» dw901.goforfiles.com
Overview
Analysis
IPs Addresses (1)
Downloads (2)
Related Domains (8)

dw901.goforfiles.com

Domain Information

Server location:

Illinois, United States (US)

ASN:

AS174 COGENT-174 - Cogent Communications,US

Root domain:

goforfiles.com

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.RighwayTechnologies, PUP.Via Advertising.RighwayT.Bundler (M)

100.00%

Dr.Web

Adware.Downware.4798

50.00%

Emsisoft Anti-Malware

Gen:Variant.Application.Bundler.29

50.00%

VIPRE Antivirus

Threat.4925438

50.00%

Lavasoft Ad-Aware

Gen:Variant.Application.Bundler.29

50.00%

F-Secure

Riskware.Gen:Variant.Application.Bundler

50.00%

ESET NOD32

Win32/ExpressDownloader.K potentially unwanted application

50.00%

Norman

Gen:Variant.Application.Bundler.29

50.00%

Sophos

PUA 'Go For Files'

50.00%

The domain dw901.goforfiles.com has been seen to resolve to the following IP address.

74.63.79.82

February 8, 2015

File downloads found at URLs served by dw901.goforfiles.com.

1 / 68 (Adware)

http://dw901.goforfiles.com/j5GtXnHEpkl/n6JZIcy5JiXavCt7sLAlee tKnW4jTY1rpx8VrWGP0mmgnRLv54NTbWZC13Liw5XgNYAVIRoHVvHYBUtn2JQPJ19WT6LLLJ6zS23ZjchuGYibvo4YUWuZzURoVA2WfoUYEP6GEdYx1MvE9MAQV/NH0di2wNYJI5PCibb61MihrcSOdv5Zzms/Uhos/olOK/lKji7tCsOvrg4AaT9MwauyCAfppcIOcXcORSL7QMVgtUPIoHVVbHVygj2qKsAtM//.../ReaJKuXn6F5GV zrojZ6OtFH g4Hw8vNwk (history_of_the_filipino_people_by_teodoro_agoncillo_read_online_ebook_zip_downloader.exe)

9 / 68 (Adware)

http://dw901.goforfiles.com/j5GoWHbZp01gzONNa8r3N32B5HMj Oh7LvHkfDy7lDF3qNhjEOHPK0emmTFPqq4KSuHGQUaSmA1QjZ4wTpFxFgPUIxQumWoQe8UrCy6LTushj2G6Jmh86jJ3c ouJkL8MypR8xFPSvQTelntEyV87UhuUMYef1rHH0dW8BRHfINYWCHE3Vk5hrQEf5G4CX/yvgV79qF5f773GzWu6SBcsft/.../sk2QOu89gQdPPbkHVg1RM2tBWRYmLXufVyw24tIpW5Zz7EePZqRnlPvpa5XW95Oxootv0a e7h2fj7g== (motinvfx.rar_downloader.exe)

Related Domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.