home

www.cleanconecptdl.com

Communigal Communication Ltd

Domain Information

The domain www.cleanconecptdl.com registered by Communigal Communication Ltd was initially registered in February of 2016 through GAL COMMUNICATION (COMMUNIGAL) LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
GAL COMMUNICATION (COMMUNIGAL) LTD.

Server location:
Oregon, United States (US)

Create date:
Wednesday, February 10, 2016

Expires date:
Friday, February 10, 2017

Updated date:
Wednesday, February 10, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
cleanconecptdl.com

Whois:
1 cleanconecptdl.com record

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.installCore.BeijingQingchuanglianxiangTechnologyCo.Installer (M), PUP.installCore.BeijingQ.Installer (M)
93.75%

ESET NOD32
Win32/InstallCore.ADX.gen potentially unwanted application, Win32/Sality.NBA virus
50.00%

Avira AntiVirus
Adware/Purityscan.A.85
6.25%

Dr.Web
Win32.Sector.30
6.25%

F-Prot
W32/Sality.gen2
6.25%

Microsoft Security Essentials
Threat.Undefined
6.25%

F-Secure
Win32.Sality.3
6.25%

Emsisoft Anti-Malware
Win32.Sality
6.25%

avast!
Win32:SaliCode
6.25%

AVG
Win32/Sality
6.25%

McAfee
Trojan.Artemis!DC81366C1A09
6.25%

Kaspersky
Virus.Win32.Sality
6.25%

The domain www.cleanconecptdl.com has been seen to resolve to the following 11 IP addresses.

52.25.41.73
ec2-52-25-41-73.us-west-2.compute.amazonaws.com
May 22, 2016

52.24.26.116
ec2-52-24-26-116.us-west-2.compute.amazonaws.com
May 22, 2016

52.26.95.11
ec2-52-26-95-11.us-west-2.compute.amazonaws.com
April 20, 2016

54.148.57.212
ec2-54-148-57-212.us-west-2.compute.amazonaws.com
April 20, 2016

54.69.198.37
ec2-54-69-198-37.us-west-2.compute.amazonaws.com
April 20, 2016

52.25.23.136
ec2-52-25-23-136.us-west-2.compute.amazonaws.com
March 2, 2016

54.191.37.5
ec2-54-191-37-5.us-west-2.compute.amazonaws.com
March 2, 2016

54.69.11.66
ec2-54-69-11-66.us-west-2.compute.amazonaws.com
March 2, 2016

52.88.159.85
ec2-52-88-159-85.us-west-2.compute.amazonaws.com
March 2, 2016

52.35.10.15
ec2-52-35-10-15.us-west-2.compute.amazonaws.com
March 2, 2016

52.34.170.106
ec2-52-34-170-106.us-west-2.compute.amazonaws.com
March 2, 2016

File downloads found at URLs served by www.cleanconecptdl.com.

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=7pSWrNDY95uT3uqxQ11L6xks6Fq/sIkhTIyg0R9Zax8=&c=FagPhJ8QY9cokA9FYFWcUgX7GBuUDKi3JWo79VZYmCDjheZsdayNejWC75yPAPBmCiYm8 RnzgYl8H0aCFe8bM31CZH0/Xi1xfNsEtXAFqbD9jNbYzCm5CmK48AlUtA&downloadAs=ACADDWGtoPDFConverter.exe&fallback_url=http://.../  (e55377898495590dbdd19f3de8e12bd1)

10 / 68    (Infected)
http://www.cleanconecptdl.com/c?x=b2qx81an co qdBdiFqyKfIaMwH s4prb4fwsTFn1j8=&c=09gqc7Nc4Xl9Me9AIJz6YjJsY8eWe8AlzRRmNv 57y m1YFOl9ndVoVjVpMQsKXYj N23gS9ZEnUQjzwfy1QL3Qb0sw9aroR/jPt0tQ3qNDSvHX/9gv4kgtWuCnfSKIy&downloadAs=FreeSoundRecorder.exe&fallback_url=http://.../  (6b838260d66c391eaa5b28df1cbed000)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=Y8c5SZJSOboiNg3Rq0xFNGHnF9MQyWlVcJV2m3wLEJM=&c=MOGW2dvpQh0JwQvLM/9PGqHV9quVZCqRWFb91r6PlRLmjaBm5jBGJ6VqjcI18wTvU8 CVS2 tq2 nBa Z5upLORGlTPSxLNCl1ED6pm/IPpSds57luJb2ZW9e9r6VKJQ&downloadAs=AllFreeSoundRecorder.exe&fallback_url=http://www.downloadonic.com/allfreevideoconverter.com/.../AllFreeSoundRecorder_IS.exe  (icreinstall_allfreesoundrecorder.exe)

