home

www.tourcleantours.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
tourcleantours.com

Scanner detections:
Detections  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
(M), PUP.InstallCore.FC.Installer (M), PUP.NewMedia.NMH.Bundler (M), PUP.InstallCore.FC (M)
96.88%

Emsisoft Anti-Malware
Gen:Variant.Strictor.46875
3.13%

Trend Micro House Call
HV_ZYX_BL132900.TOMC
3.13%

The domain www.tourcleantours.com has been seen to resolve to the following 18 IP addresses.

52.34.184.36
ec2-52-34-184-36.us-west-2.compute.amazonaws.com
September 4, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 18, 2016

52.10.159.134
ec2-52-10-159-134.us-west-2.compute.amazonaws.com
July 25, 2016

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 16, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 14, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 5, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 25, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 19, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 19, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 18, 2016

54.200.103.60
ec2-54-200-103-60.us-west-2.compute.amazonaws.com
June 18, 2016

54.148.209.28
ec2-54-148-209-28.us-west-2.compute.amazonaws.com
June 18, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
June 4, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
June 4, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
June 4, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
June 4, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
June 4, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
June 4, 2016

File downloads found at URLs served by www.tourcleantours.com.

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=pJKH7tbIrXqAr31QS6QOjYxZfPFXIDTe HDTH86XoxQ=&c=V9oNyEbIqlY929S3TiQMQsfFgRqJHlpuQbgKK5f3MszLOdURnWHtQPhv5GldS1 nYTa1zQCmF5 hWtQ1/5fPwCTR4oBrTB2WNDZUHLsLimJoNA4gEe/VMErydUh6lx1V&fallback_url=https://secure.innodl.com/.../123-free-solitaire.exe  (5caef11aa535f9474452fb1fb3eb69e0)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=RLG7wkAJJCx93PPTB7Q6siDfqBf3iM1dRxY8iz0MQLs=&c=M650A8QtUHfz280qoj20ZjlLuQXXh3E0TAhH69NgVwkXDOSGJ/iB60BOZ/xcktd goI1KWLVPVcmvxCzQ39XdQjFVVhZo1o8XOJKFA9YorfcQ5f3qdmie2IB z2 hnWcUZTMd1m8fT/JLNyvTVwLYQe285DRQdJOV W5Ph6f4Ns=&e=0&fallback_url=https://secure.innodl.com/.../athan.exe  (d2043226b80cb0248ab2960dd31dfac7)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=ir17KyIxxFcLxfZlhjmZ43JFk7akn747Hn5/3LiITVo=&c=/Ba iqm2Ass9IwAAsr QCPp/fR8Nu/mJobEsiH/7axLMMTlYiP rZfQc2g5Z7t4nQmnQSzXcFUQE4FguwS4og/6uTqcnXxNiQzPCGaqhi4yDwxxRBmg4dXtnKn8 o eOynSyewmmd7c4CeLoo0spD3GRPbeDEAlHOYnUiE6nVWg=&e=0&fallback_url=https://secure.innodl.com/.../ares.exe  (741fa324bd333b8ec912578c8f5b730f)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=EGxoIQpTTzZtTVzGiYqMEBVV8n atlB3saN80j/8HVY=&c=gF WvVrN8iqMffDeOmEYhocHhv79o28HD0Oe84wudbBj6aIPU24A92fhTQCi 