home

www.winvlc-dd.com

Domain Information

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
winvlc-dd.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ShetefSolutionsConsulting1998.X, PUP.Installer.ITLGROUP, PUP.Amonetize.ShetefSolutionsConsulting1998.Bundler (M), Threat.Win.Reputation.IMP
100.00%

Dr.Web
Adware.Downware.8996
50.00%

Malwarebytes
PUP.Optional.Amonetize
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

NANO AntiVirus
Riskware.Win32.Downware.difhzb
50.00%

Agnitum Outpost
PUA.Amonetize
50.00%

Avira AntiVirus
ADWARE/Adware.Gen4
50.00%

AhnLab V3 Security
PUP/Win32.Amonetiz
50.00%

AVG
Generic
50.00%

Sophos
Generic PUA KM
25.00%

ESET NOD32
Win32/Amonetize.BY (variant)
25.00%

Fortinet FortiGate
Riskware/Amonetize
25.00%

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
25.00%

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.Amonetize.18
25.00%

F-Secure
Riskware.Gen:Variant.Application.Bundler
25.00%

The domain www.winvlc-dd.com has been seen to resolve to the following IP address.

54.214.33.160
ec2-54-214-33-160.us-west-2.compute.amazonaws.com
December 26, 2014

File downloads found at URLs served by www.winvlc-dd.com.

1 / 68      (Malware)
http://www.winvlc-dd.com/direct-download.html?&version=1.1.5.55&ci=11766  (mediaplayer__11766_il22.exe)

1 / 68      (Adware)
http://www.winvlc-dd.com/dd2.html?prefix=VLCMediaPlayer&version=1.1.5.55&ci=3954&capp=MediaPlayer&ti1=[clickID]  (00000003)

22 / 68    (Adware)
http://www.winvlc-dd.com/dd2.html?prefix=VLCMediaPlayer?version=1.1.5.55&ci=3954&capp=MediaPlayer&ti1=[clickID]  (vlcmediaplayer-version=1.1.5.55__3954_i1403514088_il4826.exe)

13 / 68    (Adware)
http://www.winvlc-dd.com/dd2.html?prefix=VLCMediaPlayer&version=1.1.5.55&ci=3954&capp=MediaPlayer&ti1=[clickID]  (mediaplayer__5647_il176.exe)

The following 2 files have been seen to comunicate with www.winvlc-dd.com in live environments.

TCP » 54.214.33.160:80
new_chrome.exe (Google Chrome by Google)

TCP » 54.214.33.160:80
Project1.exe (Pino by Microsoft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.