0 / 68
http://www.cleanconecptdl.com/c?x=cYSnRaA6XNCkHCnmF3rZqhfneEfp/SgPDcKbWDmX5D0=&c=KlTEFQ J/sIos50iOu S09j4Eqgdr8a4RrVUuJJjNGnVfN4Rknv3 O2 JghN9LwNzFzrRiEU9F77IomxmM1Nk8F0gfShMAWyeN4nFagxpOZ/dAR5kFwHws49eB/d88q0&downloadAs=FreeWiFiHotspot.exe&fallback_url=http://www.downloadonic.com/free-wifi-hotspot.com/.../FreeWiFiHotspot_IS.exe  (3b9409fcba0318e54bcc77962ab3dd6e)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=m36L/TGEIrBOnPunJniY5JH3PdpFVCAvLyeq MiGbPY=&c=ZR2w3d1xJMYQ2H8p2uIMqdHvw7nVPK5o9fJnRmbiYWcbe/NctkctcTaWmZ9tx8gjTbFsIWrsmFWRM022Iu7xsjHi/U0MhsDMhb2zjEfwjtMW33HEXCimCPtXs/9ikwKU&downloadAs=FreeVirtualHotspot.exe&fallback_url=http://.../  (08c03271b6011db88e711e8f7920b101)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=/RhtOM7rQu6Zitd1N7chHsp3IvDFrFXxsxHijOirw70=&c=genPkkQ6fRBFixcG1nCx3WbRwH0EON7VvclapsBRVCnNdiI6eWfHCXqcKCUCqhouV4k7QmlnasB9bG5A4tfo2pwKkMJCNp/LmHi9KBcxw4/MrnFNCjdpX/TVAXPDPj8K&downloadAs=FreeWiFiHotspot.exe&fallback_url=http://www.downloadonic.com/free-wifi-hotspot.com/.../FreeWiFiHotspot_IS.exe  (147bc92a601c0479b519aa9251d7a2a3)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=WYqP1XOQDLEH3KPsyBXgavLAD3NtCBHoB5uB06HlOCk=&c=owzTcI26LJel9V4JbC/8tcQH7KqxKYOxe5Nu6NJt6kxEf1VNi1C50tosJYriX0P/ysweC90oTJT9LoKGFe 5nryEk72DsBPfDxJ47dhDXAPS2epSC9MlKv/LL8vyFP6&downloadAs=FreeDVDRipperPlatinum.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeDVDRipperPlatinum_IS.exe  (e40dd7edebd7bd1f2f78164b4047b388)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=st6iwj2ZP2P3eVkuel45Us DXdWY 7dlRKvt4CQ7E90=&c=kkuth21Fyl3z5Fitu87QLK4wVexq0loEAkDd7qpHTYuu5bHZA oZDDCWlxKup0vzYEKbS27w3M oWygCQgwgOzrI230u7uhCmxN1vEZUG62vY2AG8Qn7hRImBFEZtg57&downloadAs=FreeDVDRipperPlatinum.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeDVDRipperPlatinum_IS.exe  (e40dd7edebd7bd1f2f78164b4047b388)

3 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=NeWgPEq6r5Iz4x9wGdkTQZTvaoK5xktv2m/b1Y9kpW8=&c=rK7nZ ko bsaCe8RFSRTTAgDvrh50RpGctqO6AUwh9YEGIfbq3VSo RhPrJ0SoR6KebOe79jAfppBFvy8h8v60opwXhNYhieljG6j0mD51Fi8I1OT4r7gi277b4coLli&downloadAs=MusicEditorFree.exe&fallback_url=http://www.downloadonic.com/music-editor.net/.../MusicEditorFree_IS.exe  (f012756e0324157d2ee1e0ee3fc1398b)

2 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=JO3dWbITN3e9u6diy0HZFVaOsLYIRLEycSb2UBVvfik=&c=/GC0YUGqqigbbwza3ujevtFCHdYLjnITxk76pUnHd1A5apt4YBzz4MUDIEE0tKCO4sibL71Okbe mRNVsO6HmAi UGmkusrNNhZL8TNBLQkIUciVQWhEWHx5n5LyIILb&downloadAs=PowerSoundEditorFree.exe&fallback_url=http://www.downloadonic.com/free-sound-editor.com/.../PowerSoundEditorFree_IS.exe  (c86e340d78b77fc1a3923b4cbcc473d4)

