www.viodwnld.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain www.viodwnld.com is registered by proxy through ENOM, INC. and was originally registered in December of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Antonio, Texas within the United States which resides on the Rackspace Hosting network.
Remove Malware from www.viodwnld.com - Powered by Reason Core Security
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Tuesday, December 04, 2012

Expires date:
Friday, December 04, 2015

Updated date:
Thursday, November 06, 2014

ASN:
AS33070 RMH-14 - Rackspace Hosting

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.SafeInstall.A
100.00%

NANO AntiVirus
Riskware.Win32.Searcher.cjaztx, Riskware.Win32.Searcher.csnymk
100.00%

Sophos
DomainIQ pay-per install, InstallQ
100.00%

VIPRE Antivirus
InstallIQ Installer
100.00%

ESET NOD32
Win32/InstallIQ (variant)
100.00%

Reason Heuristics
PUP.Installer.SecureInstall.K, PUP.Installer.SecureInstall.L, PUP.Installer.SecureInstall.G, PUP.Installer.SecureInstall.I
100.00%

K7 Gateway Antivirus
Unwanted-Program
83.33%

Trend Micro House Call
TROJ_GEN.F47V0208, TROJ_GEN.F47V0405, TROJ_GEN.F47V0411, TROJ_GEN.F47V0502, TROJ_GEN.F47V0528
83.33%

Dr.Web
Adware.Searcher.2593, Adware.Downware.2512
83.33%

McAfee
PUP-FLX, Artemis!5224263F1EF9, Artemis!25CCAE59E743, Artemis!E8CF72AEA1C9, Artemis!A13FA4503A4B
83.33%

McAfee Web Gateway
PUP-FLX, Heuristic.BehavesLike.Win32.Suspicious-BAY.K, Artemis!25CCAE59E743, Artemis!E8CF72AEA1C9, BehavesLike.Win32.Obfuscated.tc
83.33%

AVG
Generic_r, MultiBundle
83.33%

K7 AntiVirus
Unwanted-Program
83.33%

G Data
Win32.Application.InstallIQ, Gen:Variant.Application.Bundler.Graftor.155902
83.33%

Rising Antivirus
PE:PUF.InstallIQ!1.9E4F
66.67%

The domain www.viodwnld.com has been seen to resolve to the following IP address.

May 1, 2014

File downloads found at URLs served by www.viodwnld.com.

The following 2 files have been seen to comunicate with www.viodwnld.com in live environments.

URL:
http://www.viodwnld.com/

Google Analytics:
UA-34051448

Title:
“VIO Player - Free Video Player”

Description:
“Download VIO Player free. VIO Player is a free universal video player that plays FLV, MPEG, MKV, MOV, MP4, WMV, and AVI video files.”

Web server:
Apache/2.2

Remove Malware from www.viodwnld.com - Powered by Reason Core Security