home

cf36de6c2b35e1593a5ddf4c.fileskaholic.ru

Private Person  (Proxy Registrant)

Domain Information

The domain cf36de6c2b35e1593a5ddf4c.fileskaholic.ru is registered by proxy through REGRU-RU and was originally registered in June of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Thursday, June 2, 2016

Expires date:
Friday, June 2, 2017

Root domain:
fileskaholic.ru

Whois:
1 fileskaholic.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCube.ROSKONNE (M)
66.67%

avast!
Win32:Adware-gen [Adw]
33.33%

ESET NOD32
Win32/Kryptik.EZJW trojan
33.33%

Dr.Web
Trojan.InstallCube.987
33.33%

File downloads found at URLs served by cf36de6c2b35e1593a5ddf4c.fileskaholic.ru.

1 / 68      (PUP)
http://cf36de6c2b35e1593a5ddf4c.fileskaholic.ru/api/web/getInstaller?transaction_id=250241703&token=33a7b4fdfcdd24a75ea67537be0ad8dc&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (the_purge_2013_bluray_1080p_5_1ch_x264_ganool_ag.exe)

1 / 68      (PUP)
http://cf36de6c2b35e1593a5ddf4c.fileskaholic.ru/api/web/getInstaller?transaction_id=250240025&token=f7e03cbacbcedf49e37a3807c192a8f6&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (archive_file265382.exe)

3 / 68      (PUP)
http://cf36de6c2b35e1593a5ddf4c.fileskaholic.ru/api/web/getInstaller?transaction_id=250244869&token=087bf5c95b804cfad5fd43f60e8c923a&return_url=http://.../GetGoDMSetup.exe&source=&format=json  (lego_marvel_super_heroes_game.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.