home

9d370138395b74176b302b67.fileskaholic.ru

Private Person  (Proxy Registrant)

Domain Information

The domain 9d370138395b74176b302b67.fileskaholic.ru is registered by proxy through REGRU-RU and was originally registered in June of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Thursday, June 2, 2016

Expires date:
Friday, June 2, 2017

Root domain:
fileskaholic.ru

Whois:
1 fileskaholic.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCube.ROSKONNE (M)
83.33%

avast!
Win32:Trojan-gen
16.67%

Microsoft Security Essentials
Threat.Undefined
16.67%

ESET NOD32
Win32/Kryptik.EZLC trojan
16.67%

File downloads found at URLs served by 9d370138395b74176b302b67.fileskaholic.ru.

1 / 68      (PUP)
http://9d370138395b74176b302b67.fileskaholic.ru/api/web/getInstaller?transaction_id=250275553&token=af0535c0bbd4f201295a6dad705fd6c8&return_url=http://.../farmingsimulator.torrent&source=&format=json  (kak_sdelat_format_pesni_aas.exe)

1 / 68      (PUP)
http://9d370138395b74176b302b67.fileskaholic.ru/api/web/getInstaller?transaction_id=250270113&token=2ad2cbe534e0519d6820a538cbcc7121&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (grammarly_5_0_3_0_incl_crack_keygen.exe)

1 / 68      (PUP)
http://9d370138395b74176b302b67.fileskaholic.ru/api/web/getInstaller?transaction_id=250276979&token=1488e03e92ef09bb3676f25f1386c87a&return_url=http://.../farmingsimulator.torrent&source=&format=json  (samie_bolshie_siski.exe)

3 / 68      (Malware)
http://9d370138395b74176b302b67.fileskaholic.ru/api/web/getInstaller?transaction_id=250268042&token=183d6acb61a6b6a94d599a8dad239153&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (removewat_2_2_6_windows_activator.exe)

1 / 68      (PUP)
http://9d370138395b74176b302b67.fileskaholic.ru/api/web/getInstaller?transaction_id=250266001&token=c351ed1e34845b9b7228e3e051ae7ae3&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (malwarebytes_antimalware_premium_2_2_0_2016_life.exe)

1 / 68      (PUP)
http://9d370138395b74176b302b67.fileskaholic.ru/api/web/getInstaller?transaction_id=250280714&token=61c350321b643440ea8c4c5d6d0b96d8&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (minecraft_ndir_team_extreme_1_8_9_full.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.