www.powerpackmtm.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.powerpackmtm.com is registered by proxy through GODADDY.COM, LLC and was originally registered in November of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Remove Malware from www.powerpackmtm.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Tuesday, November 20, 2012

Expires date:
Sunday, November 20, 2016

Updated date:
Saturday, November 21, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.

Root domain:

Scanner detections:
Detections  (87% detected)

Scan engine
Details
Detections

Dr.Web
Win32.Sector.21, Trojan.KillFiles.12939, Adware.Downware.1308, Adware.PowerPack.2, Adware.PowerPack.29, Adware.PowerPack.18
76.19%

Malwarebytes
Adware.Linkular, PUP.Optional.Linkular
71.43%

avast!
Win32:Rootkit-gen [Rtk], Win32:Linkular-D [Adw], Win32:Malware-gen, Adware-gen [Adw], Evo-gen [Susp]
71.43%

Kaspersky
not-a-virus:AdWare.Win32.Linkun
71.43%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
71.43%

G Data
NSIS.Application.Linkular
71.43%

SUPERAntiSpyware
Adware.BrowseFox/Variant, Trojan.Agent/Gen-DarkKomet, PUP.Linkular/Variant
66.67%

Comodo Security
Application.Win32.Linkular.A, ApplicUnwnt, Application.Win32.Linkular.AY
66.67%

Avira AntiVirus
W32/Sality.AT, Adware/Linkun.453633, APPL/Linkular.A, Adware/Linkular.D, Adware/Linkular.453592, APPL/LinkularD.A.3, ADWARE/Linkular.D
61.90%

Reason Heuristics
PUP.Installer.Linkular.Q, PUP.Installer.Linkular.K, PUP.Linkular.Company.Installer (M)
61.90%

nProtect
Trojan-Clicker/W32.Linkun.453633, Trojan-Clicker/W32.Linkun.456240.B, Trojan-Clicker/W32.Linkun.453776, Trojan-Clicker/W32.Linkun.458488
61.90%

NANO AntiVirus
Trojan.Nsis.KillFiles.cwbfhm, Riskware.Nsis.Adload.dcibcg, Riskware.Win32.Linkular.dbpxeq, Riskware.Nsis.PowerPack.cwdxyp
57.14%

F-Prot
W32/Sality.gen2, W32/A-951144e2, W32/Linkun.A (exact, not disinfectable)
42.86%

K7 AntiVirus
Adware
42.86%

K7 Gateway Antivirus
Adware
42.86%

The domain www.powerpackmtm.com has been seen to resolve to the following IP address.

ec2-107-21-56-195.compute-1.amazonaws.com
March 7, 2014

File downloads found at URLs served by www.powerpackmtm.com.

1 / 68      (Adware)
http://www.powerpackmtm.com/ds/mtm/exe/.../Xvid Setup.exe  (481aadc10b75008e6145ea12c06c933c)

1 / 68      (Adware)
http://www.powerpackmtm.com/ds-exe/mtm/.../Xvid Setup.exe  (671756e4a262fde3eab164dbd20f1688)

1 / 68      (Adware)
http://www.powerpackmtm.com/ds-exe/mtm/.../Xvid Setup.exe  (e00b6554976197746ef459a05a07473a)

1 / 68      (Adware)
http://www.powerpackmtm.com/ds-exe/mtm/.../Xvid Setup.exe  (540cd139f885bf6331a12a6d3b059a8b)

25 / 68    (PUP)

22 / 68    (Adware)
http://www.powerpackmtm.com/ds-exe/mtm/.../Xvid Setup.exe  (209b676fd20a79ab0a517f5fdeac58d0)

0 / 68

20 / 68    (Adware)
http://www.powerpackmtm.com/ds/mtm/exe/.../Xvid Setup.exe  (ff5eaa4454e09d314b328f9b8455a491)

22 / 68    (PUP)

22 / 68    (PUP)

22 / 68    (PUP)

23 / 68    (Adware)
http://www.powerpackmtm.com/ds-exe/mtm/.../Xvid Setup.exe  (953468ef917bb2415d49dc7727485084)

21 / 68    (Adware)
http://www.powerpackmtm.com/ds-exe/mtm/.../Xvid Setup.exe  (c5db6aca147436ba0ee7cd400ebb308c)

16 / 68    (PUP)

18 / 68    (Adware)
http://www.powerpackmtm.com/ds-exe/mtm/.../Xvid Setup.exe  (7123ba493fdc79afc35f6e517769e566)

16 / 68    (Adware)
http://www.powerpackmtm.com/ds-exe/mtm/.../Xvid Setup.exe  (f0f12ae73221a0c312ca8dec79312b41)

13 / 68    (Adware)
http://www.powerpackmtm.com/ds/mtm/exe/.../Xvid Setup.exe  (ac73239a2568746d2dd83265fbc1f28f)

15 / 68    (Adware)
http://www.powerpackmtm.com/ds-exe/mtm/.../Xvid Setup.exe  (06fb3dc690c3dbcc6ab319852ceec5b6)

URL:
http://www.powerpackmtm.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache

Remove Malware from www.powerpackmtm.com - Powered by Reason Core Security