home

download17.cdn.jzip.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS22822 LLNW-AS Limelight Networks, INC. proxy AS object

Root domain:
jzip.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.BandooMedia.S, PUP.Bandoo.BandooMe.Installer (M), PUP.Bandoo (M)
100.00%

Dr.Web
Adware.Bandoo.179
25.00%

ESET NOD32
Win32/Toolbar.SearchSuite.V potentially unwanted application
25.00%

Clam AntiVirus
Win.Adware.Searchsuite-3
25.00%

McAfee
SearchSuite
25.00%

Malwarebytes
PUP.Optional.Bandoo
25.00%

Zillya! Antivirus
Adware.SearchSuite.Win64.20
25.00%

K7 AntiVirus
Unwanted-Program
25.00%

F-Prot
W32/A-d602c904
25.00%

Agnitum Outpost
PUA.Toolbar.SearchSuite
25.00%

VIPRE Antivirus
Adware.SearchSuite
25.00%

Avira AntiVirus
Adware/SeaSuite.inzb
25.00%

AhnLab V3 Security
Adware/Win32.Bandoo
25.00%

AVG
Generic
25.00%

Baidu Antivirus
PUA.Win32.SearchSuite
25.00%

The domain download17.cdn.jzip.com has been seen to resolve to the following 2 IP addresses.

208.111.161.254
cdn-208-111-161-254.iad.llnw.net
August 10, 2016

208.111.160.6
cdn-208-111-160-6.iad.llnw.net
August 10, 2016

File downloads found at URLs served by download17.cdn.jzip.com.

1 / 68      (PUP)
http://download17.cdn.jzip.com/cdn/r/.../jZipSetup-r20-n-bc.exe  (28750dd944ec1131a58a86c2aef34f50)

1 / 68      (PUP)
http://download17.cdn.jzip.com/cdn/r/.../jZipSetup-r21-n-bc.exe  (1554419f6d95cb0cd337cc87060f0d51)

1 / 68      (PUP)
http://download17.cdn.jzip.com/cdn/r/.../jZipSetup-r428-n-bf.exe  (930c4bcbd1f5acf28db217c6b353ef01)

15 / 68    (PUP)
http://download17.cdn.jzip.com/cdn/r/.../jZipSetup-r20-n-bc.exe  (7b982a3b2e067c683f19fef1799ea1bf)

The following 85 files have been seen to comunicate with download17.cdn.jzip.com in live environments.

TCP » 208.111.161.254:80
AppVerifierapc.exe (AppApcVerifier)

TCP » 208.111.160.6:80
AppVerifierapc.exe (AppApcVerifier)

TCP » 208.111.161.254:80
crossbrowse.exe (Crossbrowse)

TCP » 208.111.160.6:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.161.254:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 208.111.161.254:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 208.111.160.6:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.160.6:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 208.111.160.6:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 208.111.161.254:80
Patcher.exe (Audition Patcher by Axeso5.com)

TCP » 208.111.161.254:80
sysmon.exe (SysMon)

TCP » 208.111.160.6:80
SimpleMalwareProtector.exe (Simple Malware Protector by SimpleStar)

TCP » 208.111.161.254:80
AdvancedSystemProtector.exe (ASP)

TCP » 208.111.160.6:80
AdvancedSystemProtector.exe (ASP)

TCP » 208.111.161.254:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.160.6:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.160.6:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.161.254:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.160.6:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 208.111.161.254:443
vosteran.exe

 
Latest 20 of 135 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.