home

www.efindfilles.co.il

Domain Information

Server location:
Northern Ireland, United Kingdom (GB)

Root domain:
efindfilles.co.il

The domain www.efindfilles.co.il has been seen to resolve to the following IP address.

92.242.140.21
unallocated.barefruit.co.uk
June 18, 2015

File downloads found at URLs served by www.efindfilles.co.il.

0 / 68
http://www.efindfilles.co.il/installgames.php?ID=79927  (games_79927.exe)

0 / 68
http://www.efindfilles.co.il/installgames.php?ID=90004  (games_90004.exe)

0 / 68
http://www.efindfilles.co.il/installgames.php?ID=79834  (games_79834.exe)

0 / 68
http://www.efindfilles.co.il/installgames.php?ID=91323  (games_91323.exe)

1 / 68
http://www.efindfilles.co.il/install.php?ID=80868  (download_80868.exe)

2 / 68      (inconclusive)
http://www.efindfilles.co.il/install.php?ID=81065  (download_81065.exe)

2 / 68      (inconclusive)
http://www.efindfilles.co.il/install.php?ID=81066  (download_81066.exe)

19 / 68    (PUP)
http://www.efindfilles.co.il/install.php?ID=80850  (download_80850.exe)

8 / 68      (Adware)
http://www.efindfilles.co.il/install.php?ID=81064&paramID=1  (download_81064.exe)

The following 230 files have been seen to comunicate with www.efindfilles.co.il in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

TCP » 92.242.140.21:1866
jutched.exe

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
masterupdater.exe

TCP » 92.242.140.21:80
pricemeterexpress.crx

TCP » 92.242.140.21:80
chrome.crx

TCP » 92.242.140.21:80
app-center.crx

TCP » 92.242.140.21:80
ntp.crx

TCP » 92.242.140.21:80
3dayinvite.crx

TCP » 92.242.140.21:80
twitter.crx

TCP » 92.242.140.21:80
viewlater.crx

TCP » 92.242.140.21:80
rss.crx

TCP » 92.242.140.21:80
datapump.crx

 
Latest 20 of 230 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.