home

litema998.mysoc.cl

Domain Information

Server location:
Noord-Holland, Netherlands (NL)

ASN:
AS59711 FORTUNIX-AS Fortunix Networks L.P.,GB

Root domain:
mysoc.cl

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.CORLEONGROUP.W, PUP.InstallMonster.CORLEONGROUP (M), PUP.InstallMonster.CORLEONG (M), PUP.InstallMonster (M)
100.00%

VIPRE Antivirus
Threat.4845009
25.00%

avast!
Win32:InstallMonstr-DY [PUP]
25.00%

NANO AntiVirus
Trojan.Win32.InstallMonster.dbipfy
25.00%

Sophos
Install Monster
25.00%

Avira AntiVirus
APPL/InstallMonster.Gen
25.00%

G Data
Win32.Application.Installmonstr
25.00%

Vba32 AntiVirus
BScope.Downware.InstallMonstr
25.00%

Panda Antivirus
PUP/InstallMonstr
25.00%

Rising Antivirus
PE:Trojan.Agentb!6.211
25.00%

McAfee
Trojan.Artemis!6BFBD618CFC0
25.00%

herdProtect (fuzzy)
a variant of 2cd16566b88531823384f95981f5c21dd258ee15
25.00%

The domain litema998.mysoc.cl has been seen to resolve to the following IP address.

5.149.254.190
August 17, 2014

File downloads found at URLs served by litema998.mysoc.cl.

1 / 68      (Adware)
http://litema998.mysoc.cl/get_file/?sid=23&url=http://stream.get-tune.net/listen/285803211/131598957/1551028272/.../M_I_-_In_mintea_mea_esti_tu_(get-tune.net).mp3&name=M_I_-_In_mintea_mea_esti_tu_(get-tune.net).mp3&type=mp3&size=7885838  (m_i_-_in_mintea_mea_esti_tu_(get-tune.net).exe)

1 / 68      (Adware)
http://litema998.mysoc.cl/.../?j=c2lkPTUzNjQmdXJsPWh0dHAlM0ElMkYlMkZmaWxldGRzbXBzLmJpeiUyRmZhc3QlMkZuZXclMkZBZG9iZV9JbGx1c3RyYXRvcl9DUzYucmFyJm5hbWU9QWRvYmVfSWxsdXN0cmF0b3JfQ1M2JnR5cGU9JnNpemU9JnJuZDA9ODExNTc5NTY3NjEzMDg  (adobe_illustrator_cs6.exe)

1 / 68      (Adware)
http://litema998.mysoc.cl/get_file/?sid=23&url=http://stream.get-tune.net/listen/209935684/147259760/3154158610/.../CHechenskij_-_vorahh.2014_ahh.2014_(get-tune.net).mp3&name=CHechenskij_-_vorahh.2014_ahh.2014_(get-tune.net).mp3&type=mp3&size=4868199  (chechenskij_-_vorahh.2014_ahh.2014_(get-tune.net).exe)

12 / 68    (Adware)
http://litema998.mysoc.cl/.../?j=c2lkPTQ2MDgmdXJsPWh0dHAlM0ElMkYlMkZhc3NldDIudG9ycmVudGluby5jb20lMkZ0b3JyZW50cyUyRjAwMCUyRjY0MyUyRjExMCUyRjhiMzQ0MzM2MzdkZmRkNTJjNWVhMDU4MjdjM2Y2NDdjYzljNzI1MWUlMkZmLWUtYS1yLTMtJTVCdG9ycmVudGlubyU1RC50b3JyZW50JTNGMTMwODg4OTkzMCZuYW1lPWYtZS1hLXItMy0lNUJ0b3JyZW50aW5vJTVEJnR5cGU9dG9ycmVudCZzaXplPTE4MjIy  (f-e-a-r-3-[torrentino].exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.