home

www.more-files.com

Moniker Privacy Services  (Proxy Registrant)

Domain Information

The domain www.more-files.com is registered by proxy through Moniker Online Services and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Nuremberg, Bayern within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
Moniker Online Services

Server location:
Bayern, Germany (DE)

Create date:
Thursday, April 3, 2014

Expires date:
Monday, April 3, 2017

Updated date:
Friday, April 8, 2016

ASN:
AS24940 HETZNER-AS Hetzner Online GmbH,DE

Root domain:
more-files.com

Whois:
4 more-files.com records

Scanner detections:
Detections  (90% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Installer.InstallPath.AA, PUP.Installer.KOMPANIYAR.g, PUP.Installer.KOMPANIYAR.EE, PUP.Installer.Wilmaonline.EE, Adware.Amonetize.Installer.Meta (M), PUP.Brightcircle (M), Adware.Amonetize (M), PUP.Amonetize.Bundler
95.56%

Malwarebytes
PUP.Optional.Amonetize, PUP.Optional.Downloader
46.67%

Avira AntiVirus
ADWARE/Adware.Gen2, APPL/Amonetize.Z, Adware/Amonetize.tzv
46.67%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.Amonetize, PUP/Win32.Amonetiz.R95935
46.67%

Baidu Antivirus
Adware.Win32.Amonetize
44.44%

ESET NOD32
Win32/Amonetize.AW (variant), Win32/Amonetize.AX (variant), Win32/Amonetize.BI (variant), Win32/Amonetize.BK (variant), Win32/Amonetize.BM (variant)
44.44%

AVG
BundleApp_r.R, Adware BundleApp_r.R, Generic, Generic_r
44.44%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize, not-a-virus:AdWare.Win32.Amonetize
44.44%

NANO AntiVirus
Riskware.Win32.Downware.daymkg, Riskware.Win32.Amonetize.dbekwx, Riskware.Win32.Downware.dbejra, Riskware.Win32.Amonetize.dbnuug
40.00%

G Data
Application.Bundler.Amonetize, Adware.Generic.959515, Win32.Application.Amonetize, Gen:Variant.Application.Bundler.Amonetize.11
40.00%

MicroWorld eScan
Application.Bundler.Amonetize.L, Adware.Generic.959515, Application.Bundler.Amonetize.N, Gen:Variant.Application.Bundler.Amonetize.11, Gen:Variant.Application.Bundler.Amonetize.12, Application.Bundler.Amonetize.K, Gen:Variant.Application.Bundler.Amonetize.14, Application.Generic.670720, Gen:Application.Imonetize.1
37.78%

Bitdefender
Application.Bundler.Amonetize.L, Adware.Generic.959515, Application.Bundler.Amonetize.N, Gen:Variant.Application.Bundler.Amonetize.11
37.78%

Lavasoft Ad-Aware
Application.Bundler.Amonetize.L, Adware.Generic.959515, Application.Bundler.Amonetize.N, Gen:Variant.Application.Bundler.Amonetize.11
37.78%

McAfee
PUP-FBM!D753BCA1B9F2, PUP-FBM!9FF10C820203, PUP-FBM!5C416C99A5A4, Artemis!3DA32A72F2B6, PUP-Amonetize
35.56%

avast!
Win32:Amonetize-BX [PUP], Win32:Adware-gen [Adw], Win32:Amonetize-CL [PUP], Win32:Amonetize-CV [PUP], Win32:Amonetize-DQ [PUP]
35.56%

The domain www.more-files.com has been seen to resolve to the following 26 IP addresses.

