www.freesoundrecorder.net

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.freesoundrecorder.net is registered by proxy through ENOM, INC. and was originally registered in June of 2009. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Houston, Texas within the United States which resides on the ThePlanet.com Internet Services, Inc. network.
Remove Malware from www.freesoundrecorder.net - Powered by Reason Core Security
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Tuesday, June 30, 2009

Expires date:
Thursday, June 30, 2016

Updated date:
Sunday, May 31, 2015

ASN:
AS21844 THEPLANET-AS - ThePlanet.com Internet Services, Inc.

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/OpenCandy, Win32/Wajam (variant), Win32/Toolbar.Conduit.AB (variant), Win32/InstallCore.PY (variant), Win32/InstallCore.QH (variant)
90.00%

Reason Heuristics
PUP.Optional.Installer.R, PUP.Conduit.R, PUP.Installer.ClientConnect.U, PUP.Optional.TechEvolveGMBH.R, Win32.Generic.TechEvolveGMBH.Installer.Meta
90.00%

VIPRE Antivirus
Conduit, InstallCore
80.00%

Norman
Conduit.YH, InstallCore.CERT
70.00%

Malwarebytes
PUP.Optional.Conduit, PUP.Optional.Conduit.A, PUP.Optional.Amonetize, PUP.Optional.InstallCore
50.00%

Dr.Web
Adware.Conduit.6, Adware.Conduit.96, Trojan.InstallCore.11
50.00%

K7 AntiVirus
Trojan , Unwanted-Program
50.00%

K7 Gateway Antivirus
Trojan , Unwanted-Program
50.00%

Baidu Antivirus
Adware.Win32.InstallCore
50.00%

Trend Micro House Call
TROJ_GEN.F47V0221, TROJ_GEN.F47V0506, Suspicious_GEN.F47V0906, Suspicious_GEN.F47V1201
40.00%

Avira AntiVirus
ADWARE/InstallCore.Gen9
40.00%

Fortinet FortiGate
Riskware/Wajam, Riskware/InstallCore
30.00%

McAfee
Artemis!34FFE65FB5B5, Artemis!91571555AAE9, Artemis!29FFA912A6BC
30.00%

McAfee Web Gateway
Artemis!34FFE65FB5B5
30.00%

F-Prot
W32/InstallCore.AC.gen
30.00%

The domain www.freesoundrecorder.net has been seen to resolve to the following 2 IP addresses.

184.173.227.119-static.reverse.softlayer.com
July 1, 2015

6d.81.7bae.static.theplanet.com
February 6, 2014

File downloads found at URLs served by www.freesoundrecorder.net.

1 / 68
http://www.freesoundrecorder.net/FreeSoundRecorder.exe  (a852e04da501979e4e34e9812c61782e)

13 / 68    (PUP)
http://www.freesoundrecorder.net/FreeSoundRecorder.exe  (29ffa912a6bcb8a57e9db93c162ee040)

9 / 68      (PUP)
http://www.freesoundrecorder.net/FreeSoundRecorder.exe  (46bd6bb1603b0ca6f372b69f7d27a8af)

12 / 68    (PUP)
http://www.freesoundrecorder.net/FreeSoundRecorder.exe  (2c936cedc880c1c46be0efbe3fd8669d)

12 / 68    (PUP)

8 / 68      (PUP)
http://www.freesoundrecorder.net/FreeSoundRecorder.exe  (8e36bfc36c46c311c20bd30d3431592c)

8 / 68      (PUP)

14 / 68    (PUP)
http://www.freesoundrecorder.net/FreeSoundRecorder.exe  (91571555aae99f3030102fd93232c8a4)

11 / 68    (Adware)
http://www.freesoundrecorder.net/FreeSoundRecorder.exe  (34ffe65fb5b59f91a782e28f6d0f7f83)

8 / 68      (PUP)
http://www.freesoundrecorder.net/FreeSoundRecorder.exe  (ab75346215ae41838fe9fa27421fe9b7)

2 / 68      (PUP)
http://www.freesoundrecorder.net/FreeSoundRecorder.exe  (9657cd7158e31f574816f7ca0b3297dd)

The following file have been seen to comunicate with www.freesoundrecorder.net in live environments.

URL:
http://www.freesoundrecorder.net/

Google Analytics:
UA-24893396

Title:
“Free Sound Recorder: Record Anything You can Hear through Your PC to Audio Files”

Description:
“Free Sound Recorder helps you record any sound passing through any line of your sound card.”

Web server:
Apache/2.4.7 (PHP/5.5.9-1ubuntu4.14)

Facebook:
Likes:  6
Shares:  315
Comments:  22

Statistics are for the previous month.

Remove Malware from www.freesoundrecorder.net - Powered by Reason Core Security