home

www-squid.cluster11.fb-hosting-apps.com

PERFECT PRIVACY, LLC  (Proxy Registrant)

Domain Information

The domain www-squid.cluster11.fb-hosting-apps.com is registered by proxy through DOMAIN STOPOVER LLC and was originally registered in March of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network.
Registrar:
DOMAIN STOPOVER LLC

Server location:
Dublin City, Ireland (IE)

Create date:
Wednesday, March 23, 2016

Expires date:
Thursday, March 23, 2017

Updated date:
Wednesday, March 23, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
fb-hosting-apps.com

Whois:
6 fb-hosting-apps.com records

Scanner detections:
Detections  (93% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Ukra2006.u, PUP.Installer.Ukra2006.?, PUP.Installer.Ukra2006.w, PUP.Installer.Ukra2006.AA, PUP.Installer.Ukra2006.y, Threat.Win.Reputation.IMP, Adware.Amonetize.Installer.Installer.Meta (M), PUP.Amonetize.Ukra2006.Bundler (M), PUP.Amonetize (M)
97.73%

Malwarebytes
PUP.Optional.Amonetize
54.55%

ESET NOD32
Win32/Amonetize.BN (variant), Win32/Amonetize.BO (variant), Win32/Amonetize.BR (variant), Win32/Amonetize.BS (variant), Win32/Amonetize.BK (variant)
52.27%

AVG
Generic_r, Downloader.Generic14, Ukra
52.27%

Sophos
Amonetize, Generic PUA CL, Generic PUA KG, Generic PUA BB, Generic PUA BE, Generic PUA ME
50.00%

AhnLab V3 Security
PUP/Win32.Amonetize, Win32/Virut.F
47.73%

Baidu Antivirus
Adware.Win32.Amonetize, PUA.Win32.Amonetize
47.73%

Agnitum Outpost
PUA.Amonetize, Win32.Virut.AB.Gen
43.18%

McAfee
PUP-Amonetize, Artemis!CE357453C05F, W32/Virut.n.gen, Artemis!DD2FDC017F65, Artemis!9CCC071F93A4, Artemis!2C5B9FBE426D, PUP-FQT, Artemis!D144B373A76E, RDN/Generic.dx!df3
40.91%

NANO AntiVirus
Riskware.Win32.Amonetize.delxsa, Riskware.Win32.Amonetize.dffaha, Virus.Win32.Virut.hpeg, Riskware.Win32.Downware.dfqeij
40.91%

Avira AntiVirus
Adware/Amonetize.tzw, ADWARE/Adware.Gen, Adware/Amonetize.tzv, ADWARE/Adware.Gen4, ADWARE/Adware.Gen2
36.36%

K7 AntiVirus
Unwanted-Program , Virus , Trojan
36.36%

Panda Antivirus
Trj/Genetic.gen, W32/Sality.AO
34.09%

Dr.Web
Adware.Downware.8379, Win32.Virut.56, Adware.Downware.8564, Adware.Downware.8618, Adware.Downware.8655, Adware.Downware.8706
34.09%

Fortinet FortiGate
Riskware/Amonetize, W32/FakeAV.RQ!tr, Adware/Amonetize
34.09%

The domain www-squid.cluster11.fb-hosting-apps.com has been seen to resolve to the following 6 IP addresses.

185.53.177.10
July 17, 2016

54.72.9.51
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
May 31, 2016

185.53.179.9
April 4, 2016

54.72.130.67
ns1.ibspark.com
February 8, 2016

104.28.20.113
September 1, 2014

104.28.21.113
September 1, 2014

File downloads found at URLs served by www-squid.cluster11.fb-hosting-apps.com.

