home

www.utilitab.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc., US

Root domain:
utilitab.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic.Reimage.Installer.Meta, PUP.Reimage.ReimageR.Installer.Meta (L), PUP.Reimage.Installer.Meta (L)
100.00%

Dr.Web
Program.Unwanted.493, riskware program Program.Unwanted.1470
66.67%

Bkav FE
W32.HfsAdware
33.33%

ESET NOD32
Win32/ReImageRepair.F potentially unwanted
33.33%

Clam AntiVirus
Win.Trojan.Slugin-260
33.33%

McAfee
Artemis!D7830F8B35ED
33.33%

Baidu Antivirus
PUA.Win32.ReImageRepair
33.33%

Fortinet FortiGate
Riskware/ReImageRepair
33.33%

Malwarebytes
PUP.Optional.ReImageRepair.A
33.33%

Trend Micro House Call
Suspicious_GEN.F47V0520
33.33%

The domain www.utilitab.com has been seen to resolve to the following 6 IP addresses.

54.172.27.35
ec2-54-172-27-35.compute-1.amazonaws.com
August 23, 2016

52.200.92.69
ec2-52-200-92-69.compute-1.amazonaws.com
August 23, 2016

52.86.233.79
ec2-52-86-233-79.compute-1.amazonaws.com
June 28, 2016

52.22.243.82
ec2-52-22-243-82.compute-1.amazonaws.com
June 28, 2016

52.6.97.63
ec2-52-6-97-63.compute-1.amazonaws.com
June 6, 2016

54.236.137.76
ec2-54-236-137-76.compute-1.amazonaws.com
June 6, 2016

File downloads found at URLs served by www.utilitab.com.

2 / 68      (PUP)
http://www.utilitab.com/installed/clkn/http/www.reimageplus.com/.../router_land.php?tracking=Sterext&banner=example&adgroup=example&ads_name=example&keyword=example&exec=run  (reimagerepair.exe)

1 / 68      (PUP)
http://www.utilitab.com/installed/clkn/http/www.reimageplus.com/.../router_land.php?tracking=Sterext&banner=example&adgroup=example&ads_name=example&keyword=example&exec=run  (reimagerepair.exe)

10 / 68    (PUP)
http://www.utilitab.com/installed/clkn/http/www.reimageplus.com/.../router_land.php?tracking=Sterext&banner=example&adgroup=example&ads_name=example&keyword=example&exec=run  (reimagerepair.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.