109.234.109.85
ns7.expirationwarning.net
May 15, 2016

109.234.109.84
ns3.expirationwarning.net
May 14, 2016

144.76.1.130
static.130.1.76.144.clients.your-server.de
April 8, 2016

144.76.0.242
static.242.0.76.144.clients.your-server.de
April 8, 2016

54.244.122.70
ec2-54-244-122-70.us-west-2.compute.amazonaws.com
February 16, 2016

54.245.89.116
ec2-54-245-89-116.us-west-2.compute.amazonaws.com
February 14, 2016

54.244.231.205
ec2-54-244-231-205.us-west-2.compute.amazonaws.com
January 29, 2016

54.245.87.78
ec2-54-245-87-78.us-west-2.compute.amazonaws.com
January 27, 2016

54.245.91.20
ec2-54-245-91-20.us-west-2.compute.amazonaws.com
December 15, 2015

54.244.233.188
ec2-54-244-233-188.us-west-2.compute.amazonaws.com
December 1, 2015

54.245.230.227
ec2-54-245-230-227.us-west-2.compute.amazonaws.com
October 29, 2015

54.244.126.236
ec2-54-244-126-236.us-west-2.compute.amazonaws.com
October 29, 2015

54.244.112.122
ec2-54-244-112-122.us-west-2.compute.amazonaws.com
October 12, 2015

54.245.120.101
ec2-54-245-120-101.us-west-2.compute.amazonaws.com
August 11, 2015

54.244.90.176
ec2-54-244-90-176.us-west-2.compute.amazonaws.com
May 3, 2015

54.245.242.253
ec2-54-245-242-253.us-west-2.compute.amazonaws.com
May 3, 2015

54.245.104.86
ec2-54-245-104-86.us-west-2.compute.amazonaws.com
September 30, 2014

54.214.33.160
ec2-54-214-33-160.us-west-2.compute.amazonaws.com
September 30, 2014

54.214.247.254
ec2-54-214-247-254.us-west-2.compute.amazonaws.com
August 1, 2014

54.214.6.146
ec2-54-214-6-146.us-west-2.compute.amazonaws.com
August 1, 2014

54.214.36.52
ec2-54-214-36-52.us-west-2.compute.amazonaws.com
June 20, 2014

54.244.240.213
ec2-54-244-240-213.us-west-2.compute.amazonaws.com
June 13, 2014

54.203.247.123
ec2-54-203-247-123.us-west-2.compute.amazonaws.com
June 13, 2014

54.214.239.112
ec2-54-214-239-112.us-west-2.compute.amazonaws.com
June 13, 2014

54.214.5.255
ec2-54-214-5-255.us-west-2.compute.amazonaws.com
May 7, 2014

54.244.225.147
ec2-54-244-225-147.us-west-2.compute.amazonaws.com
May 1, 2014

File downloads found at URLs served by www.more-files.com.

0 / 68
http://www.more-files.com/alldd.html?myref=www.new-hdplugin.com&version=1.1.5.89&prefix=FlashPlayerSetup&campid=4072&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=7043630851402870275&capp=FlashPlayer&AMt=1402870391881&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__4072_i875621529_il70.exe)

1 / 68      (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=7042816731402954952&AMt=1402954962161&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i885317375_il5.exe)

1 / 68      (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=7042816731402955017&AMt=1402955027159&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i885324645_il5.exe)

0 / 68
http://www.more-files.com/alldd.html?myref=www.new-hdplugin.com&version=1.1.5.89&prefix=FlashPlayerSetup&campid=6741&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=7042816731402956680&capp=FlashPlayer&AMt=1402956700305&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__6741_i885492057_il92.exe)

0 / 68
http://www.more-files.com/alldd.html?myref=www.new-hdplugin.com&version=1.1.5.89&prefix=FlashPlayerSetup&campid=6741&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=7042816731402956680&capp=FlashPlayer&AMt=1402956708532&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__6741_i885492789_il92.exe)

1 / 68      (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=7041590941403557950&AMt=1403558085619&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i939021048_il2.exe)

1 / 68      (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=7041590941403557950&AMt=1403558156057&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i939028468_il2.exe)

1 / 68      (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=7041590941403557950&AMt=1403558170666&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i939029767_il2.exe)

1 / 68      (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=7041590941403557950&AMt=1403558182641&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i939031052_il2.exe)

1 / 68      (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=7041590941403557950&AMt=1403558195812&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i939032417_il2.exe)

