download.windowscleaner.ru
Private Person (Proxy Registrant)
Domain Information
The domain download.windowscleaner.ru is registered by proxy through REGGI-RU and was originally registered in January of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrant:
Private Person
Server location:
Moscow City, Russia (RU)
Create date:
Friday, January 24, 2014
Expires date:
Tuesday, January 24, 2017
ASN:
AS199860 SDN-AS Stack Data Network LLC,RU
Scanner detections:
Detections (88% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.iTVA.W, PUP.Installer.iTVA.R, PUP.Installer.ITVA, PUP.LimitedLiabilityCompany.Installer (M), PUP.iTVA.ITVALimitedLiabilityCompany.Installer.Meta (M), PUP.ITVALimitedLiabilityCompany.Installer (M), PUP.iTVA.Installer (M)
100.00%
Dr.Web
Adware.Downware.6456, Adware.Downware.10462, Adware.Downware.11786
57.14%
ESET NOD32
Win32/Itva, Win32/Itva.D potentially unwanted (variant)
42.86%
McAfee
Artemis!4F4EECBF8C9E, Artemis!79B68F292E6C
28.57%
Trend Micro House Call
Suspicious_GEN.F47V0801, Suspicious_GEN.F47V0716
28.57%
K7 AntiVirus
Trojan
28.57%
Agnitum Outpost
Riskware.Agent
28.57%
Sophos
Generic PUA MI
28.57%
Avira AntiVirus
TR/avti.A
28.57%
IKARUS anti.virus
PUA.Itva
28.57%
Fortinet FortiGate
Riskware/Itva
28.57%
Norman
Suspicious_Gen4.GYDSI
14.29%
The domain download.windowscleaner.ru has been seen to resolve to the following 2 IP addresses.
File downloads found at URLs served by download.windowscleaner.ru.
URL:
http://download.windowscleaner.ru/
Related Domains
