download-nation.com

W3i, LLC  (via a Proxy Registrant)

Domain Information

download-nation.com is distributing modified installers which differ from the originals thta utilize the InstallIQ install manager that offers users adware, toolbars and various unwanted software during setup. The domain download-nation.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2011. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Chino Hills, California within the United States which resides on the Liquid Web, Inc. network. The domain is associated with the publisher W3i, LLC who is located in Sartell, Minnesota in the United States.
Remove Malware from download-nation.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
California, United States (US)

Create date:
Saturday, July 02, 2011

Expires date:
Thursday, July 02, 2015

Updated date:
Thursday, July 03, 2014

ASN:
AS32244 LIQUID-WEB-INC - Liquid Web, Inc.

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Adware.W3i.32
100.00%

VIPRE Antivirus
InstallIQ Installer
100.00%

ESET NOD32
Win32/InstallIQ (variant)
100.00%

Sophos
InstallQ
100.00%

Reason Heuristics
PUP.Installer.InstallX.T, PUP.Installer.InstallX.S, PUP.Installer.InstallX.J
100.00%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud)
100.00%

Boost by Reason
Adware.Installer.InstallX.T, Adware.Installer.InstallX.S, Optional.InstallX.J
83.33%

Trend Micro House Call
TROJ_GEN.F47V0809, TROJ_GEN.F47V0807, TROJ_GEN.F47V0815
83.33%

McAfee
Artemis!A84DE5227819, Artemis!44BA9354ABE1, Artemis!A34F9AC02DB1
83.33%

Malwarebytes
PUP.Optional.InstallIq, PUP.Optional.InstallIQ, PUP.PlayPickle
83.33%

McAfee Web Gateway
Artemis!A84DE5227819, Artemis!44BA9354ABE1, Artemis!A34F9AC02DB1
83.33%

IKARUS anti.virus
AdWare.InstallIQ
83.33%

herdProtect (fuzzy)
a variant of 2f425f192d2e5b5350ce4c806c3a973746bc88ef, a variant of b0528164743c11e56419836246021fa792c3938b, a variant of 3fbc6de9f1334f53143aea533acb7da976cc53a2
83.33%

Avira AntiVirus
APPL/InstallIQ.Gen5, Adware/InstallIQ.N
83.33%

AVG
Skodna.Generic_r
83.33%

The domain download-nation.com has been seen to resolve to the following IP address.

August 11, 2013

File downloads found at URLs served by download-nation.com.

6 / 68      (Adware)

15 / 68    (Adware)

URL:
http://download-nation.com/

Google Analytics:
UA-28657151

Title:
“Download Nation | Free Downloads”

Web server:
Apache/2.0.64 (Unix) mod_ssl/2.0.64 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.3.6 (PHP/5.3.6)

Notes from the site - “download-nation.com is distributing modified installers which differ from the originals. The modified installers are compliant with the original software manufacturer's policies and terms & conditions. InstallIQ™ is an install manager that will manage the installation of your selected software. In addition to managing the installation of your selected software, InstallIQ™ will make recommendations for additional free software that you may be interested in. Additional software may include toolbars, browser add-ons, game applications, anti-virus applications, and other types of applications. You are not required to install any additional software to receive your selected software. You can completely remove the program at any time in Windows' Add/Remove Programs.”
Remove Malware from download-nation.com - Powered by Reason Core Security