0 / 68
http://www.more-files.com/alldd.html?myref=www.freeplayflashgames.com&version=1.1.5.55&prefix=gameSetup&campid=6104&iaff1=na&capp=demosite1&ti1=3140448311&instid[gamename]=Burger Shop2&instid[gameurl]=http://www.freeridegames.com/.../getSDMGW?type=Silent&gameId=645450&instid[gameid]=645450&AMt=1402933010570&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (gamesetup__6104_i882338048_il169.exe)

1 / 68      (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.55&prefix=TVapp&campid=8828&capp=TvAppMondial&ti1=8187473978&AMt=1403542395334&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8828_i937433162_il269.exe)

1 / 68      (Adware)
http://www.more-files.com/allddT.html?myref=www.new-hdplugin.com&version=1.1.5.55&prefix=FlashPlayerSetup&campid=2937&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=11771158491&capp=FlashPlayer&AMt=1409479727820&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__2937_i1244795518_il3.exe)

1 / 68      (Adware)
http://www.more-files.com/alldd.html?myref=www.newhdplugin.net&version=1.1.5.55&prefix=FlashPlayerSetup&campid=4369&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=MjU3NnwzMDE3fFNLfDN8MXx8|353f86c25b87bbe4c6601011c15e0056|3ad44f70-0271-11e4-b0a7-002590f00f96&capp=FlashPlayer&AMt=1404364568583&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__4369_i988872682_il339.exe)

1 / 68      (Malware)
http://www.more-files.com/alldd.html?myref=www.newhdplugin.org&version=1.1.6.20&prefix=FlashPlayerSetup&campid=4369&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=MTEzfDIxMzB8VUt8M3wxfHw|c4020c18ac49f2e4c71e8ec2b43ff076|66887e50-3612-11e4-9d01-0025b320a860&capp=FlashPlayer&AMt=1410049549608&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__4369_i1274595976_il8.exe)

1 / 68      (PUP)
http://www.more-files.com/alldd.html?myref=www.newhdplugin.net&version=1.1.5.55&prefix=FlashPlayerSetup&campid=4369&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=MjU4NnwzMDE3fEpPfDN8MXx8|353f86c25b87bbe4c6601011c15e0056|8d70c4c0-f3a8-11e3-8cb8-002590f00f96&capp=FlashPlayer&AMt=1403031220417&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__4369_i888769432_il983.exe)

1 / 68      (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=33051574691402954593&AMt=1402954606651&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i885283678_il5.exe)

1 / 68      (Adware)
http://www.more-files.com/allddT.html?myref=www.new-hdplugin.com&version=1.1.5.55&prefix=FlashPlayerSetup&campid=2937&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=11471595649&capp=FlashPlayer&AMt=1409040159054&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__2937_i1223145408_il3.exe)

1 / 68      (Malware)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=33069045071408324267&AMt=1408324286262&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i1187356474_il6.exe)

1 / 68      (Malware)
http://www.more-files.com/alldd.html?myref=www.newhdplugin.net&version=1.1.1.12&prefix=FlashPlayerSetup&campid=4072&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=18372478011400414922&capp=FlashPlayer&iaff1=10117&AMt=1400414927952&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__4072_i691173501_il1952.exe)

28 / 68    (PUP)
http://www.more-files.com/alldd.html?myref=www.newhdplugin.net&version=1.1.6.20&prefix=FlashPlayerSetup&campid=4369&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=MTEwfDIxMzB8UEx8M3wxfHw|c4020c18ac49f2e4c71e8ec2b43ff076|12e2a5c0-c84c-11e3-8806-0025b320a860&capp=FlashPlayer&AMt=1397971916212&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__4369_i579884076_il77.exe)

14 / 68    (Adware)
http://www.more-files.com/alldd.html?myref=www.newhdplugin.net&version=1.1.5.55&prefix=FlashPlayerSetup&campid=6353&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=1288953635&capp=FlashPlayer&ti2=6969&AMt=1409722639761&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__4003_i1256607435_il80.exe)

24 / 68    (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=31303941941402713932&AMt=1402713952397&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayersetup__2583_i855595595_il6.exe)

