home

www.signsdownloadfun.com

Communigal Communication Ltd

Domain Information

The domain www.signsdownloadfun.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Tuesday, January 26, 2016

Expires date:
Thursday, January 26, 2017

Updated date:
Tuesday, January 26, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
signsdownloadfun.com

Whois:
1 signsdownloadfun.com record

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M), PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.LiteWeb.Installer.Meta (M), PUP.InstallCore (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE11 (M)
97.87%

ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted application, Win32/Jeefo.A virus
4.26%

VIPRE Antivirus
Threat.55332
2.13%

avast!
Win32:Gardih
2.13%

F-Prot
W32/Jeefo.A
2.13%

Norman
Win32.Jeefo.B
2.13%

Kaspersky
Virus.Win32.Hidrag
2.13%

Microsoft Security Essentials
Threat.Undefined
2.13%

Dr.Web
Win32.HLLP.Jeefo.36352
2.13%

The domain www.signsdownloadfun.com has been seen to resolve to the following 22 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 18, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 27, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 27, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 14, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 14, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 29, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 21, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 21, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 2, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 30, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 30, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 15, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 15, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 15, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 13, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 13, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 13, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 13, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 13, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 13, 2016

File downloads found at URLs served by www.signsdownloadfun.com.

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=MWKz8oq2yh5qa7NRGaUbTUypGO5P0ahuQnuCDwpfRoE=&c=1QgvT6OK4fEFASdUQrQ8lQjpAIchm aY7T04rX44bYjQs3UvhMa1HcUYNZ4XaKFPXozC9ZQ5XUZAJCRZ5j7A3HsMr8nZOhN wjvK2/Cz56SFOnlluRz7AX1lSrSZxc5qtF847JuMMLWF1agsKW75xGRrUqDBXArck8v/NN9Hp6Y=&fallback_url=http://storage.dobreprogramy.pl/.../HaoZip_v5.5.1.10498(x86-x64)PL.exe&downloadAs=HaoZip-24565-dp.exe  (8b3840984f914212809d4e0fc656a969)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=WEjN7XmIqlV69868NlCLnwyP0EOqO8h7fOCVaukJMCY=&c= 1PlnFiB2hlWxbED1SsYioAx5h7 tIpmP2s/7gku6AA101V8CisQNODEmc4x83G0elhyCQPcYt2bg5rz/wtsbNnxwRqhIfHksx1obGKzC7SOHI/hWcCsFU39oLEt0RWx&fallback_url=http://ftp.mozilla.org/pub/mozilla.org/thunderbird/releases/38.5.1/win32/.../Thunderbird Setup 38.5.1.exe&downloadAs=Mozilla-Thunderbird-13298-dp.exe  (6498bce7d36904428f810942a99c5849)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=dW/u/GKVtXmriQmVGsaZXHjsaA8/E61L29iGTrMVTXs=&c=3leuxeLg UG6rRqIC/IaVSfaYieNC cdwAXdDfCbwSv2bbhdS4Z6Ra8A1RRFnhYK HfwsV1fXHxycM3GFaPigEQXvVeA7mXIeaXX 0dDDJwILo9xWSumowe2nsFHZTRm6DEg62q58hSGi27ttQj /y/Y/WszbICE/Jh8DJChfEI=&fallback_url=http://pl.download.nvidia.com/Windows/.../361.43-desktop-win10-64bit-international-whql.exe&downloadAs=GeForce-Game-Ready-Drivers-18940-dp.exe  (ce15c01499b62fd23778f26835dbd19a)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=Z80Broe owlsjzV BCF8aEcFLm2xsrlF3DUTMSljFNg=&c=Pdjmq/qofMKcVAzGiwNoCq1J9xpanBYa2cc8KMQJXYMcntk5IngEwgYVpuVJI4mb5qIDttoyKLcg/SoU/5 bUoEzAQWufidjYt1FQlZ0uHmJwbaR9h087BLR c3luCPNvET9NMUwRew8BTfAd9mzy/GiTquiSZNfmAUNTlbojc0=&fallback_url=http://storage.dobreprogramy.pl/.../Windows7-USB-DVD-Download-Tool-Installer-en-US.exe&downloadAs=Windows-7-USBDVD-Download-Tool-25159-dp.exe  (5faccd34b7b29fd558652cd1aeffac9d)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=5BCk3ZJ5/RiqL VoLTdLtfYKaPJ7wRTKbNyvTpAANP8=&c=v4Cwq AawwF4APUBNAgVODMrKoxWTFsvB /nFMJmWchzbZgvmA3OZnMYPgY/IL2yIuH7x JUE4ef5y4Bhw7k9tPaM2xFAiTVYemBIB dtstzUbt5P8hEzWn3IiqMLaOR&fallback_url=http://.../android_root.exe&downloadAs=Kingo-Android-Root-51394-dp.exe  (dd651fd3013d88b01615c9a2cbe4ccc6)