1 / 68      (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=cs 1.6 skini me_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-09-16T15:18:20.309154 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=cs 1.6 skini me&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-16T15:18:20.309154 00:00&parameter=cs 1.6 skini me&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-16T15:18:20.309154 00:00&parameter=cs 1.6 skini me&ti1=1405000&ti2=0&ti3=DD1_2014-09-16T15:18:20.309154 00:00  (cs 1.6 skini me__3039_i1314848029_il782792.exe)

0 / 68
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=john skelton artist_Downloader&instid[appsetupurl]=http://go.venturedownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-08-28T12:06:26.339861 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=john skelton artist&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-08-28T12:06:26.339861 00:00&parameter=john skelton artist&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-08-28T12:06:26.339861 00:00&parameter=john skelton artist&ti1=1460000&ti2=0&ti3=DD1_2014-08-28T12:06:26.339861 00:00  (john skelton artist__3038_i1232623763_il1928418.exe)

1 / 68      (Malware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=biochemistry book by satyanarayana pdf_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=2265000&ti2=0&ti3=DD1_2014-10-05T06:39:13.558033 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=biochemistry book by satyanarayana pdf&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=2265000&ti2=0&ti3=DD1_2014-10-05T06:39:13.558033 00:00&parameter=biochemistry book by satyanarayana pdf&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=2265000&ti2=0&ti3=DD1_2014-10-05T06:39:13.558033 00:00&parameter=biochemistry book by satyanarayana pdf&ti1=2265000&ti2=0&ti3=DD1_2014-10-05T06:39:13.558033 00:00  (biochemistry book by satyanarayana pdf__3039_i1357466580_il2130603.exe)

1 / 68      (Malware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=exhibition stand vector_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-09-30T10:52:26.449777 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=exhibition stand vector&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-30T10:52:26.449777 00:00&parameter=exhibition stand vector&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-30T10:52:26.449777 00:00&parameter=exhibition stand vector&ti1=1405000&ti2=0&ti3=DD1_2014-09-30T10:52:26.449777 00:00  (exhibition stand vector__3515_i1348409994_il514688.exe)

0 / 68
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=abecedario letra cursiva_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-09-10T18:06:51.465792 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=abecedario letra cursiva&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-10T18:06:51.465792 00:00&parameter=abecedario letra cursiva&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-10T18:06:51.465792 00:00&parameter=abecedario letra cursiva&ti1=1460000&ti2=0&ti3=DD1_2014-09-10T18:06:51.465792 00:00  (abecedario letra cursiva__3038_i1291797687_il1446897.exe)

1 / 68      (Malware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=knjige u elektronskom formatu_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-09-05T13:20:57.036657 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=knjige u elektronskom formatu&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-05T13:20:57.036657 00:00&parameter=knjige u elektronskom formatu&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-05T13:20:57.036657 00:00&parameter=knjige u elektronskom formatu&ti1=1500000&ti2=0&ti3=DD1_2014-09-05T13:20:57.036657 00:00  (knjige u elektronskom formatu__3516_i1267245948_il2398353.exe)

13 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=cheba djenet_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-09-04T18:53:44.420108 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=cheba djenet&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-04T18:53:44.420108 00:00&parameter=cheba djenet&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-04T18:53:44.420108 00:00&parameter=cheba djenet&ti1=1460000&ti2=0&ti3=DD1_2014-09-04T18:53:44.420108 00:00  (su podium v2 license key__3515_i1264194914_il2054183.exe)

10 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=apolinario mabini biography_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-09-25T03:39:59.665629 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=apolinario mabini biography&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-25T03:39:59.665629 00:00&parameter=apolinario mabini biography&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-25T03:39:59.665629 00:00&parameter=apolinario mabini biography&ti1=1460000&ti2=0&ti3=DD1_2014-09-25T03:39:59.665629 00:00  (telecharger film exam gratuit__3039_i1337663185_il1135775.exe)

2 / 68      (false positives)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=neo geo battle coliseum pc_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-10-11T19:21:48.847370 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=neo geo battle coliseum pc&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-11T19:21:48.847370 00:00&parameter=neo geo battle coliseum pc&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-10-11T19:21:48.847370 00:00&parameter=neo geo battle coliseum pc&ti1=1405000&ti2=0&ti3=DD1_2014-10-11T19:21:48.847370 00:00  (wrar420.exe)

