home

www.updatefunpresent.com

Communigal Communication Ltd

Domain Information

The domain www.updatefunpresent.com registered by Communigal Communication Ltd was initially registered in March of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Thursday, March 10, 2016

Expires date:
Friday, March 10, 2017

Updated date:
Thursday, March 10, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
updatefunpresent.com

Whois:
1 updatefunpresent.com record

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.DarwenMa.Installer (M)
96.30%

VIPRE Antivirus
Threat.4721115
3.70%

Emsisoft Anti-Malware
Win32.Sality
3.70%

Microsoft Security Essentials
Threat.Undefined
3.70%

ESET NOD32
Win32/Sality.NBA virus
3.70%

McAfee
Trojan.Artemis!72549609CDE7
3.70%

AVG
Win32/Sality
3.70%

F-Prot
W32/Sality.gen2
3.70%

avast!
Win32:SaliCode
3.70%

Kaspersky
Virus.Win32.Sality
3.70%

Norman
Win32.Sality.3
3.70%

Dr.Web
Win32.Sector.30
3.70%

The domain www.updatefunpresent.com has been seen to resolve to the following 21 IP addresses.

54.200.224.121
ec2-54-200-224-121.us-west-2.compute.amazonaws.com
July 18, 2016

54.148.183.210
ec2-54-148-183-210.us-west-2.compute.amazonaws.com
July 18, 2016

54.186.99.90
ec2-54-186-99-90.us-west-2.compute.amazonaws.com
July 6, 2016

52.41.114.34
ec2-52-41-114-34.us-west-2.compute.amazonaws.com
June 30, 2016

52.33.46.229
ec2-52-33-46-229.us-west-2.compute.amazonaws.com
June 30, 2016

54.191.246.249
ec2-54-191-246-249.us-west-2.compute.amazonaws.com
June 30, 2016

54.149.195.20
ec2-54-149-195-20.us-west-2.compute.amazonaws.com
June 30, 2016

52.38.209.219
ec2-52-38-209-219.us-west-2.compute.amazonaws.com
May 29, 2016

52.33.165.25
ec2-52-33-165-25.us-west-2.compute.amazonaws.com
May 29, 2016

52.32.12.104
ec2-52-32-12-104.us-west-2.compute.amazonaws.com
May 29, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 15, 2016

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 15, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
April 17, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 17, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
April 17, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
April 17, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
April 17, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 17, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
April 17, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
April 17, 2016

File downloads found at URLs served by www.updatefunpresent.com.

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=mWjRR 4NhMhSwcdYhuogRa4/ts/3jxF3eH8FfGMcMfY=&c=RSHCiCCbdISrPcTGyQ0P6SKm9vHlwLFTOCLaR/10TNlx0ese6wIb07dTo3SFNN Y CpRoXXlR3RfeMBCzlhbAD31dEhxIFLgU7EgGuPs0dqKuYxLf AdeyTKI1O83VII&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (6a2de736686e9b1800274b48816eb60b)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=AV9vqkBAT5g Xvg1mbkpohBLijBZLb3hxI6w6ci5vyY=&c=lQnV1JPFwnki60MvKtPyiVwbWnG6XMP6JWl1GJxWN0HhdPbRckf7MvNBhN RnSBEcYGv85aD2Vqanw/PokauG9QVY7ydBN/tpad5vtpQLSlNbHG5PIx soF9DUJz 7IM&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (3aafab7551d493fd09f64fe894026568)

