home

files4.safemirror4.com

Domain Information

Server location:
Florida, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
safemirror4.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.CBS, Threat.Tightrope.Bundler, PUP.CBS.WebInsta.Bundler (M)
100.00%

ESET NOD32
Win32/DownloadAdmin.G potentially unwanted application, Win32/DownloadAdmin.H potentially unwanted application
66.67%

Dr.Web
Adware.Downware.1159, Trojan.Vittalia.2
66.67%

avast!
Adware-BGE [PUP], Win32:DownloadAdmin-H [PUP]
66.67%

NANO AntiVirus
Riskware.Nsis.Downware.dlgjls, Riskware.Win32.Downware.djahkt
66.67%

Agnitum Outpost
PUA.Downware, Riskware.Agent
66.67%

VIPRE Antivirus
WebInstall, Threat.4150696
66.67%

MicroWorld eScan
Application.Bundler.KJ
33.33%

Malwarebytes
PUP.Optional.DownloadAdmin
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

F-Prot
W32/S-518b5669
33.33%

Total Defense
Win32/Tnega.IQCCUAC
33.33%

Trend Micro House Call
TROJ_GEN.F0C2C00C515
33.33%

Clam AntiVirus
Win.Adware.Downloadadmin
33.33%

Bitdefender
Application.Bundler.KJ
33.33%

The domain files4.safemirror4.com has been seen to resolve to the following 2 IP addresses.

23.62.6.66
a23-62-6-66.deploy.static.akamaitechnologies.com
March 9, 2015

23.62.6.59
a23-62-6-59.deploy.static.akamaitechnologies.com
March 9, 2015

File downloads found at URLs served by files4.safemirror4.com.

28 / 68    (Adware)
http://files4.safemirror4.com/download/.../dl?bc=1086440&pid=topvideosoft&brand=topvideosoft.com&s=new_source2&c=topdmsg&country=IN&cb=1616807118&filename=chrome-update.exe&productKey=pwhux3komm3645q6z3zvgdod6ug2bbpk&osName=Windows&osVersion=8&browserName=IE&browserVersion=7&zTmp=1  (system_chromupdateweb.exe)

1 / 68      (Adware)
http://files4.safemirror4.com/download/.../dl?bc=272664&pid=dlcom_sem&brand=Download.com&aid=redsn0wp&s=fivemill&c=SEMYAHOO&country=US&variation=&cb=1781823131&osName=Windows&osVersion=8.1&browserName=IE&browserVersion=11&zTmp=1  (redsn0w-setup.exe)

7 / 68      (Adware)
http://files4.safemirror4.com/download/.../dl?bc=79688&pid=dlcom_sem&brand=Download.com&aid=75173045_5865392577_47144062257&s=fivemill&c=SEM&country=US&variation=&cb=-714621802&osName=Windows&osVersion=7&browserName=IE&browserVersion=11&zTmp=1  (cpuz64bit-setup.exe)

The following 6 files have been seen to comunicate with files4.safemirror4.com in live environments.

TCP » 23.62.6.59:80
TWCApp.exe (The Weather Channel App by The Weather Channel)

TCP » 23.62.6.59:80
sidebar.exe (Windows Sidebar by Microsoft)

TCP » 23.62.6.59:80
spd.exe

TCP » 23.62.6.59:80
new_chrome.exe (Google Chrome by Google)

TCP » 23.62.6.66:80
comcastantispyservice.exe

TCP » 23.62.6.66:443
ekrn.exe (ESET Smart Security by ESET)

TCP » 23.62.6.66:80
spd.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.