home

www.signsfactoryfarm.com

Communigal Communication Ltd

Domain Information

The domain www.signsfactoryfarm.com registered by Communigal Communication Ltd was initially registered in January of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Saturday, January 23, 2016

Expires date:
Monday, January 23, 2017

Updated date:
Saturday, January 23, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
signsfactoryfarm.com

Whois:
1 signsfactoryfarm.com record

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.Installerlite.Installer.Meta (M), PUP.installCore (M), PUP.InstallCore (M), PUP.installCore.Installerlite.Installer.Meta (M), PUP.InstallCore.FC.Installer (M), PUP.InstallCore.RE11 (M)
96.77%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
3.23%

F-Secure
Application:W32/Generic.70053c248f!Online
3.23%

ESET NOD32
Win32/InstallCore.AFF.gen potentially unwanted application
3.23%

VIPRE Antivirus
Threat.4150696
3.23%

The domain www.signsfactoryfarm.com has been seen to resolve to the following 22 IP addresses.

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 26, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
August 4, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
August 4, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
August 4, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 4, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
August 4, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 19, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 19, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 19, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 19, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 19, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 18, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 18, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 21, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 16, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
February 12, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
February 12, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
February 12, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
February 12, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
February 12, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
February 12, 2016

File downloads found at URLs served by www.signsfactoryfarm.com.

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=mZnEChlZNdNnitMWXT7Ih73ReXbYM5TkzmuNKl1J/Lk=&c=Q7WEIY/3J7uN1TKkA5AF0kmrFxCSWyh1chWm5MpuIh7CkSxr/PxbnNGxV/Sa6DZuqZzLcP88jaV0CBI5kiWAgWljiGJRxqIicIauuqrciJk0gNQdoqka892z/ifB3Byg0vJRt44FevxanAZhbKxWFQ==&fallback_url=http://storage.dobreprogramy.pl/.../MM26_PL(dobreprogramy.pl).msi&downloadAs=Windows-Movie-Maker-11546-dp.exe  (e1e6461f63306f5fb7293e6dd41b5510)

1 / 68      (PUP)
http://www.signsfactoryfarm.com/c?x=RSpI96kOHtxAZGWXQaiLtri1phBAYKFEXuUYGkgBH4I=&c= 5IdlFt6VEA2HoaahludVGVx8l6XW85msLiilIbqGF2y1XOZW WYrSkbS7Zlehy2UlcEkFEhVrhJw1kFSNzD4qh1hx0QbxPN5PnS0YFs1SMmFBV5f8xtodGZC4puvupZ&fallback_url=http://www.rarlab.com/.../wrar530.exe&downloadAs=WinRAR-12398-dp.exe  (icreinstall_winrar-12398-dp.exe)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=twXIJdHQ6OvwyW2/ gaawTGI5/YD5XeiKAQm3HnfKSE=&c=IwluQ Q1z7I3rbKT6xuVw5ojdWKakbA2I/Q3uPCIdqwS/8HX5S4ibHtKVW4HR6gj9s BZBnBpzGWpwieLXvQhBkZK56UM5oSbD7BpHwEi0DQ37XWP9SExesGvZzo2Ec7&fallback_url=http://download.freemake.net/.../FreemakeVideoDownloaderFull.exe&downloadAs=Freemake-Video-Downloader-20102-dp.exe  (b16be194eaa47c044d71d119d6e70fd3)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=bUstC9slxDtc9vem2DXwMx hhaysokPofT8OP1mSlMg=&c=5KosYO7Zye2GquzMUTFqYo6CgaAdlOYcqrVlf/dG0pUH95Wf2Gmr2JG4dlo3EMWS54peP m0m/Mflv3VD19nvJWRwoqw55oQ5pZZbeSv0Hbx76FZa1SPBCxHCs8Ok4vt&fallback_url=http://bullzip-website.bullzip.netdna-cdn.com/download/.../Setup_BullzipPDFPrinter_10_23_0_2529_FREE.exe&downloadAs=Bullzip-PDF-Printer-12736-dp.exe  (f1db1582aad57bf35132488a44336750)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=LrFuDHbuL08yYd3Y6BSyuNfzE5PGu7RJDsu151t5chg=&c=wBTCBMXyYedgxiW7/RAP4s59moTCEwTroHLGnyvccMVFNQzWH1VTJz7GQBxlcViLVRHkn8M3ZFFafyWETQAH/Aor iv0KOi62crsvwauQeJF4Ml9STgn5D37Ikpjq8KOWyDhi1y2gqBAIDmkD5ax8Q==&fallback_url=http://off.dvdvideosoft.net/.../FreeYouTubeToMP3Converter.exe&downloadAs=Free-YouTube-to-MP3-Converter-22251-dp.exe  (c7aae9c6ae0529f835fe00cde770b6fd)