3 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=49ueTNGcLeCgxH qiKqGknvDRC2K0vo5D4BComUI0kg=&c=hmoYnPQMGjAHfFgED77rBPEUIEEqkuIES5LQz7PPE5o1j9zuwe0MMQ3 hV2i 9k9ybeMN5AWw54QNEp/zpBgcoSzd/YNvYxeyzwcUc/nD8l7aq02Zk6wJcyFJWpVsJec&downloadAs=MusicEditorFree.exe&fallback_url=http://www.downloadonic.com/music-editor.net/.../MusicEditorFree_IS.exe  (f012756e0324157d2ee1e0ee3fc1398b)

0 / 68
http://www.cleanconecptdl.com/c?x=Q2PdzmFWYXtwa5UDOIJOZWQTzhRb42GY97DZSMKHpMw=&c=fp4paQMjgeznq D 2t89X2HpN7MuWD wwgAujx6SL7HtP9y1m17 aDKcfSbfOX Ys15yFBBujALBWBly8kMDJXSHCxZz/u9x/1YU7EsTQpDvNcReWyyuzfsswReGunL8&downloadAs=MusicEditorFree.exe&fallback_url=http://www.downloadonic.com/music-editor.net/.../MusicEditorFree_IS.exe  (730d4576_stp.exe)

2 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=nE7QZQap6UGZUSUSbzRaBtF5yhqBM w8ABG6hFHJ/5M=&c=n6K8szUjPdFHhpRfOdzH8PxFJk0T452yRuIQWnCBVzoGOXcv68wp lq8KeS0ujdw5z5m6xPPRohmmA6h4hESnWkguSRe1hcNyfRNp1Ixd30j0opNiNEfpzwh00nTUHPX&downloadAs=PowerSoundEditorFree.exe&fallback_url=http://www.downloadonic.com/free-sound-editor.com/.../PowerSoundEditorFree_IS.exe  (c86e340d78b77fc1a3923b4cbcc473d4)

2 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=ajEGbkkSGAGR2yjkq/t2QjwkB8spmQot1KudhWlBQNI=&c=qnMzQsaVYuGQiuO8YsEd4u3/0XhaDDgvUJ1qy96y1wy2EceJewoJn51E2KGXM54OW/H/OEVS7GuzFgIrlYB2DCNufK4io0r76E3Z0qizISHciYRcPtw47yzSe01Shdm9&downloadAs=FreeShortcutRemover.exe&fallback_url=http://www.downloadonic.com/shortcutremover.com/.../FreeShortcutRemover_IS.exe  (4f728a69959091be687a33976188800f)

2 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=joVlXYZskUnU92pQs3JJVLbFjWN2CSbAhiReIWq/OEA=&c=3idFZuud3Uxs MlC4Y/1I1eskQiptMffvfnnMsrzJuXvuI4WN9Qt2VfF5VEhWAKeq3qNBxxJlK2H5Qp0w3M8lHqX2QxgcOUeeEPWbc2zW1sYooJp/WxPohz5pD0QgTIU&downloadAs=FreeCDDVDBurner.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeCDDVDBurner_IS.exe  (3b4f699835e8410a1589594b51946856)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=pjL2PQq3FEiADYauKVfbUdwatNsCTdmxlte/YqlcdL4=&c=q35k1 j5ag/EhIB9 PSMwGnyaYjyDUw0xfxILR8vunkSwfVcbYFd6tAFRSVrhb2lLUdchiolbuDm3 XWUXpCviPAS4inkCEKAblAbNUnoSomJvEIbavYpZdaCHJ/CGva&downloadAs=FreemoreMP3Joiner.exe&fallback_url=http://www.downloadonic.com/freemoresoft.com/.../FreemoreMP3Joiner_IS.exe  (c0ca0a0af93b9cd1ae51e7359b8779dc)

2 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=rmIvo3vpfntU0i95TAgBskUq3pHvZolFtpDTQ2psKQM=&c=s13 4FK2UC9EifUv2MaJH8ir pqiKAG4YsjCnEqKSw1s1zo7wu4HewsqFvZVkkF8yAXlVM wATR5/fVtVAlWvbSrUAlE42STDKjHrl7M7gsR/N8ifZsjJ1Jy9PlkmuGZ&downloadAs=FreeOCRtoWord.exe&fallback_url=http://www.downloadonic.com/ocrtoword.com/.../FreeOCRtoWord_IS.exe  (f603248e9f6e7eccdc3feec4d7568d26)

