dl1.app2desktop.com

Corp New Ventures Services

Domain Information

The domain dl1.app2desktop.com registered by Corp New Ventures Services was initially registered in January of 2016 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Remove Malware from dl1.app2desktop.com - Powered by Reason Core Security
Registrar:
FINDYOUANAME.COM LLC

Server location:
Virginia, United States (US)

Create date:
Saturday, January 23, 2016

Expires date:
Monday, January 23, 2017

Updated date:
Saturday, January 30, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Dr.Web
Adware.Downware.2081, Adware.Downware.3933, Threat.Undefined, infected with Trojan.Packed.28387, Adware.Downware.6169, Adware.Downware.8127
89.58%

NANO AntiVirus
Trojan.Win32.Generic.cthmwf, Trojan.Win32.Generic.dbxkzp, Trojan.Win32.OutBrowse.ddvyee, Riskware.Win32.Downware.dedwtz
87.50%

Reason Heuristics
PUP.Installer.OUTBROWSE.F, PUP.OUTBROWSE.F, PUP.OUTBROWSE.I, PUP.OUTBROWSE.G, PUP.OUTBROWSE.E, PUP.OUTBROWSE.N, PUP.OUTBROWSE.L, PUP.OUTBROWSE.M, PUP.FastDownloads.G, PUP.Installer.FastDownloads.M, PUP.Installer.OutBrowse.F, PUP.OutBrowse.Z, PUP.Installer.BundloreLimited.F, PUP.Bundler.Outbrowse, PUP.Outbrowse.Bundler (M)
85.42%

AVG
MalSign.Generic, InstallC, MalSign.OutBrowse, Adware MultiBundle.M, Bundlo
83.33%

Malwarebytes
PUP.Optional.OutBrowse, PUP.Optional.Outbrowse, PUP.Optional.Bundle, PUP.Optional.Bundlore
75.00%

ESET NOD32
Win32/OutBrowse, Win32/OutBrowse.AI (variant)
58.33%

VIPRE Antivirus
OutBrowse, Threat.4784459, Threat.4786018, Threat.4823950, Threat.4150696
41.67%

ESET NOD32
Win32/OutBrowse.R potentially unwanted application, Win32/OutBrowse.P potentially unwanted application, Win32/OutBrowse.AA potentially unwanted application, Win32/OutBrowse.H potentially unwanted application
37.50%

McAfee
Adware-OutBrowse, Adware-OutBrowse.a, PUP-FLY, Program.Adware-OutBrowse
35.42%

Avira AntiVirus
W32/Mabezat, APPL/Downloader.Gen, APPL/Downloader.Gen9, PUA/Outbrowse.Gen
31.25%

Kaspersky
not-a-virus:AdWare.Win32.OutBrowse, not-a-virus:Downloader.NSIS.OutBrowse
22.92%

Fortinet FortiGate
Riskware/OutBrowse
22.92%

F-Prot
W32/Outbrowse.B2.gen, W32/Outbrowse.B.gen, W32/A-aeabd9bb
22.92%

Agnitum Outpost
PUA.OutBrowse, Riskware.Agent
20.83%

AhnLab V3 Security
PUP/Win32.OutBrowse
18.75%

The domain dl1.app2desktop.com has been seen to resolve to the following 19 IP addresses.

February 14, 2016

ec2-50-17-192-251.compute-1.amazonaws.com
May 3, 2015

ec2-54-197-253-102.compute-1.amazonaws.com
December 1, 2014

ec2-54-225-69-165.compute-1.amazonaws.com
December 1, 2014

ec2-50-16-215-95.compute-1.amazonaws.com
December 1, 2014

ec2-54-225-207-190.compute-1.amazonaws.com
October 9, 2014

ec2-54-243-116-235.compute-1.amazonaws.com
September 7, 2014

ec2-184-72-220-88.compute-1.amazonaws.com
September 6, 2014

ec2-23-21-145-191.compute-1.amazonaws.com
September 5, 2014

ec2-50-19-237-160.compute-1.amazonaws.com
September 5, 2014

ec2-54-243-77-178.compute-1.amazonaws.com
September 4, 2014

ec2-54-225-234-12.compute-1.amazonaws.com
September 4, 2014

ec2-23-21-49-179.compute-1.amazonaws.com
September 3, 2014

ec2-50-17-199-44.compute-1.amazonaws.com
August 17, 2014

ec2-107-22-197-79.compute-1.amazonaws.com
May 21, 2014

ec2-54-243-92-152.compute-1.amazonaws.com
April 29, 2014

ec2-50-17-236-38.compute-1.amazonaws.com
April 11, 2014

ec2-184-73-213-74.compute-1.amazonaws.com
April 11, 2014

ec2-54-243-159-122.compute-1.amazonaws.com
March 15, 2014

File downloads found at URLs served by dl1.app2desktop.com.

 
Latest 30 of 64 download URLs

The following file have been seen to comunicate with dl1.app2desktop.com in live environments.

URL:
http://dl1.app2desktop.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache

Remove Malware from dl1.app2desktop.com - Powered by Reason Core Security