home

www.z5boing.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
z5boing.com

Scanner detections:
Detections  (60% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore (M)
40.00%

avast!
Win32:Agent-AODJ [Trj], Win32:Malware-gen
40.00%

AhnLab V3 Security
Trojan/Win32.Gen, PUP/Win32.Downloader
40.00%

ESET NOD32
Detection.Undefined
40.00%

Bkav FE
W32.FakeExeYHPtv
20.00%

MicroWorld eScan
Worm.Generic.377772
20.00%

nProtect
Trojan/W32.Agent.534016.BS
20.00%

Quick Heal
W32.Grenam.A
20.00%

McAfee
W32/Gnamer
20.00%

K7 AntiVirus
Trojan
20.00%

NANO AntiVirus
Trojan.Win32.Renamer.lnwkz
20.00%

F-Prot
W32/Renamer.A.gen
20.00%

Norman
Renamer.M
20.00%

Trend Micro House Call
TROJ_GEN.F0C2C00KM13
20.00%

Clam AntiVirus
WIN.Virus.Gnamer
20.00%

The domain www.z5boing.com has been seen to resolve to the following IP address.

52.35.105.138
ec2-52-35-105-138.us-west-2.compute.amazonaws.com
April 5, 2016

File downloads found at URLs served by www.z5boing.com.

1 / 68      (PUP)
http://www.z5boing.com/.../installer.exe  (setup.exe)

33 / 68    (Malware)
http://www.z5boing.com/.../installer.exe  (setupdatamngr_ilivid.exe_recovered[2015-04-24.16.36.05])

1 / 68      (inconclusive)
http://www.z5boing.com/.../installer.exe  (2966223ac1c60cf5e292e5cd10310f2a)

1 / 68      (inconclusive)
http://www.z5boing.com/.../installer.exe  (537e87b8c9393d88154f9caac32a4787)

4 / 68      (PUP)
http://www.z5boing.com/.../installer.exe  (51f01763661dbf1148b37f064d43795f)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.