home

mirror10.msgpluslive.net

Yuna Software

Domain Information

The domain mirror10.msgpluslive.net registered by Yuna Software was initially registered in November of 2005 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
GODADDY.COM, LLC

Server location:
New York, United States (US)

Create date:
Wednesday, November 9, 2005

Expires date:
Thursday, January 5, 2017

Updated date:
Thursday, December 25, 2014

Root domain:
msgpluslive.net

Whois:
3 msgpluslive.net records

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/MessengerPlus (variant), Win32/InstallCore (variant), Win32/MessengerPlus.A potentially unwanted (variant)
95.35%

Reason Heuristics
PUP.Optional.Installer.YunaSoftwareLimited.L, PUP.Optional.Installer.YunaSoftwareLimited.R, PUP.Optional.Installer.V, PUP.Optional.Installer.P, Win32.Generic.Installer.Meta, Win32.Generic.YunaSoftware.Installer.Meta
95.35%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
53.49%

McAfee
Artemis!20E1DC25DC4C, Artemis!6F84BD93A461, Artemis!DA9B0CB7FC2B, Artemis!8C9A37BC02E3, Artemis!A18D2E80051A, Artemis!09D9D5A2EF88, RDN/Generic PUP.x!clm, Artemis!351312D5A25C, Artemis!B8EEE0909EC7
25.58%

Trend Micro House Call
TROJ_GEN.F47V1203, TROJ_GEN.F47V0218, BKDR_BIFROSE.BMC, TROJ_GEN.F47V1122, TROJ_GEN.F47V0114, TROJ_GEN.F47V0526, TROJ_GEN.R02SH06HP14, Suspicious_GEN.F47V0121
23.26%

Baidu Antivirus
Trojan.Win32.MessengerPlus, PUA.Win32.MessengerPlus
16.28%

Dr.Web
Trojan.Lyrics.284, Trojan.Lyrics.844, Trojan.Inject1.28681
13.95%

AVG
MalSign.Resoft, Worm/Delf.KHX
11.63%

Emsisoft Anti-Malware
Trojan.Generic.9204806, Trojan.Agent.AROC, Worm.Generic.377772
11.63%

IKARUS anti.virus
AdWare.MessengerPlus, PUA.MessengerPlus
11.63%

Bkav FE
W32.Clodc5b.Trojan, W32.Clod985.Trojan, W32.HfsAdware
9.30%

avast!
Win32:Dropper-gen [Drp], Win32:Agent-AODJ [Trj]
6.98%

ESET NOD32
Win32/MessengerPlus.A potentially unwanted application, Win32/Delf.NRJ worm
6.98%

Qihoo 360 Security
HEUR/Malware.QVM06.Gen
4.65%

K7 AntiVirus
Trojan
4.65%

The domain mirror10.msgpluslive.net has been seen to resolve to the following 270 IP addresses.

