home

mediafilemastergroup.com

Domain Information

Server location:
Northern Ireland, United Kingdom (GB)

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

VIPRE Antivirus
Threat.4784453
100.00%

ESET NOD32
Win32/Adware.MediaFinder.D application
100.00%

avast!
Downloader-TQN [PUP]
100.00%

F-Secure
Riskware.Gen:Variant.Application.MediaFinder
100.00%

Lavasoft Ad-Aware
Gen:Variant.Application.MediaFinder.2
100.00%

Norman
Gen:Variant.Application.MediaFinder.2
100.00%

Sophos
PUA 'Install Core CJCS InvestService'
100.00%

MicroWorld eScan
Gen:Variant.Application.MediaFinder.2
100.00%

Zillya! Antivirus
Adware.MediaFinder.Win32.1
100.00%

K7 AntiVirus
Adware
100.00%

Bitdefender
Gen:Variant.Application.MediaFinder.2
100.00%

NANO AntiVirus
Riskware.Win32.Adware.dqakbs
100.00%

SUPERAntiSpyware
Adware.MediaFinder/Variant
100.00%

Comodo Security
Application.Win32.MediaFinder.B
100.00%

Dr.Web
Threat.Undefined
100.00%

The domain mediafilemastergroup.com has been seen to resolve to the following IP address.

92.242.140.21
unallocated.barefruit.co.uk
May 15, 2015

File downloads found at URLs served by mediafilemastergroup.com.

19 / 68    (PUP)
http://mediafilemastergroup.com/files/.../download.php?get&file_id=&advert=152&sub=5&site=262&filename=disney_up_soundtrack_midi.720bps.mkv&name=disney_up_soundtrack_midi.720bps.mkv&data=6plBdYcU6Xt8Tj4FelOg4lNU63PzNBKOoisA5HWRnmn62Rx7KcfWnwJXTmCQJe1bqtbcaOEwHmsY6yKyrAvOVr6XM3o9o6mBD4tMynfqrgY=&ip=99.49.109.198&country=US  (disney_up_soundtrack_midi.720bps_downloader.exe)

The following 230 files have been seen to comunicate with mediafilemastergroup.com in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

TCP » 92.242.140.21:80
ntp.crx

TCP » 92.242.140.21:80
3dayinvite.crx

TCP » 92.242.140.21:80
twitter.crx

TCP » 92.242.140.21:80
viewlater.crx

TCP » 92.242.140.21:80
rss.crx

TCP » 92.242.140.21:80
datapump.crx

 
Latest 20 of 230 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.