The domain www.mmohelper.ru is registered by proxy through RU-CENTER-RU and was originally registered in March of 2009. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Saint Petersburg, Saint Petersburg City within Russia which resides on the RIPE Network Coordination Centre network.
Registrant:
Private Person
Server location:
Saint Petersburg City, Russia (RU)
Create date:
Friday, March 6, 2009
Expires date:
Monday, March 6, 2017
ASN:
AS29076 CITYTELECOM-AS Filanco LTD,RU
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.Banner.c, Optional.MediaGetApp.Installer.X, PUP.Installer.Banner.x, PUP.Installer.Banner.AA, PUP.Installer.Banner.?, PUP.MediaGet.Banner.Installer (M), PUP.MediaGet.Inbox.Installer (M)
96.43%
Malwarebytes
PUP.Adware.MediaGet, PUP.Optional.Installrex, PUP.Optional.MediaGet
71.43%
Kaspersky
not-a-virus:Downloader.Win32.MediaGet, not-a-virus:HEUR:Downloader.Win32.MediaGet, Trojan.Win32.Inject
71.43%
G Data
Win32.Adware.MediaGet, Gen:Variant.Zusy.90964
67.86%
Dr.Web
Program.MediaGet.21, Trojan.InstallMonster.62, Adware.Downware.9040, Program.MediaGet.111, Program.MediaGet.120, Program.MediaGet.133
64.29%
Sophos
MediaGet, Install Monster, MediaGet (PUA), PUA 'MediaGet' (of type Hacktool)
60.71%
ESET NOD32
Win32/MediaGet (variant), Win32/MediaGet.AE (variant), Win32/MediaGet.AF (variant), Win32/MediaGet.AF potentially unwanted (variant)
60.71%
K7 AntiVirus
Trojan , Riskware , Unwanted-Program
46.43%
McAfee
Artemis!1A63D23457B6, Artemis!3656B495F397, Artemis!C644C8E0B32F, Artemis!86A4833D2191, Artemis!A684B53BA5B5, Artemis!04B685A2D883, Artemis!9B8A23345C20
39.29%
Avira AntiVirus
APPL/Mediaget.AD.1, APPL/MediaGet.Gen5, TR/Inject.bbac, PUA/MediaGet.Gen5
39.29%
Baidu Antivirus
Hacktool.Win32.MediaGet, Adware.Win32.MediaGet
35.71%
Bkav FE
W32.FamVT.Obfucate.Trojan, W32.HfsAdware
32.14%
Qihoo 360 Security
Win32/Trojan.307, Win32/Virus.Downloader.e90, Win32/Virus.e7d, Win32/Virus.Downloader.34d
32.14%
Comodo Security
Application.Win32.MediaGet.G
32.14%
The domain www.mmohelper.ru has been seen to resolve to the following IP address.
static.78.108.90.43.clients.majordomo.ru
November 1, 2014
File downloads found at URLs served by www.mmohelper.ru.
URL:
http://www.mmohelper.ru/
Title:
“Mmohelper: World of Warcraft: Legion”
Description:
“Блог про замечательную игру WoW, где публикуются тактики, гайды, новости, а также статьи по аддонам для игры. Авторские материалы.”
Web server:
nginx/0.6.39 (PHP/5.2.10)
Statistics are for the previous month.