home

download.windows7codecs.com

Williams Cole

Domain Information

The domain download.windows7codecs.com registered by Williams Cole was initially registered in August of 2009 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Anaheim, California within the United States.
Registrar:
GODADDY.COM, LLC

Server location:
California, United States (US)

Create date:
Saturday, August 1, 2009

Expires date:
Tuesday, August 1, 2017

Updated date:
Tuesday, July 21, 2015

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
windows7codecs.com

Whois:
3 windows7codecs.com records

Scanner detections:
Detections  (61% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/OpenCandy, Win32/Toolbar.Widgi (variant), Win32/OpenCandy potentially unsafe, Win32/OpenCandy.C potentially unsafe (variant)
80.00%

Reason Heuristics
PUP.Installer.ColeWilliams.N, PUP.Installer.ColeWilliams.AA, PUP.OpenCandy.Installer (L)
73.33%

Trend Micro House Call
HV_ZYX_.A632A135, TROJ_GEN.F47V0521, TROJ_GEN.F47V0531, Suspicious_GEN.F47V0813, Suspicious_GEN.F47V0308, TROJ_GEN.R00UH05DS15
60.00%

Dr.Web
Adware.Spigot.9, Adware.OpenCandy.4, Adware.OpenCandy.137, Adware.Spigot.76
53.33%

K7 AntiVirus
Spyware , Unwanted-Program , Riskware
40.00%

G Data
NSIS.Application.OpenCandy, NSIS.Adware.SoftBundled, Win32.Adware.OpenCandy, Win32.Application.OpenCandy
40.00%

Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
33.33%

McAfee
Artemis!6810717C3DF2, Artemis!8A5A9D227796, Artemis!C426E3252DA1, Artemis!4C3A91E88146, Artemis!2A69647E32A1
33.33%

Malwarebytes
PUP.Optional.OpenCandy, PUP.Optional.OpenCandy.A
33.33%

NANO AntiVirus
Riskware.Win32.OpenCandy.ddwoan, Riskware.Win32.OpenCandy.dqxwfk, Riskware.Win32.OpenCandy.dvwkdm
26.67%

VIPRE Antivirus
Trojan.Win32.Generic, Opencandy, Spigot
26.67%

AVG
OpenCandy
26.67%

Fortinet FortiGate
Riskware/OpenCandy, Adware/Agent
26.67%

F-Prot
W32/OpenCandy.A2.gen, W32/OpenCandy.A.gen
20.00%

Zillya! Antivirus
Adware.OpenCandy.Win32.517, Trojan.Packed.Win32.73976
20.00%

The domain download.windows7codecs.com has been seen to resolve to the following 8 IP addresses.

198.27.87.20
June 5, 2016

149.56.65.31
ip31.ip-149-56-65.net
February 23, 2016

149.56.65.32
ip32.ip-149-56-65.net
February 23, 2016

167.114.11.144
ip144.ip-167-114-11.net
December 7, 2015

192.99.182.28
ip28.ip-192-99-182.net
November 13, 2015

192.99.41.161
May 30, 2014

198.27.127.242
March 15, 2014

198.27.127.243
March 15, 2014

File downloads found at URLs served by download.windows7codecs.com.

0 / 68
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.6.setup.exe  (b2fb00863a53d318e6a51fbc23768ada)

0 / 68
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.6.setup.exe  (01609d5b2e4e6887670b43348dab206c)

0 / 68
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.6.setup.exe  (82e07985ffe5d4f71c4d63853bba3b42)

0 / 68
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.6.setup.exe  (16c53e948141f4460679bc5645069f9f)

0 / 68
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.6.setup.exe  (398bc7628c315d4c73dac5fb63909dd1)

0 / 68
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.6.setup.exe  (a2782f6fd76bacbd276fa35faf1e35fb)

0 / 68
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.6.setup.exe  (74a641debd02e05f433463cb19fcbec1)

7 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.3.setup.exe  (windows.7.codec.pack.v4.1.5.setup.exe)

11 / 68    (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.5.setup.exe  (34cb8cadb47b9d4cd4d2e4f5c484c5f9)

0 / 68
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.5.setup.exe  (60626c6cf854f6d0ee01361aede9f19a)

12 / 68    (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.2.setup.exe  (4c3a91e8814649f057af397120d6a2a3)

12 / 68    (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.4.setup.exe  (f021a2c6b5c2bd3db47ba16749129e3b)

2 / 68
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.1.setup.exe  (f0b680b01b5a7bccf6566d6a43be738a)

7 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.5.setup.exe  (16eef99607a3c121476ccba400a2ed05)

8 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.3.setup.exe  (5d2824f9b053109fdd47d1e6e4d68e4e)

9 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.0.setup.exe  (8a5a9d2277969322cb7c6d5ff4db8d88)

2 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.1.0.setup.exe  (665e6f1f2d49f6413ea993251555a10b)

6 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.0.8.setup.exe  (windows.7.codec.pack.v4.0.9.setup.exe)

4 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.0.6.setup.exe  (6810717c3df2193268361d0f9ec69152)

6 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.0.9.setup.exe  (438efc760ae06264eeba30690e2105c0)

6 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.0.9.setup.exe  (6e4835ccc105b75dce88811e85510615)

4 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.0.9.setup.exe  (a43406d3e762b3f037ae9071cb842316)

5 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.0.8.setup.exe  (8dce1a00e8dde9a609b28ba68b59d15e)

3 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.0.8.setup.exe  (5a574f9b60cc14bdb2b9f01e18af1966)

4 / 68      (PUP)
http://download.windows7codecs.com/files/.../windows.7.codec.pack.v4.0.7.setup.exe  (6449086_setup.exe)

URL:
http://download.windows7codecs.com/

Google Analytics:
UA-27082635

Title:
“Windows 7 Codec Pack”

Web server:
Apache (PHP/7.0.4)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.