track.cmllk2.info

CashMyLinks

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Remove Malware from track.cmllk2.info - Powered by Reason Core Security
Registrar:
eNom, Inc.

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Google Safe Browsing:
malware

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SHLEMOONMEDIAINC.F, PUP.Installer.INSTALLDOTEXE.U, PUP.Installer.WARPINSTALL.y, PUP.Installer.WARPINSTALL.U, PUP.Installer.SecureInstall.P, PUP.Installer.FUSIONINSTALL.x, PUP.Installer.TINYINSTALLER.x, PUP.Installer.SystemApplet.DD, PUP.Installer.SafeDown.K, PUP.Installer.FileMonarch.P, PUP.Installer.WARPINSTALL.W, PUP.Adknowledge.FreeVirusSoft.Bundler (M), PUP.Adknowledge.TINYINSTALLER.Installer (M), PUP.SHLEMOONMEDIA (M), PUP.Adknowledge.INSTALLDOTEXE.Installer (M)
100.00%

Malwarebytes
PUP.Optional.OptimumInstaller.A, PUP.Optional.SafeInstall.A, PUP.Optional.OptimunInstaller, PUP.Optional.InstallIQ.A
61.11%

VIPRE Antivirus
Trojan.Win32.Generic, InstallIQ Installer, Threat.4778314, Threat.4150696
61.11%

AVG
AdPlugin, Generic_r, Adware Skodna.Generic.ASN, Adware Skodna.Generic.ARX, Adware AdPlugin, Adware AdPlugin.BIA, Skodna.Generic_r
61.11%

Sophos
iBryte Optimum Installer, InstallQ, DomainIQ pay-per install, iBryte Premium Installer
55.56%

NANO AntiVirus
Trojan.Win32.IBryte.cwpxbb, Riskware.Win32.Searcher.csnymk, Trojan.Win32.Buzus.cwizqg, Riskware.Win32.IBryte.csnqdp, Riskware.Win32.IBryte.daxcft
55.56%

Dr.Web
Trojan.Packed.26508, Adware.Downware.2512, Trojan.Packed.25374, Trojan.Packed.26551, Trojan.Packed.27351, Adware.iBryte.493
55.56%

Kaspersky
not-a-virus:Downloader.Win32.Agent, not-a-virus:Downloader.NSIS.Agent, not-a-virus:AdWare.Win32.iBryte
50.00%

Comodo Security
Application.Win32.IBryte.X, Application.Win32.Ibryte.EDF, Application.Win32.Adware.iBryte.BJ, TrojWare.Win32.IBryte.AE, Application.Win32.InstallIQ.B
50.00%

K7 Gateway Antivirus
Unwanted-Program , Adware , Trojan
44.44%

Avira AntiVirus
SPR/Dldr.Agent.bkfx.1, ADWARE/Adware.Gen7, Adware/iBryte.bxou, Adware/iBryte.bxop, Adware/iBryte.bxoq, APPL/InstallIQ.Gen4
44.44%

K7 AntiVirus
Unwanted-Program , Adware
44.44%

Vba32 AntiVirus
Downloader.Agent, SScope.Malware-Cryptor.iBryte, AdWare.iBryte, suspected of Trojan.Downloader.gen.h
38.89%

G Data
Win32.Application.PremiumInstaller, Gen:Variant.Application.Bundler.OptimumInstaller, Win32.Adware.IBryte, Application.Downloader.TM
38.89%

AhnLab V3 Security
PUP/Win32.IBryte, Trojan/Win32.Generic, PUP/Win32.Downloader, PUP/Win32.SafeInstaller
38.89%

The domain track.cmllk2.info has been seen to resolve to the following 20 IP addresses.

ec2-54-208-254-134.compute-1.amazonaws.com
February 12, 2016

ec2-52-73-156-129.compute-1.amazonaws.com
February 12, 2016

ec2-52-72-251-195.compute-1.amazonaws.com
February 10, 2016

ec2-52-72-181-246.compute-1.amazonaws.com
February 10, 2016

ec2-54-172-73-48.compute-1.amazonaws.com
January 28, 2016

ec2-52-20-106-232.compute-1.amazonaws.com
January 28, 2016

ec2-107-23-100-205.compute-1.amazonaws.com
July 12, 2015

ec2-54-173-193-7.compute-1.amazonaws.com
July 12, 2015

ec2-54-86-172-158.compute-1.amazonaws.com
July 12, 2015

ec2-54-241-186-17.us-west-1.compute.amazonaws.com
October 20, 2014

ec2-54-183-158-170.us-west-1.compute.amazonaws.com
October 20, 2014

ec2-54-183-42-248.us-west-1.compute.amazonaws.com
September 7, 2014

ec2-107-23-142-44.compute-1.amazonaws.com
May 15, 2014

ec2-107-21-52-90.compute-1.amazonaws.com
May 15, 2014

ec2-107-23-165-131.compute-1.amazonaws.com
May 15, 2014

ec2-54-241-149-139.us-west-1.compute.amazonaws.com
May 1, 2014

ec2-54-246-131-227.eu-west-1.compute.amazonaws.com
April 20, 2014

ec2-54-229-12-122.eu-west-1.compute.amazonaws.com
April 20, 2014

ec2-50-18-211-52.us-west-1.compute.amazonaws.com
February 24, 2014

ec2-54-246-131-211.eu-west-1.compute.amazonaws.com
January 6, 2014

File downloads found at URLs served by track.cmllk2.info.

1 / 68      (Adware)
http://track.cmllk2.info/SHuo  (fraps-3599-cracked.exe)

28 / 68    (Adware)

9 / 68      (Adware)

16 / 68    (Adware)

26 / 68    (Adware)

19 / 68    (Adware)

18 / 68    (Adware)

25 / 68    (Adware)
http://track.cmllk2.info/.../64bit ENGLISH Crack  (microsoft-windows-7-ultimate-32bit-64bit-english---crack.exe)

The following 6 files have been seen to comunicate with track.cmllk2.info in live environments.

URL:
http://track.cmllk2.info/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.7.9

Remove Malware from track.cmllk2.info - Powered by Reason Core Security