home

dwnloader.net

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain dwnloader.net is registered by proxy through DOMAINCONTEXT, INC. and was originally registered in April of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
DOMAINCONTEXT, INC.

Server location:
Moscow City, Russia (RU)

Create date:
Monday, April 22, 2013

Expires date:
Wednesday, April 22, 2015

Updated date:
Wednesday, February 26, 2014

Whois:
1 dwnloader.net record

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Pentagon.e, PUP.Pentagon (M)
100.00%

Dr.Web
Adware.Downware.1157
25.00%

VIPRE Antivirus
Threat.4150696
25.00%

ESET NOD32
Win32/ZvuZona.A potentially unwanted application
25.00%

F-Prot
W32/Zona.C.gen
25.00%

Kaspersky
not-a-virus:Downloader.Win32.LMN
25.00%

MicroWorld eScan
Gen:Variant.Adware.Graftor.127227
25.00%

McAfee
Downloader-FNM!4D7A16750EED
25.00%

Malwarebytes
PUP.Optional.ZvuZona
25.00%

K7 AntiVirus
Unwanted-Program
25.00%

NANO AntiVirus
Riskware.Win32.LMN.cgfwso
25.00%

Bitdefender
Gen:Variant.Adware.Graftor.127227
25.00%

Agnitum Outpost
PUA.Downloader
25.00%

Lavasoft Ad-Aware
Gen:Variant.Adware.Graftor.127227
25.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.127227
25.00%

The domain dwnloader.net has been seen to resolve to the following IP address.

178.218.223.39
e2dc-unassigned.eserver-ru.com
April 14, 2014

File downloads found at URLs served by dwnloader.net.

1 / 68      (PUP)
http://dwnloader.net/dXJsPWh0dHAlM0ElMkYlMkZkbC56YXljZXYubmV0JTJGYmIyZWNjZTgtNGYwOC00MzVlLWFhNmUtZjEwMzQ1YWVhNGJhJTJGMTkyMTQlMkYxOTIxNDY3JTJGcHN5Xy1fZ2VudGxlbWFuXyh6YXljZXYubmV0KS5tcDMmdGl0bGU9cHN5Xy1fZ2VudGxlbWFuXyh6YXljZXYubmV0KS5tcDMmcGlkPTc=  (psy_-_gentleman_(zaycev.net).exe)

1 / 68      (PUP)
http://dwnloader.net/dXJsPWh0dHAlM0ElMkYlMkZkbC56YXljZXYubmV0JTJGNDQxOTUzODQtYTFlMy00NTAwLTg1ZGUtMTdiYzFkYzNhNzlhJTJGMTgxNDUlMkYxODE0NTI4JTJGc3Rhc19taWtoYXlsb3ZfLV90eV9vZG5hX3Rha2F5YV8oemF5Y2V2Lm5ldCkubXAzJnRpdGxlPXN0YXNfbWlraGF5bG92Xy1fdHlfb2RuYV90YWtheWFfKHpheWNldi5uZXQpLm1wMyZwaWQ9Nw==  (stas_mikhaylov_-_ty_odna_takaya_(zaycev.net).exe)

1 / 68      (PUP)
http://dwnloader.net/dXJsPWh0dHAlM0ElMkYlMkZkbC56YXljZXYubmV0JTJGMmE0OWZjNTAtMDU5Mi00NGJmLWEzN2QtMjc1MmI5MWFjZTI1JTJGMTQ5ODIlMkYxNDk4MjU5JTJGcmljaGFyZF9tYXJ4Xy1fcmlnaHRfaGVyZV93YWl0aW5nXyh6YXljZXYubmV0KS5tcDMmdGl0bGU9cmljaGFyZF9tYXJ4Xy1fcmlnaHRfaGVyZV93YWl0aW5nXyh6YXljZXYubmV0KS5tcDMmcGlkPTc=  ({blocked}.exe)

0 / 68
http://dwnloader.net/dXJsPWh0dHAlM0ElMkYlMkZkbC56YXljZXYubmV0JTJGMzdkZmUzMzAtZDQ2Yy00MTUzLTg0NmQtYzYxZjM4MTY2MDg0JTJGOTY5MyUyRjk2OTM2OCUyRmxhZHlfZ2FnYV8tX2p1ZGFzX29yaWdpbmFsXyh6YXljZXYubmV0KS5tcDMmdGl0bGU9bGFkeV9nYWdhXy1fanVkYXNfb3JpZ2luYWxfKHpheWNldi5uZXQpLm1wMyZwaWQ9Nw==  (lady_gaga_-_judas_original_(zaycev.net).exe)

23 / 68    (PUP)
http://dwnloader.net/dXJsPWh0dHAlM0ElMkYlMkZkbC56YXljZXYubmV0JTJGNWNjZjczMmItMWU1Yi00YTk2LTg4OGYtODYyNWI4ZWVlZTdjJTJGMjA4NSUyRjIwODU2NCUyRm5pa29sYXlfcG9nb2RhZXZfLV9kYXNoYV8oemF5Y2V2Lm5ldCkubXAzJnRpdGxlPW5pa29sYXlfcG9nb2RhZXZfLV9kYXNoYV8oemF5Y2V2Lm5ldCkubXAzJnBpZD03  (nikolay_pogodaev_-_dasha_(zaycev.net).exe)

URL:
http://dwnloader.net/

Web server:
Zvu Server

zvu.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.