home

1b34eac948de81233430a028dc1267ea.gjhgfjdhgd.ru

Private Person  (Proxy Registrant)

Domain Information

The domain 1b34eac948de81233430a028dc1267ea.gjhgfjdhgd.ru is registered by proxy through REGRU-RU and was originally registered in October of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Friday, October 16, 2015

Expires date:
Sunday, October 16, 2016

Root domain:
gjhgfjdhgd.ru

Whois:
1 gjhgfjdhgd.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SPKGEOTO (M)
100.00%

File downloads found at URLs served by 1b34eac948de81233430a028dc1267ea.gjhgfjdhgd.ru.

1 / 68      (PUP)
http://1b34eac948de81233430a028dc1267ea.gjhgfjdhgd.ru/.../?f=YTo3OntzOjc6InNpdGVfaWQiO2k6MTQ3ODtzOjg6ImZpbGVfdXJsIjtzOjY1OiJodHRwOi8vVG9ycmVudDMucnUvdXBsb2Fkcy9maWxlcy8xNDQxMTc3Njc0X2d0YS12aWNlLWNpdHkudG9ycmVudCI7czo5OiJmaWxlX25hbWUiO3M6MjE6IkdUQSBWaWNlIENpdHkudG9ycmVudCI7czo5OiJmaWxlX3R5cGUiO3M6NzoidG9ycmVudCI7czo5OiJmaWxlX3NpemUiO2Q6MTIwMDAwO3M6NjoicmFuZG9tIjtpOjQ0NDI5MjtzOjQ6InRpbWUiO2k6MTQ0NTQ1NTUyNDt9  (gta_vice_city.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.