oth.files-download-41.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain oth.files-download-41.com is registered by proxy through GODADDY.COM, LLC and was originally registered in October of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrar:
GODADDY.COM, LLC

Server location:
Arizona, United States (US)

Create date:
Tuesday, October 14, 2014

Expires date:
Friday, October 14, 2016

Updated date:
Monday, October 19, 2015

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MaxigetLimited.T, PUP.MaxigetLimited.l, PUP.LuftixLimited.G, PUP.New IT Limited.Maxiget (M), PUP.Luftix (M), PUP.New IT Limited.Maxiget.Bundler (M), PUP.New IT Limited.MGSoftware.Bundler (M), PUP.New IT Limited.MGSoftwa (M), PUP.New IT Limited.MGSoftwa.Bundler (M), PUP (M), PUP.New IT Limited (M)
100.00%

ESET NOD32
Win32/4Shared.Z potentially unwanted application, Win32/4Shared.AC potentially unwanted application, Win32/4Shared.AE potentially unwanted application
12.00%

Avira AntiVirus
APPL/Downloader.Gen4, TR/Agent.84000, TR/Agent.41392, APPL/Maxiget.36864, APPL/Downloader.Gen8
12.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, Trojan.Badur, Downloader.AdLoad
12.00%

Panda Antivirus
Trj/Genetic.gen, Trj/Downloader.WKR
12.00%

Kaspersky
not-a-virus:AdWare.Win32.Agent, Trojan.Win32.Badur, not-a-virus:Downloader.Win32.Agent, not-a-virus:Downloader.Win32.AdLoad
12.00%

VIPRE Antivirus
Threat.4150696
12.00%

Dr.Web
Adware.Downware.9045, Trojan.DownLoader11.47023, Trojan.DownLoader11.50017, Adware.Downware.10668, Adware.Downware.9959
12.00%

McAfee
4shared, Program.4shared
12.00%

NANO AntiVirus
Riskware.Win32.ArchSMS.dipmvj, Trojan.Win32.Badur.djjutj, Trojan.Win32.Badur.djxstg, Trojan.Win32.AdLoad.dgahty
12.00%

Agnitum Outpost
PUA.4Shared, PUA.Downloader
12.00%

G Data
Win32.Application.4Shared, Gen:Variant.Adware.Strictor.70439, Gen:Variant.Strictor.71861, Win32.Application.4shared
12.00%

K7 AntiVirus
Unwanted-Program
10.00%

F-Prot
W32/A-63d5a2cf, W32/A-0f826759, W32/S-94f3ad35, W32/A-7a3dee67
10.00%

MicroWorld eScan
Gen:Variant.Graftor.163677, Gen:Variant.Adware.Strictor.70439, Gen:Variant.Strictor.71861
10.00%

The domain oth.files-download-41.com has been seen to resolve to the following 3 IP addresses.

ip-50-63-202-50.ip.secureserver.net
November 10, 2015

November 29, 2014

November 29, 2014

File downloads found at URLs served by oth.files-download-41.com.

1 / 68      (Adware)
https://oth.files-download-41.com/.../Update.exe  (a78b48c76014496e6af284b5ff65ee97)

1 / 68      (Adware)

1 / 68      (Adware)
https://oth.files-download-41.com/.../Cardreader.exe  (44e654fc88fe847fa2e7c49c5e9d6a7e)

1 / 68      (Adware)

1 / 68      (Adware)
https://oth.files-download-41.com/.../SaveAs.exe  (59ae9c0a23cf8f7703a0b5eba2536331)

1 / 68      (Adware)

1 / 68      (Adware)
http://oth.files-download-41.com/.../YYY.exe  (79b1c1ade2f0e256e5c314b55e8f89f3)

1 / 68      (Adware)

1 / 68      (Adware)
https://oth.files-download-41.com/.../ANNMM6A.part1.exe  (c7aa1ddb8577e4f20f77b596cbd8f286)

1 / 68      (Adware)
https://oth.files-download-41.com/.../ANNMM6A.part2.exe  (f83a97386e0578340e4269a66d51493f)

1 / 68      (Adware)
https://oth.files-download-41.com/.../ANNMM6A.part3.exe  (1c6ab526ecaf40a2622c75a300b8994e)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
https://oth.files-download-41.com/.../If.I.Stay.part6.exe  (e1f46b7fdecbcd39ea853c411193d7c6)

1 / 68      (Adware)

1 / 68      (Adware)
https://oth.files-download-41.com/.../Jinn.part04.exe  (029d7156bc643e81122356ddfef9ec08)

1 / 68      (Adware)
https://oth.files-download-41.com/.../7_only.part1.exe  (d824d58cf33d86aeb6aab357c9517586)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
https://oth.files-download-41.com/.../PC-A.exe  (c4622d9f14be59fd3a1c8e1760e3838f)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
http://oth.files-download-41.com/.../wihlist-insert.exe  (9430b2863505d1e91e2a37a96a2bcb30)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
https://oth.files-download-41.com/.../17654.exe  (096f11aa5bb0c1b93187d693f06d69ae)

1 / 68      (Adware)

25 / 68    (Adware)

22 / 68    (Adware)

The following 5 files have been seen to comunicate with oth.files-download-41.com in live environments.

URL:
http://oth.files-download-41.com/

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 4.0.30319)

30 of 44 related domains