1 / 68      (PUP)
http://www.signsfactoryfarm.com/c?x=G55Xm 4SpE8W6PimAUrZXhiEtkdm1ihgluZiGspa7jg=&c=rjOTh2 PefLJueVzNgveKcwSHRKde0d 1QFfFcLic6w0bIUW/WAr IWQoS sdxsh0sOHFbysGh7BYTNxvMbEl50/wDYEsqGKeCy a9I5nmt8BYBeur80 apzruydPxkrTR4QPcr7MEKnTdCTsa0xPA==&fallback_url=http://www.allplayer.org/.../ALLPlayerPL.exe&downloadAs=ALLPlayer-13217-dp.exe  (5029f5f5b32930b3b26e53587f95f80e)

1 / 68      (PUP)
http://www.signsfactoryfarm.com/c?x=OS5YtKUYqLCq82qhj0DVsrzp/DBqnA6hEngMeqgM6I4=&c=VfjTypw2Q9Mia4NIb70H1SLt/j0TLWa4lXt6czgGGNirEUqWTfVgWHW2Ec9 a8KDrZWJvA8YKp/y3clEH1sDDkP5OfTNazumCvRwDchdz5rTFEmrSpGMwO e91cj6Q7k7I9i1pLg67w2KhM0YSLDVg==&fallback_url=http://storage.dobreprogramy.pl/.../FreeISOBurner_1.2(dobreprogramy.pl).exe&downloadAs=Free-ISO-Burner-30102-dp.exe  (1985131593fc88c8a63f0d4d3837f4e3)

1 / 68      (PUP)
http://www.signsfactoryfarm.com/c?x=Aw2HXA0XIYLh 5/jiaU3feA7x5pGCgqNWW/PWLj7y9w=&c=qv7nxrE8fbXqCcCjJrxPaU6Wb3H5IYAAnJKQAIer7agev2S5zzYaUDGigLjb46dTj2LkdRRweI62sSi0xdOtlGLUIm4dOkweszjyPGp/myKz0hgUjMcEJfsxOeJqCcuuibSoGskzWYUq9hCng08qRA==&fallback_url=http://.../SetupImgBurn_2.5.8.0.exe&downloadAs=ImgBurn-13049-dp.exe  (ed6a3c231d9b1aa594f6d51ea0f71a8b)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=BsUokognCsmORh8k1g6OyEtcd9lKUV7x87K yYvUFiQ=&c=tpllWOSo hVsvl6cqfcS2zToy snE6OO MtnOrnqhr4bxHcoJnGsOOQgb2afdmtf5X7t9bLSeFuN8E1eslQVcSCigwSdbmFjoBqhaQwceXqLztQKWSQzf460Bv2wRlSca/4ObBl 1Zmc1KNw7JBBSQ==&fallback_url=http://www.boilsoft.net/.../bs_video_splitter.exe&downloadAs=Boilsoft-Video-Splitter-35480-dp.exe  (a84f085efc7941007be4111bc4fde94f)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=Sby HqLjByp/yvpS0YzB NS/PUPekRznSlE0Geq9GPE=&c=7I4QV4pofV7CQJlzKL U5qsRDI FATl97iF3UPSB7xRVDGyrTEoml6iBPn1dP29JBFDkLy8fbIo1CY3rggtX46RxhJq/WGFnZoCf3tzs/ffyI4e8CjuT9E1Pn2SqATuPcoONUbOWhL4Y3e9 6UHjwQ==&fallback_url=http://off.dvdvideosoft.net/.../FreeVideoEditor.exe&downloadAs=Free-Video-Editor-33621-dp.exe  (99917291a1fcfeb09e90e73980dd61fc)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=ZEfHVOSJTN3HxcU6CgXXT/1 4IjZgvM/hBd6XH1KF0A=&c=RqZfma7yXG/NWO6EOracTrGkgM73K4wuP4c8r/OXKAgIDvMOdl/0E0pEthlyM7LESKw52B4U6FFZsjUUjx1K2bMVnbeJuzDwo/4ejPECmxXz/qfn5K1hYj/7SFfoz7CuG11e7ulvxvouTKdDD2jqFA==&fallback_url=http://download.microsoft.com/download/f/0/9/.../office2007sp1-kb936982-fullfile-pl-pl.exe&downloadAs=Microsoft-Office-2007-PL-Service-Pack-1-12126-dp.exe  (7be31067e8cd3131fc296ae3e09c9007)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=Y/8aoN4HtNeXEMWyJS8Iz Jw0oQwFRL0IL/Ma3BUE2U=&c=BFGKowZhf22aQj5TEdooSaGoDsyYQIMAqiA zlQ5W17Mzd9IwqNh2qWicDWpc3ySTiBLWkU gl8iykQpEmDcuIdisXhSKzkXwwaPJP368XM9YLF40ylXY0B/e8eWeSRs&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/43.0.4/win64/.../Firefox Setup 43.0.4.exe&downloadAs=Firefox-13108-dp.exe  (7bef03fa057f57b22e8fd6c7f5a48a86)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=s1Y8OAnw39aUgsvJWRSsD/Pso5zyU0UgeLcSGpZPMkI=&c=E73dySTu8sPlSANP6TIdBZ88bgxWSR7fUN25VwD1TtkoRWFflGC8uY8RoPZkfbD/QSRTeJx6CuOjfbg3lyQco8XA77cQisfhPNNvP9hWZ8VuHJujZJX6RmeOsrtv646E&fallback_url=http://vorboss.dl.sourceforge.net/project/aresgalaxy/aresgalaxy/.../aresregular238_installer.exe&downloadAs=Ares-12480-dp.exe  (e58a6a2d81f04c66c41de9d336eca5f5)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=itXkVjqrppGyrqgy84j ymKwtK4yHct 6e13HNVhDPE=&c=SFNiNqRuRPzkTPybHCQcrI9eEAHJRnGIYRN73sjIuSZbsBG8xL3Ac72zgfTJBQ215wZaEZy8BNbSMQ/ gDjnWNp dLKRGMOBnAh58GYfvsLm/1G9WKJ8cfiz0wmCQgL8&fallback_url=http://off.dvdvideosoft.net/.../FreeTorrentDownload.exe&downloadAs=Free-Torrent-Download-57214-dp.exe  (8a475f3a8071b91b5efa9e307432df20)