4Ca3yezVGKYSQRLd/wlWmE9w46LCRsSh9a0R9yMnBrf2a6B9egtl qca2XRBYPBKQPa&fallback_url=https://secure.innodl.com/.../microsoft-word-2010.exe  (0261cf156eb296fe8fe0a9773338d727)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=Zf1ON/gDKRnwmMvJzqJz5ZkFVQJCbrs14pLTrOqmtlc=&c=3SmjTKGcfL4JsAuHxJ8 NZBgIlnYexyXpmmNdo 1El4nkAaZ/v6scRNLMoOypmlCyOoGpCsUrNWb5m1uRSo4OBNEU2G1yTLeHegrefCG JyDa4h83pNyRmZ0lCfvsEibYOEt/BTflPCcSb4aXaGMsMssy6fBFCLPJdim4nSp2k8=&e=0&fallback_url=https://secure.innodl.com/.../recuva.exe  (2d442cb8c7e5fdff18434de27a4f5d3c)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=lABOXgEEcefupcDQ94xCaKajOg1D6J6bk41qZcY4onI=&c=0Ug 8R77taTbyDPiaNxtrnq0jEWB7iqhzUYd21L804RKaGgYsFlbqcvTGh6OjcWRmDxvbB7NDsTbwQ69Qy/To8nAH/QvGAVKTGnJGf63TO9Gi1XhrYFrRpPsyqMOlbyav/pvgSJN1ZTYorXu9hMhiv5Tso3q99VRXzMNzuAyBW0=&e=0&fallback_url=http://secure.innodl.com/.../lego-batman-2.zip?st=abo3B6397yaNSs8C4jSdGQ&e=1464507283&downloadAs=lego-batman-2.exe  (b10cd4aa-4961-79b1-c16c-84782efd51a6_1d1b889083c83cd)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=PbwXZqN2cv FgtYZpdOkjmP6fIZ0 2H5bULFlTb1MxM=&c=dDP6//FqZEnI6nN3kxx8vUlRJUqkbM1H0CrvNTJ5AH2mf3BN8ODCD7YkNJXF5WyEo/RyotatEG0 NjtQohN1LAnl0Hvx zy03tvrBJwzOpmtaRgB03zGPprmIq72ZY0q25vuXDIE0b9TcCpeIOFXjZW1QUDvs SRTnbFiOY5EPw=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-powerpoint-2010.exe  (e0af37cdf44df43b4b5a7c4b76033bdb)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=NQsZ5LsCWsE9D7T1jvoE6iNwNTI0RNb1QpOSGhaM4IM=&c=Q4Byy4G395DaxRtmtsynK8lhVD9M 1A5YSDGU3mDi0Njwvnv0zEkqUltWjZaNbm3lYU3Ro0iIYfAYmNu8cW3gzERdzpL0KW/1e/Xe9/d3T/uGg5CPwcGWVevcKYaAiqvoUBDOj0urNmpQaQzw4C halvx6MwOo7pYR8nMRPcFhU=&e=0&fallback_url=https://secure.innodl.com/.../video-to-video-converter.exe  (6ec09beb03bb02bed97b985c09ccb045)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=bazoSt7VEThuuwp8TjYwbYgn5XdM9PcKB5HcyvnFpek=&c=GhxugRmBlUP1FdAf8y54M9ppzi2rRs5KsP4fKJjw3CHJqf6/h 5IgQea3aTxbrB3OwTFD/ftRjWOF7V2GDqRBDgflvBl m45mYSmRrHMp21GxItt4grr7 jqY1iFfRLeq14tlqy5ZP/9UN lKm9yNAhSlzezd AkNU0iFR7KvMk=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-powerpoint-2010.exe  (e0af37cdf44df43b4b5a7c4b76033bdb)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=78eIFfq0fNQsxGmbTClPLAe6ZMtvTsOEneRmVLgbQEU=&c=APlxFstsYlTu0rHFsgGdpj36krvRT55BJZX7c0lSvdkD7xjvdrHvHp3m1QFUMExucir Eiv Qa eLSiRDaJdfrKf9lSOzFmbtNeeXQrnD4mZO/qHzvgRQj 8q4nNIpnEFRz9mQNMT9Ojn2s9LJ1K7bh7kUfMTWAVb3U49da0Umg=&e=0&fallback_url=https://secure.innodl.com/.../koyote-free-video-converter.exe  (d9f3e9fa4a559b568c1610c3ac659c41)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=YkM9K38KbAHzeOUpTEEg0dQf9/rsl97NWburN9 UEsk=&c=b6obx97u5mqScfpeIMoHINfAdLOe0400olutwIcTqyB cmEahUnsV/DmQ9bHEzuhpjhQaAFjL 667p1KJDdQv8t1irg LDujHIpBGw BGWJ1gu7Bfhs6ZiIHz1q1not hLlRzcabGlxhYCk272aoT3xf6ZpkQoE065z0vZxaKzA=&e=0&fallback_url=https://secure.innodl.com/.../audacity.exe  (8af4af1a4dc8195f45df2197a1ce579b)

