» mysweetsoftware2.com
Overview
Analysis
IPs Addresses (14)
Downloads (27)
Network (42)
Website Detail

mysweetsoftware2.com

NANCI NETTE

Domain Information

The domain mysweetsoftware2.com registered by NANCI NETTE was initially registered in December of 2014 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Rugby, England within United Kingdom which resides on the RIPE Network Coordination Centre network.

Registrant:

NANCI NETTE

Registrar:

ENOM, INC.

Server location:

England, United Kingdom (GB)

Create date:

Friday, December 12, 2014

Expires date:

Monday, December 12, 2016

Updated date:

Friday, January 22, 2016

ASN:

AS42831 UKSERVERS-AS UK Dedicated Servers Limited,GB

Whois:

2 mysweetsoftware2.com records

Google Safe Browsing:

unwanted

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Downloadius.Installer (M), PUP.AdGazelle.Bundler.Installer.Meta (M), PUP.InstallCore.FC.Installer (M), PUP.Installa.Installer (M), PUP.AdGazelle.Bundler (M), PUP.Downloadius (M), PUP.Outbrowse (M), PUP.IMALI (M)

100.00%

The domain mysweetsoftware2.com has been seen to resolve to the following 14 IP addresses.

May 18, 2016

May 18, 2016

May 18, 2016

May 17, 2016

February 26, 2016

February 25, 2016

February 23, 2016

February 22, 2016

February 15, 2016

February 12, 2016

no.rdns.ukservers.com

February 1, 2016

184.172.106.42

184.172.106.42-static.reverse.softlayer.com

January 28, 2016

104.28.14.77

July 1, 2015

104.28.15.77

July 1, 2015

File downloads found at URLs served by mysweetsoftware2.com.

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1121?lpm_id=89&filename=setup.exe (3b7035abafe0a6dc8ae03df1a79a0567)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../859?lpm_id=4 (setup.exe)

1 / 68 (PUP)

http://mysweetsoftware2.com/Download?lpm_id=49 (setup.exe)

1 / 68 (Adware)

http://mysweetsoftware2.com/Download?lpm_id=85 (setup.exe)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1075?lpm_id=15&filename=setup.exe (e45d145fb9178f2c397cbbb749c7f82f)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1071?lpm_id=15&filename=setup.exe (3d4e870da7680954da7afe7683fe36cd)

1 / 68 (Adware)

http://mysweetsoftware2.com/Download?lpm_id=63 (setup.exe)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1023?lpm_id=15&filename=setup.exe (7eead29ae6bdaa5fc401d62b4254ade7)

1 / 68 (PUP)

http://mysweetsoftware2.com/download/.../784?lpm_id=89&filename=setup.exe (971ecf3da625d3c23d18b5edea7d2014)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1050?lpm_id=15&filename=setup.exe (24e891b6b791fdbd4d4149d4d3d470a2)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../924?lpm_id=89&filename=setup.exe (d3a40176dc9b17ab9328a2472bb601a4)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../998?lpm_id=89&filename=setup.exe (671a7536ffd92585bee1cb4a9a04cd46)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1149?lpm_id=88 (setup.exe)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../854?lpm_id=49 (setup.exe)

1 / 68 (Adware)

http://mysweetsoftware2.com/Download?lpm_id=15 (setup.exe)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../892?lpm_id=9 (setup.exe)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../914?lpm_id=89&filename=setup.exe (83d59fd289c3603dc5dce2d3f5cb86fa)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1149?lpm_id=15&filename=setup.exe (9c240d82a5828d8715fb42b2752bf2c3)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../994?lpm_id=9 (setup.exe)

1 / 68 (PUP)

http://mysweetsoftware2.com/download/.../765?lpm_id=4 (setup.exe)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1003?lpm_id=15&filename=setup.exe (0c2e8fbda7f357b182f2690b045ddcf6)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1052?lpm_id=89&filename=setup.exe (5a9ac52b44c8cbe8eb4655e3d3aa5f86)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../978?lpm_id=89&filename=setup.exe (f20913e285d347b6c63dcfd5a37db8c8)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../1008?lpm_id=15&filename=setup.exe (b80dae642a221f5f4a9f738c0fabaed0)

0 / 68

http://mysweetsoftware2.com/download/.../1031?lpm_id=15&filename=setup.exe (f0e6b8abecbe75211f779f368653156b)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../859?lpm_id=15&filename=setup.exe (c8dc94fd0fd75030ae4bb0a56d762efc)

1 / 68 (Adware)

http://mysweetsoftware2.com/download/.../814?lpm_id=9 (setup.exe)

The following 42 files have been seen to comunicate with mysweetsoftware2.com in live environments.

TCP » 184.172.106.42:13

AutoPico.exe (AutoPico)

TCP » 184.172.106.42:80

FoodBuzzUpdate.exe (ToolbarUpdater by FoodBuzz)

TCP » 184.172.106.42:80

alg.exe (CPAX20 by SornSoft)

TCP » 94.229.72.116:80

FoodBuzzUpdate.exe (ToolbarUpdater by FoodBuzz)

TCP » 184.172.106.42:80

A-Trainer.exe (Advance Trainer by HackMew Productions)

TCP » 94.229.72.116:80

alg.exe (CPAX20 by SornSoft)

TCP » 184.172.106.42:80

UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.172.106.42:13

AutoPico.exe (AutoPico)

TCP » 184.172.106.42:443

WebCakeDesktop.exe (Desktop by Bake Cake)

TCP » 94.229.72.116:80

A-Trainer.exe (Advance Trainer by HackMew Productions)

TCP » 184.172.106.42:80

Updater.exe (Updater)

TCP » 184.172.106.42:13

AutoPico.exe (AutoPico)

TCP » 184.172.106.42:80

groupmanager.exe

TCP » 184.172.106.42:13

Service_KMS.exe (Service_KMS)

TCP » 184.172.106.42:80

JRunner.exe (J-Runner by Mama's Little Bakery)

TCP » 184.172.106.42:13

AutoPico.exe (AutoPico)

TCP » 184.172.106.42:443

WebCakeDesktop.exe (WebCake Desktop by WebCake)

TCP » 184.172.106.42:443

crossbrowse.exe (Crossbrowse)

TCP » 184.172.106.42:443

WebCakeDesktop.exe (WebCake Desktop by WebCake)

TCP » 184.172.106.42:13

AutoPico.exe (AutoPico)

Latest 20 of 62 files

URL:

http://mysweetsoftware2.com/

Title:

“mysweetsoftware2.com -&nbspThis website is for sale! -&nbspmysweetsoftware2 Resources and Information.”

Description:

“This”

Web server:

Apache (PHP/5.3.3-7+squeeze28)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.