0 / 68
http://www.updatefunpresent.com/WVl6OTRQWGRCZUUxeGNrdGpKVEpHU0dKaE16aFdWa1owWmt0M1NXeGplamhNV1dWT1RsWktNa1Z2TVdKVVdEbHBieVV6UkNaalBVOXpRMXBZUmtOak1FSmhSblpFVGt0blV6RnNURWMyY2lVeVFsVk9Ua0p4WjJsQ1JGVjVWVko2UlROMWVXbFlhV0U0UzBSd2NEQlZUVTB3YVVGMlJtaG1SRU5xVlNVeVJrNVVTMHRHU1RGM1FtZ3lRa1J1U2t4WWNYSXhiMFE0VVRFemNHdDBVMHgyVTFOVVRHVkJabFUxUm01VFpUVTJRV2xKTUNVeVJrTk1XbmxKWjJWaUptUnZkMjVzYjJGa1FYTTlRbUZ1WkdsallXMHJVMlYwZFhBdVpYaGw=  (bandicam setup.zip)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=JTzHlWqq1iIvDi8/AjiUKMd0gGg834MiAAeQ6hFlvEk=&c=aiQ yxdft7AO AIu36t9pKhrnBBeu/5AgbVNHdRxTdpCPUbO36DXb9xq0IMnaendQP51yqvkRYOJAWz/gOPuKStLpo9SGCYoGfFY 5lKUEKj5C6Cn469ufB4nVowpRuK&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (72549609cde7b1c553d956ed677f99af)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=d4CJV6JBB9cFyARX4ry56w5tggdkTtVWSBwOwKgOkl8=&c=67NPvC1zY4REvYimE7geRlFdpvnWLXfDdtcFWwVuv62cT1y1lFkvqZmAbu2Fu1xt0aB7qdfHJzQslJ9K 1kTJEtTQLi5SPQMKDVwpq4MycHhS31n11jiNxbXzf5Pa8i &downloadAs=WinRAR Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (7ce2d018025ba3adc16de71c1d18b9c6)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=Sy9jGg7o1/xm41tOs05aI11L60Y1IDTI1esB mbhp2M=&c=0Expg3hMkN3y4jeVUs lvoGPNVWP CD6GqkhtSjMxqQcofX4LPrIYGEFdsQWnFtsVPTo8vrZe9Dc1kyg wyqo/.../yihNtgugKBL&downloadAs=uTorrent.exe  (f6f9afc66c38266d8dab7d4e4cd87398)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=ZM8kuNi8Oc6L8JdSP1I/StPgkTsc/rlJhmj QI98BZY=&c=9I5ET0F1LU2Rw1D/A97VRecSE1J5GESiiQq2w62wJth277okx7ifh2wBNxIuK4LxoVczC1ne5LqKsbRo5 k8lWz1nU7Ein6KIMGCcO/HQExC xMsOqoEQepxR7ZcErFc&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (3aafab7551d493fd09f64fe894026568)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=gGnuh0Zk3XNqFSrNDf4NmeYLhTd5 /HNROsrTqLsolM=&c=L/h993J7CE0H4VnR8c1mwQoqVu2hf7oq5LEdCu0sgUxRfp0wc1Gnr1m4pC1HozN6YcOHudoFMk5I4ycO0gEKqZDpGaAHgPPTVLEgE 20i/55/dl w2aBa8K7iw/Tk0FB&downloadAs=Viber Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (4ab5940699355fb92439503c51ce9586)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=IngkX6Oy9JgRN4TlrKOj8I72iuyt4Hm/7tWmM8Z2b/4=&c=jjg2EmIKd4eruivn YE8ZcTYCP2PgK9EHSHJCOd/XGN43fyG5dKF2yNtfMjWYrDa981vQwp/uoqscLe5AsYFIpRQ wVtuMZTKpEu4Zv0jo0L/I9Jn1aZKT6HixfY/vqZ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (72549609cde7b1c553d956ed677f99af)

1 / 68      (Adware)
http://www.updatefunpresent.com/.../XPCG43fG TJyC&downloadAs=OpenOffice Setup.exe  (696c3685066e54f0e638158db8957364)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=J3YWGFK03Y7PZz7xLal9SS C3MOqKX8aQ5qW1MWyXTE=&c=nqZHcfk9zl9/wg1u2EyCRM1RSwgFe4Rt3A52A VbqlPLXlorTTg3z7ADz04c7YbY10MMVNHYyqOS1 gMn6raL1eZby1VoK3aKsqaqYDmqq1NcLRHNgBGpPqk5M0GX9ix&downloadAs=Yandere Simulator Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (3aafab7551d493fd09f64fe894026568)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=MrgHXxi95VBmLM7SOLB PkMnkVDOtl4qPy9wxvUcQ6A=&c=K89vn0LrWjByD/DLySjRzl pFNLD UHVClKUvQA9bYqmobSA1sGOjnb7IkRh7mniUoUBljBDK6MBur42HWXO5Ygrw8/ZgUL3 nJI g5KUaZP0WL0Fp5c9VapV4qiJ/wG&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (e0f90429434c7039967682d60ad03599)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=IwcVtGNb/u/IxpF8d/ 3DuehoUdbbO nDsA463g6gFo=&c=Y7TWduvzm/PKBmXiQ6I6gSHU010y19E9L7Z33hWShMtVSYG8kK0KZJmsIfjHRH70dp5I4iKpQaMEEtP8eo6Dq67K8ZHKXZJVocXam7aTIw5WNPKNOStNidYRkxGCturL&downloadAs=Firefox Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (513c6c0e39afa76d9f7c94b31b6485d3)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=qiI/EBI0MZs 0QOhcj3k4/PpWVM/nrpERWAl6Jd34 0=&c=/75Ij64oXI2RCOaYCVAbyIUOD4U5qk8GpfNCgA g5ZWhsuuz0dWYvlr2gragkkHVtDTHhSy7SBF/TltCV50n2uTwFEl6zH OZbhtYcRSB u9lVpx6n8piiqK0OO45ZST&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (6a2de736686e9b1800274b48816eb60b)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=3VKN/i4IBmNsV mPDCvBlupbnyYayqt9XJyCuE431Kg=&c=DVcPAqnSJJ2xBBLv3U0CxRSH8e3Vt4TX1iBMuEA0TXY Shj H5rand4xfo7Y2oEa1bLeA tEMhRmRGdxxxPEY8isg8c3BWbQ822KGBsbH6K ZXa6E 07E1FytHkTnN9j&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (6a2de736686e9b1800274b48816eb60b)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=n/PDKjYTyjwXQfpHpa64cf5F0Pik35DN6dIdM2xA/tY=&c=9UBe/hS /yqZ4L9P/vLfkpClpsu2zTEqlEkQ/.../afCBkjJWQv3R5enn7kdY9aNGFZY8AsGSg2s6gK2&downloadAs=Firefox Setup.exe  (c.exe)

