download-nation.com

W3i, LLC  (via a Proxy Registrant)

Domain Information

download-nation.com is distributing modified installers which differ from the originals thta utilize the InstallIQ install manager that offers users adware, toolbars and various unwanted software during setup. The domain download-nation.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2011. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Chino Hills, California within the United States which resides on the Liquid Web, Inc. network. The domain is associated with the publisher W3i, LLC who is located in Sartell, Minnesota in the United States.
Registrar:
GODADDY.COM, LLC

Server location:
California, United States (US)

Create date:
Saturday, July 2, 2011

Expires date:
Thursday, July 2, 2015

Updated date:
Thursday, July 3, 2014

ASN:
AS32244 LIQUID-WEB-INC - Liquid Web, Inc.

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Adware.W3i.32
100.00%

VIPRE Antivirus
InstallIQ Installer
100.00%

ESET NOD32
Win32/InstallIQ (variant)
100.00%

Sophos
InstallQ
100.00%

Reason Heuristics
PUP.Installer.InstallX.T, PUP.Installer.InstallX.S, PUP.Installer.InstallX.J
100.00%

Boost by Reason
Adware.Installer.InstallX.T, Adware.Installer.InstallX.S, Optional.InstallX.J
83.33%

Trend Micro House Call
TROJ_GEN.F47V0809, TROJ_GEN.F47V0807, TROJ_GEN.F47V0815
83.33%

McAfee
Artemis!A84DE5227819, Artemis!44BA9354ABE1, Artemis!A34F9AC02DB1
83.33%

Malwarebytes
PUP.Optional.InstallIq, PUP.Optional.InstallIQ, PUP.PlayPickle
83.33%

IKARUS anti.virus
AdWare.InstallIQ
83.33%

herdProtect (fuzzy)
a variant of 2f425f192d2e5b5350ce4c806c3a973746bc88ef, a variant of b0528164743c11e56419836246021fa792c3938b, a variant of 3fbc6de9f1334f53143aea533acb7da976cc53a2
83.33%

Avira AntiVirus
APPL/InstallIQ.Gen5, Adware/InstallIQ.N
83.33%

AVG
Skodna.Generic_r
83.33%

K7 AntiVirus
Riskware
50.00%

Bkav FE
W32.Clodac9.Trojan
50.00%

The domain download-nation.com has been seen to resolve to the following IP address.

August 11, 2013

File downloads found at URLs served by download-nation.com.

5 / 68      (Adware)

13 / 68    (Adware)

URL:
http://download-nation.com/

Google Analytics:
UA-28657151

Title:
“Download Nation | Free Downloads”

Web server:
Apache/2.0.64 (Unix) mod_ssl/2.0.64 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.6 (PHP/5.3.6)

Notes from the site - “download-nation.com is distributing modified installers which differ from the originals. The modified installers are compliant with the original software manufacturer's policies and terms & conditions. InstallIQ™ is an install manager that will manage the installation of your selected software. In addition to managing the installation of your selected software, InstallIQ™ will make recommendations for additional free software that you may be interested in. Additional software may include toolbars, browser add-ons, game applications, anti-virus applications, and other types of applications. You are not required to install any additional software to receive your selected software. You can completely remove the program at any time in Windows' Add/Remove Programs.”