This is a distribution host for a number of Adknowledge installers including (Fusion Installer, Wrap Installer, Premium Instal, Optimum Installer and many others). The installers are bundled download managers that include adware/ad-supported offers. The domain secure.20-pn-installer.com is registered by proxy through TUCOWS DOMAINS INC. and was originally registered in April of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network.
Registrant:
Contact Privacy Inc. Customer 0137254437
Registrar:
TUCOWS DOMAINS INC.
Server location:
Northern Ireland, United Kingdom (GB)
Create date:
Tuesday, April 15, 2014
Expires date:
Wednesday, April 15, 2015
Updated date:
Tuesday, April 15, 2014
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Avira AntiVirus
Adware/iBryte.bxmz, Adware/iBryte.bxop, Adware/iBryte.bxoh, Adware/iBryte.bxng, ADWARE/iBryte.Gen7
100.00%
Dr.Web
Trojan.DownLoader11.27296, Trojan.DownLoader11.30787, Trojan.DownLoader11.30849, Trojan.DownLoader11.31355, Adware.iBryte.483
100.00%
NANO AntiVirus
Trojan.Win32.IBryte.ddtkup, Trojan.Win32.Buzus.debolj, Trojan.Win32.IBryte.ddwawl, Riskware.Win32.IBryte.dengzo, Riskware.Win32.IBryte.dehywl
100.00%
Zillya! Antivirus
Downloader.Agent.Win32.206074, Adware.iBryte.Win32.1558, Downloader.Agent.Win32.206054, Adware.iBryte.Win32.854, Adware.iBryte.Win32.1686
100.00%
F-Prot
W32/A-f45b4d3a, W32/A-34fffba4, W32/A-c255719d, W32/A-e3403a0b, W32/A-512ed8f8
100.00%
Reason Heuristics
PUP.Installer.FileMonarch.N, PUP.Installer.FileMonarch.X, PUP.Installer.FileMonarch.F, PUP.Installer.FileMonarch.S, PUP.Installer.ClickAccept.N, PUP.Bundler.Adknowledge
100.00%
avast!
Win32:Adware-gen [Adw], Win32:IBryte-EF [PUP], Win32:PUP-gen [PUP], Win32:Rootkit-gen [Rtk], Win32:IBryte-EX [PUP], Win32:IBryte-EW [PUP]
100.00%
VIPRE Antivirus
Threat.4778314, Optimum Installer, Threat.4150696, Threat.4798837
100.00%
Malwarebytes
PUP.Optional.OptimunInstaller
100.00%
Comodo Security
Application.Win32.AgentCV.HWYE
100.00%
AVG
Adware AdPlugin, Adware AdPlugin.AEV, Adware AdPlugin.AEW, Adware AdPlugin.AES, Generic, Adware AdPlugin.ACA, Adware AdPlugin.AHE
100.00%
G Data
Gen:Variant.Application.Kazy.427497, Gen:Variant.Adware.Strictor.61512, Adware.IBryte.AF, Gen:Variant.Application.Bundler.15
100.00%
AhnLab V3 Security
PUP/Win32.DomaIQ, PUP/Win32.IBryte, PUP/Win32.Bundler
100.00%
Agnitum Outpost
Trojan.Agent, PUA.Agent, PUA.Downloader, PUA.iBryte, Trojan.DownLoader
100.00%
Kaspersky
not-a-virus:AdWare.Win32.iBryte
96.55%
The domain secure.20-pn-installer.com has been seen to resolve to the following 5 IP addresses.
unallocated.barefruit.co.uk
May 4, 2015
ec2-54-243-183-125.compute-1.amazonaws.com
December 1, 2014
ec2-54-243-186-169.compute-1.amazonaws.com
December 1, 2014
ec2-54-197-244-130.compute-1.amazonaws.com
September 7, 2014
ec2-54-197-244-146.compute-1.amazonaws.com
September 7, 2014
File downloads found at URLs served by secure.20-pn-installer.com.
The following 236 files have been seen to comunicate with secure.20-pn-installer.com in live environments.
URL:
http://secure.20-pn-installer.com/