installupgrade.theupdateonline24.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain installupgrade.theupdateonline24.com is registered by proxy through REGISTRAR OF DOMAIN NAMES REG.RU LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Fort Lauderdale, Florida within the United States which resides on the Infolink Global Corporation network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC

Server location:
Florida, United States (US)

Create date:
Thursday, February 12, 2015

Expires date:
Friday, February 12, 2016

Updated date:
Thursday, February 12, 2015

ASN:
AS15083 INFOLINK-MIA-US - Infolink Global Corporation,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.installCore.Installer, PUP.installCore.OOOServisM.Installer (M)
100.00%

avast!
Malware-gen
100.00%

ESET NOD32
Win32/InstallCore.YL potentially unwanted application, Win32/InstallCore.YK potentially unwanted application
100.00%

K7 AntiVirus
Adware
100.00%

Dr.Web
Trojan.InstallCore.314
100.00%

VIPRE Antivirus
Threat.4150696
100.00%

Bkav FE
W32.HfsAdware
100.00%

NANO AntiVirus
Riskware.Win32.InstallCore.dqvwob
75.00%

Comodo Security
Application.Win32.InstallCore.DQY
75.00%

AVG
Generic
75.00%

G Data
Win32.Application.InstallCore.EG
75.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
75.00%

Avira AntiVirus
PUA/InstallCore.Gen
25.00%

Baidu Antivirus
Adware.Win32.InstallCore
25.00%

Qihoo 360 Security
HEUR/QVM06.1.Malware.Gen
25.00%

The domain installupgrade.theupdateonline24.com has been seen to resolve to the following IP address.

May 5, 2015

File downloads found at URLs served by installupgrade.theupdateonline24.com.

URL:
http://installupgrade.theupdateonline24.com/

Title:
“Avyukta-e-Call Dialer”

Web server:
Apache/2.2.3 (CentOS)