home

www.tourdlsigns.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
tourdlsigns.com

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.DestinyD.Installer (M), PUP.installCore (M)
96.30%

ESET NOD32
Win32/Chir.B virus
3.70%

Dr.Web
Trojan.InstallCore.1273
3.70%

McAfee
Virus.W32/Chir.b@MM
3.70%

Emsisoft Anti-Malware
Win32.Runouce.B@mm
3.70%

avast!
Win32:Oncer
3.70%

F-Prot
W32/Thecid.B@mm
3.70%

Norman
Win32.Runouce.B@mm
3.70%

Microsoft Security Essentials
Threat.Undefined
3.70%

Kaspersky
Email-Worm.Win32.Runouce
3.70%

The domain www.tourdlsigns.com has been seen to resolve to the following 17 IP addresses.

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
August 29, 2016

52.36.112.186
ec2-52-36-112-186.us-west-2.compute.amazonaws.com
August 18, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 19, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
July 9, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 9, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 21, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 21, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 21, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 29, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 29, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 29, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
May 29, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
May 29, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
May 29, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
May 29, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 29, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 29, 2016

File downloads found at URLs served by www.tourdlsigns.com.

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=TA/AvsdtL2mY7T9X 2i/kUwAYoxPB6QoGrcGp2JqpYk=&c=877zoVqjYI0jLZ8oOW7EWLuqfy1q GiinBqeLQQNyVx1mOpBRl5goXbR2P5uJ8rRt7NAUbsTSpgjj6JP G8Hg mBKbVGshEiGvvVMC/ l5iYfevW 09d7go8LiTpBhpn&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463082313/en/8/.../83929-92631-microsoft-office-2010.exe  (b9f7a05d5bdef6e3a188ee1c00a099ff)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=nDdmbO1U0/DUxAB9XXiJF5vjfYpU2HoKej/8QL2cRhU=&c=OdREMYUfg1u3wEoU/JkI73psnlhT66rrn3GR0DINgo5IyYz/lgr52X4DCs7KOMRb6DSRC/GQ2dzn8JmEoxLiEi0T81JD0ykHSntPndUrH/3qMLXvft9eMytGsl8nmRsqdU54IQXs1PN3mOJCOSgkAa6vW9MCHsAPVaoGnYnWzgXll4DsfQdTITNwpzUrmPgW&e=0&downloadAs=minecraft-1.9.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463081447/es/.../2/227519-1809098-minecraft.msi  (8a20adfb51765a085ed96320fcf2b9bd)

0 / 68
http://www.tourdlsigns.com/c?x=YW2v44gAd7cEeNGanOPotVnM/tKZPP2C12Y8krdXt M=&c=a0KAhBigD0rW1NIrFBt9l1KDC5hZKDBZJrvBR9kdoDE cNNwNxYRd7LMzFh8WqsoHz2EiIDcmyn67oKYwZ2w4dJrWWuPXfNJYjFiFnGkvy QAtb9NnpTT0kKk8VDLD1pkQP6WtlZwG5pJZ9I3jkm8pvupAhpQ7VzozKgYQFZkVi10ykC/g4LMFiQd/UuM226&e=0&downloadAs=minecraft---pocket-edition-0.14.1.exe&fallback_url=https://itunes.apple.com/.../id479516143  (1939850b3ff543d3a533f5449eaab66d)

1 / 68      (Adware)
http://www.tourdlsigns.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  (microsoft-office-2010.exe)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=SolnXaS f4vb/3R0BJ6u3 ZxMv84CtstzKj1RPEzJpo=&c=ZdCS44RxYgHIJVlglBxfCGJM3TUFcjvM0l39ENE58 ePcTp7drAcSgdBuHi6hyFYlz1vxPJby3GacRIupxd4QEUknbQXE5sViXZrpUvhXOSO2GuXVLBICESamAwDPwBh&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463080681/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (2d5fa994ddfdc973af0a41a446dd75ee)

1 / 68      (Adware)
http://www.tourdlsigns.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  (microsoft-office-2010.exe)

