The domain virtualrouterplus.com registered by Haitao Sun was initially registered in February of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Arizona, United States (US)
Wednesday, February 13, 2013
Friday, February 13, 2015
Thursday, February 06, 2014
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC
Detections (93% detected)
Trojan.Nsis.Mazel.cwhyud, Riskware.Nsis.Adware.dbnhrj, Riskware.Win32.Downware.digcac
Trojan.MulDrop4.11744, Trojan.Packed.27732, Trojan.Packed.28357
Downloader, Somoto, Generic
PUP.Installer.SomotoIsrael.k, PUP.Installer.SomotoLimited.k, PUP.Installer.SomotoLimited.l, PUP.Installer.Somoto.l, PUP.Somoto.p
APPL/Somoto.fses, APPL/Somoto.hzit, APPL/Somoto.Gen2
AhnLab V3 Security
Win-AppCare/Somoto.236928, PUP/Win32.Somoto, Win-AppCare/Downloader.227072, Win-PUP/Somoto
Win32:Somoto-O [PUP], Win32:Somoto-R [PUP], Somoto-Q [PUP]
McAfee Web Gateway
, BehavesLike.Win32.SomotoBetterInstaller.dc, Heuristic.BehavesLike.Win32.Suspicious.A
Antiy Labs AVL
PUP/MultiToolbar.A, Trj/CI.A, Trj/Chgt.C, Trj/Chgt.E
The domain virtualrouterplus.com has been seen to resolve to the following IP address.
February 7, 2014
File downloads found at URLs served by virtualrouterplus.com.
The following file have been seen to comunicate with virtualrouterplus.com in live environments.
“Virtual Router Plus - Free Portable Virtual Router for Windows”
“Virtual Router Plus is an open source, free, and portable software based Windows hosted network to create virtual wifi hotspot on Windows computers.”