v4download.com

Whois Privacy Corp.

Domain Information

The domain v4download.com registered by Whois Privacy Corp. was initially registered in December of 2013 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Phoenix, Arizona within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Remove Malware from v4download.com - Powered by Reason Core Security
Registrar:
INTERNET.BS CORP.

Server location:
Arizona, United States (US)

Create date:
Friday, December 20, 2013

Expires date:
Sunday, December 20, 2015

Updated date:
Friday, November 28, 2014

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.Amonetize, Trojan/Win32.Gen
92.68%

Avira AntiVirus
Adware/Amonetize.acp, ADWARE/Adware.Gen2, Adware/Amonetize.tzw, Adware/Amonetize.foy, Adware/Amonetize.fhz, TR/Crypt.XPACK.Gen
90.24%

ESET NOD32
Win32/Amonetize.AY (variant), Win32/Amonetize.BK (variant), Win32/Amonetize.BM (variant), Win32/Amonetize.BN (variant), Win32/Amonetize.AT (variant)
80.49%

G Data
Trojan.GenericKD.1721483, Gen:Variant.Application.Bundler.Amonetize.11, Gen:Variant.Application.Bundler.Amonetize.12, Trojan.GenericKD.1793444
80.49%

McAfee Web Gateway
Heuristic.BehavesLike.Win32.Suspicious-BAY.G, Heuristic.BehavesLike.Win32.ModifiedUPX.C, Artemis!21F0E588CB01, BehavesLike.Win32.Downloader.dc
78.05%

McAfee
RDN/Generic.dx!dcv, Artemis!625A177DCC2F, Artemis!561440428413, Artemis!0E6C88D44EA2, Artemis!5E08F3CB6F71, Artemis!21F0E588CB01, Artemis!C5074D107539
68.29%

Bitdefender
Trojan.GenericKD.1721483, Gen:Variant.Application.Bundler.Amonetize.11, Application.Bundler.Amonetize.T, Gen:Variant.Application.Bundler.Amonetize.12
68.29%

MicroWorld eScan
Trojan.GenericKD.1721483, Gen:Variant.Application.Bundler.Amonetize.11, Application.Bundler.Amonetize.T, Gen:Variant.Application.Bundler.Amonetize.12, Gen:Variant.Adware.Strictor.68509, Application.Bundler.Amonetize.AO, Gen:Variant.Application.Bundler.AirInstaller.1, Gen:Variant.Adware.Strictor.77177
65.85%

Sophos
Generic PUA JG, Generic PUA HA, Generic PUA FF, Generic PUA KK, Generic PUA GF, Generic PUA ED, Generic PUA GK, Generic PUA JL
63.41%

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Installer.Wilmaonline.f, PUP.Installer.Wilmaonline.k, PUP.Installer.SVANTRANS.f, PUP.Installer.ITLGROUP.U
63.41%

F-Secure
Trojan.GenericKD.1721483, Gen:Variant.Application.Bundler, Application.Bundler.Amonetize, Trojan.GenericKD.1793444, Gen:Variant.Graftor.154346
63.41%

avast!
Win32:Amonetize-BX [PUP], Win32:Amonetize-CV [PUP], Win32:Adware-gen [Adw], Win32:PUP-gen [PUP], Win32:Dropper-gen [Drp]
60.98%

Qihoo 360 Security
Win32/Virus.Adware.932, HEUR/Malware.QVM18.Gen, HEUR/QVM18.1.Malware.Gen, HEUR/QVM10.1.Malware.Gen, Win32/Application.756
60.98%

Lavasoft Ad-Aware
Trojan.GenericKD.1721483, Gen:Variant.Application.Bundler.Amonetize.11, Application.Bundler.Amonetize.T, Gen:Variant.Application.Bundler.Amonetize.12
60.98%

Trend Micro House Call
Suspicious_GEN.F47V0623, Suspicious_GEN.F47V0629, Suspicious_GEN.F47V0810, TROJ_GEN.R047H07HJ14, Suspicious_GEN.F47V0828, Suspicious_GEN.F47V1213, Suspicious_GEN.F47V1226, Suspicious_GEN.F47V1231
58.54%

The domain v4download.com has been seen to resolve to the following 14 IP addresses.

November 10, 2014

November 10, 2014

October 20, 2014

October 20, 2014

July 31, 2014

July 31, 2014

(CloudFlare)
July 3, 2014

(CloudFlare)
July 3, 2014

June 13, 2014

June 13, 2014

(CloudFlare)
May 1, 2014

(CloudFlare)
May 1, 2014

(CloudFlare)
February 27, 2014

(CloudFlare)
February 27, 2014

File downloads found at URLs served by v4download.com.

12 / 68    (Adware)
http://v4download.com/download.php?id=Hunu87&title=directxautoupdatev2  (microsoftnetframework563__7934_il1452168.exe)

24 / 68    (Adware)

23 / 68    (Adware)

22 / 68    (PUP)

13 / 68    (PUP)

22 / 68    (Adware)
http://v4download.com/download.php?id=cting&title=KritikaChaosUnleashedHack  (revo uninstaller pro __10940_i1424283952_il65163.exe)

14 / 68    (Adware)

8 / 68      (Adware)

6 / 68      (Adware)

14 / 68    (Adware)

19 / 68    (PUP)

24 / 68    (Adware)

13 / 68    (PUP)

12 / 68    (Adware)

29 / 68    (PUP)

23 / 68    (Adware)

24 / 68    (Adware)
http://v4download.com/download.php?id=cting&title=GunshipBattleHelicopter3D  (gunshipbattlehelicopter3d__7934_il1546469.exe)

23 / 68    (Adware)

11 / 68    (Adware)

29 / 68    (Adware)

25 / 68    (PUP)

9 / 68      (PUP)

32 / 68    (PUP)

29 / 68    (PUP)

 
Latest 30 of 100 download URLs

February 27, 2014

URL:
http://v4download.com/

SSL certificate subject:
CN=sni55611.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx

Remove Malware from v4download.com - Powered by Reason Core Security