home

www.tourapplicationshost.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
tourapplicationshost.com

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore (M), PUP.InstallCore.Installer.Installer (M), PUP.InstallCore.Bundler (M), PUP.InstallCore.EST (M), PUP.InstallCore.FC.Installer (M)
97.67%

Kaspersky
not-a-virus:Downloader.Win32.InstallMonster
11.63%

ESET NOD32
Win32/InstallCore.ACH.gen potentially unwanted application
11.63%

VIPRE Antivirus
Threat.4150696
4.65%

avast!
Win32:Malware-gen
4.65%

Microsoft Security Essentials
Worm:Win32/NeksMiner.A
2.33%

F-Secure
Application:W32/Generic.70053c248f!Online
2.33%

The domain www.tourapplicationshost.com has been seen to resolve to the following 18 IP addresses.

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
July 5, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 5, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
July 5, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 3, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 3, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 3, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 16, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 16, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 9, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 9, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 9, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 9, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 9, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 9, 2016

File downloads found at URLs served by www.tourapplicationshost.com.

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=sVZUoYjveeq4GzXkf5ToUYI/rbFIHdt7K4k07 opNx8=&c=yIM7lu4uPXv4CBqAiFZCdeTSaqUrKyVNIJS7SeJ7b2FuiCaIrBVV5fEDAmSl74uyQNizEGM3wjsIbN vi u/d jo4l4yUChC2D1HXGgFTUZkTG9Amb7L1w/lEA6mHirV&fallback_url=http://storage.dobreprogramy.pl/.../Fraps_3.5.99.exe&downloadAs=Fraps-12500-dp.exe  (f068500be73d811931ed7744b1509cda)

1 / 68      (Malware)
http://www.tourapplicationshost.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  (freeocr.net-12517-dp.application)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=RBaQGEeHlqZZzWpfqSLX89mgc/z8RkYhqsupPJdICL8=&c=yYMJ8zq9sIbsI71Dy7jgjQ2w1IDNHTRHy1jQBV/T beugiB/uhBYLdyWbtVf14y7AGaPDy0MBCGR4AX23iCFRJJneGFCWTa cztVWFHn6gbW2r0zoyxHNASrWiQnT0Yr&fallback_url=https://launcher.mojang.com/.../MinecraftInstaller.msi&downloadAs=Minecraft-41028-dp.exe  (e4e778dfa93a4e0e5e3299f040624868)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=j4YiJQDpPJwkjavPwFcvwa5p5EwAdjCM6FilwYCp7Qo=&c=5p1HNMcPIyE6owttDhtt8j/iIJJ/DKrx4tG7lu4uo32a70uB6mHt0OqzttlzY65dGw5Plddvw0Y0XT/21Xii7cup6KnWpCv kuwnn9l7X9XpF2ph4b1CcbQRUUrUPcqd&fallback_url=http://storage.dobreprogramy.pl/.../BitTorrent.exe&downloadAs=BitTorrent-13103-dp.exe  (e5e205cf54b8bfb066e8abdfa8c4e500)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=iHn7B3Qd Te6NnwmOLGXs lIN1psPO8VWwsQ6oTUw0Y=&c=OXgKjay5rmDn/XBPIypbekGo2LNLfo h8d0Mne cMm/aE4AqcrE8KuHGqx0hWs4OckvGl2dh/WhOwSKe1xkZEFIGCaML/47a8Pt1IGSo4NQhF6Ak1qdBCeIaNOz8Jmy5&fallback_url=http://.../roomeon_3D-Planner_EN_1.6.2.exe&downloadAs=Roomeon-3DPlaner-35472-dp.exe  (a3b605991741f99a7dd93ba366b991fa)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=wqYhOfNoJ4i9Or 5X7tN3lc7zY3cqcWdmYebZGLlET0=&c=J7Sl2tRekVOXdYNUkeWXQatG0LLR/TFosjT4VlyO2 RX5CPLT83TDlQfqu4XvGzQ9LLDZtPqsQ2uA 2V x3KZBxjJpBbowkqX8LXHhqPzr3x o4fQWgRYOtzRetxlKIc&fallback_url=http://.../anyburn_setup.exe&downloadAs=AnyBurn-54580-dp.exe  (9fa374fa351fb124eb3291d3b9cee075)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=LSvWAnBQ4tNwCfrqP5 3DmKbNY4vznmaAuzYnMLqAD4=&c=dwlBmwjXWDo VAlyXQEZp bEZ29IH/txsaJQfKQ7gAoFou0b8NhIB7s3pgIs1BBsTK i7r0pcN0vAmkB4iq4SO0bZLP /u5SgdIQKNEkAiqZLfBezeO4xtwjDXBJ03c8&fallback_url=http://storage.dobreprogramy.pl/.../SkypeVoiceChanger1-3-2.zip&downloadAs=Skype-Voice-Changer-47642-dp.exe  (4ecc8133f62357ff2fa0cf2c33c626b9)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=epzwdDRmQ8NWqXkRt7QcZr8rz30odloFS/1zlHRvuAQ=&c=NNmQX3vJVU4F9r S7HoUXYfW6KyJcsd7NGIpXMGwaFRl5JQ3CsvWhdoTBhOIdc2bsdASs72DsVV4mOEkXiCwERNTvrYHEQdvpa7vzW2j9BxVjj783eTCVFQ5mOBSXyAN&fallback_url=http://storage.dobreprogramy.pl/.../MM26_PL(dobreprogramy.pl).msi&downloadAs=Windows-Movie-Maker-11546-dp.exe  (dcfb294078281ddfb1879cdfaba76d2b)