2 / 68      (false positives)
http://www.signsfactoryfarm.com/c?x=CBOScdiOBVpqGzPjE ftY9Da5lXB 20cUbi94ou53Uc=&c=UzqvSarI2gIRnNsxyGnFry1rcikkyhw57SO0SDRprLoXi7PaghfJ3cALr0M0h246LyGXhqKNPtefvWV1Anl tVPbK5gPLQlxzyF7wiT/MJ XLyh3wtdGjaGY4D0GjXGn&fallback_url=http://download.techsmith.com/camtasiastudio/.../camtasia.msi&downloadAs=Camtasia-Studio-12665-dp.exe  (wrar420.exe)

1 / 68      (PUP)
http://www.signsfactoryfarm.com/c?x=ht7dx56SSPDVe8/Ex Cw7MfdKgkVhAFLPxuP5/E9avQ=&c=V0SYkZxRGWr8jNNXN/ZFKBDkSBLz4dH9fEZLX1eD3SN/wSXKEZQEqSBdzHqOwWKTG3pB8aVXBMjuNJBg/cnF EoIYtYJ4V7ka27H3jprs3JiU7SBM1OgB/nK6VjR1g/L3UN0nau/HkfIFEa1mz4f0A==&fallback_url=http://dl.acdsystems.com/acdsee-free/.../acdsee-free.exe&downloadAs=ACDSee-Free-35542-dp.exe  (3a4ad5531e9b84b71c0d6b5e4afd490f)

