home

eefs.ezdownloadpro.info

Domain Information

This domain is owned and operated by Rafael Leviev.
Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
ezdownloadpro.info

Registered by:
Rafael Leviev

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
100.00%

F-Secure
Gen:Variant.Adware.MPLug
100.00%

ESET NOD32
Win32/Adware.MultiPlug.FA application
100.00%

Lavasoft Ad-Aware
Gen:Variant.Adware.MPLug.35
100.00%

VIPRE Antivirus
Threat.5085665
100.00%

avast!
Win32:MultiPlug-WR [PUP]
100.00%

Dr.Web
Trojan.DownLoader12.35935
100.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.MPLug.35
100.00%

McAfee
Trojan.PWS-Zbot.gen.ep
100.00%

Sophos
PUA 'MultiPlug' (of type Adware)
100.00%

MicroWorld eScan
Gen:Variant.Adware.MPLug.35
100.00%

Malwarebytes
PUP.Optional.Unizeto
100.00%

Zillya! Antivirus
Adware.MultiPlug.Win32.225848
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

NANO AntiVirus
Riskware.Win32.MultiPlug.dosmod
100.00%

The domain eefs.ezdownloadpro.info has been seen to resolve to the following 2 IP addresses.

54.149.241.47
ec2-54-149-241-47.us-west-2.compute.amazonaws.com
May 15, 2015

54.69.228.231
ec2-54-69-228-231.us-west-2.compute.amazonaws.com
May 15, 2015

File downloads found at URLs served by eefs.ezdownloadpro.info.

25 / 68    (PUP)
http://eefs.ezdownloadpro.info/hp/?q=DwRrnbwiuHRPSurpnicV0NF R8NMZqGAR9ecdiovnA CsrmTlxCb Q6GQpcsmiQ5jE0AcvZytV2wQdfHlmJIukXhX6T5 lzx7KnxscGvsZJgZxzM xmNZTug4IwflnNYMe3S6c bEppmjhVPWQU2EgPu6fTBV1pAx7jw2wnobOLAZMJEDYAcwgCX2Sn8ztWgA3Oev5K77PxMoGzlRxTwzQnvLz/EdD26CPQJhZX69ash1hwJS7SaVOGQ8rf2uUSF8c93adp8/3iscj4UDSGx8Um7BCnChdk2OtYu zcQ2EDvpdOdA6OTEgYC1r7ddl2RAvfzSfg394D60Fqz3L378QhTJlmW28CQ3qL6Nd1gjiPazcMJKQcm4GLQi7VtmsA7y1cdfIwysQVm0R83t1oBylZszpwq7cpl uZCrdYyBrvj73qpkIgtfd/HG1LFv9/cKgkJo401FUvt548kmm9HKx/WL9lqz9YhBg8mAJNvH1CQNgGPpqpGP0Zg3llw/Y93akKTcWYBVykpdBjpaQG7ha44K8xLUafJ2DcUcAdBTtyUZBaKI1YL71duJSe8kv2pAaauIvgxsSc7U3HcwcgxK0KHN3B6IOqDr/.../Aa&external_id=1425391554816350724&uuid=LBF0Byo2SQ7j6J7xBkXN6FyeBXBPfSGO0QVuTFYCyIfbpuQcmiV53cePRMRjboksYrdzpRcQRltnd99cT4gKvvmBQHdC7rJOHPf7HnWnlzf18QBtFCHHRX7qBHd7VRpjifsKf3hATvEepy3bLE8qNzMI1ltsszt1gGM3tEREgZXJdJzAtw645FrMiddl8kmTUpUtarVeG9KpCqEy8aqY9llsfIXsI1L0nNhAybD3LTuvfOv7f1zylqEfd8UsWC4kxZKioRVDNOImCjO1iaIvjRMIlnKKTPbwss4C  (30.exe)

The following 3 files have been seen to comunicate with eefs.ezdownloadpro.info in live environments.

TCP » 54.149.241.47:80
papers please v1.0.41 setup.exe

TCP » 54.149.241.47:80
installer_game develop.exe

TCP » 54.69.228.231:80
download.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.