home

af9.ru

Domain Information

Server location:
Noord-Holland, Netherlands (NL)

ASN:
AS5580 HIBERNIA TripartZ B.V.,NL

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SalyutemPlyus.H, PUP.InstallMonster.DIREKTTUR (M)
100.00%

avast!
Win32:Dropper-gen [Drp]
50.00%

Dr.Web
Trojan.InstallMonster.1097
50.00%

ESET NOD32
Win32/InstallMonstr.HR potentially unwanted application
50.00%

VIPRE Antivirus
Threat.4150696
50.00%

Sophos
PUA 'Install Monster'
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

Norman
InstallMonstr.S
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

Avira AntiVirus
APPL/InstallMon.enib
50.00%

Vba32 AntiVirus
Signed-Downware.InstallMonstr
50.00%

AVG
Generic
50.00%

The domain af9.ru has been seen to resolve to the following IP address.

5.149.255.162
January 12, 2015

File downloads found at URLs served by af9.ru.

1 / 68      (Adware)
http://af9.ru/ZWZ1eHRvZWVpaXNoeyJzaWQiOiIyNjA4IiwidXJsIjoiaHR0cDpcL1wvcHJlc2VudDUuY29tXC93cC1jb250ZW50XC91cGxvYWRzXC9ncmF2aXR5X2Zvcm1zXC8zLTExYWY5MmY5N2M5ZDEzZDg1YjA4M2I0NzFjMjBiZDE4XC8yMDE0XC8wNVwvc3RyYW5hX2ZyYW50c2l5YS5wcHR4IiwibmFtZSI6InN0cmFuYV9mcmFudHNpeWEiLCJ0eXBlIjoicG93ZXJwb2ludCIsInNpemUiOjAsInZlciI6IjEiLCJybmQwIjoiNDVjYzc2MGVmZTc0MjQ5ZDYzYzM0Yjc5NjM2ZGQ3N2YifQ,,  (strana_frantsiya.exe)

12 / 68    (Adware)
http://af9.ru/bWJlamhnY29pY3hsd3BybmdvbW1tY2t2dWlqYmNtdmNibXNkZ2l4eyJzaWQiOiIyNjA4IiwidXJsIjoiaHR0cDpcL1wvcHJlc2VudDUuY29tXC9kb3dubG9hZFwvcHJlemVudFwvU25lZ2lyaS5wcHQiLCJuYW1lIjoiU25lZ2lyaSIsInR5cGUiOiJwb3dlcnBvaW50Iiwic2l6ZSI6MCwidmVyIjoiMSIsInJuZDAiOiJkZWI0YWFkYzAxYTUxYWQ5ODkxYjEyYWQ2OGJkMGE5NSJ9  (snegiri.exe)

2ppt.ru

download-mp3.in

drvbox.ru

torrentdownloadinstall.com

wotfansite.ru

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.