The domain express-player.com registered by Whois Privacy Corp. was initially registered in February of 2012 through INTERNET DOMAIN SERVICE BS CORP. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Salt Lake City, Utah within the United States which resides on the Hosting Services, Inc. network.
Registrant:
Whois Privacy Corp.
Registrar:
INTERNET DOMAIN SERVICE BS CORP
Server location:
Utah, United States (US)
Create date:
Monday, February 27, 2012
Expires date:
Monday, February 27, 2017
Updated date:
Monday, January 11, 2016
ASN:
AS29854 WESTHOST - WestHost, Inc.,US
Scanner detections:
Detections (93% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Mindspark.MindsparkInteractiveNetwork.Installer (M), PUP.Bundler (M), Threat.Win.Reputation.IMP, Adware.Bundler (M), PUP.installCore (M)
65.85%
Emsisoft Anti-Malware
Trojan.Generic.6753864, Gen:Variant.Symmi.59817, Gen:Variant.Adware.Symmi.59817, Gen:Variant.Mikey.31214, Gen:Variant.Razy.4268
31.71%
Norman
Trojan.Generic.6753864, Gen:Variant.Adware.Symmi.59817, Gen:Variant.Mikey.31214, Gen:Variant.Symmi.60510, Gen:Variant.Razy.4268
26.83%
avast!
Win32:VB-OJQ [Wrm], Win32:Adware-gen [Adw], Win32:Evo-gen [Susp], Win32:Crypt-RXH [Trj], Win32:Malware-gen, Win32:Oncer
21.95%
ESET NOD32
Win32/ExpressDownloader.J potentially unwanted application, Win32/FusionCore.E potentially unwanted application, Win32/VB.OSK trojan, Win32/InstallCore.ACY.gen potentially unwanted application, Win32/Chir.B virus
19.51%
Dr.Web
Trojan.Siggen6.54687, Trojan.Swizzor.19586, Trojan.Swizzor.19587, Trojan.InstallCore.978, Adware.Downware.13622, Win32.Runonce.6652, Win32.Sector.30
19.51%
McAfee
Virus.W32/Swisyn.ag, Trojan.Artemis!0C35D68942D8, Trojan.Artemis!4109A425E5ED, Artemis!0756591F5975, Virus.W32/Chir.b@MM
19.51%
Kaspersky
not-a-virus:HEUR:AdWare.Win32.DealPly, not-a-virus:AdWare.Win32.DealPly, Trojan.Win32.Swisyn, Email-Worm.Win32.Runouce, Virus.Win32.Sality
17.07%
Microsoft Security Essentials
Threat.Undefined
12.20%
F-Prot
W32/VB.AD.gen, W32/Thecid.B@mm, W32/Sality.E.gen
12.20%
Avira AntiVirus
PUA/EDownloader.Gen4, PUA/InstallCore.613319, PUA/InstallCore.506793
9.76%
Rising Antivirus
PE:Malware.Kazy!6.1E64 [F], PE:Malware.XPACK-HIE/Heur!1.9C48 [F], PE:Malware.Generic/QRS!1.9E2D [F]
9.76%
Qihoo 360 Security
Win32/Virus.Downloader.d6f, QVM08.0.Malware.Gen, HEUR/QVM08.0.Malware.Gen
9.76%
VIPRE Antivirus
ExpressFiles Installer, Threat.4763461, Trojan.Win32.Generic
9.76%
AVG
Generic_r, Win32/Chir.B@mm, Win32/Sality
9.76%
The domain express-player.com has been seen to resolve to the following 2 IP addresses.
inopinabwhit.guaranteedfact.com
January 28, 2016
File downloads found at URLs served by express-player.com.
URL:
http://express-player.com/
Related Domains