1 / 68      (Adware)
http://www.tourdlsigns.com/WVl6OTRQWGcxT0c1UFZtUlZUV05SVTNwT2JYTjRUekpzU1UwNWVISTBjSEZhUVU5SU4yb3lVbk41UVc4bE1rWWxNa1pWSlRORUptTTljVVpHVTNreVExcGthbE40YlROR09IQTNiWGR6TmxRbE1rSnpPRkZhUmtOaE4xWm5UWEZ5TTBweFUwWTVaVlkzVHpnd1NuY2xNa1kwWkRWVFpTVXlSa1JoWjJKVlQzaDVWM1JMU1RWSFdYTmxTMnBQV1NVeVFtVlFTRXNsTWtabGExbEtVbXh5WkdwdWFuY2xNa0l5VWtFbE1rWmlkMFZzU1hRbE1rWndOamxsUjJ0aVJFTmFTMDl5Um01UlNGaFNWbVJYU21adlUySlZjR3AxY0VKWmVrcFZhMkphWnlVelJDVXpSQ1psUFRBbVpHOTNibXh2WVdSQmN6MXRhV055YjNOdlpuUXRkMjl5WkMweU1ERXpMbVY0WlNabVlXeHNZbUZqYTE5MWNtdzlhSFIwY0NVelFTVXlSaVV5Um05bVptbGpaUzV0YVdOeWIzTnZablF1WTI5dEpUSkdaVzR0TURBeEpUSkdkMjl5WkNVeVJnPT0=  (microsoft-word-2013.exe)

1 / 68      (Adware)
http://www.tourdlsigns.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  (hotspot-shield-5.3.2.exe)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=FJnY l/tZNIRR qwRA4wm5Pa6lOaW69 AemSdma 2xo=&c=kSGlABRr3e9oKgtcOf 28BSkVaD6XVp d6n9ArQ1BTWnlZ5A5SdlN9izoQhFapMKUXXaH/tIK0vdvYX8OTT2Wj9yP6oyvnAPzLFcbvaaOHz8bfMZSAT6Ht8ixMgjWap1&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463080968/en/8/.../83929-92631-microsoft-office-2010.exe  (e81f06f0bbe2cc5b86e6e64cc5159c6d)

9 / 68      (PUP)
http://www.tourdlsigns.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  (hss-5.2.2-install-hss-805-ext.exe)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=ngF/iEf7zgzFF9hqB6Y/80fYbHwjbpCzBY788u3fwzg=&c=ENmJugVJCBUTk5eDsfhTVWesxAcQlVIsAXM3lm/Pg66fBwy luLuyiX2aX5DRRyF8SOoB3zVi6fBh5 6kmw0T7JeIrfEAySWdfXJMziRUtaJTvMVaV6fryFUEdn/KQWZF5JBwMtz9 WjWw1zy7zQew==&e=0&downloadAs=microsoft-office-visio-professional-2013.exe&fallback_url=http://office.microsoft.com/en-001/.../  (950171b9df71c00423096d0a83cd6ecb)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x= k84OQ9MYZTLm8AZyLcJm8C55C4dr4AM0lTtuEUGPnU=&c=wRxR305YMMdXw93sYXZsav1MCJYEauh/669y9raw4q5oiPlZE1BQDh9059uBQiAVF2/wF/Hb0jtyJnQ17lt/HGFv4mIzbD5m41mfWloBtTOyiQnntjFrx5JbTUKjZqNk8XV9yj92BYkjINR5GudCyyYp8EC/Pu 0K00Lcd 0Qiw=&e=0&downloadAs=counter-strike-global-offensive-full-version.exe&fallback_url=http://store.steampowered.com/app/.../  (29b957cbeef7c0a5ccfb8cfc38711d0a)

1 / 68      (Adware)
http://www.tourdlsigns.com/WVl6OTRQWGxvT0ZGek1EZEZRbUV5U21kQmJFRlpWMEZUT1NVeVFqZGtZVzVYYlRSTlUwdEZaRUl3U0VNd2FHbDVXU1V6UkNaalBWbEpOemxwZERCcFFrNU5iMDB5Tm1SVVVXaHNWblpCWldWV00wRmxVeVV5UmtKMmRVSWxNa0pLTURCVmFXRlNPSEk1WjNoMWMwRkdSMFp3VTNaU1RWUnpXamhEZW5KMFZFNXFkR05HZUZoamMwbG1SR00yUkhaVFpIaDNRelZsYlhCb1EzVmpRVVZzWmpKelNrb3djM2QxYUNVeVFtUllTVFUzVGtOTVJIQTVNRkJQUXpaNlEzcE9WMXBCTm5sc1pUUjJiM0ZGZVhoUmVISkxVU1V6UkNVelJDWmxQVEFtWkc5M2JteHZZV1JCY3oxeVpXRnNjR3hoZVdWeUxURTRMakV1TXk0eE1EQXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHY0dZdVltVnVhbUZ0YVc1emRISmhhSE11WTI5dEpUSkdjeVV5UmpFME5qTXdPREl6TkRZbE1rWndkQ1V5UmpNbE1rWTJKVEpHTXpZNU1qUXRNVGd3T0Rrd09TMXlaV0ZzY0d4aGVXVnlMbVY0WlE9PQ==  (realplayer-18.1.3.100.exe)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=GzMZ EjjL2MmyWB0y4C8KNEb30fc/r2UNJUq AdiNAI=&c=l7Z3 v6Xih0r sYLuBdP/Najfyd y4mNUFgzo8ymaN6NTU876SFeBuHkGXmhhvC9FopSLyg3rGvp6zJnsSLeLt4L7yRRJsIkDvY5LWtBH24rxj5XYVXIFZJw RjLDQ3I3xmijNiFIyZm6fHT0V7NnX9jT2edW1cU8m oNMMOuU=&e=0&downloadAs=microsoft-office-2010.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463081040/es/8/.../83929-92631-microsoft-office-2010.exe  (21d0854e40fd0cc848ecc21cf02656ff)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=Sur1BJ106QutA 83Hn0W1cvgrVAUNI2grkEOlVI4ko4=&c=7cbHAAwQgWylL6IxQZp8NyNQn iBeJ38kk1jOzAfQunnJLcgyrLTOR6NJQBf9BjbdVOgOcStqH IsuqPGb6Im4CRK1oizqYau3u3m2PDHmoZwvirHzztzzxQN11UXDjGwbehWKWS9E7RbzMwic5p1Vhshkqc4rW84zyAuQjpsDE=&e=0&downloadAs=yahoo-messenger-11.5.0.228.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463082179/en/6/.../65168-1791976-yahoo-messenger.exe  (0d8fa2f0d497a9767b56940131c58d05)

