=Setup  (wrar420.exe)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MzI0M3wxNDQ0OTZ8MjE1fDExNTI0MnwxNDUwMDg2NTg4fDM5OTliNWVjLWQ2YTgtNDc4ZC1jN2I3LTMwYjk3YjIzYzE5YXw4OC4yNDUuMTY4LjIyOXxhYjZjMWMyZjJhM2M2ZjUzY2RjYmIzOGIzM2ExMTkxYQ==&appname=Setup  (setup__15332_i1783201835_il460.exe.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=13140&prefix=&ti1=1394251904.452312.cb428f1568.7925.3e887d05b5b016a9054d935a0e738c79&appname=Setup  (launcher__13140_i1791236699_il66.exe.tar.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MTM5ODd8MTQ0NTAyfDE3N3wxMTUyMjl8MTQ1MDA4Mjc5OHwyNGU4YmI4MS1kYjhmLTQ5ZjMtYzkxNi1hY2VjNTY4Y2U2MWN8MjE3LjY2LjIzNy4yMjd8YWI2YzFjMmYyYTNjNmY1M2NkY2JiMzhiMzNhMTE5MWE=&appname=Setup  (zoo tycoon 1__3422_il4057.exe.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MzI0M3wxNDQ0OTZ8MTM0fDExNTIzNXwxNDUwMDkxNzM3fDM1NjhlZjg4LTIxZTUtNDEyNS1jMTcxLWJkZWQxNjRhMzgyYnwxMDUuMTU4LjE2LjE4NXxhYjZjMWMyZjJhM2M2ZjUzY2RjYmIzOGIzM2ExMTkxYQ==&appname=Setup  (setup__15332_i1783201835_il460.exe.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MTY5fDExNTIzMHwxNDUwMDM2NzYzfDAwOTI4M2E5LTIwNTMtNDdjMi1jNzBlLTIyMDUzMDA2YjllYnwyMDEuMjQwLjE2MC4xNjd8YWI2YzFjMmYyYTNjNmY1M2NkY2JiMzhiMzNhMTE5MWE=&appname=Setup  (launcher__4692_i1782504478_il714.exe.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MjMxfDExNTIzMHwxNDUwMDg3NDI0fDM2YjM2YzczLWFjZWQtNGY1MS1jZjE2LTFlZTk2Y2IzNzNkNXwxNC4xODEuNjIuMTExfGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (setup__15332_i1783201835_il460.exe.gz)

2 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MzM5MHwxNDQ0OTR8MTc0fDExNTIzNXwxNDUwMTAxMjQ1fDg2Nzk2NmRiLTUxMzUtNGQ4Yy1jZGQ5LTYyZDlhNjYzYmQ2Y3wyMTMuOTIuMjA3LjE0OHxhYjZjMWMyZjJhM2M2ZjUzY2RjYmIzOGIzM2ExMTkxYQ==&appname=Setup  (launcher__4692_i1783409469_il66.exe.gz)

1 / 68      (Malware)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MTR8MTE2MjU2fDE0NTAxNTYxOTN8MGY3MzI5YjctMGQzYS00MzFjLWMzMjQtZTZhODI2YmJiY2Y5fDIwMS4yMjEuMTA3LjEyNXxhYjZjMWMyZjJhM2M2ZjUzY2RjYmIzOGIzM2ExMTkxYQ==&appname=Setup  (launcher__4692_i1784182344_il66.exe.gz)

2 / 68      (false positives)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MjMxfDExNTIyM3wxNDUwMDExMjk5fGNlMDI0MTQxLWFhOTEtNGI3Ny1jYmFkLTMzN2E1NzllNzVhZXwxMTYuMTA3LjE3MS43MXxhYjZjMWMyZjJhM2M2ZjUzY2RjYmIzOGIzM2ExMTkxYQ==&appname=Setup  (wrar420.exe)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MzI0MnwxNDQ0OTR8MTc0fDExNTIyOXwxNDUwMDI0NDA0fDkxNjBhMDE0LWUxNjQtNDA2MS1jMDNmLTdiOTliYTg4YmZmOXw3Ny4yNTQuMTQ4LjIyNnxhYjZjMWMyZjJhM2M2ZjUzY2RjYmIzOGIzM2ExMTkxYQ==&appname=Setup  (adobe photoshop 7.0 free full version download with key__13527_il1884265.exe.gz)

1 / 68      (Malware)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MzI0MnwxNDQ0OTR8MTc0fDExNTIyOXwxNDUwMTc3NTMyfDM1ZWYxMzA4LTQ5ZDUtNDU1NC1jNTk1LTVjZDQwMGQxZTQ4MHwxNTkuMjA1LjMxLjM2fGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (launcher__4692_i1784505995_il66.exe.gz)

9 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MzM5MHwxNDQ1MDN8MjA5fDExNTIzNXwxNDUwMDA4MDc0fDIzOGMwZDU0LWFlNjUtNDJlNS1jMmEyLWRmN2JhMmE0MzJmYXw0OS40OC4yMTguODR8YWI2YzFjMmYyYTNjNmY1M2NkY2JiMzhiMzNhMTE5MWE=&appname=Setup  ((idm) idman621build15 full crack with key__16556_il214854.exe.gz)

5 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NzIxOHwxNDQ1MTF8MTgzfDExNTI0MXwxNDQ5OTQyNjE1fGQzZDYzYWY4LWYzODItNDFiMy1jMTc2LWY4MWM4YzBhZDgzN3w5Mi44NC4xNDguMTY1fGFiNmMxYzJmMmEzYzZmNTNjZGNiYjM4YjMzYTExOTFh&appname=Setup  (call of duty black ops 2 game__14973_il193862.exe.gz)

8 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=MzM5MHwxNDQ0OTR8MTM0fDExNTIzMHwxNDQ5OTY2NDkwfGFmZmExMTMyLWVhYTAtNDI5Yi1jMmU0LWZmNTlmNjIwODMzMHwxMDUuMTU0LjE2NC4yNDd8YWI2YzFjMmYyYTNjNmY1M2NkY2JiMzhiMzNhMTE5MWE=&appname=Setup  (call of duty modern warfare 2 game__14973_il23906.exe.gz)

3 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=NDk2OHwxNDQ1MjZ8MTUyfDExNTIyOXwxNDUwMTQ1MTQ4fGQ0YzQ4ZDkyLWEzYTMtNDY2Yi1jNmYzLWMxMzVhOGFiNTM5OHwxODkuMjAyLjc2LjEyOHxhYjZjMWMyZjJhM2M2ZjUzY2RjYmIzOGIzM2ExMTkxYQ==&appname=Setup  (beach head 2000__3422_il19883.exe.gz)

1 / 68      (PUP)
http://www.screen1book.info/?vn=1.1.5.55&campid=4692&prefix=&ti1=OTgxM3wxNDQ1MDF8MjA5fDExNTIzMHwxNDUwMDg2NzM2fDAzOGQ4OGM3LTI0MzktNDk0Mi1jOWYxLTZmOTMzNDhjNDNiNHwyMjMuMjA3LjI0OC4xMTF8YWI2YzFjMmYyYTNjNmY1M2NkY2JiMzhiMzNhMTE5MWE=&appname=Setup  (launcher__4692_i1783173835_il66.exe.gz)

 
Latest 30 of 49 download URLs

URL:
http://www.screen1book.info/

Title:
“screen1book.info - Registered at Namecheap.com”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.0.15 (ASP.NET,ARR/2.5,ASP.NET) (Version: 4.0.30319)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.