inst.vertitechnologygroup.com

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain inst.vertitechnologygroup.com is registered by proxy through Network Solutions, LLC and was originally registered in October of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Remove Malware from inst.vertitechnologygroup.com - Powered by Reason Core Security
Registrar:
Network Solutions, LLC

Server location:
Virginia, United States (US)

Create date:
Monday, October 10, 2011

Expires date:
Tuesday, October 10, 2017

Updated date:
Tuesday, January 07, 2014

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.VertiTechnologyGroup.Y, PUP.VertiTechnologyGroup.g, PUP.VertiTechnologyGroup.d, PUP.VertiTechnologyGroup.EE, PUP.VertiTechnologyGroup.j, PUP.Verti.IgnitionInstaller (M), PUP.Verti.VertiTechnologyGroup.Bundler (M)
100.00%

VIPRE Antivirus
Rocketfuel Installer, Threat.4790114, Adware.InstallCore
76.47%

avast!
Win32:Adware-BGF [PUP], Win32:PUP-gen [PUP], Win32:Installer-I [PUP]
64.71%

ESET NOD32
Win32/Verti (variant)
64.71%

Malwarebytes
PUP.Optional.RocketFuel.A, PUP.Optional.Verti, PUP.Optional.BundleInstaller.A, PUP.Optional.InstallCore
44.12%

Trend Micro House Call
TROJ_GEN.F47V1210, TROJ_GEN.F47V1211, TROJ_GEN.F47V0110, TROJ_GEN.F47V1121, TROJ_GEN.F47V1115, Suspicious_GEN.F47V0530, TROJ_GEN.F47V1117
26.47%

McAfee Web Gateway
Artemis!C3AA6D895EBE, Artemis!47DECCF6F4E8, Artemis!07DC8B119C49, Artemis!D9F15C697F70, Artemis!5DB22AB365F5, Artemis!E003737F3496
26.47%

Bkav FE
W32.Clod11b.Trojan, W32.Clodf37.Trojan, W32.Clodbf7.Trojan, W32.Clod628.Trojan, W32.Clod8be.Trojan, W32.Clodc3f.Trojan, W32.Clodbe9.Trojan
23.53%

McAfee
Artemis!C3AA6D895EBE, Artemis!47DECCF6F4E8, Artemis!07DC8B119C49, Artemis!D9F15C697F70, Artemis!5DB22AB365F5, Artemis!E003737F3496, Artemis!FA068E1A9C33
23.53%

K7 Gateway Antivirus
Unwanted-Program , Trojan , Adware
20.59%

K7 AntiVirus
Unwanted-Program , Trojan , Adware
20.59%

Dr.Web
Adware.Downware.1714, Adware.Downware.2070, Adware.Downware.1697, Adware.InstallCore.125, Adware.InstallCore.122
17.65%

herdProtect (fuzzy)
a variant of ecad31ab737499b60c7c2db98bcfab49fb908e8a, a variant of 4731704b8717918dea80ad6d410af3b9ab6021d8, a variant of dfc12056e8b6d5e51f75b56604b36d5677c8252b
17.65%

Agnitum Outpost
Adware.Verti, Riskware.Agent, PUA.InstallCore
17.65%

NANO AntiVirus
Riskware.Win32.Verti.crduqj, Riskware.Win32.Downware.dihkik, Riskware.Win32.InstallCore.dcnboo
14.71%

The domain inst.vertitechnologygroup.com has been seen to resolve to the following 8 IP addresses.

ec2-52-1-175-151.compute-1.amazonaws.com
May 3, 2015

ec2-52-0-164-105.compute-1.amazonaws.com
May 3, 2015

ec2-54-236-77-150.compute-1.amazonaws.com
June 9, 2014

ec2-54-236-175-104.compute-1.amazonaws.com
February 3, 2014

ec2-54-236-109-36.compute-1.amazonaws.com
January 25, 2014

ec2-54-209-99-6.compute-1.amazonaws.com
January 8, 2014

ec2-107-23-246-214.compute-1.amazonaws.com
December 22, 2013

July 23, 2013

File downloads found at URLs served by inst.vertitechnologygroup.com.

1 / 68      (Adware)

1 / 68      (Adware)

5 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/504/42/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

7 / 68      (Adware)

2 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/1739/1183/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

5 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/170/56/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

1 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/29/498/29/.../  (blinkxbeat_rocketfuelinstaller.exe)

4 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/29/2460/29/.../  (blinkxbeat_rocketfuelinstaller.exe)

23 / 68    (Adware)

6 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/504/42/.../  (MediaPlayerClassic_RocketFuelInstaller.exe)

23 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/45/14507/81/.../  (tinymediaplayer_rocketfuelinstaller.exe)

6 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/14404/42/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

12 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/42/14404/42/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

7 / 68      (Adware)

10 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/45/16074/5793/.../  (tinymediaplayer_rocketfuelinstaller.exe)

4 / 68      (Adware)

5 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/107/56/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

10 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/45/16074/5793/.../  (tinymediaplayer_rocketfuelinstaller.exe)

5 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/107/56/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

11 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/45/14505/45/.../  (tinymediaplayer_rocketfuelinstaller.exe)

1 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/43/630/63/.../  (pdfcreator_rocketfuelinstaller.exe)

12 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/45/14507/5794/.../  (tinymediaplayer_rocketfuelinstaller.exe)

1 / 68      (Adware)

2 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/209/42/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

5 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/170/56/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

1 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/359/16562/5819/.../  (fixcleanrepair_rocketfuelinstaller.exe)

1 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/14409/2126/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

5 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/21113/2449/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

12 / 68    (Adware)
http://inst.vertitechnologygroup.com/dl/42/12897/42/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

2 / 68      (Adware)
http://inst.vertitechnologygroup.com/dl/42/1739/1183/.../  (mediaplayerclassic_rocketfuelinstaller.exe)

 
Latest 30 of 657 download URLs

The following 4 files have been seen to comunicate with inst.vertitechnologygroup.com in live environments.

URL:
http://inst.vertitechnologygroup.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.2.15 (PHP/5.3.3)

Remove Malware from inst.vertitechnologygroup.com - Powered by Reason Core Security