11 / 68    (Infected)
http://www.updatefunpresent.com/c?x=Uk6zY5oMyhB9vb5/D0PdnhyU1ABsFj7dQ8OV4MlCOtg=&c=nDclZb5J1qcAhOOpVV5aAYijFrcZRM342hJ97NxMtoxjOFQUAnCQz 1RSkLUHo7dnAZeqV9Ljl9ScrMJauiEWeA1f bG4E3PyvdYTQXGWzTWNxqlUo9FGEZVb7b/TgVY&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (a30ab947c091a8548b6506c497fdf987)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=5/dVkKDLFHX9O2Mm1ggkM8cquthzrzmogzHueD7ySHk=&c=nK gk/dNF9AwIwJ/vszPaHei8LFOmUw7Fw V5IvObDfjp/Z2maT2hB8yCvMF37GCpgeUDJKHFcwHnUOwnOKREAHrBL6/T8RARKZ4SNfWJCULQSD1A1f2tpyp6zMv3qYf&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (72549609cde7b1c553d956ed677f99af)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=DEpqqOitG VIX5wz2BD6vej1N7VxnVdnMR7fS25/J3w=&c=j0m YgKZmrA TkxxbZ4OQLrZG0arZxpjbaDpn8hRPoKsRPMz8bGCQiZZsjMN5FfqSMek5yYk5fOozmoZuXDudw4uW8NyxCussvadimKTPCGu6FE/s3cYRQE9Uziy C D&downloadAs=Yahoo Messenger Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php  (10864d65e2402d9c000fac34728ef087)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=hCqupSGllpszUTk2qMKF15m5NFnHxAHyfq3VwNfjl84=&c=iibf1yloNhe5 IxQ8aD Oz8gRYp1eAQSUonIE7fSz2dFnnAfFECpgF65j4JERTssZm2lbjUVaddc6nXyZvaR1as7LuMlnhOtxx5wSdyLNO/.../TkhPsSsbZdpQQjW&downloadAs=uTorrent Setup.exe  (utorrent_setup.exe)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=Jrlo9yr7cN85rQqJdElnXOAzm0JCxp4/bgyxIcXH2kk=&c=HYkf2Dd0bDzJEIIQ1TvkyYoH0Dc2m8pJQtIZ1AbJe5YUMOnea5BDo 3EveA6 2KRFE kkZS1IdUFYTzjxBsmtVurgq4qsMwg/.../&downloadAs=iTunes Setup.exe  (ba6a9f1ca02631e2908fabb5a11a0c59)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=LQSmPGD RAau1BoPKlJyN1fvfg6uQE2tWsZtbUvVOyU=&c=y9cOXLMzUs24iZLCx8erriS7Ax0ZUJx9Gg2Mrf9TGt7bathRVgiLsVTRwfs8arCAOF1RbzMW2odMHusqaMsJuENJ67k9G3TSzm0dTKz6q2OErF3ClDNJD7KgfqBpugkQ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (72549609cde7b1c553d956ed677f99af)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=dc8ltkdb61gavGSk7zCkS9HX0HBZGxQB5UWyIyfFYoM=&c=VkllUuPEWQvm5DK5j/ND33sO28ZOI2DBEC2BIPFabkOTX5wTIun26W45imwszOXnMNjcZidk2UpBd6O/BnpGkD5ozRpVEngiTUpe3IO56zMnT0BYBfPuNDz9jM0URCsX&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (6a2de736686e9b1800274b48816eb60b)

1 / 68      (Adware)
http://www.updatefunpresent.com/.../umKDp5qpJB5TdoHV0i0jgPmOeW5F V T3kH&downloadAs=uTorrent.exe  (f6f9afc66c38266d8dab7d4e4cd87398)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=7rSP13/rd/9TTF2mZwYhJE02G1iCcD05y03PH8cp2xI=&c=GAtLz9Ugjm6/4rwmTD6gGoTTFHOoClIzgqqYp5 Up0saNWJeR5FV6TVVQT4Ff7YaVrzYAkvFXUr5RpbRAExVbhUodmTVuBndsCnxffZ2qhBQ0GGh/ppRYF3tRYrzfDNZ&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (6a2de736686e9b1800274b48816eb60b)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=QjmdDcoYTQtX0dGM78daAwUauVKVdPmDC qgp/Ul84=&c=bA2YwcpAbsGMX4PoVHAVtGvTo4B7iMB3w9/.../8w2f 54p dZmhMDCukXqtobE5TcfDp3s8vN rkNgG raFyvkygQUDBPpGXHBpiJM9qsPSYoO9uy2Kq&downloadAs=iTunes Setup.exe  (9e151d94428a0f9f63505439f8d7101e)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=e shfXXJCwOMCMe39SV/8sGJUhIKCK5NtFdWU1MQBiQ=&c=2qDIucIId0cyYpTindCK0JAGoBPl4 qayxafCuE3o6u77WHQ2h92K1LPGL51pcsHypVuuwN/.../&downloadAs=Ares Setup.exe  (e100f0f945c55ceada65336f4d982f78)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=ceC/YRjSxIazeyw3Tg50TT0w4FOnlZiIzHm18mn9 UI=&c=IUidch5dBYgW2iZjiyguNbF1/KZTa2evHolnQ kaQwFVINGD3WIri0yBz2OS/jMEQ0d33Of6nwdKYqs/KZs/qfNKijaHf0J1sg9TGTtA89o5Q20/l5pI/Bcjdf4j BOE&downloadAs=uTorrent Setup.exe&fallback_url=http://www.downloadfree9.com/landers/.../download.php  (381f4b15ffbf97c2a6e1daf3780b5cfc)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=baij5T0Dsxgk1wdyRdN3iOBzYKIsk3t2rqPAmflhv88=&c=O99HqJePWPfWcoXc3DyNRnX5aogX1gN/.../3&downloadAs=Firefox Setup.exe  (c.exe)

1 / 68      (Adware)
http://www.updatefunpresent.com/c?x=JHu2jTTjoNkWmRzzlSjlkNKDvjLlMTUm6WpGU5Hjdfk=&c=nE74RU0pgBuFLtGRdsk3CLoyIv0AtP/12guENWbXWzKKerefLwWqMb74yQV1AB5Irknx73zP/Kz1DUJg3Dyayr/awLsB2ztei7kaIzdW2vEgGckomOHqInLthDKn/69N&downloadAs=Google Chrome Setup.exe&fallback_url=http://www.downloadfree4.com/.../index.php  (6a2de736686e9b1800274b48816eb60b)

 
Latest 30 of 109 download URLs

The following 36 files have been seen to comunicate with www.updatefunpresent.com in live environments.

TCP » 52.38.209.219:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.33.46.229:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.33.46.229:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.38.209.219:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.38.209.219:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 54.200.224.121:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 52.38.209.219:80
browser.exe (Browser)

TCP » 52.33.46.229:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 54.200.224.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.200.224.121:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 54.200.224.121:80
browser.exe (Browser)

TCP » 52.33.46.229:80
Client.exe

TCP » 54.200.224.121:80
kmplayer_3.8.0.123.exe.exe (The KMPlayer by PandoraTV)

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.33.46.229:80
ShopAtHome_BAC_Service.exe (by ShopAtHome.com)

TCP » 52.33.46.229:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

 
Latest 20 of 77 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.