» downprov.dyna2download.com
Overview
Analysis
IPs Addresses (3)
Downloads (25)
Network (142)
Website Detail
Related Domains (618)

downprov.dyna2download.com

Whois Privacy Corp.

Domain Information

The domain downprov.dyna2download.com registered by Whois Privacy Corp. was initially registered in January of 2015 through TLD REGISTRAR SOLUTIONS LTD. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network.

Registrant:

Whois Privacy Corp.

Registrar:

TLD REGISTRAR SOLUTIONS LTD

Server location:

Dublin City, Ireland (IE)

Create date:

Saturday, January 10, 2015

Expires date:

Tuesday, January 10, 2017

Updated date:

Monday, January 11, 2016

ASN:

AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:

dyna2download.com

Whois:

2 dyna2download.com records

Scanner detections:

Detections (90% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Amonetize, PUP.Bundler.Amonetize, PUP.Amonetize.Ukra2006.Bundler (M), PUP.Amonetize (M)

84.21%

VIPRE Antivirus

Trojan.Win32.Generic.pak!cobra, Threat.4657539

47.37%

Clam AntiVirus

Win.Adware.Amonetize-511

47.37%

Avira AntiVirus

Adware/Amonetize.kpa, Adware/Amonetize.289069

36.84%

K7 AntiVirus

Unwanted-Program

31.58%

Kaspersky

not-a-virus:AdWare.Win32.Amonetize

31.58%

NANO AntiVirus

Trojan.Win32.Amonetize.dmnxbx, Trojan.Nsis.Amonetize.dnxabb

31.58%

Sophos

Amonetize, PUA 'Amonetize'

31.58%

Dr.Web

Trojan.Amonetize.12

31.58%

AVG

nbsp;

31.58%

avast!

Win32:PUP-gen [PUP], Win32:Malware-gen, Win32:Trojan-gen

26.32%

ESET NOD32

Win32/Amonetize.DG, Win32/Amonetize.DJ potentially unwanted

15.79%

Trend Micro House Call

Suspicious_GEN.F47V0128, Suspicious_GEN.F47V0127, Suspicious_GEN.F47V0129

15.79%

Comodo Security

Application.Win32.LoadMoney.IARS

15.79%

McAfee

Artemis!085E52E743A9, Artemis!B32827EEAE1D

10.53%

The domain downprov.dyna2download.com has been seen to resolve to the following 3 IP addresses.

54.72.130.67

ns1.ibspark.com

January 30, 2016

104.28.29.62

May 4, 2015

104.28.28.62

May 4, 2015

File downloads found at URLs served by downprov.dyna2download.com.

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../nds games roms_10924_i20461499_il345.exe (a866cddb0c782578dbea68b79b4fda11)

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../regarder cast away_10924_i20520609_il345.exe (eeda1c4a4c3057a5e432de59565aa0b9)

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../crack para activar adobe acrobat 9 pro extended_10924_i20330026_il345.exe (18010f1cf73aef74b3f503f37372b426)

0 / 68

http://downprov.dyna2download.com/p/.../free pro teaching XBMC.rar_10924_i20496520_il345.exe (e95c14c9acd2961151ca6575a13ebe11)

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../Descargar Links Protegidos_10924_i20527601_il345.exe (2b5a9d5f6ea8997139ca6fa4359dceea)

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../shake 3x dj antoine_10924_i20285152_il345.exe (13d7b785bfd2191869876c8f80b633f5)

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../ielts practice test reading_10924_i20252004_il345.exe (9ba613ad5f5a33904bb55364be5ad7cd)

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../Juvenile Justice An Introduction, 7th edition (PDF)_10924_i20566985_il345.exe (b3fe960a88be8de27c773be1324719b8)

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../PokeMMO Client.zip_10924_i20357344_il345.exe (569882c854d9a7ba43132de97dc1a4ae)

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../thomas de celano musique_10924_i20364306_il345.exe (1c30e3dca56896ef040a1f6dbfa70623)

1 / 68 (Adware)

http://downprov.dyna2download.com/p/.../Resonance Sound Vintage Movie Vocals MULTiFORMAT DYNAMiCS.rar_10924_i20468502_il345.exe (58f5c380ab8914130e9570167c8f66be)