52.84.125.187
server-52-84-125-187.iad16.r.cloudfront.net
August 24, 2016

52.84.125.110
server-52-84-125-110.iad16.r.cloudfront.net
August 24, 2016

52.84.125.80
server-52-84-125-80.iad16.r.cloudfront.net
August 24, 2016

52.84.125.51
server-52-84-125-51.iad16.r.cloudfront.net
August 24, 2016

52.84.125.15
server-52-84-125-15.iad16.r.cloudfront.net
August 24, 2016

52.84.125.218
server-52-84-125-218.iad16.r.cloudfront.net
August 24, 2016

52.85.131.24
server-52-85-131-24.iad53.r.cloudfront.net
July 18, 2016

52.85.131.181
server-52-85-131-181.iad53.r.cloudfront.net
July 18, 2016

52.85.131.162
server-52-85-131-162.iad53.r.cloudfront.net
July 18, 2016

52.85.131.86
server-52-85-131-86.iad53.r.cloudfront.net
July 18, 2016

52.85.131.44
server-52-85-131-44.iad53.r.cloudfront.net
July 18, 2016

52.85.131.39
server-52-85-131-39.iad53.r.cloudfront.net
July 18, 2016

52.85.131.201
server-52-85-131-201.iad53.r.cloudfront.net
July 5, 2016

52.85.131.121
server-52-85-131-121.iad53.r.cloudfront.net
July 5, 2016

52.85.131.67
server-52-85-131-67.iad53.r.cloudfront.net
July 5, 2016

52.85.131.243
server-52-85-131-243.iad53.r.cloudfront.net
July 5, 2016

52.85.131.229
server-52-85-131-229.iad53.r.cloudfront.net
July 5, 2016

52.85.131.225
server-52-85-131-225.iad53.r.cloudfront.net
July 5, 2016

52.85.131.219
server-52-85-131-219.iad53.r.cloudfront.net
July 5, 2016

52.84.125.120
server-52-84-125-120.iad16.r.cloudfront.net
July 5, 2016

52.84.125.32
server-52-84-125-32.iad16.r.cloudfront.net
July 5, 2016

52.84.125.19
server-52-84-125-19.iad16.r.cloudfront.net
July 5, 2016

52.84.125.198
server-52-84-125-198.iad16.r.cloudfront.net
July 5, 2016

52.84.125.188
server-52-84-125-188.iad16.r.cloudfront.net
July 5, 2016

52.84.125.150
server-52-84-125-150.iad16.r.cloudfront.net
July 5, 2016

52.84.125.142
server-52-84-125-142.iad16.r.cloudfront.net
July 5, 2016

52.85.131.228
server-52-85-131-228.iad53.r.cloudfront.net
June 20, 2016

52.85.131.214
server-52-85-131-214.iad53.r.cloudfront.net
June 20, 2016

52.85.131.198
server-52-85-131-198.iad53.r.cloudfront.net
June 20, 2016

52.85.131.172
server-52-85-131-172.iad53.r.cloudfront.net
June 20, 2016

 
Showing 30 of 270 IP Addresses

File downloads found at URLs served by mirror10.msgpluslive.net.

9 / 68      (PUP)
http://mirror10.msgpluslive.net/20110907/.../Setup-MsgPlus-510.exe  (e5c15d67d1277ff3fd7f9c68b9678753)

2 / 68      (PUP)
http://mirror10.msgpluslive.net/20111016/.../Setup-MsgPlus-510.exe  (update_6b04.exe)

1 / 68      (PUP)
http://mirror10.msgpluslive.net/20110815/.../Setup-MsgPlus-503.exe  (bb5572b6c5210880128c4fcdebf22a97)

2 / 68      (PUP)
http://mirror10.msgpluslive.net/20110208/.../Setup-MsgPlus-500.exe  (update_a413.exe)

10 / 68    (Malware)
http://mirror10.msgpluslive.net/Plus4Skype/20130303/.../Setup-PlusForSkype-1.8.exe  (c0d84683b9ded87b60eaa9fe8d380a14)

3 / 68      (PUP)
http://mirror10.msgpluslive.net/20111016/.../Setup-MsgPlus-511.exe  (update_0bb4.exe)

9 / 68      (PUP)
http://mirror10.msgpluslive.net/20111016/.../Setup-MsgPlus-510.exe  (e5c15d67d1277ff3fd7f9c68b9678753)

2 / 68      (PUP)
http://mirror10.msgpluslive.net/20101012/.../MsgPlusLive-490.exe  (8488ad6ed542f9f78de746e12f7db4e7)

4 / 68      (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20130210/.../Setup-PlusForSkype-1.5.exe  (setup-msgplus-600.exe)

6 / 68      (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20121011/.../Setup-PlusForSkype-lp1.5.exe  (a18d2e80051aba1d975ba0178bed7003)

2 / 68      (PUP)
http://mirror10.msgpluslive.net/20120927/.../Setup-MsgPlus-600.exe  (8740edb3cbb1f6e158b11838b8a0bfa2)

3 / 68      (PUP)
http://mirror10.msgpluslive.net/20110907/.../Setup-MsgPlus-510.exe  (update_30f3.exe)

5 / 68      (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20150121/.../Setup-PlusForSkype-3.0.exe  (setup-plusforskype-3.0_ch.exe)

2 / 68      (PUP)
http://mirror10.msgpluslive.net/20110531/.../Setup-MsgPlus-502.exe  (396a8428e4b36e488d8806ed019ae68f)

