flv.onesappz.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain flv.onesappz.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Remove Malware from flv.onesappz.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Northern Ireland, United Kingdom (GB)

Create date:
Friday, July 05, 2013

Expires date:
Sunday, July 05, 2015

Updated date:
Sunday, July 06, 2014

Root domain:

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.BechiroSL.O, PUP.Installer.BechiroSL.F, PUP.Installer.Solimba, PUP.Installer.Installer.Meta, PUP.Solimba.Bechiro.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.InstallCore, PUP.Optional.Rapiddown, PUP.Optional.BundleInstaller.A, PUP.Optional.Bundler
94.87%

K7 Gateway Antivirus
Unwanted-Program , Trojan
94.87%

K7 AntiVirus
Unwanted-Program
94.87%

VIPRE Antivirus
DownloadMR, Threat.4782980, Threat.4895151
94.87%

Vba32 AntiVirus
Downware.Morstar
94.87%

AVG
BundleApp, Found Luhe.Fiha.A, Adware BundleApp.BI, Adware BundleApp.BL
94.87%

G Data
Win32.Application.Morstar, Gen:Application.Bundler.Firseria
92.31%

Comodo Security
Application.Win32.Solimba.L, Application.Win32.FirseriaInstaller.RRB
84.62%

Rising Antivirus
PE:Malware.FirseriaInstaller!6.17AF, NS:PUF.SilenceInstaller!1.9DDF
76.92%

ESET NOD32
Win32/FirseriaInstaller (variant)
74.36%

avast!
Win32:PUP-gen [PUP], Adware-gen [Adw]
48.72%

Agnitum Outpost
PUA.Firseria, PUA.Downloader
48.72%

Dr.Web
Trojan.DownLoader11.4114, Trojan.DownLoader11.3502, Trojan.DownLoader11.3686, Adware.Downware.2167
48.72%

Avira AntiVirus
APPL/Firseria.A.15, APPL/FirInstaller.B, APPL/Firseria.D, TR/Spy.AI.14318.9
48.72%

The domain flv.onesappz.com has been seen to resolve to the following 5 IP addresses.

unallocated.barefruit.co.uk
May 3, 2015

ec2-75-101-156-240.compute-1.amazonaws.com
September 4, 2014

ec2-54-197-235-95.compute-1.amazonaws.com
September 4, 2014

dl02.lw100.1e111.net
February 2, 2014

dl01.lw100.1e111.net
February 2, 2014

File downloads found at URLs served by flv.onesappz.com.

1 / 68      (Adware)
http://flv.onesappz.com/n/3.0.30.6/.../Setup.exe  (b33f6216b7de22f5879735df96c964cb)

2 / 68      (PUP)
http://flv.onesappz.com/n/3.0.30.2/.../Setup.exe  (67162ca56ec55742ea46f3b859c73b44)

2 / 68      (PUP)
http://flv.onesappz.com/n/.../Setup.exe  (67162ca56ec55742ea46f3b859c73b44)

22 / 68    (Adware)
http://flv.onesappz.com/n/3.0.30.5/.../Setup.exe  (dbd26275289a33cb9c14af59f5960172)

34 / 68    (Adware)
http://flv.onesappz.com/n/3.0.28.5/.../Setup.exe  (994cc99a1100bb2ab9298c1635ebad0f)

30 / 68    (Adware)
http://flv.onesappz.com/n/3.0.30.1/.../Setup.exe  (58c5903e224d0386345451d56a36044b)

29 / 68    (Adware)
http://flv.onesappz.com/n/3.0.29.5/.../Setup.exe  (6a502c8ecc64f95d3e19b45721cfaefc)

11 / 68    (Adware)

21 / 68    (Adware)

The following 137 files have been seen to comunicate with flv.onesappz.com in live environments.

 
Latest 20 of 137 files

URL:
http://flv.onesappz.com/

Web server:
nginx/1.0.15

Remove Malware from flv.onesappz.com - Powered by Reason Core Security