2 / 68      (false positives)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=Transmisja HD na zywo ogladaj_Downloader&instid[appsetupurl]=http://go.bragdownload.com/getfast/download.cgi?9&ti1=1520000&ti2=5&ti3=2014-09-02T17:06:47.767576 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.bragdownload.com/d1/logo150x150.png&prefix=Transmisja HD na zywo ogladaj&instid[thankyoupage]=http://download.bragdownload.com/.../thank_you.php?ti1=1520000&ti2=5&ti3=2014-09-02T17:06:47.767576 00:00&parameter=Transmisja HD na zywo ogladaj&instid[interrupted]=http://download.bragdownload.com/.../interrupted.php?ti1=1520000&ti2=5&ti3=2014-09-02T17:06:47.767576 00:00&parameter=Transmisja HD na zywo ogladaj&ti1=1520000&ti2=5&ti3=2014-09-02T17:06:47.767576 00:00  (wrar420.exe)

21 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=prison break s02e17_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-09-03T21:46:51.711940 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=prison break s02e17&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-03T21:46:51.711940 00:00&parameter=prison break s02e17&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-03T21:46:51.711940 00:00&parameter=prison break s02e17&ti1=1405000&ti2=0&ti3=DD1_2014-09-03T21:46:51.711940 00:00  (super smash bros brawl rom dolphin__3516_i1260093830_il1537489.exe)

18 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=handbook of personality assessment_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-09-06T12:11:51.430243 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=handbook of personality assessment&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-06T12:11:51.430243 00:00&parameter=handbook of personality assessment&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-06T12:11:51.430243 00:00&parameter=handbook of personality assessment&ti1=1405000&ti2=0&ti3=DD1_2014-09-06T12:11:51.430243 00:00  (adult online tv player 2010 v4 0 0 excelente sintonizador__3515_i1271436317_il2829435.exe)

12 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=cours gratuit delf b2_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-09-22T19:09:57.192780 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=cours gratuit delf b2&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-22T19:09:57.192780 00:00&parameter=cours gratuit delf b2&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-22T19:09:57.192780 00:00&parameter=cours gratuit delf b2&ti1=1500000&ti2=0&ti3=DD1_2014-09-22T19:09:57.192780 00:00  (www-squid_cluster11_fb-hosting-apps_com)

1 / 68      (Malware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=entrainement au tcf gratuit_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-09-29T12:20:09.065032 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=entrainement au tcf gratuit&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-29T12:20:09.065032 00:00&parameter=entrainement au tcf gratuit&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-29T12:20:09.065032 00:00&parameter=entrainement au tcf gratuit&ti1=1500000&ti2=0&ti3=DD1_2014-09-29T12:20:09.065032 00:00  (entrainement au tcf gratuit__3515_i1346408224_il158627.exe)

1 / 68      (Malware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=operations research taha solutions_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-10-07T02:38:13.400200 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=operations research taha solutions&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-07T02:38:13.400200 00:00&parameter=operations research taha solutions&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-07T02:38:13.400200 00:00&parameter=operations research taha solutions&ti1=1500000&ti2=0&ti3=DD1_2014-10-07T02:38:13.400200 00:00  (staad pro tutorial book__3515_i1360599084_il544628.exe)

1 / 68      (Malware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=fifa street 4 for pc tpb_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-09T11:06:21.874263 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=fifa street 4 for pc tpb&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-09T11:06:21.874263 00:00&parameter=fifa street 4 for pc tpb&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-09T11:06:21.874263 00:00&parameter=fifa street 4 for pc tpb&ti1=1405000&ti2=2&ti3=DD1_2014-10-09T11:06:21.874263 00:00  (fifa street 4 for pc tpb__3515_i1364673367_il1782154.exe)

1 / 68      (Malware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=nedjma.dz web sms gratuit_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-10-03T01:28:53.636998 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=nedjma.dz web sms gratuit&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-03T01:28:53.636998 00:00&parameter=nedjma.dz web sms gratuit&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-03T01:28:53.636998 00:00&parameter=nedjma.dz web sms gratuit&ti1=1500000&ti2=0&ti3=DD1_2014-10-03T01:28:53.636998 00:00  (nedjma.dz web sms gratuit__3515_i1353670108_il1381320.exe)

