home

dlw644.goforfiles.org

Whois Privacy Corp.

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network.
Registrar:
Internet Domain Service BS Corp

Server location:
Dublin City, Ireland (IE)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
goforfiles.org

Whois:
3 goforfiles.org records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Task.RighwayTechnologies.U, PUP.Installer.RighwayTechnologies.b, PUP.Via Advertising.RighwayTechnologies.Bundler (M), Threat.Win.Reputation.IMP, PUP.Via Advertising.Bundler, PUP.Via Advertising.RighwayT.Bundler (M), PUP.Via Advertising (M)
100.00%

VIPRE Antivirus
Threat.4925438
8.00%

avast!
Win32:Adware-gen [Adw]
8.00%

Avira AntiVirus
APPL/Downloader.Gen8, Adware/Downware.4798
8.00%

AVG
Righway Technologies, Adware BundleApp_r
8.00%

Dr.Web
Adware.Downware.8715, Adware.Downware.4798, Adware.Downware.6590
8.00%

ESET NOD32
Win32/ExpressDownloader.K potentially unwanted application, Win32/ExpressDownloader.J potentially unwanted application
6.00%

Vba32 AntiVirus
Downloader.Agent, Signed-Downware.ExpressDownloader
6.00%

herdProtect (fuzzy)
a variant of 0de3135ab95192fdf950b1db5585ec047ecc1972, a variant of df97165f30470616e0849ba616773fc92a32ef61, a variant of 85775c35c0ac16d32a89b7720cdd5cc762778cc3
6.00%

Emsisoft Anti-Malware
Application.Bundler.GoForFiles, Gen:Variant.Strictor.63674, Gen:Variant.Application.Bundler.29
6.00%

MicroWorld eScan
Application.Bundler.GoForFiles.A, Gen:Variant.Strictor.63674, Gen:Variant.Application.Bundler.29
6.00%

Malwarebytes
PUP.Optional.Downloader
6.00%

Bitdefender
Application.Bundler.GoForFiles.A, Gen:Variant.Strictor.63674, Gen:Variant.Application.Bundler.29
6.00%

Agnitum Outpost
Riskware.Agent
6.00%

G Data
Application.Bundler.GoForFiles, Gen:Variant.Strictor.63674, Gen:Variant.Application.Bundler.29
6.00%

The domain dlw644.goforfiles.org has been seen to resolve to the following 4 IP addresses.

54.72.130.67
ns1.ibspark.com
August 31, 2016

5.79.65.217
mail.goforfiles.com
October 9, 2014

74.63.79.82
September 30, 2014

208.53.158.118
August 24, 2014

File downloads found at URLs served by dlw644.goforfiles.org.