1 / 68      (PUP)
http://www.tourapplicationshost.com/c?x=r01SR Vd56AMQgoJR nuW7vvtwK7jaBwguEuoAklbrk=&c=8d3XE4l3q0bZ3EaLMl oo 41XcWCMegnvhqEGXARidWrMq02RTWZPH8k0z0 tYplOyoOzLHSXzf2yDswtq1Ged2gfIktjZpGeveErQMXJPwV8VOhlB0DfeyRVZBPIZQ8&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (a715cbc1464be537e2328e4addaa696d)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=m7qqX/DrUQx1CgP2oPqs9 szZvkDyOlPdqk7VIDxu4s=&c=V1pTxI3nCdQDiDCl3ARz2cXMf5 7/KdKee9pIVAcw7908nqTglkKELIqQM1X1KdLdP61dHB/Iq6vLAVQ5h4bxGiujGBKceg6O1mF6i Fm1qFvq5WT7tOFLOp0F7AW2nU&fallback_url=http://storage.dobreprogramy.pl/.../MM26_PL(dobreprogramy.pl).msi&downloadAs=Windows-Movie-Maker-11546-dp.exe  (dcfb294078281ddfb1879cdfaba76d2b)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=93cK8IC4YX09QprMPZ8SYP1hmxTuHf2ctjqmaiWprSY=&c=GD2p3ZEbK4bQoLT3ueAjG9mu7YGZYyX3hQHG3UBH 8UeX44eyueI3boPFKeHQW/tfpRnBtVdkPJPRVz1aF2 28tD0awOSDyPq1ho0WvDdxGHBcwniCjeSqZb8sNNOayZ&fallback_url=http://dpstorage.pl/.../iview441_x64_setup.exe&downloadAs=IrfanView-12867-dp.exe  (fc3fd3c5ae78bf468fcdfe11117cc5b9)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=W8wQlTlrJOtfagVd3/iRwHA KwK/23wdGiLaG0oe3pw=&c=Nvav86Uz1tui52iyJPZZU1CjMcdmMd157N1r8tsvKH6PVyZllcsqm13VS6L7lvhg90hr4MQ7B3gpfad/t/OVLzxKDjAdC1/QHB7xCX/LzTx1wyP/922iosiy/nTAcRVb&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (571677c5d0799e9d5f20ae99943e2074)

