home

gv7.gamevicio.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain gv7.gamevicio.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in August of 2004. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Thursday, August 5, 2004

Expires date:
Saturday, August 5, 2023

Updated date:
Wednesday, February 10, 2016

ASN:
AS16276 OVH , FR

Root domain:
gamevicio.com

Whois:
1 gamevicio.com record

Scanner detections:
Detections  (70% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation (M), PUP.GameVicio.Installer.Meta (M)
71.43%

McAfee
Trojan.Artemis!BB14C8023DB5, Artemis!ED3A63E4412E, Artemis!B3F4A7BBBA39, Artemis!F1D202938E99
57.14%

NANO AntiVirus
Trojan.Win32.Genome.dtleee, Trojan.Win32.Newweb.cyrsvl
57.14%

Trend Micro
PAK_Generic.005
42.86%

Clam AntiVirus
Win.Adware.Oneinstaller
42.86%

ViRobot
Backdoor.Win32.A.Hupigon.652423[h], Trojan.Win32.Agent.4227072[h], Trojan.Win32.A.Gena.478768[h]
42.86%

Trend Micro House Call
PAK_Generic.005
28.57%

K7 AntiVirus
Trojan
28.57%

Avira AntiVirus
PUA/InstallCore.1806801
14.29%

F-Prot
W32/Trojan5.KR
14.29%

VIPRE Antivirus
Trojan.Win32.Generic
14.29%

The domain gv7.gamevicio.com has been seen to resolve to the following IP address.

149.202.112.38
April 14, 2016

File downloads found at URLs served by gv7.gamevicio.com.

3 / 68      (Malware)
http://gv7.gamevicio.com/downloads_817515672/traducao/4/.../twee_br[www.gamevicio.com.br].exe  (twee_br.exe)

5 / 68      (Malware)
http://gv7.gamevicio.com/downloads_344224586/traducao/2/.../medal_of_honor_airborne[www.gamevicio.com.br].exe  (medal_of_honor_ai.exe)

0 / 68
http://gv7.gamevicio.com/downloads_924878423/traducao/0/.../age_of_mythology_br[www.gamevicio.com.br].exe  (c94f9692139b19fe99e4b12ec3f52379)

1 / 68      (PUP)
http://gv7.gamevicio.com/downloads_435256063/traducao/3/.../borderlands[www.gamevicio.com.br].exe  (71cb72fd729ff4e30149d94fb1b74b33)

7 / 68      (PUP)
http://gv7.gamevicio.com/downloads_344987169/traducao/4/.../mafia2_br[www.gamevicio.com.br].exe  (b3f4a7bbba39e6d3dfc966a1c1057b0a)

6 / 68      (PUP)
http://gv7.gamevicio.com/downloads_924878423/traducao/4/.../bc2_br[www.gamevicio.com.br].exe  (bb14c8023db52b8176de83911cfdb97b)

0 / 68
http://gv7.gamevicio.com/downloads_924878423/traducao/1/.../fable_tlc_br[www.gamevicio.com.br].exe  (344405ee1fc2bcf3b682200c8f44a04a)

1 / 68      (Malware)
http://gv7.gamevicio.com/downloads_924878423/traducao/3/.../cod4_br[www.gamevicio.com.br].exe  (cod_mw4_portugues.exe)

0 / 68
http://gv7.gamevicio.com/downloads_924878423/traducao/1/.../nfsmw_br[www.gamevicio.com.br].exe  (2973c48a9a03f3f8920f5cf28077a333)

6 / 68      (PUP)
http://gv7.gamevicio.com/downloads_924878423/traducao/4/.../twde1_br[www.gamevicio.com.br].exe  (ed3a63e4412e75b68b4ae04310d4b2de)

URL:
http://gv7.gamevicio.com/

Title:
“gv7.hiding.in — Coming Soon”

Description:
“This is a default index page for a new domain.”

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.