» www.toursignscurrent.com
Overview
Analysis
IPs Addresses (6)
Downloads (59)
Network (6)

www.toursignscurrent.com

Domain Information

Server location:

Oregon, United States (US)

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:

toursignscurrent.com

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Bitberry.BitberrySoftware.Installer (M), PUP.InstallCore.FC.Installer (M)

100.00%

The domain www.toursignscurrent.com has been seen to resolve to the following 6 IP addresses.

ec2-54-69-11-66.us-west-2.compute.amazonaws.com

May 17, 2016

ec2-52-88-159-85.us-west-2.compute.amazonaws.com

May 17, 2016

ec2-52-25-41-73.us-west-2.compute.amazonaws.com

May 17, 2016

ec2-52-24-26-116.us-west-2.compute.amazonaws.com

May 17, 2016

ec2-54-148-57-212.us-west-2.compute.amazonaws.com

May 17, 2016

ec2-54-69-198-37.us-west-2.compute.amazonaws.com

May 17, 2016

File downloads found at URLs served by www.toursignscurrent.com.

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=u/1GQjZsZn6/jYgtXXcBGjB12BgP dkhu7Rij5ZFx7o=&c=b6ggF EpN5Nz4DF3jnTosacrSd/QtaWEXohkCixWy5CL0yV6cCZ0xIWrfjAPRWJwxTO6CZdQ3R5aQ0rdPC7ByzW5feNVufgXg Me1sicqGL/clkwGDsNVAPzn8WF/PNz&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (8688832067710fb2dc25d192f91bbbca)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=YklIDp4hhavPeou y5lcagoXNiWBi0XJs/Tu58SwnQQ=&c=cV/YHbEeTa9l4OTmcCzeXEpdwhSVi6veFuy9Ev6XpCOdFy7Pzg4P5fmgQ2f ZtPkJi1cz4IO3BKdRTLYMCo77viWGBSxf1T RVsns5vW lJykN6WD2MIrdFQyq1w04M8&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (91fd5779fe31b5aca5973eaeec54b70f)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=6Vl9 X1aG5iIkmpkAX6qPYsgYhHkrAICAvFnizs5lB8=&c=0CzVf/VM wQdMJnhRzE7o3PiDIndI8kbjmUf3Rvq7aGjaKamWQH ZdwCErg//7Pn85eI7/c6q7FsJ8pgOmMPgvRWOIvFxAw00F0y2wrv60zjQOCE/c6Dd/s9nV7Ti Jz&downloadAs=FinalTorrentSetup.exe&fallback_url=http://www.finaltorrent.com/.../newest.exe (9cbb25a4efe34261d2967b86fe11b981)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=mceacy9PQcrCIfc hwDhdN26P2X55NnLeqqGKAZvrtQ=&c=x08 9nYadm7yW/zirMjTToszu5sRMQuox9 jWgnHQf8OHHM7sLM6Kw6pcdVKHELDCsT6lT/R7ZeicfFMacUSQHhY/qu2J510IjGS3i2fF kgeqNwWLZ12HdGxtvUL62jR/wSzYbdAVrS7a0aaviynvZtmKn2EQqfcgkKqZeMBXkX139J6w3dgPO C/ITYxhB&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (18b9376b0cd6ff4b52803b7bcf64916f)

1 / 68 (Adware)

http://www.toursignscurrent.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 (freefileviewersetup.exe)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=LvDknjKepmV0grNJu29SS1zCYoPwIjT/lJTNbTVGL2M=&c=Rq867d2VmtcslPYcL3OKx0spxWV44IACZCf hXLbhMs0E8NIMONXUL6Yls heYA/U0m YEb TWt mr0gB8Bqlvz6h0CfWfov08Qt0nsnpmsl5uSsaxlocXK5U9PSMnS/vxQWXjFDBi/Zyku23WdDrb64AJhlD9E7D97bew1JMdGAMkaikRQayWmaW8uB3OLf&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (18b9376b0cd6ff4b52803b7bcf64916f)