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GoVnDUqFVvn/oNOsj6K2qXvi5xq7g4Ze pIGi6hD1q6pEkH Hdax/t32YZ7sBFXamXEF JnVYH1M1fDtonAEuObBN/wTlLdsA/WTqZY/cgmWfYO2QkuHBzcOY NRijaipR7hJ1FPYJYkT6TGxDwgh6XMQtVEDbExkOiRlEKNAVEXGR91F0 M4SIdi3XT/l F05rvYfLaL7IWD rnhY6q94U GTdh2yyzFQ7p5oSNqfaEPRg0YaisJZTMnKGu6Xyw/.../Me  ({blocked}.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GPVmXaoE8t56RRbdD6biX2tC45h7glc7e1ZF6tlzI14c4WQ6KdMgCgnmIb7MFaGu7FVwDR3xhDhooCU4w8SgfdMkVkg3wZL5AwRnPJJrFojHT1Jm58 QltebJpLlb N2gYrlIjD 8fZEiiDXlcxh06QdUTRl/CFXtJ1gpNfIFYTyne4Vt0iKBBLILJcHev6QEwqbQ2OKf/IAK78yUE7q94Ve6WYFzolGVLq8M1FN6faEXehlBM2IRVW4zbHLzej0r1ha0U/.../MYs3Oi7KRv  (jagjit_singh_-_jai_ganesh_deva_-_aarti_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GIVnHYqBBPn4Babs60JyjIpnoj9OlyL/bsdyn7xyBrrpI6S7TUYh/l2m0Mq4QBR7jIXgvRzlkQlJwdToZkAWGFYUpx1n4WL5AwSnrJN/.../UxFd6degHa0EYNm9pZHw==  (masha_i_medved_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GUQmPCokN2xqhMeZPobT6XpSZmo7FtYrfgfi7502Uv9dFlF/aaLkS9iWIT4cdSG/qFBkCUlw5Eu5QLB9snB0yNYxErk1YPP4RoQn/ecu8nn366YSZt7yVbdeApfBznNmlE8xF TO9Id0LyTGxV0DF/WtIcVEvSS2loiQhNIN8hTyne4VsW1ekJf5n/.../m2dLq5c8  (quarkxpress_9.0_patch_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GUQmPCokN2xqhMeZPobTuS5Gx5paAsc6r7O2n10Gcv/.../wdxTegIcVmxCXdchRp4RvgRT0zFAlZEkjd9Z8EbTSno4Vwg2O1rI9C3C3e27wEWj7QsPvbzKnus zxc57g8F7jGJQqv T0J4pl Bd7K  (quarkxpress_9.5.1_keygen_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GLXmHboBBL3aNeYJP8aEPZpyRr6/x5Lpa4InOwxGEn56MyQ6TCEkGzlHRropAPS73TE0HdyF8H1sxZCd4ySxifcBUrlDRCf8U6TWyIcPE6knD1DWl9tmUiaf07bkf6PVNR7hJ1FKlAd0H2CXMMkEhoUdQtSFbYAhlJxx9JJcAQSTGZ4V8knfJQPuDpVySt k4s sgNf7nzJTGQ SQIsPUTC7ifYk ux2kul4w0Ft7LMlOE0xRExodCDZ3VDPSQyjPsk/.../7FQ==  (nicki_minaj_-_mercy_(remix)_feat_iggy_azalea_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GERWvRp1ot879eZNy0aELToyI5lLEuPZO8NjGRjiY1gIwyCfXbY3S9hT5EtpBIXfejAkCTkARYwc9WHJxyTg/YNEVzxjpDf8QrDD aeOdzxSy2ZTI/ zd2aeE/.../mgoxysMOgIqGM=  (ariana_grande_love_the_way_you_lie_(rihanna_s_version)_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/uON0OwjDFAvdcXXeHEUwLZwFsP1MVdHJt0EUmBbBN/xDhOYId4HSOcLLd/.../mgoxysMOgIqGP09Oln6 A=  (domaci_besplatni_erotski_filmovi_za_gledanje_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/uON0OwjDFAvdcXXeHEUwLZwFsP1c9aHJt0EUmBbBN/.../mgoxysMOgIqGP09Oln6 A=  (domaci_besplatni_erotski_filmovi_za_gledanje_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/uON0OwjDFAvdcXXeHEUwLZwFsP1cRYHJt0EUmBbBN/yTFDd8IrDD aeOdzxS2/YzY/ zd2aeE/en76OjEWsRV9QP9bLR2rTGxI0wshWMgESVyNAlZcyRxBIuwKVTXSvwNv2OpdLtS3DHe27wEWj7QsPvbzKnu5 