4 / 68      (PUP)
http://www.tourapplicationshost.com/c?x=JH7SWpyd dtnHntl2K6PoULrN TAZHY1Sc1d/jXB1TQ=&c=nI6hdUYyqrymol7UGgmWSWEh/hf4PwihjBqsGG4vOkN7EumDtsRfA/TEvkRdSLJgfUdMP9G/8ejw6Ujm8ojvFPlvBYMMSDVpJSVI0aN2CLQnuhnl1zaSeB7jbvKI2UYd&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (32f55f21de4729e5df095b29f961d349)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=F4jk0 zTwQ1KaanwKJOra7C/NeQZcEuTAwVKncGXJnM=&c=1a3p/PZkdUuTcfVFgyFksn473/WtcQg aA7FcAzgsHn3wTrQ851VT/kPrP2OhsV9DeGcQEIe9kmI0zvIZPS4AJiCwKRNULubXsUIK2omyZFzAHVzCyYSEyXTP1lqQfUu&fallback_url=http://storage.dobreprogramy.pl/.../WYD_Installer.exe&downloadAs=Whos-Your-Daddy-68861-dp.exe  (09dbeb1dc1ffea60c60bd1f91dcc107e)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=uRYWx7PADsXP2LP QNPA94WhvMM74P0ENn PL4L1Qi4=&c=QOYro7ts6Slw6j 9T2FPGWkE7FOd0QuoCyFl3IPrrnYLy9J EsUqv7JkzqALI2Co05Efpl4BTW6ezlCh0mEs1MX9CdjuJOAf16xPgle9O2GIWSLlY8HQEj6AeiyTKPdN&fallback_url=http://.../bdcamsetup.exe&downloadAs=Bandicam-30315-dp.exe  (15c587c432f80e66a4d1e2eb5dd00504)

3 / 68      (PUP)
http://www.tourapplicationshost.com/c?x=0qRE50iuuhEZpxItNX/9oCnpzi1//Hls GPI1dn27qQ=&c=cQ 7o20hNqL6GjB1JfAGKET0qIIhEo9DTBn21zYw/0qtyvUTHfRW1IN3lE84chqfAHYwDYLyQy NV67hZw9Nfa54F9/ZR YumD/vd3f3o 7NK07H4gSPFPPTvB/cwEBs&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (c.exe)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=5ANJ20KPq3vTKfmhZCE9U KXBVb8li3aH1YnCCqNBGg=&c=yFbKevFPJ5IcFjpoNVlF3WZ4N12skFs9Z2TO/oeDVFHgScvdzVnPeyVlPxqeiOXfhHrvxOjK nc0ug01X51Qc/MIHipoBMC3tGYGULLfJ0C5NAahHJtfECvUiDTGzL6C&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (571677c5d0799e9d5f20ae99943e2074)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=C5CbVVlUOZ57wJPhtBbLakh/TmNFejkxeLyMrC10JuE=&c=oOVo8Y3KvvwfrClThGiucA7JBIrhonhwUAvhldnQDKd5sczV9mlhPvcJJcXIA0y940Z DXd670aYhDwMJEJS/MSuCpDsRHbinPQxkREg8XmNlNkKBq6PeyQv6dQpYFqr&fallback_url=http://www.allplayer.org/.../ALLPlayerPL.exe&downloadAs=ALLPlayer-13217-dp.exe  (38b2959e3f79c3fa200dc58acc2a8ebf)

4 / 68      (PUP)
http://www.tourapplicationshost.com/c?x=rtThJQlhx4vBVjJYWhhvMK vbECQ lEVnL5mcZBiXcA=&c=114zRYw4HeSW6DiiaFRCe9jBj4Mbb6Rci53UlpJbO1zz8qV8AIh 9G0 9EnUQ1 oTNMur3j4uwFV/28uVORPkfm84sATI1p4 M4KSy3iANeVnEpsQ5LKIk//OJiT3iLP&fallback_url=http://fpdownload.adobe.com/get/flashplayer/pdc/.../install_flash_player.exe&downloadAs=Adobe-Flash-Player-13091-dp.exe  (a2b5db72dcac3644a3a1812007939559)