1 / 68      (Adware)
http://www.tourcleantours.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  (max-payne-3.exe)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=rMM kyXW3eoFRUhtQ8runbwAv8nImMo/azoe yZ0XDA=&c=UHATAzOL gkvcBxWVtaarRWC3OsVwCrV aExYgWczzDB0KhOcFYmNxJILuNuyIVKnPvRB0fCbldGTCNsXPB wyCEGxVzApLn9WDFNpoqlaSBaHq3hIhbg mi8pMN0YSndwSMWWLlQ4M/gyXr3 4twTQKx BNVFSxT8JT/4Kmc30=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-powerpoint-2010.exe  (e0af37cdf44df43b4b5a7c4b76033bdb)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=wUnXY7worNjia9s2SxFEXDSQJ3E7zIB6lC8JmmDSJcs=&c=g7sQvW1pDUCrFQ3oFtPavAIIlvg rU1h1xL7L09aLLNXqNG98jCiZWptoijNImwvkAKYEa7OmigoouBQrCJTzYuN9aUVAqcygLT3fr7L2NvpE0UqUnchEyqlT4 /NOS9dxgWNwz31tkavTCQhEEJQsVfcYztRqPHRMYVHadxHXk=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-powerpoint-2010.exe  (e0af37cdf44df43b4b5a7c4b76033bdb)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=grVm5cdyntdmj7zeERzyxZm7QpILU NkOCanaSn96Io=&c=ioW7qOL1mnp 7KAlQMha0OKTAiDY9Gm1PmawRPefP0AyArBRrnxk4NRWPAtFr5Zn2l9wgmDquHxDRf3v0SBuuJaOaXdLZVR345jLVXpXg59TTi2dnxZBgBkVn/ExtWBgGmVqF8GsL/3P1OgShOcjA/9F7N3UW9s4L74SSAH0TIM=&e=0&fallback_url=http://secure.innodl.com/.../need-for-speed-underground-2.exe  (icreinstall_need-for-speed-underground-2.exe)

1 / 68      (Malware)
http://www.tourcleantours.com/c?x=EPfWda8ltx2oo9zRh84PkVKlVIYw0U5QgZlwYKT9BYk=&c=hDboqE37VHEKHszlU6GNu9uH LERQbmBIz0mr8fd4RhN0Je47nund5RMGZyCqbx3jBPoP/48abT23Mjjgzg9WQMdtqIVIIc muO0YPOnENPbtHPTzoLe0QBGrlf0QKZHTc84/oCFo0PhKM/dEw6i2lOM8a03mdY8 k5U7rISB40=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-word-2010.exe  (non confermato 644865.crdownload)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=7k/anxiWlnZ1iwS4T1rvs/nByLAErpv2Nup0kf1thfo=&c=gs/Jfqesm1aqpHuxsJWMZHvuJ10RH/ZxWACyaBRHps29YMsuKsnox85tIIxJB6im pfirzSsTe3Y0blDz6c3MVUsyjrgLykFr6Dgao/04FAnOyoXs8zqMsG3ZuZPcRriT7sSmXlBMVVJBMOnZNYIFObjyejkZpRhHuwpOttvTKY=&e=0&fallback_url=https://secure.innodl.com/.../songr.zip?st=m8fHDLEqtpqQ0VuGQF8RTg&e=1464469098&downloadAs=songr.exe  (icreinstall_songr.exe)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=bDGK k1p2VsRWcz0Rbu3rU/KV W2gVI9oFQgEH5tdKg=&c=a5OJUWXSW7DR3VbYgGWIHRyNWF/701mWl7cLy73PGD2V/n s91LE2pfDxDxKhzKu3m3SOn0SOddLAr fIm8ArYPD m T/hLsiW7gAxUbJPP0QTLlmUdxsURDFk5jouuwu6K9PltOrq8nuX8uk 1Wslf9kLOfqVuOSXIUqb 9Hs=&e=0&fallback_url=https://secure.innodl.com/.../openoffice.exe  (cc7bd0a179dbf27b285e158393f9e2db)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=CONWNqbOPYweRgkh6TG/fLCef jOqhX9Vx5H/Kv3Ugk=&c=YH0BUKKxZic3ffPElde TNGBU/T2iv6rmA2V1mAAlopikHNVvYKkMsjgTvczG3 0fJ3YQVu 2u7118Tc0HjVzlUkFZxDDN9/AVvpwcblW8rl4EnsvvNTe Xwt6aIxPGcYuWm4wrC37LEY7n2kRJUHImjGLZPOxZKaI YT91m88M=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-powerpoint-2010.exe  (e0af37cdf44df43b4b5a7c4b76033bdb)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=A7b0fwNPUOfwSGXUOABdz/SDHqjVJW4bdo4ePDAMtIY=&c=gd55nfqz6O55ErJkAh3jg/tiwmUAOwmIJVo5UyOlOv45pUe0vh IVdurgwQ0fxl7/4ne9lQjUzHXPFRnabGxnPWpn3JXNkazGzpaA L8QHfyUIz6jRlF5wK4OIVNTIEAXgP5AHb3NDYZbyK2AnT3Ub1qlg0wZk15T2CcbCT36tI=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-office-2010.exe  (f4d48b4f3d6550439ab8000d6203c0b7)

