home

download-youry.asia

download-youry.asia

Domain Information

The domain download-youry.asia registered by download-youry.asia was initially registered in April of 2013 through PDR Ltd. d/b/a PublicDomainRegistry.com R28-ASIA (303). This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR Ltd. d/b/a PublicDomainRegistry.com R28-ASIA (303)

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Sunday, April 28, 2013

Expires date:
Tuesday, April 28, 2015

Updated date:
Sunday, June 8, 2014

Whois:
1 download-youry.asia record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.WebPick.Installer.l, Adware.WebPick.Installer.FF, Adware.WebPick.Installer (M), Adware (M)
100.00%

VIPRE Antivirus
Threat.4753027, Threat.4150696
27.27%

avast!
Win32:InstalleRex-Q [PUP]
27.27%

Dr.Web
Adware.Downware.1166
27.27%

ESET NOD32
Win32/InstalleRex.J potentially unwanted application
27.27%

Kaspersky
not-a-virus:AdWare.Win32.Agent
27.27%

Bkav FE
HW32.CDB, W32.FamVT.AntiFWK.Trojan
27.27%

MicroWorld eScan
Adware.Generic.487482, Application.Generic.688278
27.27%

Quick Heal
Trojan.AntiFW.B5
27.27%

McAfee
PUP-FHQ!3B7A45E82647, Program.PUP-FHQ
27.27%

Malwarebytes
PUP.Optional.Installex
27.27%

NANO AntiVirus
Riskware.Win32.Agent.crfikv, Riskware.Win32.Adware.crcapm
27.27%

Bitdefender
Adware.Generic.487482, Application.Generic.688278
27.27%

SUPERAntiSpyware
PUP.InstallRex/Variant
27.27%

Sophos
InstallRex, PUA 'InstallRex'
27.27%

The domain download-youry.asia has been seen to resolve to the following 2 IP addresses.

92.242.140.21
unallocated.barefruit.co.uk
May 5, 2015

199.101.28.20
search.dnsassist.verizon.net
June 9, 2014

File downloads found at URLs served by download-youry.asia.

1 / 68      (Adware)
http://download-youry.asia/.../?product_name=Asma-ul-Husna-Video.mp4&installer_file_name=Asma-ul-Husna-Video.mp4&r=716  (asma-ul-husna-video.mp4.exe)

1 / 68      (Adware)
http://download-youry.asia/v945  (download.exe)

1 / 68      (Adware)
http://download-youry.asia/v343  (vaudix.exe)

1 / 68      (Adware)
http://download-youry.asia/.../?affiliate_id=eb3&product_name=Laptop Repairing Course Pdf&installer_file_name=Laptop Repairing Course Pdf&r=767  (laptop repairing course pdf.exe)

1 / 68      (Adware)
http://download-youry.asia/.../?product_name=The Wire Season 1&installer_file_name=The Wire Season 1&r=696  (the wire season 1.exe)

1 / 68      (Adware)
http://download-youry.asia/v968  (download.exe)

1 / 68      (Adware)
http://download-youry.asia/.../?product_name=Internet Download Manager 6.14 Build 2 Final.rar&installer_file_name=Internet Download Manager 6.14 Build 2 Final.rar&r=589  (internet download manager 6.14 build 2 final.rar.exe)

1 / 68      (Adware)
http://download-youry.asia/v343  (vaudix.exe)

35 / 68    (Adware)
http://download-youry.asia/.../?product_name=Iron Man 2[2010]DvDrip _PB6512897.torrent&installer_file_name=Iron Man 2[2010]DvDrip _PB6512897.torrent&r=701  (iron man 2dvdrip _pb6512897.torrent.exe)

32 / 68    (Adware)
http://download-youry.asia/.../?product_name=Nurse Jackie Season 1 Episode 2&installer_file_name=Nurse Jackie Season 1 Episode 2&r=612  (nurse jackie season 1 episode 2.exe)

30 / 68    (Adware)
http://download-youry.asia/.../?product_name=Harold and Kumar Escape from Guantanamo Bay&installer_file_name=Harold and Kumar Escape from Guantanamo Bay&r=592  (harold and kumar escape from guantanamo bay.exe)

The following 276 files have been seen to comunicate with download-youry.asia in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 199.101.28.20:80
suggestions.crx

TCP » 199.101.28.20:80
firstuse.crx

TCP » 199.101.28.20:80
google-search.crx

TCP » 199.101.28.20:80
whylogin.crx

TCP » 199.101.28.20:80
facebook.crx

TCP » 199.101.28.20:80
rss.crx

TCP » 199.101.28.20:80
viewlater.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
datapump.crx

 
Latest 20 of 276 files

August 5, 2016
iframe.download-youry.asia

URL:
http://download-youry.asia/

Web server:
nginx/1.0.15

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.