secure.pn-installer4.com

Adknowledge  (via a Proxy Registrant)

Domain Information

This is a distribution host for a number of Adknowledge installers including (Fusion Installer, Wrap Installer, Premium Instal, Optimum Installer and many others). The installers are bundled download managers that include adware/ad-supported offers. The domain secure.pn-installer4.com is registered by proxy through TUCOWS DOMAINS INC. and was originally registered in August of 2013. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform. The domain is associated with the publisher Adknowledge.
Remove Malware from secure.pn-installer4.com - Powered by Reason Core Security
Registrar:
TUCOWS DOMAINS INC.

Server location:
Virginia, United States (US)

Create date:
Monday, August 12, 2013

Expires date:
Friday, August 12, 2016

Updated date:
Tuesday, August 11, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Outbrowse.Installer, Threat.Adknowledge.Installer, PUP.Adknowledge.Bundler, Threat.Win.Reputation.IMP, PUP.Adknowledge.Bundler (M), PUP.Adknowledge.FileMonarch.Installer (M), PUP.Adknowledge.FileFalcon.Bundler (M), PUP.Adknowledge.Installer (M), PUP.Adknowledge.FusionInstall.Installer (M), PUP.Adknowledge.FileFalcon.Installer (M), PUP.Adknowledge.INSTALLDOTEXE.Installer (M), PUP.Adknowledge.SafeDown.Bundler (M), PUP.Adknowledge.FileMonarch.Bundler (M), PUP.Outbrowse.ClickTrustOpt.Bundler (M)
100.00%

Dr.Web
infected with Trojan.OutBrowse.96, Adware.Downware.6397, Trojan.iBryte.521, Trojan.DownLoader11.25708, Trojan.DownLoader11.26958
94.00%

Emsisoft Anti-Malware
Application.Bundler.Outbrowse.BA, Gen:Variant.Adware.Graftor.145314, Gen:Variant.Application.Bundler.25, Gen:Variant.Application.Kazy.427497
94.00%

VIPRE Antivirus
Threat.5085447, Optimum Installer, Threat.4778314, Threat.4150696
94.00%

AVG
Potentially harmful program Downloader.DLX, Adware AdPlugin.XK, Adware AdPlugin.BQZ, Adware Skodna.Generic
94.00%

MicroWorld eScan
Application.Bundler.Outbrowse.BA, Application.Bundler.Agent.B, Gen:Variant.Application.Bundler.25, Gen:Variant.Graftor.149578
94.00%

Quick Heal
Adware.NSIS.OutBrowse.A, Adware.iBryte.DK4, TrojanDownloader.Badur.A5
94.00%

K7 Gateway Antivirus
Trojan , Unwanted-Program , Adware
94.00%

K7 AntiVirus
Trojan , Unwanted-Program , Adware
94.00%

NANO AntiVirus
Riskware.Win32.AirAdInstaller.doqpvr, Trojan.Win32.Agent.cxjjsz, Riskware.Win32.IBryte.dhyxgl, Trojan.Win32.OpenInst.dbmecj
94.00%

F-Prot
W32/Outbrowse.B2.gen, W32/A-c255719d, W32/A-88712b7c, W32/DomaIQ.G.gen, W32/Backdoor2.HTKO, W32/A-8041faaf, W32/A-3500492f
94.00%

Kaspersky
not-a-virus:AdWare.Win32.OutBrowse, HEUR:Trojan.Win32.Generic, not-a-virus:AdWare.Win32.iBryte
94.00%

Bitdefender
Application.Bundler.Outbrowse.BA, Application.Bundler.Agent.B, Gen:Variant.Application.Bundler.25, Gen:Variant.Graftor.149578
94.00%

Comodo Security
UnclassifiedMalware, Application.Win32.iBryte.WRP, Application.Win32.iBryte.KO, Application.Win32.IBryte.X, Application.Win32.AgentCV.HWYE
94.00%

McAfee Web Gateway
BehavesLike.Win32.AdwareOutBrowse.hc, GenericATG-FGI!746F50AE6DB0, IBryte-FRT, Artemis!6B622AD93525, GenericATG-FGI!3B0404F8E1DE
94.00%

The domain secure.pn-installer4.com has been seen to resolve to the following 6 IP addresses.

ec2-54-243-183-125.compute-1.amazonaws.com
October 20, 2014

ec2-54-243-186-169.compute-1.amazonaws.com
October 20, 2014

ec2-107-20-176-51.compute-1.amazonaws.com
September 27, 2014

ec2-107-20-176-238.compute-1.amazonaws.com
September 27, 2014

ec2-54-197-244-146.compute-1.amazonaws.com
February 8, 2014

ec2-54-197-244-130.compute-1.amazonaws.com
February 8, 2014

File downloads found at URLs served by secure.pn-installer4.com.

42 / 68    (Adware)

39 / 68    (Adware)

47 / 68    (Adware)

The following 5 files have been seen to comunicate with secure.pn-installer4.com in live environments.

30 of 33 related domains

Remove Malware from secure.pn-installer4.com - Powered by Reason Core Security