8 / 68      (Infected)
http://www.signsdownloadfun.com/c?x=RmcqiqJzjc2o11nGdJgLrJSmjTjZrSMPS5YgZ4lf/6M=&c=10lC6kRUAWJl7Gq/gIIBEOQaHXMdXDTHiJnwpN DGkEWmG2WwsTZrsjvFVMWrpo1GbB7VhbcnKVQeOZVVZleITwIqYo oORYBZ/BHMcXSWjSQp9x23KvRXJ5GBVqB42yP1hdgOl7ley6YsaJlU4gdK0jyegA0tOCrswZfvwzC2w=&fallback_url=http://vorboss.dl.sourceforge.net/project/qbittorrent/qbittorrent-win32/.../qbittorrent_3.3.3_setup.exe&downloadAs=qBittorrent-20995-dp.exe  (c123edbe0b3c0c0fd55152043704ea65)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=kOtUgqZoEvBEbfJzKNEgitutwMsWZA9aBB3X5kZv4ag=&c=WzBho52q6UewNN81W8GtejWH0umPa0 ZxaIcan5APfWBvtiYcw0ptDak91Ud2x07PeyCuBrnNKIQBEf8qVNKQMpft5YxKlcq HhWUaKQ34avIC/u15ndgn8mKZJxMQNpveGJDIW2Z/8Hp2ptcxDjbDBRrGNHXS/W/UoxytVt6UA=&fallback_url=http://download.microsoft.com/download/2/9/C/.../officesuite2010sp1-kb2460049-x64-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-25796-dp.exe  (setup.exe)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=SQaEZhcPxY0619lZnCn6WoAzVPlgwjif7T8/75TmVCw=&c=7Q4X6Rjpmlao6iYLWn 8axGQjSJghurOkSmrk7M/j1q8Hdd 3oNpkIXRe4NSJ472NKnWH8aNobgkb66wZBuInec2w17w7ZDkAGPb6Fq3vNL8zZeyxouP8CGUW6C9nH995LZlWnyUmen/J3ms/FceuNLLL8 xaaLQbk1EszkRaoA=&fallback_url=http://storage.dobreprogramy.pl/.../MPC-HC.1.7.10.x64.exe&downloadAs=Media-Player-Classic-Home-Cinema-12469-dp.exe  (5ff9424e9e10e88f929de24d56b356d4)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=eN1G4Wj5t0Gayiym6aal8bAakUrt4oK7v7ZhE2eW8PI=&c=o57RgZQDIyUn30tTfMbU88Ob aFIzS16zadPddYRkpygOIohgZEvZcst20W0pFrbY4EuMs8musZF8byq6kUq C JhvuNc5VL eSNG8TBjYdq4A1dA1ztqhSZ6Fi6I9h9Fop0l4wXXtPUUE6mgQHG1NesSYfUAnu1igYCJVcCFCE=&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe  (8b0882df802654d8dd4b20afb1a93ed2)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=K1I5zwIfsiMw1KArMkVwXXmgp2crVtkJdXMedyUb 34=&c=e1DD4YNanS2e65BK7AGKVWKEVPjeyITBvOQU7C5ABsOZEUpWKpZeHfqC AE1kB7mLBVeSh2k1ZltSXIQIS5llWU8S1lXTi c75zdNd1356xs5/CGiLHwncOIludth2gMdr/HXwu cLhS 2b2fapm9c6rvuTl7Ljb9MVDOJgqThE=&fallback_url=http://storage.dobreprogramy.pl/.../MM26_PL(dobreprogramy.pl).msi&downloadAs=Windows-Movie-Maker-11546-dp.exe  (8aa5fd32e00235c831e2fc6a91ef3594)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=qb DCFaEsERgOYiOCOQEc WZCZ63mcSxzvjWqdMxCMI=&c=Wbiy/ tBcFOL97tkJNf1lvm1EhoEOSmqAMEw7DjMwaBWnjo7 t vVnxzm07I8crlVRy1Np8EVS3ItwQih 0X6PGUMzvuRTitOEk2gwV/xlLMOzr h6PQ7CslaU7kLQmR2DqsSSVpKJ1wQ0tEPMqMHM09ADm6/ZijIHT4AHfdIIY=&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe  (e33c4ec9129f2542e77c232fc2eed411)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=5bL6am9XBrR/3VgeffXdzl82YSyNidLSzf9SzDYjgWM=&c=G0R7yxxaS3YA8spj9vTxuXbM6Quj6YUm/OxBcIFD75 4/MuV6XZNXbc07LR6TpJEAU0ivLvG5JCqmhmDhvN7FfoJnI93gNZ9Y0iM6HbTTCOqGnrNQTUlyx6UanOGYZUV&fallback_url=http://www.7-zip.org/.../7z1514-x64.exe&downloadAs=7Zip-12559-dp.exe  (icreinstall_7zip-12559-dp.exe)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=XdBlpZcxR5LwX8E5bLxTSEjz/uEilUR4M9J9QV2RRxA=&c=cffCm6jwo9bGI/0iYYET4sw4eNh5t3C1NH9Ho1xz9metSDFyaZdR0t4yknyiqDAZSz47bQa9tyEBDVNu91T4OgWGq5BwPeimjJRzk3v2PBY5QqMaptaLjOyCRw9fJXhT&fallback_url=http://.../easy7zip_x64.exe&downloadAs=Easy-7Zip-52954-dp.exe  (126631bd3d0745ba5338334c0200b60b)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=tL4GmvJ3kRleDHmSxaQYddHKcS0CNu7Lu2DVXOpGQiY=&c=dHiZeuTMdVZXGxHbURlKPIiXxuL