0 / 68
http://www.tourdlsigns.com/c?x=WTSRcWkwWnu0jYe0RRRSMHVlmZsMWhfry4OrABDxbyA=&c=98ZrLM02RC7BGAZ0X/tMwVnNF IMYVXdOVQdSsxjr8s6SpptRlDUfUgBEuAWQqN YiWLQk 03IO7ZCqeIAR42UAVidRSBmdY8LM/JF7Zk6p95MlYq660JmGnzls GzKAkeaePb5L32EuSqGgsU701qixk6VbWJktb1v2L2bbGSkrabca6MHfZ5FpBrr2NKeN&e=0&downloadAs=microsoft-office-publisher-2013.exe&fallback_url=http://office.microsoft.com/en-us/.../  (330683d39779feb60bdc078929b243e0)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=STODtuX w/ G9XFi2FjyOxgO9tCyxaD HefVIHSir1w=&c=MCvKSxFPODKmzXPndF8lIVuOHkWU0c R9y/Kn3F 6Zh mu6vVtnJGOhjfJMEy5EFJETQAz/YHwJIUn5SFyNRHNBzuxxjrK/i6o8YZVTNnHT giTxRZXZFvX9knJOG1Wf&downloadAs=nokiafree-unlock-codes-calculator-3.10.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463082004/en/2/.../232067-668733-nokiafree-unlock-codes-calculator.zip  (c1b414db3f3865bb7791f37ec5183227)

1 / 68      (Adware)
http://www.tourdlsigns.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  (pro-evolution-soccer-2011.exe)

1 / 68      (Adware)
http://www.tourdlsigns.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  (call-of-duty-2.exe)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=c8xLZORWdb//lhzYJdiCWeruDpDax0rHAKmNh3qz0gY=&c=2rXAt1gd2pOW EmXXW28acxDc6bmRubVi2g/C4JC9YmXRpfIbRRt6weX9RLQtCIAfVpL323unUCFyqE45JFa20TTjiad45cr6 9zXPZo8OrrSk4YYbED53TMXrF9EHe501edWeGyThD uKm8GKXD Pv/f/y72Oy31NTo6lcTdHdieDyPN2Bd qwbaiHAPu4A&e=0&downloadAs=label-wizard-1.3.0.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463080577/es/7/.../74502-68239-label-wizard.exe  (e121799d2e6f416075efcbcc05f0404f)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=SeLRvkT1MAE/ Rf563YwI3EIPKoYeUcnQR1P3OVmNXY=&c=pEalakYBPpvSZnzr8IqYClkRTcSoG9Biit8ih3ztizyNPWIBEnyDT7K6p5 jiPld8ewymtWIc8tV1UPWbOPjhGBKCCDqQQJWzLTNxdcPXLpiOl59luf LnCpfm4F/MgzcNEQK TB0q8wTn7VZQ47LFyNbl/lC/Y5JP1C 6hxWt4KQFbpde0mI8zrMLYya9Ch&e=0&downloadAs=big-city-adventure-new-york-city.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463080799/fr/.../2/226497-657699-big-city-adventure-new-york-city.exe  (5e816ae0bf3c7e6e4872783b2d961bc6)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=gnGQ8tqE4lZ/j21ibkftDw68qlH9u3kmIzWB3cx8dTA=&c=Qp7N7f53XivnDPkL8hJDeCemEbEMGxc XKl3NXrod3N5uAlgz0tktuwiD5PIMZ8QgXP2aMcSFaIKYzUb74h 0/w2z19DhLp3mucmFNj0FVWIKwIUffA0SoPfwcpyXg5erYDaAgmjvOZdN3O8Z0dEtw==&e=0&downloadAs=microsoft-office-professional-2007.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463081692/en/4/.../46039-1800344-microsoft-office-professional-2007.exe  (abbfafc6aeab38e970b92cbf1c9ccfc1)