16 / 68    (Adware)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=u6d438339523a05831bd94e3857&AMt=1408422156470&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__4120_i1192083383_il28.exe)

25 / 68    (PUP)
http://www.more-files.com/alldd.html?myref=www.new-hdplugin.com&version=1.1.5.89&prefix=FlashPlayerSetup&campid=6741&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=6964318471403175086&capp=FlashPlayer&AMt=1403175100942&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i907706459_il5.exe)

28 / 68    (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=909706701402798309&AMt=1402798324050&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (tvapp__8821_i867797572_il485160.exe)

20 / 68    (PUP)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8812&capp=TvAppMondial&ti1=20yv3X3rUuJeUoLl069HK11wYTyB000.&AMt=1403488838675&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayersetup__2583_i933033208_il1.exe)

7 / 68      (Adware)
http://www.more-files.com/allddT.html?myref=www.livesoccer2014.com&version=1.1.5.89&prefix=TVapp&campid=8821&capp=TvAppMondial&ti1=30008739541407065527&AMt=1407065545368&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayersetup__8530_il25276.exe)

1 / 68      (PUP)
http://www.more-files.com/alldd.html?myref=www.newhdplugin.net&version=1.1.6.20&prefix=FlashPlayerSetup&campid=4369&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=MTU0MXwzMDE0fFRIfDN8MXx8|58b2aef078925e6b5372e00a8dc11313|ffb94b60-eb88-11e3-b15e-002590f00f96&capp=FlashPlayer&AMt=1402865124960&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (flashplayer__4369_i874554600_il13.exe)

1 / 68      (PUP)
http://www.more-files.com/alldd.html?myref=www.newhdplugin.net&version=1.1.6.20&prefix=FlashPlayerSetup&campid=4369&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=Mjk2fDMwMTR8VEh8M3wxfHw|58b2aef078925e6b5372e00a8dc11313|ffb94b60-eb88-11e3-b15e-002590f00f96&capp=FlashPlayer&AMt=1403896011966&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3  (downloadgamenarutoshippuden-ultimateninjastorm3fullversion__2774_il186914.exe)

 
Latest 30 of 2,010 download URLs

The following 25 files have been seen to comunicate with www.more-files.com in live environments.

TCP » 144.76.0.242:80
jingling.exe

TCP » 54.245.104.86:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 144.76.0.242:80
Trezaa.Service.exe (Trezaa.Service by Microsoft)

TCP » 144.76.0.242:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 144.76.0.242:80
setupv.exe (project1 by Microsoft)

TCP » 144.76.1.130:443
apptrailers.exe

TCP » 144.76.0.242:443
online-guardian-v2.0.9.exe

TCP » 144.76.0.242:80
AdxEngine.exe (MPC AdCleaner by DotC United Inc)

TCP » 54.245.104.86:443
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 144.76.0.242:80
microsoft toolkit 2.6.6__9465_il667.exe

TCP » 144.76.1.130:80
microsoft toolkit 2.6.6__9465_il667.exe

TCP » 144.76.0.242:80
kmspico10.2.1__8174_il55.exe

TCP » 144.76.0.242:25
init.exe

TCP » 144.76.0.242:80
UCBrowser.exe (by UCWeb)

TCP » 144.76.1.130:80
kdlink32.exe (KDLink by QuestPRO Software)

TCP » 54.214.33.160:80
new_chrome.exe (Google Chrome by Google)

TCP » 54.245.104.86:80
new_chrome.exe (Google Chrome by Google)

TCP » 144.76.0.242:80
setup__2140_il20839.exe (arsenal by Emirates)

TCP » 144.76.0.242:80
kmspico10.2.1__11516_il55.exe

TCP » 144.76.0.242:80
windowsupdatekb12695__7428_il1.exe

 
Latest 20 of 33 files

URL:
http://www.more-files.com/

Google Analytics:
UA-76243115

Title:
“ERRP | Expired Registration Recovery Policy”

Description:
“Expired Registration Recovery Policy”

Web server:
nginx/1.4.6 (Ubuntu) (PHP/5.5.9-1ubuntu4.14)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.