13 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=sewing pattern drafting software_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-09-21T13:35:59.603330 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=sewing pattern drafting software&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-21T13:35:59.603330 00:00&parameter=sewing pattern drafting software&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-21T13:35:59.603330 00:00&parameter=sewing pattern drafting software&ti1=1405000&ti2=0&ti3=DD1_2014-09-21T13:35:59.603330 00:00  (peugeot 406 haynes manual__3038_i1330361247_il3024923.exe)

14 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=bilan previsionnel sci gratuit_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-09-18T02:03:52.556332 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=bilan previsionnel sci gratuit&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-18T02:03:52.556332 00:00&parameter=bilan previsionnel sci gratuit&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-18T02:03:52.556332 00:00&parameter=bilan previsionnel sci gratuit&ti1=1500000&ti2=0&ti3=DD1_2014-09-18T02:03:52.556332 00:00  (kotonoha no hana cd__3038_i1320714092_il1583278.exe)

1 / 68      (Malware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=new sky 1 student book_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-02T19:36:29.029973 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=new sky 1 student book&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-02T19:36:29.029973 00:00&parameter=new sky 1 student book&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-02T19:36:29.029973 00:00&parameter=new sky 1 student book&ti1=1405000&ti2=2&ti3=DD1_2014-10-02T19:36:29.029973 00:00  (new sky 1 student book__3039_i1353189398_il1308183.exe)

13 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=ascii art sms_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-09-04T16:28:39.974181 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=ascii art sms&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-04T16:28:39.974181 00:00&parameter=ascii art sms&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-04T16:28:39.974181 00:00&parameter=ascii art sms&ti1=1460000&ti2=0&ti3=DD1_2014-09-04T16:28:39.974181 00:00  (su podium v2 license key__3515_i1264194914_il2054183.exe)

13 / 68    (PUP)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=resident evil 3 no cd crack_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=1&ti3=DD1_2014-10-07T19:11:14.961861 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=resident evil 3 no cd crack&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=1&ti3=DD1_2014-10-07T19:11:14.961861 00:00&parameter=resident evil 3 no cd crack&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=1&ti3=DD1_2014-10-07T19:11:14.961861 00:00&parameter=resident evil 3 no cd crack&ti1=1500000&ti2=1&ti3=DD1_2014-10-07T19:11:14.961861 00:00  (neuro programmer 3 activation key__3038_i1361790428_il867221.exe)

25 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=kotler marketing management 13th edition_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-09-12T16:34:03.554921 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=kotler marketing management 13th edition&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-12T16:34:03.554921 00:00&parameter=kotler marketing management 13th edition&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-12T16:34:03.554921 00:00&parameter=kotler marketing management 13th edition&ti1=1405000&ti2=0&ti3=DD1_2014-09-12T16:34:03.554921 00:00  (wilcom decostudio e3__3039_i1299575208_il2426741.exe)

1 / 68      (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=jab comix ay papi 16_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-09-28T05:02:12.895560 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=jab comix ay papi 16&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-09-28T05:02:12.895560 00:00&parameter=jab comix ay papi 16&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-09-28T05:02:12.895560 00:00&parameter=jab comix ay papi 16&ti1=1405000&ti2=2&ti3=DD1_2014-09-28T05:02:12.895560 00:00  (jab comix ay papi 16__3516_i1343685548_il2226977.exe)

1 / 68      (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=iso 22000 standards pdf_Downloader&instid[appsetupurl]=http://go.venturedownload.com/getfast/download.cgi?9&ti1=1405000&ti2=3&ti3=DD1_2014-08-28T09:23:06.946479 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.venturedownload.com/d1/logo150x150.png&prefix=iso 22000 standards pdf&instid[thankyoupage]=http://download.venturedownload.com/.../thank_you.php?ti1=1405000&ti2=3&ti3=DD1_2014-08-28T09:23:06.946479 00:00&parameter=iso 22000 standards pdf&instid[interrupted]=http://download.venturedownload.com/.../interrupted.php?ti1=1405000&ti2=3&ti3=DD1_2014-08-28T09:23:06.946479 00:00&parameter=iso 22000 standards pdf&ti1=1405000&ti2=3&ti3=DD1_2014-08-28T09:23:06.946479 00:00  (iso 22000 standards pdf__3516_i1231986492_il1856366.exe)