2 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=Xuv6Qn qd8i2h/sq7cZTL3mSBODaig4mw B oMdGMcE=&c=Zd4arjhOHGI/1NIi23x2Knoq5Vm2r8MoZwCkh4Td1A5XYF2CulR34cnNiqkhNomDHHvrQ0WKc1Kxw2bm8NjtbF9DcTg4dkeLfY3HjC/ZaYjDoy gZLp3VkjiaurMJSw4&downloadAs=MP3CutterJoinerFree.exe&fallback_url=http://www.downloadonic.com/freemp3cutterjoiner.com/.../MP3CutterJoinerFree_IS.exe  (d91cf3bece15a317391d3360a0865ffb)

2 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=iLpAbEx4iKti23Ho20DSPtQFf6ZFzxS6qbPe45GqA40=&c=QXMIzbI94XEVrkWynyoKdn2cCfebMEtmZ0aspWTBvzvBKr/S23uUfDmPq966ey9prC277YyOlkbXF41GNc9Wzpd4y5iS2K09kbPrFqMNd9u4ygqAhzo2sfv1q7mUAF4W&downloadAs=FreeSoundRecorder.exe&fallback_url=http://www.downloadonic.com/freeaudiovideosoft.com/.../FreeSoundRecorder_IS.exe  (freesoundrecorder_2.exe)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=wzCzjc79om83NSlwyXnovg1G//C dCeqdecgaYL/ns=&c=uQhQzSERtobvKoU/SPettPKRqMj/1r78gplGO o C5ZDDglIdgUGuWRlphATY/juFI8Ae08I7njUZMF5n0AvdQy4hUni8VD4WBFaSnaDFht0lIAVEyr7YTHXxjsMPE&downloadAs=FreeWiFiHotspot.exe&fallback_url=http://www.downloadonic.com/free-wifi-hotspot.com/.../FreeWiFiHotspot_IS.exe  (147bc92a601c0479b519aa9251d7a2a3)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=d9eq950b4r/xaovPjcWos0d7WkAiG26ZfsfnoUu7rWM=&c=o6a8lbCtXdaE6NioUjR2t3QPeWA 2zFZFgMMqS49wmqZb6vBn2GvzFiJ/iAM8IJzFwpJ2uia2FGepZ2 DRE2Uq3QVwLEi40YMMreesxYG6NNMPIcsMBY2TN2i5Z7/MxY&downloadAs=PCTuneUpSuite.exe&fallback_url=http://.../  (7a24252d95883445461f40131db0accb)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=6guBp jYcxYwwU5I7WbCEQVvIaCc5BF82nDYHnIbeS8=&c=PaotkzoRsIgmbX0AdmuXB7CUmHzbr23cmZZRI0FeAiNmKwV46MDF7S0gfDvVor9RcZYBX22i9Z7Q9UBkg8/KPZAzrk71KLK9I8xKJysupejlE2tFwE 7XH/ZHBQQ1De5&downloadAs=FreeWiFiHotspot.exe&fallback_url=http://www.downloadonic.com/free-wifi-hotspot.com/.../FreeWiFiHotspot_IS.exe  (147bc92a601c0479b519aa9251d7a2a3)

1 / 68      (PUP)
http://www.cleanconecptdl.com/c?x=bXjZ8PPEEdEth0x542jIG3wtZtJscqK1tAzu5 73Z9U=&c=qxF3MpzpAWjtDFBP7h /3u5jQPe84zC4iVpElcj5ooQd6jU1dQr6Ub9paqwIOue9At3I1aeOJm6aQxOD3DhMaXj/OhKGvPzz0EPwedtR4JjDmPb2L382zu5Chfb1MJ9d&downloadAs=FreeEasyAVIWMVMP4MPEGDIVXConverter.exe&fallback_url=http://www.downloadonic.com/freeease.net/.../FreeEasyAVIWMVMP4MPEGDIVXConverter_IS.exe  (c32610258a8e01c68e62ceee8758f6ae)

The following 6 files have been seen to comunicate with www.cleanconecptdl.com in live environments.

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
online-guardian-v2.0.9.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
036629fbd4864725737a8ba8fe7e8cd6.exe

TCP » 52.24.26.116:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 52.24.26.116:443
Proxomitron.exe (Proxomitron by Groom-A-Zebu (tm))

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.