home

www.windows7themes.ws

Domain Information

Server location:
Noord-Holland, Netherlands (NL)

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Root domain:
windows7themes.ws

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
W32.Clod03c.Trojan
100.00%

Malwarebytes
PUP.Optional.Somoto
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

F-Prot
W32/SomotoBetterInstaller.A
100.00%

avast!
Win32:Somoto-B [PUP]
100.00%

Clam AntiVirus
Win.Adware.Somoto
100.00%

Agnitum Outpost
PUA.Somoto
100.00%

SUPERAntiSpyware
Adware.Somoto
100.00%

Sophos
Somoto BetterInstaller
100.00%

Comodo Security
Application.Win32.Somoto.A
100.00%

Dr.Web
Adware.Somoto.17
100.00%

VIPRE Antivirus
BetterInstaller
100.00%

Avira AntiVirus
APPL/Somoto.ITD.17
100.00%

ESET NOD32
Win32/Somoto (variant)
100.00%

Fortinet FortiGate
Riskware/Somoto
100.00%

The domain www.windows7themes.ws has been seen to resolve to the following IP address.

188.121.46.128
n1nlhg29c053.shr.prod.ams1.secureserver.net
March 7, 2014

File downloads found at URLs served by www.windows7themes.ws.

17 / 68    (Adware)
http://www.windows7themes.ws/.../Windows-Theme-Manager-Setup.exe  (2452c823843d0ef240e2d07c6631a6e9)

The following file have been seen to comunicate with www.windows7themes.ws in live environments.

TCP » 188.121.46.128:80
woxharbjpgk.exe

escorte-sexy.net

fanzo.org

fastemailsender.com

ghostscript.com

org.mk

pcstreams.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.