yQIt8E4DLrHbVjvlm1V5p5sSNSIKByK111I34ZdRdaOXLjEmA/.../9duN22BuKbvxvlXKcYqDT09KRv8PDtY fs  (domaci_besplatni_erotski_filmovi_za_gledanje_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/uON0OwjDFAvdcXXeHEUwPQyFIO3cRYHJt0EUmBbBN/yTBOdMwrDD aeOdzxSyyYDg/ zd2aeE/en76OjEWsRV9QP9bLR2rTGxI0wshWMgESVyNAlZcyRxBIuwKVTXSvwNv2OpdLtS3DHe27wEWj7QsPvbzKnu5 yQIt8E4DLrHbVjvl2Rc555qSNSIKByK111I34dUTNeOWrjEmA/.../9duN22BuKbvxvlXKcYqDT09KRv8PDtY fs  (goforfiles0ds31g88eg.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/uON0OwjDFAvdcXXeHEUwPQyFIP1M9cHJt0EUmBbBN/yTBOdMwrDD aeOdzxSyyYDg/ zd2aeE/en76OjEWsRV9QP9bLR2rTGxI0wshWMgESVyNAlZcyRxBIuwKVTXSvwNv2OpdLtS3DHe27wEWj7QsPvbzKnu5 yQIt8E4DLrHbVjvl2Rc555rQ9CIKByK111I34dUTNeOW7PAmA/.../9duN22BuKbvxvlXKcYqDT09KRv8PDtY fs  (domaci_besplatni_erotski_filmovi_za_gledanje_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/uON0OwjDFAvdcXXeHEUwPQyFIP1MtaHJt0EUmBbBN/yTBOdMwrDD aeOdzxSyyYDg/ zd2aeE/en76OjEWsRV9QP9bLR2rTGxI0wshWMgESVyNAlZcyRxBIuwKVTXSvwNv2OpdLtS3DHe27wEWj7QsPvbzKnu5 yQIt8E4DLrHbVjvl2Rc555rR9aIKByK111I34dUTNeOW7fGmA/.../9duN22BuKbvxvlXKcYqDT09KRv8PDtY fs  (domaci_besplatni_erotski_filmovi_za_gledanje_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/uON0OwjDFAvdcXXeHEUwPQyFIP1c1dHJt0EUmBbBN/yTBOdMwrDD aeOdzxSyyYDg/ zd2aeE/en76OjEWsRV9QP9bLR2rTGxI0wshWMgESVyNAlZcyRxBIuwKVTXSvwNv2OpdLtS3DHe27wEWj7QsPvbzKnu5 yQIt8E4DLrHbVjvl2Rc555sQdGIKByK111I34dUTNeOXLHBmA/.../9duN22BuKbvxvlXKcYqDT09KRv8PDtY fs  (domaci_besplatni_erotski_filmovi_za_gledanje_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/uON0OwjDFAvdcXXeHEUwPQy1oF0spYHJt0EUmBbBN/yTBOdMwrDD aeOdzxSyyYDg/ zd2aeE/en76OjEWsRV9QP9bLR2rTGxI0wshWMgESVyNAlZcyRxBIuwKVTXSvwNv2OpdLtS3DHe27wEWj7QsPvbzKnu5 yQIt8E4DLrHbVjvl2Rc5pJhRtSIKByK111I34dUTNaCUbbEmA/.../9duN22BuKbvxvlXKcYqDT09KRv8PDtY fs  (domaci_besplatni_erotski_filmovi_za_gledanje_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/uON0OwjDFAvdcXXeHEUwPQylIE1sRcHJt0EUmBbBN/yTBOdMwrDD aeOdzxSyyYDg/ zd2aeE/en76OjEWsRV9QP9bLR2rTGxI0wshWMgESVyNAlZcyRxBIuwKVTXSvwNv2OpdLtS3DHe27wEWj7QsPvbzKnu5 yQIt8E4DLrHbVjvl2Re6J1tSNCIKByK111I34dUTtiNXbjAmA/.../9duN22BuKbvxvlXKcYqDT09KRv8PDtY fs  (domaci_besplatni_erotski_filmovi_za_gledanje_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GBeE/xinIt1qhMetSwN2DV/iJgr604fa32CVOErBxIhc4tQ/.../0zcZgMM8TNCIKEiD  (domaci_besplatni_erotski_filmovi_za_gledanje_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GCQmvEqEkr3KhNZZXiaH3Zpy5zrPIgc726KnTulSAj/dFmEeHdYhLs1HlZrZMKSuHMXgTRzE1GhY8bVI1zLFeIOERkhHsaIJJkHBWMaPMrwSChMWxw6D05LqkubFLMNmNW419kQf4HcF7xD2wfwAFxE9MWU2bIGVFT2whRfPEsCjfS41wW2OpdLtTVVj7 vBoho EfMLurdWT