home

cold-statue.ru

Private Person  (Proxy Registrant)

Domain Information

The domain cold-statue.ru is registered by proxy through REGRU-RU and was originally registered in August of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Thursday, August 4, 2016

Expires date:
Friday, August 4, 2017

Whois:
1 cold-statue.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/Kryptik.FEFC trojan
100.00%

Reason Heuristics
PUP.LoadMoney.OOOKulSt (M)
100.00%

File downloads found at URLs served by cold-statue.ru.

2 / 68      (PUP)
http://cold-statue.ru/MTQxMjA7aHR0cCUzQSUyRiUyRmZpbGUwMDMucnUlMkZvMGRmR2E1ZmFnR2FoazBqaGFjY3ZiemouQWxjYXRlbE9uZVRvdWNoUE9QRDU1MDM4RF9sb2xsaXBvcDVfMS5yYXIuaHRtbDtuYW1lPUFsY2F0ZWxPbmVUb3VjaFBPUEQ1NTAzOERfbG9sbGlwb3A1XzEucmFyO3NpemU9Mzg2MDAwMDAwO3R5cGU9YXJjaGl2ZTt1dG09VzEwPTtyZWFsX3JlZmVyZXI9O2ZvcmNlX2ZpbGU9dHJ1ZQ==  (alcatelonetouchpopd55038d lollipop5 1.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.