home

www.good-hurricane-file.org

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
good-hurricane-file.org

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.SVANTRANS.I, PUP.Installer.SVANTRANS.d, PUP.Installer.ITLGROUP.U, PUP.Installer.SVANTRANS.c, PUP.Brightcircle.SVANTRAN.Installer (M)
100.00%

McAfee
Artemis!6ABE46674648, Artemis!EA6EC4D9429A, Artemis!487780CB90A6, Artemis!885EB788698A
80.00%

K7 AntiVirus
Unwanted-Program
80.00%

Trend Micro House Call
Suspicious_GEN.F47V1205, PE_VIRUX.R, Suspicious_GEN.F47V1203, Suspicious_GEN.F47V1207
80.00%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4739697
80.00%

Sophos
Generic PUA GB, Generic PUA JF, Generic PUA MD, Generic PUA AC
80.00%

Avira AntiVirus
ADWARE/Adware.Gen4
80.00%

AhnLab V3 Security
PUP/Win32.Amonetiz
80.00%

ESET NOD32
Win32/Amonetize.CH (variant)
80.00%

AVG
Generic
80.00%

Fortinet FortiGate
W32/Virut.CE, Riskware/Amonetize
80.00%

avast!
Win32:Vitro, Win32:Malware-gen
60.00%

MicroWorld eScan
Win32.Virtob.Gen.12, Gen:Variant.Graftor.166062
60.00%

Bitdefender
Win32.Virtob.Gen.12, Gen:Variant.Graftor.166062
60.00%

F-Secure
Win32.Virtob.Gen.12, Gen:Variant.Graftor.166062
60.00%

The domain www.good-hurricane-file.org has been seen to resolve to the following 2 IP addresses.

54.245.104.86
ec2-54-245-104-86.us-west-2.compute.amazonaws.com
January 1, 2015

54.214.33.160
ec2-54-214-33-160.us-west-2.compute.amazonaws.com
January 1, 2015

File downloads found at URLs served by www.good-hurricane-file.org.

1 / 68      (Adware)
http://www.good-hurricane-file.org/.../db.helvethaica.x.download__4000_i1419809291_il22262.exe  (5d85727e00cf3f2852d7752bfd70e649)

14 / 68    (Adware)
http://www.good-hurricane-file.org/.../Setup.FreeMake.Video.Downloader__8420_il9037.exe  (divx.web.player.installer__8420_il296.exe)

30 / 68    (Adware)
http://www.good-hurricane-file.org/.../QUAGMIRE SOUNDBOARD__5870_il139541.exe  (doulci icloud activator__8779_il248.exe)

20 / 68    (Adware)
http://www.good-hurricane-file.org/.../Setup__9348_il154849.exe  (487780cb90a64207671678ab36ef37ec)

30 / 68    (Adware)
http://www.good-hurricane-file.org/.../DoulCi iCloud Activator__8779_il248.exe  (ea6ec4d9429aafe6f5466747233d6201)

30 / 68    (Adware)
http://www.good-hurricane-file.org/.../WATRemover2.2.6Setup__9029_i1418164559_il35523.exe  (f_000651)

The following 4 files have been seen to comunicate with www.good-hurricane-file.org in live environments.

TCP » 54.245.104.86:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.245.104.86:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 54.214.33.160:80
new_chrome.exe (Google Chrome by Google)

TCP » 54.245.104.86:80
new_chrome.exe (Google Chrome by Google)

TCP » 54.214.33.160:80
Project1.exe (Pino by Microsoft)

TCP » 54.245.104.86:80
Project1.exe (Pino by Microsoft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.