www.koyotesoft.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.koyotesoft.com is registered by proxy through GODADDY.COM, LLC and was originally registered in December of 2006. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Tel Aviv, Tel Aviv within Israel which resides on the RIPE Network Coordination Centre network.
Remove Malware from www.koyotesoft.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Tel Aviv, Israel (IL)

Create date:
Monday, December 18, 2006

Expires date:
Sunday, December 18, 2016

Updated date:
Sunday, November 01, 2015

ASN:
AS6461 MFNX MFN - Metromedia Fiber Network

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.KoyoteLab.Z, PUP.Installer.KoyoteLab.b, PUP.Installer.KoyoteLab.a, PUP.Installer.KoyoteLab.FF, PUP.Installer.KoyoteLab.DD, PUP.Installer.KoyoteLab.c, PUP.Bandoo.KoyoteLab.Installer (M)
88.64%

Dr.Web
Adware.Downware.942, Adware.Downware.964, Adware.Searcher.2497, Trojan.Damaged.1, Trojan.MulDrop4.5165, Tool.InstallToolbar.96, Adware.Bandoo.2, Threat.Undefined
77.27%

Malwarebytes
PUP.Optional.Koyote.A
61.36%

G Data
Win32.Application.Searchsuite, Win32.Application.KoyoteLab, NSIS.Application.SearchSuite
43.18%

ESET NOD32
Win32/Toolbar.SearchSuite, Win32/Toolbar.Widgi, Win32/Toolbar.Widgi (variant), Win32/KoyoteLab (variant), Win32/Toolbar.SearchSuite.W potentially unwanted
40.91%

AVG
Skodna.Bundle_c, SearchSuite, Generic
40.91%

Trend Micro House Call
TROJ_GEN.F47V0725, TROJ_GEN.F47V0319, TROJ_GEN.F47V1001, Suspicious_GEN.F47V0617, HV_ZYX_CA0836B9.TOMC, Suspicious_GEN.F47V0703, TROJ_GEN.F47V0429
34.09%

McAfee
Artemis!E670395DDFA6, Artemis!C21072320390, Artemis!1B10E0FFE541, Artemis!5804410CF1EC, Artemis!188ADD1AE074, Artemis!95E976F5541F, Artemis!D1E90B72E8B1, Artemis!7E4D757C4BFA, Artemis!6AF3EF4C4658, Artemis!BB130A717AB0, Artemis!E2ACC8130FEC, Artemis!DFE362FE0A5A, Artemis!98684924E115, Artemis!1C7F91A0989C, Artemis!F11DD18EFDF1
34.09%

McAfee Web Gateway
Artemis!E670395DDFA6, Artemis!C21072320390, Artemis!1B10E0FFE541, Artemis!5804410CF1EC, Artemis!188ADD1AE074, Artemis!95E976F5541F
34.09%

Agnitum Outpost
Riskware.Agent, PUA.Bandoo
22.73%

IKARUS anti.virus
PUA.SearchSuite, PUA.Soffer
15.91%

Fortinet FortiGate
W32/Toolbar.WIDGI, Riskware/KoyoteLab
15.91%

Baidu Antivirus
Trojan.Win32.Agent, Adware.Win32.SearchSuite, PUA.Win32.KoyoteLab
11.36%

Bkav FE
W32.Clod4f3.Trojan, W32.Clodb2e.Trojan, W32.Clod523.Trojan
6.82%

Avira AntiVirus
TR/Trash.Gen, Adware/SeaSuite.ona, PUA/SeaSuite.Gen
6.82%

The domain www.koyotesoft.com has been seen to resolve to the following 2 IP addresses.

94.31.0.55.IPYX-076665-ZYO.above.net
December 27, 2013

November 19, 2013

File downloads found at URLs served by www.koyotesoft.com.

2 / 68      (PUP)
http://www.koyotesoft.com/.../Setup_MoviesToDVD.exe  (freevideostodvdsetup-r0-n-bc.exe)

1 / 68      (PUP)

7 / 68      (PUP)
http://www.koyotesoft.com/.../Setup_FreeConverter.exe  (188add1ae0746fc2738d38440a8189a6)

20 / 68    (PUP)
http://www.koyotesoft.com/.../FreeMp3WmaConverterSetup.exe  (freemp3wmaconvertersetup-r0-n-bi.exe)

1 / 68      (PUP)
http://www.koyotesoft.com/.../Setup_FreeScreenVideo.exe  (freescreentovideosetup-r0-n-bc.exe)

3 / 68      (PUP)
http://www.koyotesoft.com/.../FreeFLVConverterSetup.exe  (freeflvconvertersetup-r100-w-bf.exe)

10 / 68    (PUP)
http://www.koyotesoft.com/.../FreeVideoConverterSetup.exe  (freevideoconvertersetup-r179-n-bi.exe)

3 / 68      (PUP)
http://www.koyotesoft.com/.../Setup_FreeFlvConverter.exe  (FreeFLVConverterSetup-r0-n-bc.exe)

10 / 68    (PUP)
http://www.koyotesoft.com/.../FreeEasyCDDVDBurnerSetup.exe  (freeeasycddvdburnersetup-r101-w-bc.exe)

6 / 68      (PUP)
http://www.koyotesoft.com/.../Setup_FreeVideoConverter.exe  (freevideoconvertersetup-r136-n-bc.exe)

8 / 68      (PUP)
http://www.koyotesoft.com/.../FreeCDRipperSetup.exe  (FreeCDRipperSetup-r0-n-bi.exe)

The following 2 files have been seen to comunicate with www.koyotesoft.com in live environments.

URL:
http://www.koyotesoft.com/

Google Analytics:
UA-24880798

Title:
“Free Video & Audio software downloads | KoyoteSoft”

Description:
“KoyoteSoft offers you free software downloads for all your audio and video needs including free video and audio converters, free YouTube Downloader, Free CD/DVD burner and more!”

Facebook:
Likes:  1
Shares:  249
Comments:  17

Statistics are for the previous month.

Remove Malware from www.koyotesoft.com - Powered by Reason Core Security