home

skypemoticonsdokument.info

Nikita Budko

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Redwood City, California within the United States which resides on the SKYE network.
Registrar:
Dynadot, LLC (R259-LRMS)

Server location:
California, United States (US)

ASN:
AS26008 NOMINUM-SKYE1 - SKYE

Whois:
1 skypemoticonsdokument.info record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.WebPick.Installer.N, Adware.WebPick.Installer (M)
100.00%

Quick Heal
Trojan.AntiFW.A5
50.00%

McAfee
PUP-FHQ!8CC99CDB2645
50.00%

Malwarebytes
PUP.Optional.Installex
50.00%

Zillya! Antivirus
Trojan.AntiFW.Win32.122
50.00%

NANO AntiVirus
Riskware.Win32.Downware.cukhmp
50.00%

avast!
Win32:InstalleRex-BG [PUP]
50.00%

Kaspersky
Trojan.Win32.AntiFW
50.00%

Agnitum Outpost
Trojan.AntiFW
50.00%

Comodo Security
Application.Win32.InstalleRex.KG
50.00%

Dr.Web
Adware.Downware.2108
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

Avira AntiVirus
Adware/InstallRex.duh
50.00%

Sophos
InstallRex
50.00%

AhnLab V3 Security
PUP/Win32.TSULoader
50.00%

The domain skypemoticonsdokument.info has been seen to resolve to the following IP address.

199.101.28.20
search.dnsassist.verizon.net
May 16, 2014

File downloads found at URLs served by skypemoticonsdokument.info.

1 / 68      (Adware)
http://skypemoticonsdokument.info/install.php?skype=1  (skypemoticons.exe)

22 / 68    (Adware)
http://skypemoticonsdokument.info/install.php?skype=1  (skypemoticons.exe)

The following 46 files have been seen to comunicate with skypemoticonsdokument.info in live environments.

TCP » 199.101.28.20:80
suggestions.crx

TCP » 199.101.28.20:80
firstuse.crx

TCP » 199.101.28.20:80
google-search.crx

TCP » 199.101.28.20:80
whylogin.crx

TCP » 199.101.28.20:80
facebook.crx

TCP » 199.101.28.20:80
rss.crx

TCP » 199.101.28.20:80
viewlater.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
datapump.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
ntp.crx

TCP » 199.101.28.20:80
app-center.crx

TCP » 199.101.28.20:80
twitter.crx

TCP » 199.101.28.20:80
composer.crx

TCP » 199.101.28.20:80
3dayinvite.crx

TCP » 199.101.28.20:80
datapump.crx

 
Latest 20 of 46 files

URL:
http://skypemoticonsdokument.info/

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.