home

stapi.fastinstallwiz.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain stapi.fastinstallwiz.com is registered by proxy through ENOM, INC. and was originally registered in October of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
ENOM, INC.

Server location:
Massachusetts, United States (US)

Create date:
Friday, October 10, 2014

Expires date:
Monday, October 10, 2016

Updated date:
Thursday, September 10, 2015

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
fastinstallwiz.com

Whois:
2 fastinstallwiz.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.Sien, Threat.Sien.Bundler, PUP.Sien.Bundler, PUP.Sien.LiveSoftAction.Bundler (M), PUP.Sien.LiveSoft.Bundler (M), PUP.Sien (M)
100.00%

VIPRE Antivirus
Threat.4924203, Threat.4150696
32.00%

Dr.Web
Adware.Iminent.25, Adware.Iminent.28
28.00%

ESET NOD32
Win32/GetNow.H potentially unwanted application, Win32/GetNow.I potentially unwanted application
28.00%

Comodo Security
Application.Win32.GetNow.DI
28.00%

AVG
Win.Threat.Medium, Generic, Potentially harmful program Downloader.FVF
28.00%

Bkav FE
W32.HfsAdware
28.00%

Sophos
Live Soft Action, PUA 'Live Soft Action' (of type Adware)
28.00%

NANO AntiVirus
Riskware.Win32.Downware.dpuzse
24.00%

herdProtect (fuzzy)
a variant of adafa5569beb6ccd8a00823c42bfb164a3547080, a variant of 475ea06c0c7659be5c3c073c934bccb582444037, a variant of 6fe0cec0ec41cfa81997bc2f1f9d611c7c5eff80
24.00%

F-Secure
Riskware.Gen:Variant.Application.Bundler, Win32.Virtob.Gen.12
20.00%

Malwarebytes
PUP.Optional.LiveSoft, PUP.Optional.BundleInstaller.A
20.00%

Emsisoft Anti-Malware
Gen:Variant.Application.Bundler.49
16.00%

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.49
16.00%

Norman
Gen:Variant.Application.Bundler.49
16.00%

The domain stapi.fastinstallwiz.com has been seen to resolve to the following 13 IP addresses.

176.74.168.116
January 3, 2016

23.67.242.128
a23-67-242-128.deploy.static.akamaitechnologies.com
June 18, 2015

23.67.242.121
a23-67-242-121.deploy.static.akamaitechnologies.com
June 18, 2015

23.67.243.64
a23-67-243-64.deploy.static.akamaitechnologies.com
May 7, 2015

23.67.243.35
a23-67-243-35.deploy.static.akamaitechnologies.com
May 7, 2015

23.67.242.82
a23-67-242-82.deploy.static.akamaitechnologies.com
May 5, 2015

23.67.242.18
a23-67-242-18.deploy.static.akamaitechnologies.com
May 5, 2015

23.67.250.138
a23-67-250-138.deploy.static.akamaitechnologies.com
May 2, 2015

23.67.250.120
a23-67-250-120.deploy.static.akamaitechnologies.com
May 2, 2015

23.3.13.187
a23-3-13-187.deploy.static.akamaitechnologies.com
May 1, 2015

23.3.13.200
a23-3-13-200.deploy.static.akamaitechnologies.com
May 1, 2015

23.3.13.35
a23-3-13-35.deploy.static.akamaitechnologies.com
April 15, 2015

23.3.13.11
a23-3-13-11.deploy.static.akamaitechnologies.com
April 15, 2015

File downloads found at URLs served by stapi.fastinstallwiz.com.

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (cut the rope provided through adworkmedia network cpa.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (minecraft provided through ads med network cpa.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  ({blocked}.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (sony mdr-1rbt driver provided through paweldrivers.com.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (doodle jump provided through adworkmedia network cpa.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (samsung le40a756 driver provided through paweldrivers.com.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (brother dcp-j152w driver provided through paweldrivers.com.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (canon pixma-mg3150 driver provided through paweldrivers.com.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (angry birds provided through cpalead network cpa.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (train simulator 2015 pc distribué par bni youssef.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (hp laserjet pro m125a user guide provided through pdfretriever.com.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (tefal rice cooker classic 2.0l user guide provided through pdfretriever.com.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (angry birds provided through cpalead network cpa.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (whirlpool akz 187 ix user guide provided through pdfretriever.com.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (minecraft provided through mgcash network cpa.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (excel convert files from english to marathi and marathi to english software provided through getnow.)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (super amazing wagon adventure provided through getnow.exe)

1 / 68      (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (angry birds provided through ringtonepartner network cpa.exe)

13 / 68    (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (minecraft provided through getnow.exe)

13 / 68    (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (embroidery design system provided through softpicks_net.exe)

18 / 68    (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (singer brilliance 5500 user guide provided through pdfretriever.com.exe)

19 / 68    (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (angry birds provided through aragon advertising.exe)

20 / 68    (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (aoc e2243fwk driver provided through dennisdrivers.com.exe)

15 / 68    (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (angry birds halloween provided through ads med network cpa.exe)

12 / 68    (Adware)
http://stapi.fastinstallwiz.com/api/.../setup.exe  (jesse pinkman soundboard provided through jayuzumi.exe)

The following 183 files have been seen to comunicate with stapi.fastinstallwiz.com in live environments.

TCP » 23.3.13.200:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.3.13.200:80
GPlayer.exe (by Exent Technologies)

TCP » 23.67.250.120:80
dailywiki.exe

TCP » 23.3.13.200:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.3.13.200:80
tmp5c5e.exe

TCP » 23.3.13.200:80
notification.exe

TCP » 23.3.13.35:80
free ride games.exe (FreeRide Games by Exent Technologies)

TCP » 23.67.242.121:80
iFunBox.exe (iFunBox by i-Funbox.com)

TCP » 23.67.242.121:80
ibcpghbggehfodnapmcddffmnamgijhe.crx

TCP » 23.67.242.121:80
iicnhfnbloipokolaeeglpgkckncnmam.crx

TCP » 23.67.242.121:80
ajclfmccdniaiclfmcndnmligbampbjc.crx

TCP » 23.67.242.121:80
angry birds provided through ads med network cpa.exe (Theta Installer by LiveSoft Action)

TCP » 23.67.242.121:80
ibcpghbggehfodnapmcddffmnamgijhe.crx

TCP » 23.67.242.121:80
onheklgeghhphlhgpbfpgmlpjinjoida.crx

TCP » 23.67.242.121:80
fkmpjkomnpflaenmiccjmbkaapicalje.crx

TCP » 23.67.242.121:80
fkmpjkomnpflaenmiccjmbkaapicalje.crx

TCP » 23.67.242.121:80
ghkkoakfbohgbbkimhefanacebeilpdf.crx

TCP » 23.67.242.121:80
mmcaeimpccmlplndicmimpfmfalmpakb.crx

TCP » 23.67.242.121:80
mdojgmfmcidllmgoijgibijfoahboeok.crx

TCP » 23.67.242.121:80
nokalcjbbdlpmlbhbpjhfpdggbieahfo.crx

 
Latest 20 of 188 files

URL:
http://stapi.fastinstallwiz.com/

Web server:
Microsoft-HTTPAPI/2.0

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.