iJhTB7hiJFmewOctOT9BcR7llp5jwtl AiPAryAb3C62SKh5K2057ssXZVdrwclSgP6AmqWUlK9z9CTAFXivGGPeg2ZO6sMCtAg4&fallback_url=http://.../instaluj_fakturka146.exe&downloadAs=Fakturka-11443-dp.exe  (acd7e49a9aec856cee7dbb5f2f28e273)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=u YVMYhmhO4lF1OwCTxX6P8VmavryT0tuDYdJIhA 9k=&c=Rn1Qb2AQLUbfzJV7jSJh5yLBX34p9NDysSZeGYhFfMggLpQ8LOz1o86sibSwPkGxstVOO4cCWCCPQFZc1dl842uV8IIqJajtXTEsvK/yDJJqxdljT4PH3NB3xo Z18ITfauaeL35Ce15mTUHe5umahoTvTetE1ezgWBG3I40TQc=&fallback_url=http://.../tcmd852ax32.exe&downloadAs=Total-Commander-12316-dp.exe  (ab07ec6fc4b78d92aefa717e194dc9d8)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=xQrHwTjkY/RmqYrgh jkabkfahm C yJHhIJubu0NMw=&c=ASRmEj0mTKcW5WpwaWeWfRIIEC d7N34LaDeqqT1lNLu/h2ST3GhPXet2v7dLMWexxbvUkkFqaWdulLxnmhrI74dfvV6c ndHz8GbXaIcsHtcAGRE5Bd2xLj uzXZpTo&fallback_url=http://download.gimp.org/pub/gimp/v2.8/.../gimp-2.8.16-setup.exe&downloadAs=GIMP-13219-dp.exe  (269ef6555ede2e0799168c110de49d39)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=zhJs0cJZ2xwr0YVPlNLeT7sjk6QbTyxpxWkDqPh8qKI=&c=f7GdxqkKGqeKO18mkeyijs0eZVduI2/C/AhnPB5zv8S4ugTKD yxe0Gots0GZbKx/VLBZTuCLUbz997hHj8H5TCEdeOk1yAtzFaqHxIzMjI9P4Wpx4Wu/8d84IuYsp7rFeiYMvEEkJmKq0w4YpEQuLLMeHlxGkJZ74D11X5ZZMM=&fallback_url=http://www.diphso.no/.../FotoMixV9Setup.exe&downloadAs=FotoMix-15302-dp.exe  (2d59e4140370fe47d2b60e32614c0ccc)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=Pep3qhLWNRTpjyoQ2grW/JeK8itZn/L7culrxiLkEds=&c=5YiQePJ4STBvywzdXSjPjZ 67dZ4rIKw/AKGcCgg5UW10G4aX2jvR49h0O3GQykWQhrk3iqGTNeVFg63oUYm8I57nStd/rUh7FtyPNjPiyrRw4AuJRZboVOJdDbrQJFTuOCW3NgLzDPNsTgMVh vVfeJmYbOiLHXkqoCuehfp08=&fallback_url=http://dl.deskshare.com/download/.../IPCameraViewer.exe&downloadAs=IP-Camera-Viewer-62432-dp.exe  (b64b3e3a5658c19c2b8e4a93b97942d4)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=kqEQVS5r2T46qwZ2pcKWgCC8DcnUXcpapIhzGd5JHEw=&c=Z0o8Og6Jrolcru8BeglBQ2BwXQk2nEHpT7TaYgcAv/uoIvpIXTP1/yTGCXdwgfeikC2pvMVKNHl52LcaRVoCoscuzUpfKJNIwLKZshpz l4ozlZgjs7N2rxhdOlKEobTrxdKBH19rB38peIRGSXURYBmdW6IFXbccqIUQbRlMcA=&fallback_url=http://www.dotpdn.com/.../paint.net.4.0.9.install.zip&downloadAs=Paint.NET-12332-dp.exe  (icreinstall_setup.exe)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=DPVP29vh1/CpGp4S6tmbHWOQANkyvx6AkS4lDwqqiVE=&c=jlwlermS8YFWxKkNaKXYuEiNIKe8DtiavSiRoZP9/V59MnXG4XWQLZyD6To5I72C2gRG7sxJKBrvixKQSQnVw BY4ntWddDZxy5JUnWD2uzFhef0WpinWGYWn8nGgP3b&fallback_url=http://storage.dobreprogramy.pl/.../Bluetooth_Radar_2.2_(dobreprogramy.pl).msi&downloadAs=Bluetooth-Radar-23933-dp.exe  (990245ebbd0cfb13b8eb1dfed83e5454)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=hcajr3j9DUoqYH YZZUmPlTpqz6Cg2EChk 8gTOKSb4=&c=xmAuZW4ImAJmo7L2R5ttrPAOD3I5hjwiQdyy4y49GVakI2dkGxBVrFNySqL/JUZP/6Eemj5vTBPJG9Hgh7QnoZ3UkgTpyYV9nwXmuESo/ZR3VJksTyI33KZDaiDKXqm &fallback_url=http://www.driverupdate.net/.../SlimDrivers-setup.exe&downloadAs=SlimDrivers-25819-dp.exe  (icreinstall_slimdrivers-25819-dp.exe)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=R/ WeljpFMU bfpcAX7lphF9WoHxSYR3J/VlGtOnK2s=&c=oVQqHhtOpJIrUcAXinPXmUU3HrSNsG /jav58NQgt7 8Yul0jNVjPMaiJp4zl9Y6Te1oE0mmDSsf5Bk/f7CXmnhf0oDCCWxwgzknSyUkujJeWo0TucHpPvqBwohPtAnS&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win32/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe  (c.exe)

0 / 68
http://www.signsdownloadfun.com/c?x=JDZ5Jvtz/WKm1vYEDi0NVp283kw2MPkz0KJtF1JJXFw=&c=I5cOCtWtBDB9F4lt0de7O7NqQ4Oj92aExaJvATg7vUFbQPrctiEKAaQ4H3TPoG hcygiby0h p sZQvbOeiKS8FS7syQgcTBzQo6BiVmnvf 4 UKhxc4Ojgm4FPHmdZw&fallback_url=http://storage.dobreprogramy.pl/.../foobar2000_v1.3.9.exe&downloadAs=foobar2000-13337-dp.exe  (af80eb8b2fc568938dfcccb8c545d512)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=QuEA7tuASxvYCtMhpZVYDv/p5//zP bX5aeLc57B8Fo=&c=Ki95faIzoGjXx92ixcTxxFJbuPa rZVnz1BiNwaFgQjdycSR dmjgqVPVX01K3TDjXa9daO2PAdVh4Lx51dmPeqkZhDCa/1sd3MzGi2WKUuoWFsTzRhw4323sNG2q2P wIawA665eIIHSNz/93J0LCkMUnEhYl8AB8lfXuJq/FA=&fallback_url=http://cdn.kmplayer.com/KMP/Download/release/chrome/.../KMPlayer_4.0.3.1.exe&downloadAs=KMPlayer-12538-dp.exe  (2b8484c6cc7f8e48d08ad0e1089d437b)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=7MLL eCxk ExlZM683G79i6DWYIsSJZlamdRG5lgZqI=&c=tx9uFuv1oG4ajtnfC53Z6lArmD3xlqr b0E1HxS80yRTSuJzAZSZ3kzddbWD zCEcUwBQxgJaoF31CF dQeOtlU6mevQHQHMayH54oGoPUr6nI8ZLy0v9ghWY5X7xGBlS8FtkMfYj4Pn7YyV9w4TTzmAUwkanePK6hEfqR9NNzs=&fallback_url=http://download.techsmith.com/camtasiastudio/.../camtasia.msi&downloadAs=Camtasia-Studio-12665-dp.exe  (461cb554e27d49565e53a8b4bd4811ed)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=PcGr0BiAoRfAOerTzxP6b/ojM1pQqMPkejaEDTjTpGU=&c=4Scjr11r8q/HivWB1irC5FH1f81PGKDrKWKFzkLVUbo6/KKRkC0dnrLYlRmx3V3EvrX1DUNTyA3Gi4GYdrYWTE1EWqTuu0T8qduKsP6BY0XZhEkJ0DEZotSdWlkVgIY7&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0/win64/.../Firefox Setup 44.0.exe&downloadAs=Firefox-13108-dp.exe  (950e8fff6d4ef86312109c57ac9211f0)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=fwDVIJm5kRkvHtl5LtAm11/tL26W6AvBAtBRlt2q4h8=&c=Gvbzznq1KCVM/rL3tNLgvPotATTqgwtlYvNcUItF1r9sYyAjF0IEi1KpZ9d2BTAnq4pfryvGslu5TjlzcY1tkXy2Sfg5IBG5gX xtpDEJ24hHGXP3PqaXcMeK3mGsBMr&fallback_url=https://cdn1.ashampoo.net/public/xen/.../ashampoo_burning_studio_2016_22039.exe&downloadAs=Ashampoo-Burning-Studio-12487-dp.exe  (2bf74b391bdc816259222adb9c8556b0)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=iIDyrRdrF0yGX0f8SYJc4Z1QYTHUVtjOp0/1l8 IeJ4=&c=/zN354ZbiP3XwqoW5qIe nzX6KYYHUwGjhYLsZlPpLrb4aumMLkC74ZzlRGpwMOcdonBo8OZBRMLZR4NiPX 1tNJuURmB0SsT4Uyj1eyObLR5qA8oH7ITyMaLQEtUIs6&fallback_url=http://3nitysoftware.com/.../3nityDVDBurner.exe&downloadAs=3nity-CD-DVD-BURNER-39358-dp.exe  (e3c71a5d27bd82ebca3448ac21a7429f)

