home

www.sneakystreams.com

ANTON PANIN

Domain Information

The domain www.sneakystreams.com registered by ANTON PANIN was initially registered in January of 2012 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Provo, Utah within the United States which resides on the Unified Layer network.
Registrar:
ENOM, INC.

Server location:
Utah, United States (US)

Create date:
Saturday, January 28, 2012

Expires date:
Saturday, January 28, 2017

Updated date:
Thursday, February 25, 2016

ASN:
AS46606 UNIFIEDLAYER-AS-1 - Unified Layer,US

Root domain:
sneakystreams.com

Whois:
1 sneakystreams.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.AntonPanin, Adware.Bundler.SneakySt.Installer.Meta (M), PUP.InstallCore (M)
90.91%

Qihoo 360 Security
Win32/Virus.Downloader.539, HEUR/QVM06.1.Malware.Gen, Win32/Trojan.BO.9b8
27.27%

Quick Heal
Downloader.Agent.r8 (Not a Virus), TrojanDownloader.gen.r8
18.18%

Kaspersky
not-a-virus:Downloader.Win32.Agent, Trojan-Downloader.Win32.Genome
18.18%

AVG
Generic, Generic_c
18.18%

ViRobot
Trojan.Win32.A.Downloader.490374[h], Trojan.Win32.S.Agent.634063[h]
18.18%

McAfee
Artemis!A1F30160FA0A, Artemis!9249E3672E44
18.18%

IKARUS anti.virus
Trojan-Downloader.Win32.Genome, Win32.SuspectCrc
18.18%

Zillya! Antivirus
Downloader.Agent.Win32.202183
9.09%

Agnitum Outpost
Trojan.DL.Genome
9.09%

Sophos
Mal/Generic-S
9.09%

VIPRE Antivirus
Trojan.Win32.Generic
9.09%

Trend Micro
TROJ_GEN.R03FC0OGG15
9.09%

G Data
Win32.Trojan.Agent.GHELOG
9.09%

Baidu Antivirus
Adware.Win32.Genome
9.09%

The domain www.sneakystreams.com has been seen to resolve to the following IP address.

50.87.150.133
50-87-150-133.unifiedlayer.com
February 28, 2016

File downloads found at URLs served by www.sneakystreams.com.

1 / 68      (PUP)
http://www.sneakystreams.com/.../FreeFacebookDownloader_1.5.1.exe  (08793ea4fe86748ca2c9cc04d625f988)

1 / 68      (PUP)
http://www.sneakystreams.com/.../VideoToMp4Converter_1.5.1.exe  (c246b9481657e0a80efff6bd6efcc5bb)

1 / 68      (PUP)
http://www.sneakystreams.com/.../VideoToMp4Converter_1.5.1.exe  (10283920a6b057eb886f29a7a6cf9040)

12 / 68    (PUP)
http://www.sneakystreams.com/.../VideoToMp4Converter_1.5.1.exe  (a1f30160fa0a116c93bda1eda6952c60)

6 / 68      (PUP)
http://www.sneakystreams.com/.../FreeYoupornDownloader_1.5.1.exe  (9249e3672e4454a71157d695d0c9b07b)

1 / 68      (PUP)
http://www.sneakystreams.com/.../FreeXHamsterDownloader_1.5.1.exe  (73914486aa1c81de32297cf6ca0ef466)

1 / 68      (PUP)
http://www.sneakystreams.com/.../FreeXHamsterDownloader_1.5.1.exe  (65e51e8302c38f7be4aee4fec2aea71c)

1 / 68      (PUP)
http://www.sneakystreams.com/.../FreeXHamsterDownloader_1.5.1.exe  (5f5c590fcf40c37db1bd55aa72720be3)

1 / 68      (PUP)
http://www.sneakystreams.com/.../FreeRedtubeDownloader_1.5.1.exe  (d6c04151eba11c8190ab855a2067b5c6)

6 / 68      (Adware)
http://www.sneakystreams.com/.../FreeFacebookDownloader_1.5.1.exe  (508-freefacebookdownloader_1.5.1.exe)

2 / 68      (PUP)
http://www.sneakystreams.com/.../FreeFacebookDownloader_1.5.1.exe  (7e7997bfe3af995bf72f81de80502db0)

The following file have been seen to comunicate with www.sneakystreams.com in live environments.

TCP » 50.87.150.133:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://www.sneakystreams.com/

Google Analytics:
UA-29893552

Title:
“SneakyStreams.com: Download free iPhone, iPod, iPad, YouTube video and many other sites freeware”

Web server:
nginx/1.8.1

Facebook:
Likes:  5
Shares:  11

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.