home

www.currenttowersclear.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
currenttowersclear.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

VIPRE Antivirus
Threat.4150696
100.00%

Dr.Web
Trojan.Swizzor.19587
100.00%

ESET NOD32
Win32/FusionCore.F potentially unwanted application
100.00%

Reason Heuristics
PUP.FusionCore.Bundle.ET (M)
100.00%

Norman
Gen:Variant.Mikey.30515
100.00%

The domain www.currenttowersclear.com has been seen to resolve to the following 8 IP addresses.

52.85.131.168
server-52-85-131-168.iad53.r.cloudfront.net
June 4, 2016

52.85.131.167
server-52-85-131-167.iad53.r.cloudfront.net
June 4, 2016

52.85.131.75
server-52-85-131-75.iad53.r.cloudfront.net
June 4, 2016

52.85.131.37
server-52-85-131-37.iad53.r.cloudfront.net
June 4, 2016

52.85.131.31
server-52-85-131-31.iad53.r.cloudfront.net
June 4, 2016

52.85.131.234
server-52-85-131-234.iad53.r.cloudfront.net
June 4, 2016

52.85.131.233
server-52-85-131-233.iad53.r.cloudfront.net
June 4, 2016

52.85.131.187
server-52-85-131-187.iad53.r.cloudfront.net
June 4, 2016

File downloads found at URLs served by www.currenttowersclear.com.

5 / 68      (PUP)
http://www.currenttowersclear.com/.../installer.exe  (897d19024dbdd90f91933a9abdce4a3b)

The following file have been seen to comunicate with www.currenttowersclear.com in live environments.

TCP » 52.85.131.233:443
instatime.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.