4 / 68      (PUP)
http://www.tourapplicationshost.com/c?x=2m/BmNuXIH6lkN4iOQH1T0CF7az Zdxsh20b9bhjlHk=&c=CJ77IdgxgkZzevNjs4NoqJnLrFQaNyVon g4es/tu2lRbD6CVSNAz035 QTIoCCf2Yw9iMbe9owTc0yNqpcsiN/QOdoRUUMaBAI6Xe9ZI8HveI7Eb0nTbrl46272dYwd&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (32f55f21de4729e5df095b29f961d349)

4 / 68      (PUP)
http://www.tourapplicationshost.com/c?x=RZNb0w/IO3tParXh3FmNLi3IeTBK2TbvaTTW ORrHh4=&c=YFPyy/8l24YAMD13YbzXwse0oRq/5zf1qetOLfXh7oH/Czyk2f4OS8p7gkycpoGCOn/ThYb1aZiDBZMQSxGowfoUcRvtbnUO 7brEg4Z4NeEsCVH0Ao4/W1ynSVAgZkk&fallback_url=http://www.clonedvd.net/.../DVDXPlayerSetup.exe&downloadAs=DVD-X-Player-38420-dp.exe  (332df8825c14a14be7bcfd8c1c868fa9)

1 / 68      (PUP)
http://www.tourapplicationshost.com/c?x=V9D7HxAafWRbitYlH6dTFVwc9XccSHo8qazq8jGRHrg=&c=MFuwLdValTkNX03Ldmh0GYkB6DFjlY1aL fxiHBMnQA/FZhiInv6lxzemk7yMiUbhL2yNQ9zIV9HzdNTgn0q8e BASTScmvyeajPy0DoDcJ6gTW0t4I9sPV/VqH1sPnv&fallback_url=http://ftp.adobe.com/pub/adobe/reader/win/11.x/11.0.00/.../AdbeRdr11000_pl_PL.exe&downloadAs=Adobe-Reader-XI-21590-dp.exe  (5846947dbfbd220aa3f46904d046dd6a)

4 / 68      (PUP)
http://www.tourapplicationshost.com/c?x=0K9a410wDhOVKW3GKuDOY8axeYpdE22ltqf2rB2zj6Y=&c=EZLNXVQMqgkQeE3npyslBKHqsocLuqbK/oMfSDUTlzTf2Hw39zzL0Z Y8Yx TLzc1g7u y7dJdTr8U1abbV8DLz0aajw4nvJUQRjfeF8MGu0Jr77sCKXcCAS7kZ1pYgk&fallback_url=http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.5.setup.exe&downloadAs=Windows-7-Codec-Pack-18648-dp.exe  (7423e6eb6f8271d90f8e28367351b2cc)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=pUPwTO8b nDUiTo2XN4d5/eAgsI1OUEsIGnrBNQWUBs=&c=P BnxDMNDzw2BkWlg8F/oVm7hVfRMlTRuGRPgcy7sSlliDH2dkdp0E2inuBJMwMqhLDTOzM v4G2HSMmu5JJ2IxEnCYtQQjVkAmsUrRgz04pTs8qKUbKwgnA/vfU8C1Y&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (571677c5d0799e9d5f20ae99943e2074)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=U1YQCZ1v7aM7c2j13CECqPVF ZAjUqDTsLLM9uiyNo4=&c=OVeTmWTNw3OIZNc9sFN7lCCht1f6zE9x4Q99EmXgWV4RJLvm8PnwqfELha4d5y4MczSlYmASdCEB lW 2QbhXaflA6yYhq8NWfrjQpiS33pN5fbxx9hh4Vj4aW2FGmy6&fallback_url=http://dspcdn.sonycreativesoftware.com/.../moviestudiope13.0.955_64bit.exe&downloadAs=Sony-Vegas-Movie-Studio-Platinum-12465-dp.exe  (fb03171fa872204506d37cca3b9a5846)