10 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3039&instid[appname]=bomkai saree_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1460000&ti2=0&ti3=DD1_2014-09-22T12:44:54.222537 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=bomkai saree&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-22T12:44:54.222537 00:00&parameter=bomkai saree&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1460000&ti2=0&ti3=DD1_2014-09-22T12:44:54.222537 00:00&parameter=bomkai saree&ti1=1460000&ti2=0&ti3=DD1_2014-09-22T12:44:54.222537 00:00  (toshiba u3 launchpad software__3039_i1332382800_il118397.exe)

29 / 68    (PUP)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3516&instid[appname]=avocat gratuit mairie aulnay sous bois_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-10-02T13:44:59.505429 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=avocat gratuit mairie aulnay sous bois&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-02T13:44:59.505429 00:00&parameter=avocat gratuit mairie aulnay sous bois&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-10-02T13:44:59.505429 00:00&parameter=avocat gratuit mairie aulnay sous bois&ti1=1500000&ti2=0&ti3=DD1_2014-10-02T13:44:59.505429 00:00  (sales lead form template__3038_i1352633422_il1227804.exe)

37 / 68    (Adware)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=mathematics class 9 rd sharma_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=0&ti3=DD1_2014-09-14T12:07:17.565369 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=mathematics class 9 rd sharma&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-14T12:07:17.565369 00:00&parameter=mathematics class 9 rd sharma&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=0&ti3=DD1_2014-09-14T12:07:17.565369 00:00&parameter=mathematics class 9 rd sharma&ti1=1405000&ti2=0&ti3=DD1_2014-09-14T12:07:17.565369 00:00  (descargar links protegidos__3038_i1306542808_il3185271.exe)

8 / 68      (PUP)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3038&instid[appname]=latest biodata format for marriage_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1405000&ti2=2&ti3=DD1_2014-10-02T09:51:20.360512 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=latest biodata format for marriage&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-02T09:51:20.360512 00:00&parameter=latest biodata format for marriage&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1405000&ti2=2&ti3=DD1_2014-10-02T09:51:20.360512 00:00&parameter=latest biodata format for marriage&ti1=1405000&ti2=2&ti3=DD1_2014-10-02T09:51:20.360512 00:00  (mcat princeton review pdf__3515_i1352297154_il1176479.exe)

2 / 68      (false positives)
http://www-squid.cluster11.fb-hosting-apps.com/download.php?version=1.1.8.22&campid=3515&instid[appname]=jekyll and hyde together again_Downloader&instid[appsetupurl]=http://go.edgydownload.com/getfast/download.cgi?9&ti1=1500000&ti2=0&ti3=DD1_2014-09-09T16:20:15.158493 00:00&instid[cmdline]=/S /PERFORMINSTALL /NORUN&instid[appimageurl]=http://download.edgydownload.com/d1/logo150x150.png&prefix=jekyll and hyde together again&instid[thankyoupage]=http://download.edgydownload.com/.../thank_you.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-09T16:20:15.158493 00:00&parameter=jekyll and hyde together again&instid[interrupted]=http://download.edgydownload.com/.../interrupted.php?ti1=1500000&ti2=0&ti3=DD1_2014-09-09T16:20:15.158493 00:00&parameter=jekyll and hyde together again&ti1=1500000&ti2=0&ti3=DD1_2014-09-09T16:20:15.158493 00:00  (wrar420.exe)

 
Latest 30 of 277 download URLs

The following 348 files have been seen to comunicate with www-squid.cluster11.fb-hosting-apps.com in live environments.

TCP » 54.72.130.67:80
simplefilesupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.130.67:80
uninstall12590625.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.130.67:80
uninstall5322109.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
onedrvup.exe

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.130.67:80
uninstall190602.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80
1799877.exe

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
googleupdate.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80
charles.exe (by Apple)

TCP » 54.72.9.51:80
onedrv.exe

TCP » 54.72.130.67:80
browserserver.exe

 
Latest 20 of 373 files

URL:
http://www-squid.cluster11.fb-hosting-apps.com/

Title:
“fb-hosting-apps.com”

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.