files.downloadwiz.com

Air Software  (via a Proxy Registrant)

Domain Information

The domain files.downloadwiz.com is registered by proxy through ENOM, INC. and was originally registered in September of 2004. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network. The domain is associated with the publisher Air Software who is located in Victoria, British Columbia in Canada.
Remove Malware from files.downloadwiz.com - Powered by Reason Core Security
Registrar:
ENOM, INC.

Server location:
New York, United States (US)

Create date:
Monday, September 13, 2004

Expires date:
Tuesday, September 13, 2016

Updated date:
Saturday, December 19, 2015

ASN:
AS14061 DIGITALOCEAN-ASN - Digital Ocean, Inc.

Root domain:

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.LionSeaSoftwarecoltd.F, PUP.Installer.Mindadmedia.F, DownloadManager.AirSoftware.F, PUP.Air Software.AirSoftware.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.OutBrowse, PUP.Optional.AirInstaller
83.33%

Trend Micro House Call
TROJ_GEN.F47V1013, HV_ZYX_CA082EC9.TOMC
83.33%

Dr.Web
Adware.Downware.1676, Adware.Downware.665, Adware.Downware.897, Adware.Downware.10718, Adware.Downware.10027
83.33%

VIPRE Antivirus
OutBrowse, Threat.4782985
83.33%

Sophos
DomainIQ pay-per install, AirInstaller, PUA 'AirInstaller'
83.33%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud)
83.33%

Bkav FE
W32.Clod8ba.Trojan, W32.HfsAdware
66.67%

K7 AntiVirus
Unwanted-Program
66.67%

K7 Gateway Antivirus
Unwanted-Program
66.67%

Agnitum Outpost
PUA.OutBrowse, PUA.AirAd
66.67%

F-Prot
W32/AirInstall.A7.gen, W32/AirInstall.A.gen
66.67%

ESET NOD32
Win32/AirAdInstaller.A potentially unwanted application
66.67%

Comodo Security
Application.Win32.AirAdInstaller.B
66.67%

Avira AntiVirus
Adware/AirAdInstaller.K.17, Adware/AirAdInstaller.F
66.67%

The domain files.downloadwiz.com has been seen to resolve to the following 4 IP addresses.

justice.airinstaller.com
May 4, 2015

chicago.airinstaller.com
November 17, 2014

uswestmeganode1.airinstaller.com
May 1, 2014

108.168.218.34-static.reverse.softlayer.com
February 6, 2014

File downloads found at URLs served by files.downloadwiz.com.

The following file have been seen to comunicate with files.downloadwiz.com in live environments.

Remove Malware from files.downloadwiz.com - Powered by Reason Core Security