The domain www.software-forus.com registered by admin d was initially registered in March of 2015 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Macon, Georgia within the United States which resides on the Highwinds Network Group, Inc. network.
Server location:
Georgia, United States (US)
Create date:
Monday, March 16, 2015
Expires date:
Thursday, March 16, 2017
Updated date:
Thursday, March 17, 2016
ASN:
AS20446 HIGHWINDS3 - Highwinds Network Group, Inc.,US
Scanner detections:
Detections (92% detected)
Scan engine
Details
Detections
McAfee
Artemis!0D4927DE7B70, Artemis!4B4F6DB480E3, Artemis!E72A358D9CA0, Trojan.Artemis!E72A358D9CA0, Program.Artemis!DC654DA9BD02
81.25%
Dr.Web
Trojan.Amonetize.3133, infected with Trojan.Amonetize.3133, Trojan.Click3.3419
75.00%
Malwarebytes
PUP.Optional.Amonentize.A, PUP.Optional.Amonetize
66.67%
Agnitum Outpost
Trojan.Amonetize
62.50%
G Data
Win32.Application.Amonetize.AI
27.08%
Reason Heuristics
(M), Adware.Amonetize.Installer.Meta (M), PUP.Amonetize (M), PUP.BundledOffer.Installer.Installer.Meta (M), Threat.Win.Reputation.IMP, Adware.Bundler.FlowSurf (M)
22.92%
avast!
Win32:Rootkit-gen [Rtk], Win32:Dropper-gen [Drp], Win32:Malware-gen, Win32:Evo-gen [Susp], Win32:SaliCode
20.83%
SUPERAntiSpyware
Trojan.Agent/Gen-Clicker, Adware.Amonetize/Variant
12.50%
ESET NOD32
Win32/Amonetize.MB potentially unwanted application, Win64/BitCoinMiner.AT potentially unsafe application, Win32/Sality.NBA virus
10.42%
Trend Micro House Call
Suspicious_GEN.F47V0131, Suspicious_GEN.F47V0605, Suspicious_GEN.F47V0604, Suspici.B3D8636C
8.33%
F-Secure
Application:W32/Generic.70053c248f!Online, Win32.Sality.3, Variant.Midie.6323
6.25%
Kaspersky
UDS:DangerousObject.Multi.Generic, not-a-virus:RiskTool.Win64.BitCoinMiner, Virus.Win32.Sality
6.25%
Emsisoft Anti-Malware
Application.Downloader.YW, Gen:Variant.Application.BitcoinMiner.16, Win32.Sality
6.25%
Microsoft Security Essentials
Worm:Win32/NeksMiner.A, Threat.Undefined
4.17%
Qihoo 360 Security
HEUR/QVM42.1.Malware.Gen
4.17%
The domain www.software-forus.com has been seen to resolve to the following 5 IP addresses.
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
June 7, 2016
map2.hwcdn.net
July 26, 2015
File downloads found at URLs served by www.software-forus.com.