» www.phonologistaspirin.webcam
Overview
Analysis
IPs Addresses (2)
Downloads (681)

www.phonologistaspirin.webcam

Domain Information

Server location:

Georgia, United States (US)

ASN:

AS20446 HIGHWINDS3 - Highwinds Network Group, Inc.,US

Root domain:

phonologistaspirin.webcam

Scanner detections:

Detections (98% detected)

Scan engine

Details

Detections

Reason Heuristics

Adware.InstallMonetizer.OldTramo.Installer.Meta (M), Adware.InstallMonetizer.CortezCo.Installer.Meta (M), Adware.Amonetize.RE (M), Adware.InstallMonetizer.FenamnFa.Installer.Meta (M), PUP.InstallMonetizer.CortezCo.Meta (M), Adware.InstallMonetizer.PlonetPl.Installer.Meta (M), Adware.Amonetize (M), Adware.InstallMonetizer.DHy4XadZ.Installer.Meta (M), Adware.InstallMonetizer.6c03ULqK.Installer.Meta (M), Adware.InstallMonetizer.Pepcy.Installer.Meta (M), Adware.InstallMonetizer.TenbFvh.Installer.Meta (M), Adware.InstallMonetizer.LUshGaNF.Installer.Meta (M), Adware.InstallMonetizer.NMK.Installer.Meta (M), Adware.Amonetize.Droms.Installer.Meta (M), Adware.InstallMonetize.FLIkEwON.Installer.Meta (M), Adware.Amonetize.FenamnFa.Meta (M), Adware.InstallMonetizer.IDDQD.Installer.Meta (M), Adware.InstallMonetizer.tVgKdi3u.Installer.Meta (M), Adware.Amonetize.bA2BO6.Installer.Meta (M), Adware.InstallMonetizer.7QHL41.Installer.Meta (M), Adware.InstallMonetizer.Droms.Installer.Meta (M), Adware.InstallMonetizer.NVVvaa.Installer.Meta (M), Adware.Amonetize.StarGrat.Meta (M), Adware.Amonetize.OQktB5CS.Meta (M), Adware.InstallMonetizer.WnSkVIWX.Installer.Meta (M), Adware.Amonetize.OldTramo.Installer.Meta (M), Adware.Amonetize.FstTeaf.Installer.Meta (M), Adware.InstallMonetizer (M)

85.71%

ESET NOD32

Win32/Amonetize.NY potentially unwanted application, Win32/Amonetize.VR potentially unwanted application, Win32/Amonetize.OR potentially unwanted application, Win32/Amonetize.TS potentially unwanted application, Win32/Amonetize.VK potentially unwanted application

16.33%

Emsisoft Anti-Malware

Gen:Heur.ManBat, Gen:Variant.Graftor.291795, Gen:Variant.Graftor.284006, Gen:Variant.Graftor.272894, Gen:Variant.Razy.8541, Gen:Variant.Symmi.66258

16.33%

Norman

Gen:Heur.ManBat.1, Gen:Variant.Graftor.283750, Gen:Variant.Symmi.63097, Gen:Variant.Razy.8541, Gen:Variant.Razy.37085, Gen:Variant.Graftor.284219

14.29%

Kaspersky

not-a-virus:HEUR:AdWare.Win32.Amonetize, not-a-virus:HEUR:Downloader.Win32.Generic

8.16%

F-Secure

Variant.Symmi.65023, Variant.Graftor.284006, Variant.Razy.8541

6.12%

avast!

Win32:Evo-gen [Susp]

4.08%

Microsoft Security Essentials

Threat.Undefined

4.08%

Malwarebytes

PUP.Optional.Amonetize

2.04%

Arcabit

Trojan.Graftor.D473D3

2.04%

Baidu Antivirus

Win32.Trojan.Kryptik

2.04%

ESET NOD32

Win32/Amonetize.VW potentially unwanted (variant)

2.04%

Bitdefender

Gen:Variant.Graftor.291795

2.04%

F-Secure

Gen:Variant.Graftor.291795

2.04%

Avira AntiVirus

ADWARE/Amonetize.Gen7

2.04%

The domain www.phonologistaspirin.webcam has been seen to resolve to the following 2 IP addresses.

205.185.216.10

July 17, 2016

205.185.216.42

map2.hwcdn.net

July 17, 2016

File downloads found at URLs served by www.phonologistaspirin.webcam.

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../ge8fq.exe (download game of thrones seaso downloader__3687_i1928550337_il330937.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../cnzwx.exe (4152bed6a4f3898a1f982e2ff5cc05fa)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../w4ba2.exe (microsoft office 2010 toolkit downloader__3687_i1928583802_il344110.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../yjcyq.exe (2c399d3167cc9be8c1da5b22316cafcc)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../nfuqm.exe (keygen__7516_il11.exe)

3 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../bt4v5.exe (9c92d7ed2ed58a9d374cb49a0b60638b)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../7muep.exe (setup__19958_i1928377135_il2.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../p4sqc.exe (setup__19958_i1928380941_il2.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../yvjuh.exe (jc5xp.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../2vpbj.exe (microsoft toolkit 2.6.6__9465_il2558.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../9zdwk.exe (graphisoft archicad 16 x86 x64 downloader__3687_i1928876849_il468696.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../5g6xs.exe (graphisoft archicad 16 x86 x64 downloader__3687_i1928877678_il469057.exe)

4 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../pcuyy.exe (2751f0a57dfdf0dc717489e2b9ffd900)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../rkxxs.exe (5qyu3.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../4wvuu.exe (xforce keygen 64bits version.zip__18124_il2100.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../w2256.exe (33f59ee2a91d78283c76dac44649ab05)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../g7p5b.exe (minecraft xbox 360 edition__19733_il409971.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../y4wa6.exe (kmspico10.1.9__8174_il109172.exe)

2 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../8sy3k.exe (7aac1a2dbc5200d9f3e8ef23d9c1541f)

2 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../cxzrb.exe (52eb1bf574aa7bc1c0b38365ba3c1c17)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../4y6st.exe (e6cba4af2757c6cde731bd49e5f1b54c)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../gnn96.exe (shark pro files__6629_i1928741549_il366371.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../rh763.exe (terrafarmers downloader__3687_i1928465664_il294107.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../bnsvp.exe (mq6rj.exe)

2 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../r4p35.exe (674f914a64fd48a88cdd4ac025bb1e38)

0 / 68

http://www.phonologistaspirin.webcam/.../vfvaj.exe (minecraftsetup__2493_il753.exe)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../rzc9s.exe (5he53.exe)

13 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../8hahr.exe (1c45344b8306356c68b34db7fbb0dd11)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../8sm29.exe (93c1e057cf8844bdd3363b6fdd7ee2c5)

1 / 68 (PUP)

http://www.phonologistaspirin.webcam/.../2zmur.exe (wwe 2k15 keygen generator downloader__3687_i1929026372_il15873.exe)

Latest 30 of 681 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.