2 / 68
http://www.tourcleantours.com/c?x=pi3OhNQNvSKnhrRDRtWy7ygfTUncnpb2c3emNv7BhF0=&c=Zp69 ZKv/L7gGfsqw0MBF9gukctW1dOzidP2dKNvMUh9Amtr9eM8EPnv4Yw/LJmlRPC8Dhyj/VgG0NnaNZpegDLCPbPtP6AEqeI0 Ha cto2fRuz/oJP2ScYDH2PM7aOwwcwmjk1L1XaWdgisIBsYSiMe9yr/6pp6oN5PFUXdOE=&e=0&fallback_url=https://secure.innodl.com/.../utorrent-64bit.exe  (uTorrent.exe)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=ZMQL2fDalnpHcvcuj/muX5YfYBFST5I9jWrWRNjok3M=&c=OttK9OnVcOWljevcA3Nx8S2HnNmpXHV3dAgh7xAXHHLzGkVKo7wR/d7x W1a5xtpSu5klr2C1pyE37UsmqfjSlxnGHhB94tN8pQa2Dw8MKf1anlCQYRt9TGYxd/oRKCaZpTKskICdft/o63I1XENis6DLlUQJ9DK33Xkd5i8iHI=&e=0&fallback_url=https://secure.innodl.com/.../utorrent-64bit.exe  (240bcb52286840a4c333df42ce109969)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=2crJ7DG0aGXGl65EyR1S/n0NdTeQiiea5sHoI/s2/Zc=&c=sfCwMR6KnDEImKDWjqazEK1jB5ogI5nVmwDmUEXsNbntFGTs3G44NrVIfpIJ6X8X/twdlDQOKrNlmZ0YIMP2zAl2gu7knhXB4rCRzgOS2SGtI4jMncWgSm/eiP4LNb789UeXmnoSAEoehqf5fNKvchZX3GJIMMticpWKruCQwzg=&e=0&fallback_url=http://secure.innodl.com/.../fifa-online-2.exe  (132bef6cc3e99522e9d9d6cd0bbfe071)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=kSLmavY4jInX4Cl7aANlRb/AgELD6BnmZfC7vbd jxU=&c=Osa53nK7u6zJHO2tA81hNdVogpMO924QC/DNZlC4h74f3NfODCmHkMSiX7l2WYIFmrS HrxbltmHNQoWKmYByn/l6pDnS p3jVot2XjSSAwBSPug6pYD5DauMUj01CQAH35YI7kzOg3s8pIx3eON8tHbuGbtIw 0CWIvs0HrM0c=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-powerpoint-2010.exe  (e0af37cdf44df43b4b5a7c4b76033bdb)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=Bvm4vauIJLb2a7KhhWGzQ2JK f03g04pA9zosXEmDe4=&c=rMaGOAGpn8F3n/ZyPubo1JogS9rNxWfCGEW5YDrRRgcNQBffg80KUnHUQn4NQ4stQj157I3qQlPt5xPjzOucFMDy9jUfaPB4sOAujrDOdV0kavYgPDx CeOkf092QODQ6TlGFeEYca68E4PA IRj 5ey3HufrPTKO5Iy 3nC7lo=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-office-2010.exe  (f4d48b4f3d6550439ab8000d6203c0b7)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=RJaoapvdVOp9H/U5BWLrFF6eLk4YzyLiv2ZIi8x7HhQ=&c=BlkF2PD7CLBin/6AwuxjzPIib4A hJ3gHdR6iK75GEiZ7zqU5Es ZxUqzvMx3Vlsl/rj4iAsrNOvhJkVYWr1jRO96Tqf8it2/utumGId GWceO1C52QFsv5Hhn8fVIeg8dh2XakCdLlZkkXuhvFv 1R4oKvz6iaeNw3yMLQoXY0=&e=0&fallback_url=https://secure.innodl.com/.../itunes.exe  (7c685304cbb1fda3c4eb2dcd781536e6)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=OhzICGKSpm8fdoydN8zbe7n4n/vRZtlT6bIDA3TkBHU=&c=yifsgLZnrnF6jyuo2qvJZHswFbWhFkS0IaJmXYwe8FDLBa4R 942yjKLLXfOSv9p83oYrgVpft3aAwdsuv7QiNMRm3Qu8qGF9FbdZfMvHdVMCX8wxGzogpNnrRzKUtdqZE/srsdHrvUAn2K0BHFQ9oodmOXkhxIcfVqSp1DufCM=&e=0&fallback_url=https://secure.innodl.com/.../adblock-plus-chrome.xpi?st=DVuUIooGW5dSfseDAbHDVg&e=1464300788&downloadAs=adblock-plus-chrome.exe  (d2166be15572fde32bf75db9d3d2c4a4)

