home

yourfiledownloader.com

Via Advertising Group Limited

Domain Information

The domain yourfiledownloader.com registered by Whois Privacy Corp. was initially registered in April of 2012 through INTERNET.BS CORP.. This domain has been known to host and distribute potentially unwanted software. The domain is associated with the publisher Via Advertising Group Limited who is located in Nicosia, CY.
Registrar:
INTERNET DOMAIN SERVICE BS CORP

Create date:
Thursday, April 26, 2012

Expires date:
Tuesday, April 26, 2016

Updated date:
Sunday, December 13, 2015

ASN:
AS9498 BBIL-AP BHARTI Airtel Ltd.,IN

Whois:
5 yourfiledownloader.com records

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (89% detected)

Scan engine
Details
Detections

VIPRE Antivirus
Via Advertising, Threat.4758264, Threat.4783941
100.00%

McAfee
Artemis!A634E6377CC1, Artemis!436964538F3D, Artemis!D1C518CE7223, Artemis!6137078A3132
100.00%

avast!
Win32:Downloader-UGW [PUP], Win32:Downloader-UEO [PUP]
100.00%

Dr.Web
Tool.DownLoader.42, Trojan.StartPage.56734, Tool.DownLoader.45, Threat.Undefined
100.00%

Fortinet FortiGate
W32/SPNR.28JG12!tr, Riskware/YourFileDownloader
100.00%

Trend Micro House Call
TROJ_SPNR.08JG12, TROJ_GEN.F47V0403, TROJ_GEN.F47V1021, TROJ_GEN.F47V0827, TROJ_GEN.F47V0324, Suspicious_GEN.F47V1113
100.00%

ESET NOD32
Win32/YourFileDownloader (variant), Win32/ExpressDownloader (variant)
100.00%

K7 AntiVirus
Trojan , Backdoor , Riskware
100.00%

Reason Heuristics
PUP.ViaAdvertisingGroupLimited.S, PUP.ViaAdvertisingGroupLimited.I
87.50%

Malwarebytes
PUP.Optional.YourFileDownloader
87.50%

XVirus List
Win32.Detected
87.50%

AVG
Dropper.Generic7, Skodna.Generic_r, BundleApp_r.B, Adware Generic_r.PF, Adware BundleApp_r.AE
75.00%

NANO AntiVirus
Riskware.Win32.Amonetize.cvaajw, Riskware.Win32.Babylon.dagvqp
75.00%

Avira AntiVirus
ADWARE/Adware.Gen2, APPL/Downloader.Gen
75.00%

Rising Antivirus
PE:Malware.Adware!6.14A5
75.00%

The domain yourfiledownloader.com has been seen to resolve to the following 7 IP addresses.

54.72.130.67
ns1.ibspark.com
May 15, 2016

127.0.0.1
ReasonOne
September 21, 2015

209.95.43.22
209.95.43.22.static.midphase.com
May 3, 2015

50.7.29.78
November 10, 2014

54.72.9.51
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
July 31, 2014

50.7.28.2
February 27, 2014

72.20.51.146
.
December 26, 2013

File downloads found at URLs served by yourfiledownloader.com.

24 / 68    (Adware)
http://yourfiledownloader.com/YourFileDownloader.exe  (8e12f9b971c91c4ed2f092ab1f95d259)

14 / 68    (Adware)
http://yourfiledownloader.com/YourFileDownloader.exe  (uninstall170564582.exe)

0 / 68
http://yourfiledownloader.com/YourFileDownloader.exe  (CALC.EXE)

2 / 68      (PUP)
http://yourfiledownloader.com/YourFileDownloader.exe  (7a64963689defd4fb6eb01bfe20c88ec)

20 / 68    (Adware)
http://yourfiledownloader.com/YourFileDownloader.exe  (86afa76fda09d5ebf1472b5f46c72f43)

49 / 68    (Adware)
http://yourfiledownloader.com/YourFileDownloader.exe  (28b70fc2fb61f0fcd4569854f9661f0d)

19 / 68    (Adware)
http://yourfiledownloader.com/YourFileDownloader.exe  (9c26e8afefe6c3f58c70b1fe09fa5dc1)

12 / 68    (Adware)
http://yourfiledownloader.com/YourFileDownloader.exe  (d1c518ce72237f3bf2fb0ab3aff817ed)

9 / 68      (Adware)
http://yourfiledownloader.com/YourFileDownloader.exe  (YourFile.exe)

The following 348 files have been seen to comunicate with yourfiledownloader.com in live environments.

TCP » 54.72.130.67:80
simplefilesupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.130.67:80
uninstall12590625.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.130.67:80
uninstall5322109.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
onedrvup.exe

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.130.67:80
uninstall190602.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.9.51:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80
1799877.exe

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
googleupdate.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80
charles.exe (by Apple)

TCP » 54.72.9.51:80
onedrv.exe

TCP » 54.72.130.67:80
browserserver.exe

 
Latest 20 of 373 files

December 26, 2013
dn.yourfiledownloader.com

February 1, 2014
files.yourfiledownloader.com

March 14, 2014
i.yourfiledownloader.com

March 14, 2014
smart.yourfiledownloader.com

February 27, 2014
www.yourfiledownloader.com

Facebook:
Likes:  6
Shares:  47
Comments:  27

Statistics above are for the previous month of March 2024.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.