home

asapcomputerupdate.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain asapcomputerupdate.com is registered by proxy through ENOM, INC. and was originally registered in February of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
ENOM, INC.

Server location:
Oregon, United States (US)

Create date:
Wednesday, February 5, 2014

Expires date:
Thursday, February 5, 2015

Updated date:
Wednesday, February 5, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Whois:
1 asapcomputerupdate.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Recode.T, PUP.DownloadAdmin.Recode.Installer (M), PUP.Adknowledge.INSTALLD.Installer (M)
100.00%

NANO AntiVirus
Trojan.Win32.Downware.crgjbr, Riskware.Win32.Downware.crgjbr
35.29%

Dr.Web
Adware.Downware.2220
35.29%

VIPRE Antivirus
DownloadAdmin, Threat.4783369
35.29%

avast!
Adware-OH [Adw], DownloadAdmin-A [Adw]
23.53%

Malwarebytes
PUP.Optional.InstallCore.A
23.53%

ESET NOD32
Win32/DownloadAdmin
17.65%

ESET NOD32
Win32/DownloadAdmin.G potentially unwanted application
17.65%

F-Secure
Adware:W32/WebInstallBundle
17.65%

Sophos
Download Admin
17.65%

AVG
Generic
17.65%

Clam AntiVirus
Win.Adware.Agent-6650
11.76%

herdProtect (fuzzy)
a variant of 1e5ec235fcbbec61c58c3140f75a91d5d770f45e, a variant of 7ee85bbee316425abb7e83b54412507c4dd20799
11.76%

F-Secure
Adware:W32/WebInstallBundle
5.88%

K7 AntiVirus
Unwanted-Program
5.88%

The domain asapcomputerupdate.com has been seen to resolve to the following 2 IP addresses.

54.213.204.174
ec2-54-213-204-174.us-west-2.compute.amazonaws.com
August 26, 2014

54.200.40.74
ec2-54-200-40-74.us-west-2.compute.amazonaws.com
April 14, 2014

File downloads found at URLs served by asapcomputerupdate.com.

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=37558825-2a3a-4dd5-a5f3-10a1ec34e0d1  (browserupdate-setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=a1f51462-6292-42fa-beb0-e673535148ab  (browserupdate-setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=9c3c565f-064a-4f5d-bcff-c0188bfc590e  (browserupdate-setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=dch-Browser&transaction_id=103c1d91-128e-4883-a9ad-25d41a3ff4b8  (browserupdate-setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=6f7c1349-0dc3-4d0a-b737-10170a9a7675  (browserupdate-setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/browser-update/.../install.php?sid=&uid=&source=D-Chrome-Media1&transaction_id=5c110862-6385-4e78-b431-889ae1c9db89  (chrome_setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=9c2da722-6c06-49d6-b557-4aee8d2a961f  (browserupdate-setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=7d87e361-6136-4f9a-9c7e-822f1edf6f70  (browserupdate-setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=4cc4b8b4-5fc9-43f1-8d24-f3ffcf2782f1  (browserupdate-setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=f520a7b2-d5db-4f01-aab0-a2cfa8375990  (browserupdate-setup.exe)

1 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=472078e7-68ac-43fb-a419-f8f25aea138a  (browserupdate-setup.exe)

6 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=94e33e7c-70b7-4616-814e-472e7aac60cd  (browserupdate-setup.exe)

12 / 68    (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=4d68f1dc-9ffc-4ff0-8403-a709eac04eb7  (browserupdate-setup.exe)

11 / 68    (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=59eb045e-f533-4295-bbf9-40e113b6adae  (browserupdate-setup.exe)

11 / 68    (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=2f71e53a-abe1-4089-82b4-f6637b0ad2cc  (browserupdate-setup.exe)

8 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=11eab7e4-34de-4f47-83dd-fc0eaaadcd43  (browserupdate-setup.exe)

5 / 68      (Adware)
http://asapcomputerupdate.com/tri/browser-upgrade/.../install.php?a=&aid=&source=GGO-1311-Browser&transaction_id=57396db5-036a-4180-8348-ffc8987859ec  (browserupdate-setup.exe)

The following file have been seen to comunicate with asapcomputerupdate.com in live environments.

TCP » 54.200.40.74:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

URL:
http://asapcomputerupdate.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.4.7 (Ubuntu) (PHP/5.5.9-1ubuntu4.3)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.