home

www.yourfiledownloader.com

Via Advertising Group Limited

Domain Information

The domain www.yourfiledownloader.com registered by Whois Privacy Corp. was initially registered in April of 2012 through INTERNET.BS CORP.. This domain has been known to host and distribute potentially unwanted software. The domain is associated with the publisher Via Advertising Group Limited who is located in Nicosia, CY.
Registrar:
INTERNET DOMAIN SERVICE BS CORP

Create date:
Thursday, April 26, 2012

Expires date:
Tuesday, April 26, 2016

Updated date:
Sunday, December 13, 2015

ASN:
AS9498 BBIL-AP BHARTI Airtel Ltd.,IN

Root domain:
yourfiledownloader.com

Whois:
4 yourfiledownloader.com records

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ViaAdvertisingGroupLimited.P, PUP.ViaAdvertisingGroupLimited.I, PUP.ViaAdvertisingGroupLimited.S, PUP.Installer.ViaAdvertisingGroupLimited.S, PUP.Via Advertising.ViaAdvertisingGroup.Bundler (M), PUP.Via Advertising (M)
100.00%

Dr.Web
Trojan.StartPage.56734, Adware.Downware.1140, Adware.Downware.5658, Adware.Downware.747, Adware.Downware.8624, Threat.Undefined
75.00%

VIPRE Antivirus
Via Advertising, Threat.4758264
75.00%

Malwarebytes
PUP.Optional.YourFileDownloader, PUP.Optional.Downloader
66.67%

Trend Micro House Call
TROJ_GEN.F47V0403, TROJ_GEN.F47V0827, TROJ_GEN.F47V0324, TROJ_GEN.F47V0623, TROJ_GEN.F47V1130
66.67%

avast!
Win32:Downloader-UEO [PUP], Win32:Downloader-UBW [Adw]
66.67%

McAfee
Artemis!436964538F3D, Artemis!6137078A3132, Artemis!BA792B193973
58.33%

ESET NOD32
Win32/YourFileDownloader (variant), Win32/ExpressDownloader (variant)
58.33%

Fortinet FortiGate
Riskware/YourFileDownloader
58.33%

XVirus List
Win32.Detected
58.33%

AVG
Adware Generic_r, Generic_r.LB, BundleApp_r.B, Skodna.Generic_c
58.33%

G Data
Win32.Application.ExpressDownloader, Gen:Variant.Kazy.491517
58.33%

K7 AntiVirus
Riskware
50.00%

Comodo Security
Application.Win32.YourFileDownloader.~A
50.00%

NANO AntiVirus
Riskware.Win32.Amonetize.cvaajw
50.00%

The domain www.yourfiledownloader.com has been seen to resolve to the following 4 IP addresses.

54.72.130.67
ns1.ibspark.com
August 19, 2016

127.0.0.1
ReasonOne
February 15, 2016

50.7.29.78
November 12, 2014

50.7.28.2
February 27, 2014

File downloads found at URLs served by www.yourfiledownloader.com.

1 / 68      (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (b2d0004925a4861adbe44d1491b4ac39)

1 / 68      (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (f043a3bdab5c2aa82771510e6ae36dbe)

23 / 68    (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (37016f99ee0947c46fba97cfd4d4e46b)

7 / 68      (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (8ffbbf77c12141e730b1cf27caef1c38)

12 / 68    (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (97884b9d8a50bf9d4ad05564d4fe3298)

20 / 68    (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (bc930bd2e34256f5be9f3e4452179d10)

19 / 68    (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (30ab3298a4c436bd6e166db93af9849b)

20 / 68    (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (8cc3ba6a6de92f0c4ab7379e2c759b87)

19 / 68    (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (62916879f8ac579a2f1c19192b985918)

20 / 68    (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (34bc16c648d51d9e9b264436b14aae53)

9 / 68      (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (YourFile.exe)

1 / 68      (Adware)
http://www.yourfiledownloader.com/YourFileDownloader.exe  (install51813173.exe)

The following 142 files have been seen to comunicate with www.yourfiledownloader.com in live environments.

TCP » 54.72.130.67:80
simplefilesupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall12590625.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall5322109.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall190602.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
googleupdate.exe

TCP » 54.72.130.67:80
browserserver.exe

TCP » 54.72.130.67:80
sm.exe (System Monitor)

TCP » 54.72.130.67:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.72.130.67:80
uninstall129231.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
sfupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 54.72.130.67:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 54.72.130.67:80
pepperzip.exe

TCP » 54.72.130.67:80
internetenhancer.exe (Internet Enhancer)

TCP » 54.72.130.67:80
ssn.exe (ssn)

TCP » 54.72.130.67:443
mintcast_updater_service.exe (AutomaticUpdater)

TCP » 54.72.130.67:80
yacqq.exe

 
Latest 20 of 154 files

Facebook:
Likes:  6
Shares:  47
Comments:  27

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.