1 / 68      (Adware)
http://www.signsdownloadfun.com/c?x=O0gm3sJMLHaZXUZEiIYGbfvy6VRkQByYDiDsvM1UNYE=&c=5dsdobFRbBId8B io X4iUocxNjNCI2ZIJwv1L5XLbOskJelXeDFzBdceGPB5hhPVV2yBKSiyt28XfRpLJHOdSnSYLITqoxE/cgeMk62bCVOOl1P1wFuZf7OeEAVXYip&fallback_url=http://storage.dobreprogramy.pl/.../ClassicShellSetup_4_2_5-pl.exe&downloadAs=Classic-Shell-35757-dp.exe  (9af215141ac4cdc4db96e8f62c3b29e8)

1 / 68      (PUP)
http://www.signsdownloadfun.com/c?x=Wb 2OLPXBSIZ8qwJJhKEaSqni/TOAeeiylbqpzUsEis=&c=yBAyQJscY9zDZghs8ysfli51dhKXca1SAkfYOLGiW4NQBH6B6VSB/vU/2EaPc8J8PuAY8gt23vkTcBM3XIoOdUpm2XEA4wXY5aKp3vFnIIEPUfeJyQMK1ltbvFkYesoBPanOPuMymv3bidk5YgwbvPxJu2o0EaC4GLfKnPkWptk=&fallback_url=http://download.microsoft.com/download/0/A/F/.../windows6.1-KB976932-X64.exe&downloadAs=Windows-7-Service-Pack-1-22012-dp.exe  (b7fde0229996cdef61c6ce112bda2a23)

 
Latest 30 of 71 download URLs

The following 36 files have been seen to comunicate with www.signsdownloadfun.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.