www.videoconvertertool.net

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain www.videoconvertertool.net is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in April of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Remove Malware from www.videoconvertertool.net - Powered by Reason Core Security
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Dublin City, Ireland (IE)

Create date:
Monday, April 09, 2012

Expires date:
Saturday, April 09, 2016

Updated date:
Sunday, March 22, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Scanner detections:
Detections  (71% detected)

Scan engine
Details
Detections

Avira AntiVirus
W32/Sality.AT, ADWARE/InstallCore.Gen, ADWARE/InstallCore.Gen7, APPL/Downloader.Gen6
83.33%

Dr.Web
Win32.Sector.21, Adware.InstallCore.53, Trojan.Packed.24524, Adware.InstallCore.64, Adware.MediaFinder.2
83.33%

F-Prot
W32/Sality.gen2, W32/InstallCore.P.gen, W32/InstallCore.R3.gen, W32/InstallCore.V2.gen
66.67%

McAfee
Artemis!83D8C0BA527E, Artemis!8558E58CD254, Artemis!5C7792A16B34, Artemis!41486FE6FC89
66.67%

Trend Micro House Call
TROJ_GEN.RCBH1IO, TROJ_GEN.R0CBH05LS13, TROJ_GEN.R0CBH0AJA13, TROJ_GEN.R0CBH05LJ13
66.67%

VIPRE Antivirus
Click run software, InstallCore
66.67%

McAfee Web Gateway
Artemis!83D8C0BA527E, Artemis!8558E58CD254, Artemis!5C7792A16B34, Artemis!41486FE6FC89
66.67%

Sophos
Install Core Click run software
66.67%

ESET NOD32
Win32/InstallCore.AY (variant), Win32/InstallCore.BL, Win32/InstallCore.AT (variant), Win32/InstallCore.AL (variant)
66.67%

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594, PE:Malware.InstallCore!6.4, PE:Malware.InstallCore!6.1FC
66.67%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud), Win32.HeurC.KVM019.a.(kcloud), Win32.Troj.Agent.ac.(kcloud)
66.67%

K7 Gateway Antivirus
Unwanted-Program , Trojan
50.00%

K7 AntiVirus
Unwanted-Program, Unwanted-Program , Trojan
50.00%

NANO AntiVirus
Trojan.Win32.InstallCore.cqunff, Trojan.Win32.InstallCore.cqrhwb, Trojan.Win32.MediaFinder.bbmoan
50.00%

Comodo Security
Application.Win32.ClickRun.A, Application.Win32.ClickRun.J
50.00%

The domain www.videoconvertertool.net has been seen to resolve to the following 12 IP addresses.

ec2-54-194-169-19.eu-west-1.compute.amazonaws.com
January 23, 2015

ec2-54-72-121-228.eu-west-1.compute.amazonaws.com
January 23, 2015

ec2-54-229-24-120.eu-west-1.compute.amazonaws.com
January 23, 2015

ec2-54-72-168-34.eu-west-1.compute.amazonaws.com
June 13, 2014

ec2-54-229-230-101.eu-west-1.compute.amazonaws.com
June 13, 2014

ec2-54-229-96-115.eu-west-1.compute.amazonaws.com
June 13, 2014

ec2-54-72-141-38.eu-west-1.compute.amazonaws.com
April 4, 2014

ec2-54-246-208-251.eu-west-1.compute.amazonaws.com
April 4, 2014

ec2-54-72-149-41.eu-west-1.compute.amazonaws.com
April 4, 2014

ec2-54-244-249-150.us-west-2.compute.amazonaws.com
February 6, 2014

ec2-50-112-94-132.us-west-2.compute.amazonaws.com
February 6, 2014

ec2-50-112-240-188.us-west-2.compute.amazonaws.com
February 6, 2014

File downloads found at URLs served by www.videoconvertertool.net.

1 / 68      (Malware)

22 / 68    (PUP)

22 / 68    (PUP)

19 / 68    (PUP)

19 / 68    (PUP)

19 / 68    (PUP)

19 / 68    (PUP)

36 / 68    (PUP)
http://www.videoconvertertool.net/d/sh/.../?dl=1  (ICReinstall_VideoConverterSetup.exe)

5 / 68      (false positives)

Remove Malware from www.videoconvertertool.net - Powered by Reason Core Security