www.express-files.com

Faglaro Enterprises Limited

Domain Information

The domain www.express-files.com registered by Faglaro Enterprises Limited was initially registered in December of 2011 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Remove Malware from www.express-files.com - Powered by Reason Core Security
Registrar:
INTERNET DOMAIN SERVICE BS CORP

Create date:
Tuesday, December 06, 2011

Expires date:
Tuesday, December 06, 2016

Updated date:
Saturday, December 12, 2015

ASN:
AS9498 BBIL-AP BHARTI Airtel Ltd.,IN

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.FaglaroEnterprisesLimited.L, PUP.FaglaroEnterprisesLimited.S, PUP.FaglaroEnterprisesLimited.J, PUP.FaglaroEnterprisesLimited.M, PUP.FaglaroEnterprisesLimited.Q
100.00%

Malwarebytes
PUP.Optional.ExpressFiles.A
94.12%

avast!
Win32:Downloader-TSH [PUP]
94.12%

Sophos
Express Files, PUA 'Express Files'
94.12%

VIPRE Antivirus
ExpressFiles Installer, Threat.4783941
94.12%

AVG
MalSign.Faglaro Enterprises Limited
94.12%

G Data
Win32.Application.ExpressFiles, Win32.Application.ExpressDownloader
94.12%

Rising Antivirus
PE:PUF.ExpressFiles!1.9E64
88.24%

McAfee
Artemis!1FBDCF9C1254, Artemis!F6D0AA29E5A1, Artemis!0AC7EE6F0F3B, PUP-FJJ!FD90B2D4980C, Artemis!21E11F84FA19, Artemis!3B7DBC48D072, Artemis!6DCDD6F0C665
82.35%

McAfee Web Gateway
Artemis!1FBDCF9C1254, Artemis!F6D0AA29E5A1, Artemis!0AC7EE6F0F3B, PUP-FJJ!FD90B2D4980C, Artemis!21E11F84FA19, Artemis!3B7DBC48D072
82.35%

AhnLab V3 Security
PUP/Win32.ExpressFiles
82.35%

ESET NOD32
Win32/ExpressFiles (variant), Win32/ExpressDownloader (variant)
82.35%

IKARUS anti.virus
AdWare.Win32.ExpressFiles, not-a-virus:Downloader.Win32.Agent, PUA.ExpressFiles, Win32.Application.ExpressFiles
82.35%

Trend Micro House Call
TROJ_GEN.F47V1123, TROJ_GEN.F47V1127, TROJ_GEN.F47V0721, TROJ_GEN.F47V0430, TROJ_GEN.F47V0922, TROJ_GEN.F47V0629, TROJ_GEN.F47V1101
76.47%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud)
76.47%

The domain www.express-files.com has been seen to resolve to the following 3 IP addresses.

ReasonOne
February 9, 2016

August 13, 2014

199.195.194.4.static.midphase.com
December 28, 2013

File downloads found at URLs served by www.express-files.com.

27 / 68    (Adware)

37 / 68    (Adware)
http://www.express-files.com/EFinstaller.exe  (db48e7a873d0c392ff23afb0cb92073b)

27 / 68    (Adware)

2 / 68      (Adware)
http://www.express-files.com/installer.exe  (f6e21c6c32da483cac08e863da68fae9)

29 / 68    (Adware)
http://www.express-files.com/EFinstaller.exe  (3b7dbc48d0726b6bdcc7ff625bd035c5)

36 / 68    (Adware)
http://www.express-files.com/EFinstaller.exe  (cd08f9477625a837756e87918640bdb1)

36 / 68    (Adware)
http://www.express-files.com/EFinstaller.exe  (3e079625e12baee169f487199bb2a318)

29 / 68    (Adware)
http://www.express-files.com/EFinstaller.exe  (6dcdd6f0c66505dce1542ce7ec7b2214)

11 / 68    (Adware)

10 / 68    (Adware)

29 / 68    (Adware)

28 / 68    (Adware)
http://www.express-files.com/EFinstaller.exe  (4cc7078f9a751c3d20bd201e351ff743)

27 / 68    (Adware)
http://www.express-files.com/EFinstaller.exe  (76f92c698538ccfa9e291c606e379c66)

9 / 68      (Adware)

27 / 68    (Adware)
http://www.express-files.com/EFinstaller.exe  (f3f7919c45a3bbda107bf78796485b43)

28 / 68    (Adware)

30 / 68    (Adware)
http://www.express-files.com/EFinstaller.exe  (c8715ee362245eea53da9c425fd45e22)

The following file have been seen to comunicate with www.express-files.com in live environments.

Facebook:
Likes:  6,626
Shares:  3,445
Comments:  2,246

Statistics are for the previous month.

Remove Malware from www.express-files.com - Powered by Reason Core Security