1 / 68 (Adware)

http://www.toursignscurrent.com/WVl6OTRQVXA2TWxoUFIzVllRMWt3SlRKR1MyaE1kbE5XZERWdVEwTkNURk52TVVKUWVHbFpWREp2TlhwRFRTVXlRa2R2SlRORUptTTlNbUpDVkV0eVZVeGlNbXBJVFNVeVFreHJhM0pMYUdkeWRUQmlaM05PYkhOUWMzZENTVEZYT1VJM1ZFbENSSGxaUlV0MFRHMUdUalZ4VFdNeFpuWkZPRTlHVVRkUE5rbFpUM01sTWtaUVlYcGlaVkpxVUdSaFlsVm9lazk2YUhkdVpWQWxNa0p6UW1KMWVpVXlSak5HTjNka1ZtUkJNVzVFTnlVeVJuZDVkRTFvYlVWTlkxTlZTakozUm5aek4xRTNXa3hRVlU1YU5VWnBla1JxUWpCWFVTVXpSQ1V6UkNabFBUQW1aRzkzYm14dllXUkJjejFDYVhSYWFYQndaWEl5TURFMVUyVjBkWEF1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2QzZDNMbUpwZEhwcGNIQmxjaTVqYjIwbE1rWmtiM2R1Ykc5aFpITWxNa1p1WlhkbGMzUXVaWGhs (bitzipper2015setup.exe)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=CfPCvxekN1pT4fYrmzay1OiV1F/3znAh6s2ZXrkxsuU=&c=ggP2tsfx90Ryzm0gAkF5IxYppy9SQsokHHoaNZ2NgqETeAKfw4f R/kxm2kCj5vqNlsgUu21On8ioJ8R01A5Qvr0sAdX2flQu1TCNHjLkyhr3e0rrrSCQJTp6Kn9SQCDPN771 VbWDB9ilVarMf cX3UwNE 6cv0KWUC8W7I4By5TQGv5OOswQDr53GLraxj&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (a6988b48017826e452f3d8a203c031cc)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=IzwGnaZ2Kg3hCGEamIy4XQDtbut0uwvb9rgQwGHX0L4=&c=R3bg1SZpl/1pvyOB6KZRIEu7TbzOUvd 2GtEOLnyUukly3Mcemr8a8UQAn 3THfJi313XJoJPgRwmg90aU9IXo1SH1OWdw8A CgA0apDtrAUyBnNn6C77rx p67P4nafPVgzf9UIirTrzC3wey7jwd6sRVae8N5afmAW5ANOhyuaaVGys2O EBdlbl4CSIW2&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (a6988b48017826e452f3d8a203c031cc)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=AoI mjZvJYwI/pXkQwSjQBGC3/sh8iRX1cZMj5/KDlU=&c=QTOuit9VB0EcglYlwzQwKqIVo5SFhIaQcH0Hk1wJJEgLPGLMs0jUBb4hgXVRF460YRWTSLPzUCNfVQGTKjOKvfeyjDhu0PJd5p0deFm9taFrEgTFufFMancRKVZNQ1xBr0AjRdRgQPMzFY06LA lminYuFY00vHJ5NjpdNDs41HebPdYTPgcuiOtPshZ6ezG&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c37dd86efbaa18295d9c7ecd8e60c04b)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=ZOCN1GAi2nxwZpUcmgYIaDcIiCqe5FUISHidYCauzWw=&c=xZXbDwyHFQF4NvGGIAVPZb54jT0zhAPGNoRC6H2adOl7Mfy6tUvfanYBFsfdqxWq4T lvQdF9ejfgbnvso21XuOwMWQRvslIRGciOveOOhaIIMF8g3e2Vfvl1uV0cjLX&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (412828073dbf7b3c7d05dfc4ec09892f)

1 / 68 (Adware)

