pleaseupdate.theupdateonline24.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain pleaseupdate.theupdateonline24.com is registered by proxy through REGISTRAR OF DOMAIN NAMES REG.RU LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC

Server location:
Moscow City, Russia (RU)

Create date:
Thursday, February 12, 2015

Expires date:
Sunday, February 12, 2017

Updated date:
Saturday, February 13, 2016

ASN:
AS197695 AS-REGRU _Domain names registrar REG.RU_, Ltd,RU

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.OOOMadAdvert.Installer (M), PUP.installCore.OOOMadAd.Installer (M), PUP.installCore.DigitalV.Installer (M)
100.00%

avast!
Malware-gen
33.33%

VIPRE Antivirus
Threat.4150696
33.33%

Dr.Web
Trojan.InstallCore.508
33.33%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted application, Win32/InstallCore.YV potentially unwanted application
33.33%

Bkav FE
W32.HfsAdware
33.33%

K7 AntiVirus
Adware
33.33%

AVG
InstallCore
33.33%

Avira AntiVirus
PUA/InstallCore.ZC, PUA/InstallCore.Gen
22.22%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
22.22%

Comodo Security
Application.Win32.InstallCore.DSO
11.11%

The domain pleaseupdate.theupdateonline24.com has been seen to resolve to the following 2 IP addresses.

February 24, 2016

February 15, 2016

File downloads found at URLs served by pleaseupdate.theupdateonline24.com.