5 / 68      (PUP)
http://mirror10.msgpluslive.net/20101012/.../MsgPlusLive-490.exe  (ff2c8baa37f6f12b72adb333d7d5265f)

5 / 68      (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20130702/.../Setup-PlusForSkype-2.0_FF.exe  (update_4d1b.exe)

2 / 68      (PUP)
http://mirror10.msgpluslive.net/20110308/.../Setup-MsgPlus-501.exe  (update_a413.exe)

4 / 68      (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20120725/.../Setup-PlusForSkype-1.5.exe  (b964e480ef0d91e421a94bc30a6157fb)

0 / 68
http://mirror10.msgpluslive.net/20120326/.../Setup-MsgPlus-511.exe  (4b40a7157fb135af2d9b49a409520240)

2 / 68      (PUP)
http://mirror10.msgpluslive.net/20111016/.../Setup-MsgPlus-510.exe  (update_5bb1.exe)

0 / 68
http://mirror10.msgpluslive.net/MsgPlus-363.exe  (69141ed02e182eec409a2899d56421ed)

2 / 68      (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20130210/ADRDS/.../PlusForSkype_CH.exe  (plusforskype_ff.exe)

7 / 68      (PUP)
http://mirror10.msgpluslive.net/20120326/.../Setup-MsgPlus-511.exe  (b8eee0909ec710df60d32645f74b1597)

10 / 68    (PUP)
http://mirror10.msgpluslive.net/20111016/.../Setup-MsgPlus-510.exe  (98bec897dc8faaf0aa2347704645c977)

5 / 68      (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20150121/.../Setup-PlusForSkype-3.0_CH.exe  (5f991321062f0ea80fa1f05b3731ea26)

11 / 68    (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20140811/.../Setup-PlusForSkype-3.0_CH.exe  (6f2e442d5616a7fe48a50489f063aaf0)

2 / 68      (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20121011/.../Setup-PlusForSkype-1.5.exe  (668a0900fd22a0d194e443415ba7cb96)

5 / 68      (PUP)
http://mirror10.msgpluslive.net/20120725/.../Setup-MsgPlus-550.exe  (09d9d5a2ef88ab3749e78092a64634df)

7 / 68      (PUP)
http://mirror10.msgpluslive.net/20110531/.../Setup-MsgPlus-502.exe  (351312d5a25cea965c375ec930df3cd4)

5 / 68      (PUP)
http://mirror10.msgpluslive.net/Plus4Skype/20130702/.../Setup-PlusForSkype-2.0_CH.exe  (da9b0cb7fc2b6e7db8e163e6fa739e6c)

 
Latest 30 of 68 download URLs

The following 165 files have been seen to comunicate with mirror10.msgpluslive.net in live environments.

TCP » 54.192.55.67:80
interhop.exe

TCP » 54.192.55.163:80
csrcc.exe

TCP » 54.230.51.144:443
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 52.84.125.110:443
client.exe (ClientWrapper)

TCP » 52.85.142.174:80
Mobogenie.exe (Mobogenie by Mobogenie.com)

TCP » 52.85.142.223:80
browser.exe (Browser)

TCP » 52.85.131.30:443
browser.exe (Browser)

TCP » 52.84.125.207:443
browserairexec.exe (BrowserAir by Goobzo)

TCP » 52.85.142.33:443
clearscreenplayerbrowser.exe

TCP » 52.84.125.207:80
Client.exe

TCP » 54.230.53.135:443
wikithemes.exe

TCP » 52.85.142.223:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.223:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.84.125.162:80
browser.exe (speed browser by Smart Applications)

TCP » 54.192.55.163:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 52.85.142.29:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 54.230.37.65:443
jingling.exe

TCP » 52.84.125.80:80
beamrise.exe (Beamrise by The Beamrise Authors)

TCP » 52.84.125.150:80
se.exe

TCP » 52.84.125.187:80
browser.exe (Browser)

 
Latest 20 of 325 files

URL:
http://mirror10.msgpluslive.net/

Network:
Amazon Cloudfront

Web server:
AmazonS3

Facebook:
Shares:  1

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.