dlp.123mediaplayer.com

Whois Privacy Protection Service, Inc.  (Proxy Registrant)

Domain Information

The domain dlp.123mediaplayer.com is registered by proxy through NAME.COM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Remove Malware from dlp.123mediaplayer.com - Powered by Reason Core Security
Registrar:
NAME.COM, INC.

Server location:
Oregon, United States (US)

Create date:
Tuesday, September 25, 2012

Expires date:
Sunday, September 25, 2016

Updated date:
Wednesday, March 18, 2015

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PaymentsInteractiveSL.E, PUP.Installer.tuguusl.G, PUP.LunacomInteractive.E, PUP.Installer.PaymentsInteractivesl.E, PUP.PaymentsInteractivesl.E, PUP.PaymentsInteractiveSL.Z, PUP.PaymentsInteractiveSL.Y, PUP.Tuguu.LunacomInteractive.Bundler (M)
100.00%

K7 AntiVirus
Unwanted-Program , Trojan
98.00%

K7 Gateway Antivirus
Unwanted-Program , Trojan
98.00%

Dr.Web
Adware.Downware.2630, Trojan.Packed.24553, Trojan.DownLoader9.24409, Trojan.DownLoader9.15042
98.00%

VIPRE Antivirus
DomaIQ, Trojan.Win32.Generic, Threat.4783235, Threat.4150696
98.00%

Malwarebytes
PUP.Optional.DomaIQ, PUP.Optional.BundleInstaller.A, PUP.OptionalBundleInstaller.A, PUP.Optional.Domalq, PUP.Optional.DomalQ
96.00%

avast!
Win32:DomaIQ-T [PUP], Win32:Installer-AH [PUP], Win32:Installer-U [PUP], Win32:DomaIQ-AP [PUP], Win32:PUP-gen [PUP], DomaIQ-CC [PUP]
96.00%

Panda Antivirus
PUP/MultiToolbar.A
96.00%

Agnitum Outpost
PUA.DomaIQ
94.00%

Avira AntiVirus
APPL/DomaIQ.Gen, APPL/DomaIQ.Gen7
94.00%

Sophos
DomainIQ pay-per install, Generic PUA HO, Generic PUA BA, Generic PUA IC, Generic PUA GM, PUA.DomainIQ pay-per install, PUA 'DomainIQ pay-per install'
94.00%

AVG
DomaIQ, Adware DomaIQ.AF, Adware Skodna.Bundle_r.Z, Adware DomaIQ.BK, Adware Skodna.Bundle_r.W, Adware DomaIQ.Gen, Adware DomaIQ.BM
92.00%

Kaspersky
not-a-virus:AdWare.MSIL.DomaIQ, not-a-virus:Downloader.NSIS.Agent, not-a-virus:HEUR:AdWare.MSIL.DomaIQ
90.00%

Comodo Security
Application.Win32.DomaIQ.PUP, Application.Win32.DomaIQ.KR, UnclassifiedMalware, Application.Win32.DomaIQ.PUS, Application.Win32.DomaIQ.~LKO
90.00%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud), VIRUS_UNKNOWN
90.00%

The domain dlp.123mediaplayer.com has been seen to resolve to the following 7 IP addresses.

September 3, 2014

August 17, 2014

August 16, 2014

August 1, 2014

July 23, 2014

ec2-54-213-51-216.us-west-2.compute.amazonaws.com
June 9, 2014

ec2-54-200-194-173.us-west-2.compute.amazonaws.com
December 18, 2013

File downloads found at URLs served by dlp.123mediaplayer.com.

1 / 68      (Adware)

36 / 68    (Adware)
http://dlp.123mediaplayer.com/o.php  (flashplayer installation.exe)

 
Latest 30 of 139 download URLs

Remove Malware from dlp.123mediaplayer.com - Powered by Reason Core Security