tHpU57B9UeWMYlvtgCEMgMI5AouTb0KGigRMjtRUSd7bWbPFhlvgxaNC6M/.../IwQyOiIRg==  (guitar-hero-3_serial_keygen_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GoVmnZp1ot2KJMIcy0KGuaoTQv8e17L/LldiL 0HVtuYcgT7mNZh/t3GgY/.../wy8MK51pQnPIKKU6hWXibyZt Tdie Y5V1XqLmkYr0RzRfIFfxCrTG1Qni1UE8sVHVzFUFJcwxNMHscXQSCKswR5grADeI68CXe351Ew qN0afKgc2j rHlHsP84WPqTdhmpyTAYvN4HGIeTb1OTjwJfn8YIQI0=  (makina_los_teke_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GJWHGbnV5t0eYSIfWwKGfStGFms R6IvTkeSP41GMs6pYiQKeEMkLp1GYb78NFXamXDlbdwFIH089JSolzB1CJdygrlDRIYINgFi7FKLN92mH ImUk7DdpePx8fFPyOGpM9D1kUOsDKR 5CXRYwAUhAYEHQQToPgJRyEdNL5UITSne5m890utRcI6 CGj1uQlt96BmLaL7IWD rnhY5al5XeeQdgq60mlA7owoA4zKKRaT7Qkd1oVCCdLYTvWD0lHn  (los_teke_-_makina_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GAWWPbvFct 79KfNm/aCOXmCJ1obRgXaupO3u8lD44uJZqE TZYhDi2GYT6dcQW76CCluExFIP1cpdHJt0EVeIOE57wT5JYIRsDT6WdPERlXG6YSZu5j9gILZqOwfnJ3xAqgVxRP4VMlntC35Xyg1DQd4CRQSZUEdRxhlDfIBYWSSKwXhv1 EJKNGsTjCv51gKs/stPPancG32rH1Q4ad9Q6PLPQzml2Bd5pxtQNGXbVOE0xRExodCDZ3VDPSQyjPsk/.../7EKuLuhSsZw==  (enakul_oruvan_-_megam_kottatum_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GMUGXJ4lp81aFaa5O8NnzYtGxwqaMlc7euZHy8yic4uJZqE TYaxfh3GkS79cQW76CCluExFIP1cpdHJt0EVeIOE57wT5JYIRsDT6WdPERlXG6YSZu5j9gILZqMQfnJ3xAqkRkW/.../YuqSe8=  (iggy_azalea_murda_bizness_ft_t_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GRVnvcpkktx7pWbMz6MGbdviI5qa1geaK7aW673GIq/dVmF HeaRbynipIr5wKSuHMXgPXy01FkZ8GXtU4Sg/bN1EykXsPKJF/ICOcLLBoi3juNj0gu28iafYqbRy1Kn5E8QR5SsQSbV36VyAXwAJ1VsxPFB/eFxl 51xEJo4bQmPB41wg39lAJNLvBWD3vwxk9KVwa/uwMDSi/.../8S  (taylor_swift_shake_it_off_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GXUkTo4nVjzLhMIc7gbTqS5Gw38uEGd6f2AEmQxGEn4pc2UPadKBvl2W4a6clbHO7EQUGVmxxbjZlSA9EzQwfKdgIgmW1Gf80/T3PeYeI8iHviIF9w72s3O/.../7R6uL9xy3d74QqGM=  (refx_nexus_v1.4.1_(mac_osx).rar_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GOVnbJ4mtjxr9GIZX6EWHdp2Fms R6IvXtfiL91mIp6pYiQKeEMkLp1GYb78NFXamXDlbdwFIH089JSolzB1CJdygrlDRIYINgFi7FKLN92mH ImUk7DdpePx8fFPyOGpM9D1kUOsDKR 5CXRYwAUhBoEHQQToPgJRyEdNL5UITSne5m890utRcI6 CWHyuQ1l9qVmLaL7IWD rnlR4ql9VeaVdgq60mlA7owoA4zKKRaT7Qkd1oVCCdLeTvWD0lHh  (katy_perry_-_roar_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5HjQ3GN A83h/8GOYnjdijPoCV7pORyL/HlfDy4gCFqooAlfbmNZhXymS1LvpcKTYOBHkKFxFoHwp4DU4tqTg/KcRMxr2EUNYAwCyKdcOc9knDzfGN25nBwefwFa07mMHhX7l9Ee70UcUzzNXtdyg13askdHQmNAkBO8BNYfIJHH2uFtwVnirUBY42/DHe272M9puEoZKjyIGSt HFS668vUbSWNQ/.../cbrRauPuBf1dq0Iym62vaotorn8  (goforfiles_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GGcyn0oFxvwKxTIfmkJ2fT8HVR6405d6e2aW673GIq/.../UxFd6degHa0A==  (cd_digital_audio,_track_downloader.exe)

23 / 68    (Adware)
http://dlw644.goforfiles.org/.../HlfDy4gCFqooAlfbmNZhXymS1LvpcKTYOBHkKFxFoHwp4DU4tqTg3KcRMxr2EUNYAwCyKdcOc9knDzfGN25nBwefwFa07mMHhX7l9ZZ70TdRDcIj5dxFN5W4ERQU2WWxUb3whHJcYdWBre5g16neVbONH Sij x3Jzs68i  (goforfiles_downloader.exe)

1 / 68      (Malware)
http://dlw644.goforfiles.org/j5GWQmXRq1pk0b4UJ5OBNn3U/jN6pfIpY7CpIHTulSAj/.../m2HlZrZMKSuHMXgPXy01GhY8bVI1zLFeIOERkhHsaIJJkHBWMaPMrwSehMWxw6D05KakubFLMNmNW419kQf4HcF7xD2wfwAFxE9MWU2bIGVFT2whRfP4mCjDWv3MBnepTcNrkHjKi gF49rQwK6TyMT67xSEF7q1qEerD  (sugababes_-_push_the_button_downloader.exe)

1 / 68      (Adware)
http://dlw644.goforfiles.org/j5GXdUab5BBSxqxMIdy0aGPV8zNh/eh/J/XofCr82GA4v5A1S7TUYh/l2m0MqJARWrKQFW2JnVYFwokdW45nGl2zcQ4ylTRJYJdhFimTLLBoiHH0DWh2 CI5aec/aUXgMGlRuQF/RL0ScF7ACXdEzRpuTJo/.../eFxl 51xEJo4bQmPU40R0lrcSPc3lXCSg mM8o69zf7 rJQ==  (rbd_-_tras_de_mi_downloader.exe)

 
Latest 30 of 82 download URLs

The following 142 files have been seen to comunicate with dlw644.goforfiles.org in live environments.

TCP » 54.72.130.67:80
simplefilesupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall12590625.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall5322109.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall190602.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
googleupdate.exe

TCP » 54.72.130.67:80
browserserver.exe

TCP » 54.72.130.67:80
sm.exe (System Monitor)

TCP » 54.72.130.67:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.72.130.67:80
uninstall129231.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
sfupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 54.72.130.67:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 54.72.130.67:80
pepperzip.exe

TCP » 54.72.130.67:80
internetenhancer.exe (Internet Enhancer)

TCP » 54.72.130.67:80
ssn.exe (ssn)

TCP » 54.72.130.67:443
mintcast_updater_service.exe (AutomaticUpdater)

TCP » 54.72.130.67:80
yacqq.exe

 
Latest 20 of 154 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.