http://www.toursignscurrent.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 (freefileviewersetup.exe)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=iWjLDnkQDDB4jK93CJxJ9Y3bWdUr/oytk9UkNacYEeU=&c=bDwWgu8W0Khu1Jb/zj391Df0KyzTYlE5eE9eW7uU9omdK/7R0nHTQIGqHlGiaGG3V6Mt7o6kJdVqdWRCC1Cz1NLQH6TCvDX Jyt8D36cah1drA0 iiKzYGXvw 9GH3agYCAK8s4FpIZ4EXOf lhVPiJ1awcze3tpcb9wnH7zEllNUVJrLmm0Lj3KxdwGQk0p&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (18b9376b0cd6ff4b52803b7bcf64916f)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=BLCYBOX2uWFrgvTeKrCBrRdva5WDdierAmdCmO8X9Fg=&c=ro7vqpx m386X7c0K/FP/VsSJiZKCw/mcTJbPNkQFFA6BZhV9TNh5Etbax08vteYX2NmJ25gv2bzLG5tTGBDVTBbkLysC2MK7UhYBkRvFI95hRc/ttHdvSaGpcfr2eyUcgE11 i/XzKRf54AtdzUIQx8BdUEsiGMonqAibuYrUlvJa2shTnyECqpGXFSTIFX&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c37dd86efbaa18295d9c7ecd8e60c04b)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=e2hxivKopcIDOCP/l0yEBX5I7kNYqkRjMkiFJWwO1RE=&c=6qkKHTH2LBgHtarUk282mnzghj9WLRczry/TmASyF91WP8WqJFH5/hKqD0Dqqu6qZG/wUV911RB0CZmIoj0zOvAnIampGJGBnv5m3w3QhdZ hnnsXNdvVYCWYwt/GUrPkdEpflFkGjg6CrzRR/brlOYpMcX8dI6G99tKHSskwl9BjSSphqkO r SzMgS0OC3&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c37dd86efbaa18295d9c7ecd8e60c04b)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=IDNT4SZhZAae64eYaG0jFSL6Bjsq0rWzHAGiu0VFrnE=&c=mt4BWczKErUZ/XPWMlEtB2635V073yiawoeAkxZGoThiV7iMYdbjm7ruQ932Q5pUX/ZmiNMkxyHaE/0yYhYFIPuxdcQY8P8j2W8g1B8jK25NWrpTUgr8G78r71gX8AQlXO0ETJOJnDoljsxrCy5n0ReJTuS0VVjSzMrtAw2thuFTgyzd304t7n9lHWbrrsHl&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (18b9376b0cd6ff4b52803b7bcf64916f)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=FqyNqx5NUWyIyybqMILCDrY4siX ILuDfKDgkU9A mM=&c=kAofkctRFyCeqkMciXSBaqBSBx7nJ9NuiJtAtDvCyFvfY61zOO 1JO4dWe5TN7ezDJN2HBtWJNqhVYA1ZI4rXneF2JrHZitQ5T8U9gb0p32fQzxF W29FL1A7Jzr1nCHnHpp tIhUigiqy0z3sbXqZ4i74Wei49npUkRoPgS0iiw/GpqoLpyEZ2K2YtqAyzT&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (a6988b48017826e452f3d8a203c031cc)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=cfvA6ZGUh0AketAMk9Bw1dFUAZTbweRBvmswSC1jS3U=&c=M8vQREbaJgclGwgVQ/o6RWCIbuj8rtbDi/lYz9nXdw6QnkkWlIsBEr7NTAkSe6hxHnEYVQdTBdTjUyfg6f2ZGlEr ClWTczOU2JqsmrW2jvurdzn25bMAeLVa0a/9yzo&downloadAs=FinalTorrentSetup.exe&fallback_url=http://www.finaltorrent.com/.../newest.exe (9cbb25a4efe34261d2967b86fe11b981)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=h1IGNPF5IrC8/ahsOUTTxacY1b7RyiDr/RHP4hyYees=&c=C9Sl2/Mu9kcNFEzGufkGydvan xZ4bHOI7aCNCz1o8UcIEWjRFqxwsQn6rTXiAOYWC42OhJN1CdktR0pEPcbS30/vZSvCeEimysQ IXflKaefwWSk2LrLJW4P2DVZV8t&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (f6eb3764bcd7b6e0c0d678c7ad45954c)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=Z/tHuFfFYb/gScFy/Il4w1weI11DApYa3tcM eS1jrI=&c=OGQ7V16GKJmgZxFDxTLetVYk3ixvoW84SzGiVBR gFRgqsLwcepHcbizMr0gHtZG ujvFBNPe9q UU3X/kKQXFGNWQKqPZoi/wVRzeAhvaS2BLkLE8vAjtAUbzxh5IVHzoe/zrMp0TCwm5i1bb7HNqq7CSuiWNk0JE6 Gj4f03Y=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (18b9376b0cd6ff4b52803b7bcf64916f)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=wi6ZtGS3FIpTaIgGpdmi0wIF9tr6S3BFtxM1q8FWqFo=&c=JJaiHlRoiIV5Vl6zJMKx0OLxeQBPfMIZmtngHb9zv5whl83o8PBxxwmRLttJTfSpexWVAu2pOuXpt4Y9tTqW7wD2K6zhRGvCAeNjS/rzMcnAlHb5OHTKhgSoIq7GEFkr&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (f6eb3764bcd7b6e0c0d678c7ad45954c)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=2PeIF0cqNnPlvgkd/8VqfQu0NuOPYQyWtYxB99yDVQ4=&c=N7WUYk18fMLejI0pXYIMfdRCVqxI1hhPgM 0JxHJvOVKPpmkyvkuQDB6lJGX/FW ygZSpvD7jiv5MDg8ieAIOfYYmMI2LnoGzNaN3tWmes2CZ4yHjRpCKmCzy7xFNcGR2B140uJfxYwfg7NsgpQ4covQe9S4OVEORcLXItosVO2hGQCTBxVWnc Nyg Uf iw&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (a6988b48017826e452f3d8a203c031cc)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=i 13S5JOUecingll0aGo7ctd JsLG4Tq7OqoW372PPw=&c=vzwl3b5siJI52SJI5DHlDAcs5/Z5FVkiPcGVb4uCrcIDKc3Yk/n2Lq7kd5nodN0Nz53REMDho8ssgE6gb583ImmlF HP258SAxgzbiqVFFTF04zKEY5elB1NsJ3iBZMBkpUjaOvhU5Uxc8OH0M3Mpw==&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (a6988b48017826e452f3d8a203c031cc)