2 / 68      (false positives)
http://www.tourapplicationshost.com/c?x=UIgyV0smVlhPlnRguuv lhJnkYxQu0wC14PSP6OwyAg=&c=PJbakSkzjFOaXmqfk1BgNd27x/rMC44v2B7H1cjvxLTGzIpyP18ZYl4olzQqPyDJkNvoGT2GqRD3ClTKnC0T P1Gmjz5cHuTGPZBjpKB2jo/LgUEffdDVacTzExdOiGG&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win32/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (wrar420.exe)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=eWIIA0OPtmqvjxLJ bb8VKts5IdfOMsCxuWBh4sonXs=&c=jj728m3AI7Q4IJY3jwUT0/M6joTPE/sBvYilFoukcJNZwJMU9EGnn0wStoj s7KVyCYaQWnzyuAr6LWbGNaaIGN8ZHpDqqFbNEcS2WDqaKRldmwqFLev9e5YoT7mhfvL&fallback_url=https://ftp.mozilla.org/pub/firefox/releases/44.0.2/win64/.../Firefox Setup 44.0.2.exe&downloadAs=Firefox-13108-dp.exe  (571677c5d0799e9d5f20ae99943e2074)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=S/b z5fy4vH2bvwoHOCCWA HUK0MoJG9oIiTtgPdzT4=&c=ivcrvZXCsmFqPo2g/hXRhunhVRBpeSvhxQFuqjiZ5Cnz4xq7FDtWLKydzbyAbf6 pprdT5ZL7SVgSqcQZlSJBJqKzmuo2WlCtLStIJkEdaEfxtE6LwlvWnqz18sBVOfO&fallback_url=http://storage.dobreprogramy.pl/.../uTorrent.exe&downloadAs=uTorrent-13270-dp.exe  (881a52f66c26caa9061ad95be6ecb9a8)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=uauxo3C5j4DryvOyfRCeB2nQGGzhHJ2AWYSab69T aA=&c=9 Fb7A6Jcwchylw1e1NkAVk/3aRpWRX6z Bh5ohhgJOOGx4G 7TnQFtFFjLyk8lz18 ogj/gKeZdvz0N/1N0do7viWy5VJUeOYCHNcFGx41 /5Cp57voQ97JPLiIlDNc&fallback_url=http://get.geo.opera.com/pub/opera/desktop/35.0.2066.82/.../Opera_35.0.2066.82_Setup.exe&downloadAs=Opera-12614-dp.exe  (c8a587fe234e6444a9526520b65a2f38)

1 / 68      (Adware)
http://www.tourapplicationshost.com/c?x=HPSOlRHfmLO03kEAtWJdxBJ9XeEuEqtTfGwLx0FxKec=&c=5 PYDr/wRMBxuhpq5T5KWoNvBgpriZX80N9fwmC Ow/Ml6LMuGV4HKFZvEOKbpYCGyAiPG/eqcZ YUscpWq/KqcydQS7/ARudTfJZyJTyWzAw/pRd6dRuO/UzcsjwMfA&fallback_url=https://launcher.mojang.com/.../MinecraftInstaller.msi&downloadAs=Minecraft-41028-dp.exe  (e4e778dfa93a4e0e5e3299f040624868)

 
Latest 30 of 53 download URLs

The following 23 files have been seen to comunicate with www.tourapplicationshost.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.33.46.229:80
Client.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
browserair.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
3.9.0.128_20140916045038.exe (The KMPlayer by PandoraTV)

TCP » 52.38.209.219:80
e5be.tmp

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

TCP » 52.38.209.219:80
client.exe

 
Latest 20 of 59 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.