dl.downloadverse.com

Air Software  (via a Proxy Registrant)

Domain Information

The domain dl.downloadverse.com is registered by proxy through ENOM, INC. and was originally registered in January of 2013. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network. The domain is associated with the publisher Air Software who is located in Victoria, British Columbia in Canada.
Remove Malware from dl.downloadverse.com - Powered by Reason Core Security
Registrar:
ENOM, INC.

Server location:
New York, United States (US)

Create date:
Tuesday, January 29, 2013

Expires date:
Sunday, January 29, 2017

Updated date:
Wednesday, December 30, 2015

ASN:
AS14061 DIGITALOCEAN-ASN - Digital Ocean, Inc.

Root domain:

Scanner detections:
Detections  (91% detected)

Scan engine
Details
Detections

Reason Heuristics
DownloadManager.AirSoftware.F, PUP.Installer.InstallManager.F, PUP.Installer.InstallerSetup.F, PUP.Optional.Installer.F, PUP.Bundler.Adknowledge, PUP.Adknowledge.InstallManager.Installer (M)
100.00%

AVG
Generic_r, BundleApp_r, LionSea Software co.
100.00%

Malwarebytes
PUP.Optional.AirInstaller, PUP.Optional.AirAdInstaller
90.00%

avast!
Win32:Installer-L [PUP], Adware-gen [Adw], Win32:Malware-gen, Win32:Adware-BZI [PUP]
90.00%

Dr.Web
Trojan.SMSSend.4766, Trojan.SMSSend.5502, Trojan.SMSSend.5514, Program.Unwanted.79, Trojan.SMSSend.5533, Trojan.SMSSend.5402
90.00%

VIPRE Antivirus
Iminent, Threat.4150696, Threat.4784938, Threat.4782985
90.00%

Avira AntiVirus
ADWARE/Adware.Gen
90.00%

K7 AntiVirus
Adware , Unwanted-Program
80.00%

K7 Gateway Antivirus
Unwanted-Program
80.00%

Sophos
AirInstaller, PUA 'AirInstaller'
80.00%

Rising Antivirus
PE:PUF.Airinstall!1.9C4C
80.00%

IKARUS anti.virus
AdWare.Airinstall, PUA.AirAdInstaller
80.00%

F-Prot
W32/AirInstall.A8.gen, W32/A-6bcf410b
80.00%

Agnitum Outpost
Adware.Agent, PUA.AirAd
80.00%

G Data
Win32.Adware.Airadinstaller, Gen:Variant.Adware.Graftor.153852
80.00%

The domain dl.downloadverse.com has been seen to resolve to the following 6 IP addresses.

justice.airinstaller.com
February 10, 2015

chicago.airinstaller.com
November 13, 2014

173.192.195.228-static.reverse.softlayer.com
September 27, 2014

uswestmeganode1.airinstaller.com
April 14, 2014

108.168.218.35-static.reverse.softlayer.com
February 7, 2014

50.23.68.85-static.reverse.softlayer.com
December 13, 2013

File downloads found at URLs served by dl.downloadverse.com.

34 / 68    (Adware)

35 / 68    (Adware)

35 / 68    (Adware)

35 / 68    (Adware)

The following file have been seen to comunicate with dl.downloadverse.com in live environments.

Remove Malware from dl.downloadverse.com - Powered by Reason Core Security