b1.rivalgaming.com

Domain Privacy Service FBO Registrant.  (Proxy Registrant)

Domain Information

The domain b1.rivalgaming.com is registered by proxy through DOMAIN.COM, LLC and was originally registered in May of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Irvine, California within the United States which resides on the Future Ads LLC network.
Remove Malware from b1.rivalgaming.com - Powered by Reason Core Security
Registrar:
DOMAIN.COM, LLC

Server location:
California, United States (US)

Create date:
Monday, May 12, 2008

Expires date:
Thursday, May 12, 2016

Updated date:
Friday, January 22, 2016

ASN:
AS4905 FA-LAX-1 - Future Ads LLC

Root domain:

Scanner detections:
Detections  (86% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Conversionads.T, PUP.Installer.RivalGaming.H, PUP.Installer.SavingsApps.F, PUP.Installer.BluPakSoftware.F, PUP.Installer.RivalGaming.F, PUP.EpicPlay.Installer, PUP.InstallationSafe.Installer (M), PUP.EpicPlay.RivalGaming.Installer (M), PUP.Air Software.AirSoftware.Bundler (M)
94.74%

Avira AntiVirus
W32/Sality.AT, ADWARE/InstallCore.Gen7, ADWARE/Adware.Gen7, TR/Kazy.kjh, Adware/AirInst.1174
47.37%

F-Prot
W32/Sality.gen2, W32/InstallCore.R2.gen, W32/RivalGame.A.gen, W32/AirInstall.A.gen
42.11%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4139338, Threat.5065747, Threat.4725075, Threat.4782985
42.11%

IKARUS anti.virus
SoftwareBundler, Trojan-Dropper.Agent, Trojan.Kazy, not-a-virus:AdWare.GameVance, Win32.SuspectCrc, AdWare.Airinstall
42.11%

Dr.Web
Win32.Sector.21, Adware.GameVance.91, Adware.GameVance.113, Trojan.Fakealert.34581, Adware.Downware.1167
36.84%

F-Secure
Win32.Sality.3, Gen:Variant.Adware.Gamevance.15, Win32.Neshta.A
36.84%

Malwarebytes
PUP.Optional.InstallCore.A, Adware.GameVance, PUP.Optional.AirInstaller
36.84%

K7 Gateway Antivirus
Unwanted-Program , Adware
36.84%

K7 AntiVirus
Unwanted-Program , Adware
36.84%

Sophos
Conversion Ads, PUA 'Rival Gaming' (of type Adware), PUA 'AirInstaller'
36.84%

Comodo Security
ApplicUnwnt, ApplicUnwnt.Win32.AdWare.GameVance.RG, Application.Win32.AirAdInstaller.A
36.84%

Rising Antivirus
PE:Backdoor.Hupigon!6.1FD, PE:Adware.Agent!1.9D31, PE:PUF.Airinstall!1.9C4C
36.84%

AVG
Agent.F, Adware Skodna.Gamevance, Adware Skodna.Gamevance.GF, Adware Skodna.Gamevance.RT, Adware Generic_r
36.84%

Lavasoft Ad-Aware
Gen:Variant.Adware.Gamevance.15, Application.Bundler.AirInstaller.E
31.58%

The domain b1.rivalgaming.com has been seen to resolve to the following 9 IP addresses.

June 18, 2015

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

February 7, 2014

File downloads found at URLs served by b1.rivalgaming.com.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

5 / 68      (false positives)

1 / 68      (Adware)
http://b1.rivalgaming.com/setup/.../Setup.exe  (81b5e7b38c62528648be776f97288675)

37 / 68    (Adware)
http://b1.rivalgaming.com/setup/.../Setup.exe  (aea7f0aca0f6a565b57b6dcea63af2fa)

URL:
http://b1.rivalgaming.com/

Web server:
nginx

Remove Malware from b1.rivalgaming.com - Powered by Reason Core Security