11 / 68 (Adware)

http://downprov.dyna2download.com/p/.../sonic youth dirty zip_10924_i20242120_il345.exe (the count of monte cristo bluray 1080p dts hd x264 grym.rar_10924_i20239473_il345.exe)

9 / 68 (PUP)

http://downprov.dyna2download.com/p/.../honda crv 2007 service manual_10924_i23232297_il345.exe (full version games_10924_i23228536_il345.exe)

9 / 68 (PUP)

http://downprov.dyna2download.com/p/.../honda crv 2007 service manual_10924_i23231989_il345.exe (full version games_10924_i23228536_il345.exe)

10 / 68 (Adware)

http://downprov.dyna2download.com/p/.../Dokmee Professional v2.0.0.1 keygen by AGGRESSiON_10924_i20536841_il345.exe (dokmee professional v2.0.0.1 keygen by aggression_10924_i20536868_il345.exe)

10 / 68 (Adware)

http://downprov.dyna2download.com/p/.../Dokmee Professional v2.0.0.1 keygen by AGGRESSiON_10924_i20536718_il345.exe (dokmee professional v2.0.0.1 keygen by aggression_10924_i20536868_il345.exe)

5 / 68 (PUP)

http://downprov.dyna2download.com/p/.../mercedes benz s class brochure_10924_i22781159_il345.exe (dos attack program_10924_i22778486_il345.exe)

5 / 68 (PUP)

http://downprov.dyna2download.com/p/.../mercedes benz s class brochure_10924_i22780165_il345.exe (dos attack program_10924_i22778486_il345.exe)

5 / 68 (PUP)

http://downprov.dyna2download.com/p/.../mercedes benz s class brochure_10924_i22779898_il345.exe (dos attack program_10924_i22778486_il345.exe)

17 / 68 (Adware)

http://downprov.dyna2download.com/p/.../alice madness returns content pc_10924_i20525299_il345.exe (7ee96de28f9dc3f1c262190d2ee5be21)

10 / 68 (Adware)

http://downprov.dyna2download.com/p/.../Dokmee Professional v2.0.0.1 keygen by AGGRESSiON_10924_i20536868_il345.exe (6b7fd986380055781e10dc8e5b96859e)

5 / 68 (inconclusive)

http://downprov.dyna2download.com/p/.../ati radeon drivers window 7_10924_i23033195_il345.exe (085e52e743a9200c3c996bfa390e5525)

11 / 68 (Adware)

http://downprov.dyna2download.com/p/.../bmw map dvd australia_10924_i20554044_il345.exe (6fcea0364381b21cdd288418d45a3835)

11 / 68 (Adware)

http://downprov.dyna2download.com/p/.../drivers for belkin wireless adapter f5d8053_10924_i20512147_il345.exe (e0fab4ed36a8612df501819bfa3b4ba9)

12 / 68 (Adware)

http://downprov.dyna2download.com/p/.../atlas of neurosurgical techniques brain_10924_i20198877_il345.exe (0f9e512c8143c56fed05b8d6aa228ced)

The following 142 files have been seen to comunicate with downprov.dyna2download.com in live environments.

TCP » 54.72.130.67:80

simplefilesupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80

yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80

uninstall12590625.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80

uninstall5322109.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80

yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80

uninstall190602.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80

yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80

googleupdate.exe

TCP » 54.72.130.67:80

browserserver.exe

TCP » 54.72.130.67:80

sm.exe (System Monitor)

TCP » 54.72.130.67:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.72.130.67:80

uninstall129231.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80

sfupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80

kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 54.72.130.67:80

TBNotifier.exe (Ask TBNotifier by APN)

TCP » 54.72.130.67:80

pepperzip.exe

TCP » 54.72.130.67:80

internetenhancer.exe (Internet Enhancer)

TCP » 54.72.130.67:80

ssn.exe (ssn)

TCP » 54.72.130.67:443

mintcast_updater_service.exe (AutomaticUpdater)

TCP » 54.72.130.67:80

yacqq.exe

Latest 20 of 154 files

URL:

http://downprov.dyna2download.com/

Google Analytics:

UA-48689684

Title:

“dyna2download.com”

Web server:

nginx

Related Domains

1freesoftwareonline.com

antivirus-gratuit.pro

anyras.com

app-mak.com

appapia.com

30 of 618 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.