click.downloadverse.com

Air Software  (via a Proxy Registrant)

Domain Information

The domain click.downloadverse.com is registered by proxy through ENOM, INC. and was originally registered in January of 2013. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network. The domain is associated with the publisher Air Software who is located in Victoria, British Columbia in Canada.
Remove Malware from click.downloadverse.com - Powered by Reason Core Security
Registrar:
ENOM, INC.

Server location:
New York, United States (US)

Create date:
Tuesday, January 29, 2013

Expires date:
Friday, January 29, 2016

Updated date:
Thursday, January 08, 2015

ASN:
AS393406 DIGITALOCEAN-ASN-NY3 - Digital Ocean, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
DownloadManager.AirSoftware.F, PUP.Optional.Installer.F, PUP.Bundler.Adknowledge
100.00%

Dr.Web
Trojan.SMSSend.4766, Program.Unwanted.79, Trojan.SMSSend.5533
100.00%

AVG
Generic_r, LionSea Software co., BundleApp_r
100.00%

Malwarebytes
PUP.Optional.AirInstaller
66.67%

K7 AntiVirus
Adware , Unwanted-Program
66.67%

K7 Gateway Antivirus
Unwanted-Program
66.67%

avast!
Win32:Installer-L [PUP], Win32:Adware-BZI [PUP]
66.67%

Sophos
AirInstaller, PUA 'AirInstaller'
66.67%

Comodo Security
Application.Win32.AirAdInstaller.A, Application.Win32.AirInstaller.CEBE
66.67%

VIPRE Antivirus
Iminent, Threat.4784938
66.67%

Rising Antivirus
PE:PUF.Airinstall!1.9C4C
66.67%

Avira AntiVirus
ADWARE/Adware.Gen
66.67%

IKARUS anti.virus
AdWare.Airinstall, PUA.AirAdInstaller
66.67%

nProtect
Trojan-Clicker/W32.AirAdInstaller.824744, Trojan-Clicker/W32.AirAdInstaller.938392
66.67%

F-Prot
W32/AirInstall.A8.gen, W32/A-6bcf410b
66.67%

The domain click.downloadverse.com has been seen to resolve to the following 2 IP addresses.

click.downloadverse.com
May 5, 2015

April 14, 2014

File downloads found at URLs served by click.downloadverse.com.

URL:
http://click.downloadverse.com/

Title:
“Prosper202”

Description:
“description”

Web server:
Apache/2.4.7 (Ubuntu) (PHP/5.5.9-1ubuntu4.3)

Remove Malware from click.downloadverse.com - Powered by Reason Core Security