1 / 68 (Adware)

http://www.toursignscurrent.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 (bitzipper2015setup.exe)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=hO2gAmZtlJ3GYnhtHJOX0Qeg BFibUf1KQofmF5FYKw=&c=WN7V0eZxgnQBAGTsghx9dOgZfuTExYZZBJf3koNKFzBZxLdf47d9EzGSRC2lHekvIm15C3Fq20EjkwuxQJx70ReUdS8jj5WGuHbwtwgV/VtwjqcErvJtCpw8s65NrnDa&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe (412828073dbf7b3c7d05dfc4ec09892f)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=FePdBsyzJvdBPpnnVoGPHhjg9h9ZfzcPQaGE87HEUmw=&c=JVY7oBlt7KdcNpBGuiGF9xKyHk8nnc36yZqQw21Km4EUM3dkXi 4PoF B rZna8DFC5XVj9AEMIwidDIb4MTR5cr86ImzOGULVrNMYsXkRhy0aJ58E8Os3tBB3rnC2c2l2eb6puoqlzvLAcerghkllrwDaKdqM1CHZixI0xlif6OgiqZcHk/lVV5mKSABAgF&e=0&downloadAs=BitZipper2015Setup.exe&fallback_url=http://www.bitzipper.com/.../newest.exe (a6988b48017826e452f3d8a203c031cc)

1 / 68 (Adware)

http://www.toursignscurrent.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 (finalmediaplayer2014u1setup.exe)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=PlydyayGzEYad8eB/Oo6Q6mQHIMFJcPZbMU8dxSiH4M=&c=Dmljofy3HXSa3yL466/1nKoZnH8RH69HG61bk3mos5MiPno7Ee45V/DkzIYKUonqgXG9YIkfVRSvPUP49mOPFYj2LOB2jgaYLKuNRE9 GbdlI G5NT2fiQ/e6uPERRpukoX6ZUNABRhCukGityB4WUSAvSFfReeIXJduZlLyFYCYo3YV2t8NQvY8YcKy06J3&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c37dd86efbaa18295d9c7ecd8e60c04b)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=95oSvDGE7RS1STnSp9rJjxbppi9JakdUiP4WBshnOXY=&c=4vhy67I9hS0aZ/XUMNiDw6EtcAGFQ1BqjJI6vMj6QIQVsxusl0ssLeo/Fhc 3lG8c2yDmDQTsDZaF 4nDivWVkkRhWmCAesoRAcawimA5gqtmzFmVeMha3MjMt nsQw6Mwboo/R71IBKgg3kDlB9DjB9aD8tCTgpsW7 941kTS/MHIBFpkZ/er24hMtWAARr&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c37dd86efbaa18295d9c7ecd8e60c04b)

1 / 68 (Adware)

http://www.toursignscurrent.com/c?x=Tt/C7lXKP8Xb2P6Nk0t5sr9 ftfU7RJzaWBwf4fu3hk=&c=aU2m3xBv9Biz2vtudHguupukz66dBgxmk0ycR4yHDgzlRE8mApmf8mZq1rFff7iFb60qpiLUqWqnnxCBriyc4MJYX4eRxfMK8aIBICL4NIJot2mNSsd9IZ/knGxmjuSVpAo9u1ED4AIOwU/g6BvfeGoXkPmXl4b0jKg0xJVsROpXW 0QHbOtJS9u8uXWueJA&e=0&downloadAs=FreeFileViewerSetup.exe&fallback_url=http://www.freefileviewer.com/.../newest.exe (c37dd86efbaa18295d9c7ecd8e60c04b)

Latest 30 of 59 download URLs

The following 6 files have been seen to comunicate with www.toursignscurrent.com in live environments.

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443

rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443

Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.