ads.adsrvmedia.com

NameFind LLC

Domain Information

The domain ads.adsrvmedia.com registered by NameFind LLC was initially registered in July of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Wednesday, July 03, 2013

Expires date:
Sunday, July 03, 2016

Updated date:
Thursday, April 07, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Stepitapp.F, PUP.Optional.Installer.X, Threat.Win.Reputation.IMP, PUP.Installer.Amonetizeltd.g, PUP.Installer.INSTALLTHIS.Q, PUP.Optional.ReimageLimited.H, PUP.Adknowledge.INSTALLTHIS.Installer (M), PUP.Adknowledge.FUSIONINSTALLER.Installer (M), PUP.Stepitapp.Installer (M), PUP.Air Software.AirSoftware.Bundler (M), PUP.Adknowledge.INSTALLT.Installer (M), PUP.Solimba.Firseria.Bundler (M), PUP.Air Software.AirSoftw.Bundler (M), PUP.Adknowledge (M)
94.29%

VIPRE Antivirus
Conduit, Amonetize, Trojan.Win32.Generic, Threat.4778314, AirInstaller, Threat.4150696
51.43%

avast!
Win32:Dropper-gen [Drp], Win32:Amonetize-AX [PUP], Win32:Amonetize-BJ [PUP], Win32:Amonetize-E [PUP], Win32:Rootkit-gen [Rtk]
51.43%

Kaspersky
not-a-virus:Downloader.Win32.Agent, not-a-virus:HEUR:AdWare.Win32.Amonetize, not-a-virus:AdWare.Win32.iBryte, not-a-virus:AdWare.Win32.AirAdInstaller
42.86%

Dr.Web
Adware.Downware.1655, Adware.iBryte.473, Adware.Plugin.171, Adware.Downware.3925, Adware.Downware.5822, Adware.Downware.9660, Threat.Undefined
42.86%

Panda Antivirus
Trj/Chgt.A, Trj/Genetic.gen, Trj/OCJ.E, Trj/CI.A, Trj/Chgt.F, Adware/AirInstaller
40.00%

Qihoo 360 Security
HEUR/Malware.QVM03.Gen, Win32/Virus.Adware.932, Win32/Virus.Downloader.8e5, Malware.QVM10.Gen, Malware.QVM01.Gen
40.00%

McAfee Web Gateway
Artemis!69958AF74D90, PUP-FBM!B23E8B1B1895, Adware-Amonetize!15D7C1200744, Artemis!17FD46A07B73, Artemis!7CB5D5BE15CC, BehavesLike.Win32.AdwareAmonetize.fh
37.14%

Kingsoft AntiVirus
Win32.Troj.DownAgent.ba.(kcloud), Win32.Troj.Generic.a.(kcloud), Win32.Troj.DownAgent.bk.(kcloud)
37.14%

Malwarebytes
PUP.Optional.Amonetize, PUP.Optional.InstallMonetizer, PUP.Optional.OptimumInstaller.A, PUP.Adware.Agent, PUP.Optional.AirInstaller
37.14%

McAfee
Artemis!69958AF74D90, PUP-FBM!B23E8B1B1895, Adware-Amonetize!15D7C1200744, Artemis!17FD46A07B73, Artemis!7CB5D5BE15CC, Artemis!E34960A2248D, Program.Adware-OutBrowse
34.29%

Avira AntiVirus
ADWARE/Adware.Gen2, ADWARE/Adware.Gen7, Adware/Airinstall.J
34.29%

AVG
Generic_r, Adware AdPlugin.WD, BundleApp_r.R, Adware Generic_r.OM
34.29%

Vba32 AntiVirus
Downloader.Agent, suspected of Trojan.Downloader.gen.h, AdWare.AirAdInstaller
31.43%

Sophos
Amonetize, iBryte Optimum Installer, AirInstaller
31.43%

The domain ads.adsrvmedia.com has been seen to resolve to the following 13 IP addresses.

April 14, 2016

March 7, 2015

August 24, 2014

ec2-54-209-208-224.compute-1.amazonaws.com
June 9, 2014

ec2-54-86-161-107.compute-1.amazonaws.com
June 9, 2014

ec2-54-86-12-149.compute-1.amazonaws.com
June 9, 2014

ec2-54-208-93-4.compute-1.amazonaws.com
June 9, 2014

ec2-54-209-60-127.compute-1.amazonaws.com
June 9, 2014

ec2-54-86-137-115.compute-1.amazonaws.com
June 9, 2014

ec2-54-84-246-69.compute-1.amazonaws.com
June 9, 2014

ec2-54-85-106-54.compute-1.amazonaws.com
June 9, 2014

ec2-54-86-122-245.compute-1.amazonaws.com
June 9, 2014

ec2-54-209-212-37.compute-1.amazonaws.com
June 9, 2014

File downloads found at URLs served by ads.adsrvmedia.com.

 
Latest 30 of 40 download URLs

The following 10 files have been seen to comunicate with ads.adsrvmedia.com in live environments.

URL:
http://ads.adsrvmedia.com/

Title:
“adsrvmedia.com”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache