ads.adsrvmedia.com

NameFind LLC

Domain Information

The domain ads.adsrvmedia.com registered by NameFind LLC was initially registered in July of 2013 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Wednesday, July 3, 2013

Expires date:
Sunday, July 3, 2016

Updated date:
Thursday, April 7, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Stepitapp.F, PUP.Optional.Installer.X, Threat.Win.Reputation.IMP, PUP.Installer.Amonetizeltd.g, PUP.Installer.INSTALLTHIS.Q, PUP.Optional.ReimageLimited.H, PUP.Adknowledge.INSTALLTHIS.Installer (M), PUP.Adknowledge.FUSIONINSTALLER.Installer (M), PUP.Stepitapp.Installer (M), PUP.Air Software.AirSoftware.Bundler (M), PUP.Adknowledge.INSTALLT.Installer (M), PUP.Solimba.Firseria.Bundler (M), PUP.Air Software.AirSoftw.Bundler (M), PUP.Adknowledge (M)
94.29%

VIPRE Antivirus
Conduit, Amonetize, Trojan.Win32.Generic, Threat.4778314, AirInstaller, Threat.4150696
51.43%

avast!
Win32:Dropper-gen [Drp], Win32:Amonetize-AX [PUP], Win32:Amonetize-BJ [PUP], Win32:Amonetize-E [PUP], Win32:Rootkit-gen [Rtk]
51.43%

Kaspersky
not-a-virus:Downloader.Win32.Agent, not-a-virus:HEUR:AdWare.Win32.Amonetize, not-a-virus:AdWare.Win32.iBryte, not-a-virus:AdWare.Win32.AirAdInstaller
42.86%

Dr.Web
Adware.Downware.1655, Adware.iBryte.473, Adware.Plugin.171, Adware.Downware.3925, Adware.Downware.5822, Adware.Downware.9660, Threat.Undefined
42.86%

Panda Antivirus
Trj/Chgt.A, Trj/Genetic.gen, Trj/OCJ.E, Trj/CI.A, Trj/Chgt.F, Adware/AirInstaller
40.00%

Qihoo 360 Security
HEUR/Malware.QVM03.Gen, Win32/Virus.Adware.932, Win32/Virus.Downloader.8e5, Malware.QVM10.Gen, Malware.QVM01.Gen
40.00%

Malwarebytes
PUP.Optional.Amonetize, PUP.Optional.InstallMonetizer, PUP.Optional.OptimumInstaller.A, PUP.Adware.Agent, PUP.Optional.AirInstaller
37.14%

McAfee
Artemis!69958AF74D90, PUP-FBM!B23E8B1B1895, Adware-Amonetize!15D7C1200744, Artemis!17FD46A07B73, Artemis!7CB5D5BE15CC, Artemis!E34960A2248D, Program.Adware-OutBrowse
34.29%

Avira AntiVirus
ADWARE/Adware.Gen2, ADWARE/Adware.Gen7, Adware/Airinstall.J
34.29%

AVG
Generic_r, Adware AdPlugin.WD, BundleApp_r.R, Adware Generic_r.OM
34.29%

Vba32 AntiVirus
Downloader.Agent, suspected of Trojan.Downloader.gen.h, AdWare.AirAdInstaller
31.43%

Sophos
Amonetize, iBryte Optimum Installer, AirInstaller
31.43%

Trend Micro House Call
TROJ_GEN.F47V0403, TROJ_GEN.R02SH06F714, TROJ_GEN.F47V0206, TROJ_GEN.F47V0516, TROJ_GEN.F47V0204, TROJ_GEN.R0CBC0EG214, TROJ_GEN.F47V0527
28.57%

AhnLab V3 Security
PUP/Win32.Amonetiz, PUP/Win32.IBryte, PUP/Win32.Downloader, Adware/Win32.AirAdInstaller
28.57%

The domain ads.adsrvmedia.com has been seen to resolve to the following 13 IP addresses.

April 14, 2016

March 7, 2015

August 24, 2014

ec2-54-209-208-224.compute-1.amazonaws.com
June 9, 2014

ec2-54-86-161-107.compute-1.amazonaws.com
June 9, 2014

ec2-54-86-12-149.compute-1.amazonaws.com
June 9, 2014

ec2-54-208-93-4.compute-1.amazonaws.com
June 9, 2014

ec2-54-209-60-127.compute-1.amazonaws.com
June 9, 2014

ec2-54-86-137-115.compute-1.amazonaws.com
June 9, 2014

ec2-54-84-246-69.compute-1.amazonaws.com
June 9, 2014

ec2-54-85-106-54.compute-1.amazonaws.com
June 9, 2014

ec2-54-86-122-245.compute-1.amazonaws.com
June 9, 2014

ec2-54-209-212-37.compute-1.amazonaws.com
June 9, 2014

File downloads found at URLs served by ads.adsrvmedia.com.

 
Latest 30 of 40 download URLs

The following 10 files have been seen to comunicate with ads.adsrvmedia.com in live environments.

URL:
http://ads.adsrvmedia.com/

Title:
“adsrvmedia.com”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Apache