asapcomputerupdate.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain asapcomputerupdate.com is registered by proxy through ENOM, INC. and was originally registered in February of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Remove Malware from asapcomputerupdate.com - Powered by Reason Core Security
Registrar:
ENOM, INC.

Server location:
Oregon, United States (US)

Create date:
Wednesday, February 05, 2014

Expires date:
Thursday, February 05, 2015

Updated date:
Wednesday, February 05, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Recode.T, PUP.DownloadAdmin.Recode.Installer (M)
100.00%

NANO AntiVirus
Trojan.Win32.Downware.crgjbr, Riskware.Win32.Downware.crgjbr
66.67%

Dr.Web
Adware.Downware.2220
66.67%

VIPRE Antivirus
DownloadAdmin, Threat.4783369
66.67%

avast!
Adware-OH [Adw], DownloadAdmin-A [Adw]
44.44%

Malwarebytes
PUP.Optional.InstallCore.A
44.44%

ESET NOD32
Win32/DownloadAdmin
33.33%

ESET NOD32
Win32/DownloadAdmin.G potentially unwanted application
33.33%

F-Secure
Adware:W32/WebInstallBundle
33.33%

K7 Gateway Antivirus
Trojan , Unwanted-Program
33.33%

Sophos
Download Admin
33.33%

AVG
Generic
33.33%

Clam AntiVirus
Win.Adware.Agent-6650
22.22%

herdProtect (fuzzy)
a variant of 1e5ec235fcbbec61c58c3140f75a91d5d770f45e, a variant of 7ee85bbee316425abb7e83b54412507c4dd20799
22.22%

F-Secure
Adware:W32/WebInstallBundle
11.11%

The domain asapcomputerupdate.com has been seen to resolve to the following 2 IP addresses.

ec2-54-213-204-174.us-west-2.compute.amazonaws.com
August 26, 2014

ec2-54-200-40-74.us-west-2.compute.amazonaws.com
April 14, 2014

File downloads found at URLs served by asapcomputerupdate.com.

The following file have been seen to comunicate with asapcomputerupdate.com in live environments.

URL:
http://asapcomputerupdate.com/

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache/2.4.7 (Ubuntu) (PHP/5.5.9-1ubuntu4.3)

Remove Malware from asapcomputerupdate.com - Powered by Reason Core Security