3 / 68      (PUP)
http://www.signsfactoryfarm.com/c?x=Ao5 z1kYV0gMjbrYUUu4VsMa2tElGfS9xwwsaX76mCk=&c=AdpV7bsuCjdp3PovCMSszoETRO36FKkx3ZO/w rOFLgN21fHMq8dZkmBaspZicN6k4HW8aGPpqfhugf6e75Hn64OBTH5PWzWLqcjVznXN3FjqS4JlKUlnwja3 u0HLcI&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (23f7a92b4ba0eb23b9ca2882d2a601ff)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=HzUb5sFHzEvO6YdBP6VkCkoITPbTqOJfkeuILE9FZLg=&c=BMjE/hh/u2ovn I/ULwTdocWBnBma8rlHIs63NsenXOYgsRWnvhzvecAmbf VnLPLfnMo5ZFcu1WVuABuZgHl2n/2BPnW2LMJqaPkvrx7QSK1JwD8g70EkJWDepk6gh1&fallback_url=http://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.00/.../AdbeRdr11000_pl_PL.exe&downloadAs=Adobe-Reader-XI-21590-dp.exe  (ec56da0b507946c65ba9910557ae1e03)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=8LaB/Blvq9zaZX10soTdJ9ddF0u0B0UTIlA/xMDURHU=&c=ub7jOoxWAj7MjpkwZ1RNGa4OqJZlp5IE0q32CBUW Kk9fb8vALyTxGUTJhzZ9HglrLqaxgjMws70rtgHqonw7CMmnj /WeYeajMLfbq1yZD9XgPvklaz2evspRigbkmO&fallback_url=https://www.insert.com.pl/download/484210568/pub/aktualizacje/.../InsERT_GT_Ulepsz_1_42.exe&downloadAs=Rewizor-GT-12916-dp.exe  (0c64fdccf9556417e47a6aaf477da073)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=/Pp2ZjTS5 i0wSULuWUhHbg8ltmPhGfvuf1JYfC9ToA=&c=Qa1C5sZpc8TVkfYZhSesQyX4zt8wvS1kYjLlmVd1xV wBed20 ak/hCJRMas6IGPFqK3RKaea1B6KLwFZwSlNsBwNXHlqPCt9dTmcMYFVZRtwmAs76aZQt929BSOWCmxdY9/6UG5RZF9EcxDJrfcsA==&fallback_url=http://storage.dobreprogramy.pl/.../moja_lazienka(dobreprogramy.pl).zip&downloadAs=Moja-Lazienka-11863-dp.exe  (fba87e1542f353f5949e3443ab7f9f21)

1 / 68      (PUP)
http://www.signsfactoryfarm.com/c?x=q8zirgiscJScNKGLQ6Wq0nEq3mGAFI4i4hL8Vp4fSk4=&c=yztSLmS68lPlMdXOmrimchjUTo/X84EMnu11e/SA4FkRQWqdtxGsKbFYCfgWWQ/6O53o i/qSPdgnK08WIejsCGBMuxwY/pAVcGxEM9oE jNsflJVuZiKIGQGGG bxnh&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (icreinstall_skype-13018-dp.exe)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=/z6VgcXVVM55E9UhD7OUEqXf 0nQhJJwRAozK7wWIwU=&c=0aTl30EmUu3Wt/N6ofMJbGipxCchiNISzmOsimNsh/fOwaFV1gNZdkP/ORNHGlB/n9tnkuMf9S6JholXEl8bC78srQPQD5ojKufdTCC1J4Jpj8vO5q7ZSMGypWkP LM0&fallback_url=http://storage.dobreprogramy.pl/.../winamp5666_full_pl-pl.exe&downloadAs=Winamp-12928-dp.exe  (3a2444806a46a5ff4f005aaa7b57ae79)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=rmCB75uWmH0yzVx8jHamtSl0IAuYQBACyHE2ss60Ddk=&c=ryNPRAsJcf5sm7FTkTUQOzb NI8tAfmJjBG2oq1aB/hIJP k7OVWdm7KChj3DVjA1kk qOoqdCjRTJBm8rREIeLiDkcaae6hGApyQrFhIFT291u q2LeCrmUHAtwNu4z&fallback_url=http://download.bitcomet.com/.../BitComet_1.40_x86_setup.exe&downloadAs=BitComet-13094-dp.exe  (f1d090bb1bc38ee2dd79e2d7287ef43b)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=6EhKBl6BtPAnWKSvP2CQFYR2V8dClxnMJkNQgHYQB0Y=&c=/o9wdEp3ldp4LXTqJCjFdtcjBYJv9buoa391P61BxR63Kr2k bcLW7xcoFyvBqbNNeEk/1r67vyscfDSCkNZVB3NhvPVamQGjm3qy8HOsJx6ibbCHFeOwjp0Pi5alpBK&fallback_url=http://.../akvis-neon-setup-x64.exe&downloadAs=AKVIS-Neon-59740-dp.exe  (064f5730211909145b6ccefc6c3d7888)

1 / 68      (PUP)
http://www.signsfactoryfarm.com/c?x=mkNh33z0thH1QMqg4KCdUKSde7W2ns n0UVxje4QGRc=&c=SnqaKnjc6QSd4YiKm3WEVFW ba2/jzAwl4VhWN6ar/o7RIeE hfWmTg5w rOunFJCjtfX2WD4z1WBbjBUmaNg8bzaCim6BTiGlG7y8bw4aScY6q1MxMKfBICvJJRc20Uo2MP0RG8TliNJJB69dtiXQ==&fallback_url=http://download.easeus.com/.../drw_free.exe&downloadAs=EaseUS-Data-Recovery-Wizard-Free-58100-dp.exe  (563135b91a58c1bc0690181ea33c103f)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=bLbwy19ApNtL ppA809vf5AInb76sWstHQOQBqAqhqY=&c=t6azZgZ5oQUgIxY5oJ qrkhhy1IBgLGTMsgud/NvQHOlJlahTBOYv5NN6iD7LmmMAIKmqc1n5EUNAF7z2mb864qPIFq8VolYnrx/Kp9SLDOS4dT7je6CBYAK2cVCvb/k&fallback_url=http://storage.dobreprogramy.pl/.../DTLiteInstaller.exe&downloadAs=DAEMON-Tools-Lite-12708-dp.exe  (2fda9088074371f7f217677f0b1fd395)

1 / 68      (PUP)
http://www.signsfactoryfarm.com/c?x=KK1lwf2Vf51CT0RHGG7bWGew 9GLlB4m40EDyK xMAA=&c=iyHqG pdjAXv NbjWyHmE6iY M3Zyx1Jcu/4WxNDInBnt2cPQJshNpubbZQ/XQnXF6LTvFI6VT0EHq6SwqEFhVNRrsozJ5 uaonkBXGFTjzSatkosl8fk3fKCGos1ExTGjfPn0K/OKDzXVg5T5YAhQ==&fallback_url=http://www.gadwin.com/.../PrintScreen_Setup.zip&downloadAs=Gadwin-PrintScreen-12471-dp.exe  (de5612b567aed89a4f37699b59c59993)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=/y6mlZKotdAKRmp Jh1Wc4VSzEpXXdodSYVd0sdiAAk=&c=O/e2bzFmmX6jrSlSolejgyCqE vyJxJ5yJAd9G3a fFiBNkL2t3xEIeS8yLyYcM1ZT3080abhuYJpk WhZ4Gwnxjyv9MWKOViEEof81TA6nVMYqgKQbNWxDdQUhod4vb&fallback_url=http://storage.dobreprogramy.pl/.../OOo_2.4.2_Win32Intel_install_pl(dobreprogramy.pl).exe&downloadAs=OpenOffice.org-12495-dp.exe  (fddecbf4dbc31c87c35fd039237dac3c)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=5zlTfMCT kotbjLcDpBypwcu1DxLPMIqLkgGzw22iMY=&c=igz7c5ICxyOQ8ikPaMuV5tIHgxRN3EH9V7JgWrXZYayF1RA0PdMWta6I0vSNBloRoG159C2cqEgRFIAixl0NL/oOje1Ojparu6ECqFdSjf/ybAPCHTRrGyE99hJ hXLa&fallback_url=http://download.avs4you.com/.../AVSVideoEditor.exe&downloadAs=AVS-Video-Editor-36779-dp.exe  (76ad85ee20bae06f92ef14d8ed4674d1)

1 / 68      (Adware)
http://www.signsfactoryfarm.com/c?x=jRM8J19Xhwk4BO6jsmkEdgO7E3aZIO8B77D2V9uI0Bo=&c=st9o5GSDGEwUtemIK/EUo7sCX68ks 7KO/ThfRQWHIdqLav0DwIdlvA2XSM6utOcdrj5P4USTNWfR/x2Q5azTCJZwO8xwkBNNmguEzf4iuGS2oYznKUDG /soryg5t3Y&fallback_url=http://download.skype.com/.../SkypeSetupFull.exe&downloadAs=Skype-13018-dp.exe  (e48e96b046e5e9fa323e3a473ce11464)

 
Latest 30 of 31 download URLs

The following 36 files have been seen to comunicate with www.signsfactoryfarm.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.