1 / 68      (Adware)
http://www.tourdlsigns.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  (microsoft-office-professional-2007.exe)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=VIqs1octUbVxIPb1REAUmIasvqCoLi2MWjsZ 99b4pU=&c=IsZ7LvWQFgO/PDqqLBuH/bu0ZB9ppuHNcTZ0HXu/AapY5bKm6NGPet7q2L6CAoD4DcRli U86SLVkUgUv8Oa6bCHI4W5HNZgwetRZxzr1dqtSbibChgYOxMZeCwCcsshh2jYfyQobQtJSnk0TD272/Z2GUuTxFIk95fuqiMr41g=&e=0&downloadAs=edius-pro-7.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463081086/es/.../2/227983-1797562-edius.exe  (3238aa9e386fa4947b733ea4ad415cb2)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=LWNxAUl8XnPz2FXwywjvetSUTzbCKk74XWD8qWq1NU4=&c=BF0GppsFuLuzv O u23pFNb9LG5 K/lRedwTvZxrnga4S6jya tyKziQmXSvq5MmH2d2rmfbwVzVhfzJqhXrENLTMUbRgBzFUpEJtf81mha3FtcOA5Tv1EGX0vTUhonCWOYOWKJ69GOnPMwKx7QQ6hF8C4rWNZui0KkZsMvTItNA5inwFYbehypk5CFXaPeP&e=0&downloadAs=baldur-s-gate-ii-enhanced-edition-full-version.exe&fallback_url=http://www.beamdog.com/.../baldurs-gate-ii-enhanced-edition-for-windows  (8082e93aa4543881e988c733834f2cb3)

1 / 68      (Adware)
http://www.tourdlsigns.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  (microsoft-office-professional-2007.exe)

1 / 68      (Adware)
http://www.tourdlsigns.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  (microsoft-office-professional-2007.exe)

1 / 68      (Adware)
http://www.tourdlsigns.com/WVl6OTRQV2xhWm1ONE4xSlVkMkpsUjBONmVEaE5iVmx6UzJkTmJTVXlSa1JxY21aRWFFMW5kWGxYU2pKWVlXRlpZeVV6UkNaalBXTXpNelp5VUVKV1ltNTVNeVV5UmpObFdWbDBObVJFY0RZd1NtMXNiVzlhUjNFM1MwNXJXRXhZSlRKR05FRjJSWE5IZWtwSFIxQjVkM2hyV0RoblNHVktTMGx6TUdVbE1rSnhOREF3UkVGSlNGbE1kVVp6VkhwUWVFVmxSMGR0UldkNVN5VXlRalJTUWxRMllTVXlRakpTTXlVeVFqRkJkVzFJSlRKQ1JYVjNabTlhVjIweldYQlVNa00zVWpKdFRFVnZXbFZ1YzAxQ1JsRlBhRWxLTm1GUGFFWkJKVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFcxcFkzSnZjMjltZEMxdlptWnBZMlV0Y0hKdlptVnpjMmx2Ym1Gc0xUSXdNRGN1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2NHWXVZbVZ1YW1GdGFXNXpkSEpoYUhNdVkyOXRKVEpHY3lVeVJqRTBOak13T0RFM01qZ2xNa1ptY2lVeVJqUWxNa1kySlRKR05EWXdNemt0TVRnd01ETTBOQzF0YVdOeWIzTnZablF0YjJabWFXTmxMWEJ5YjJabGMzTnBiMjVoYkMweU1EQTNMbVY0WlE9PQ==  (microsoft-office-professional-2007.exe)

1 / 68      (Adware)
http://www.tourdlsigns.com/c?x=Ybs5HRD/F6xToEVy4osLGukyb8p8m5tr/Gxa2gO KYE=&c=7uzdBvAKU6lINNHu92xXsyTraV7wXdwM0LmtkTsUeMuLm1A40C9c6lwiavMI/LktH2PfB2t7sBe JS4QwbEOtv3XWuM62B20vW2G6w9hDDPJgdkp73ix oCADPeNSU7F29/LzV3XIpAgwSYWfz1A8PDHtxlHwhJfmhgow8FgufU=&e=0&downloadAs=minecraft-1.9.exe&fallback_url=http://pf.benjaminstrahs.com/s/1463080570/es/.../2/227519-1809098-minecraft.msi  (573b8cbaaaf1e9d88bf6b51bd6a3a70f)

The following 36 files have been seen to comunicate with www.tourdlsigns.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.