0 / 68
http://www.tourcleantours.com/c?x=yirH5ItAUEMaWccDHnp7ZLbmyUlzetrtaUsRO3Y2CwE=&c=ghLmV8Amw1ASEqkNkPLQxgaPfJUgwQ4THZ782ae6ZGbDfxDl9MXfzHplMVUH88ahYis7DNzoXtDb7fRyU7gU3oXWhGch P9rIrVm78h6UKNqYLDmn2Np6sYS9QCDQGZqP6 2RsbFOl4ynJZ5ySQ7 3LhKiuu3BzBCz6cJ9FERYk=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-powerpoint-2010.exe  (x16-32666.exe)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=PPg5mDYc7Ed5SrPP1hIVIPtng77g8pDyQE5bSv6rdyw=&c=5jw2Zh XUp3A5bddNU1ldr 7OKw58aZI4AZSViWQry08yr1c7zzhHItm1UhmjKUsfBwMYDoOB18PGUeBVfrHoA5ueORe2zCxkmXLHM7GBDszGkMY/Vk0hlIvfNgyPoy5pIx1cdLrFa6OCXGPEQL EyAOA4K/6QAWWGFZQE1gOOY=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-powerpoint-2010.exe  (e0af37cdf44df43b4b5a7c4b76033bdb)

1 / 68      (Adware)
http://www.tourcleantours.com/c?x=DDmLZvfFJjMpZafI0Re2IvbjFX6kojQlnjCLUMFB8qw=&c=l/nEb2mWKRd13T8fSz6eJUQAa5N8PlT0SBgpuCM6LyeCHBT07AJ X8M8gI7k40rEPB/aYL7ssG HVbVOOCoEtmGocF8ftQTM8laY/ gtnDjxZrKGOtqWK89Q7O9dvqgkpxK/BbKe05C4cA7WgkgoCd5dj6 rWLgVTjPlK3On26I=&e=0&fallback_url=https://secure.innodl.com/.../microsoft-powerpoint-2010.exe  (e0af37cdf44df43b4b5a7c4b76033bdb)

 
Latest 30 of 228 download URLs

The following 50 files have been seen to comunicate with www.tourcleantours.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.34.184.36:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 52.34.184.36:80
browser.exe (Browser)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.34.184.36:80
BrowserSafer.exe (BrowserSafer by Installer Technology Co)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.34.184.36:80
Client.exe

 
Latest 20 of 100 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.