home

aptitude.video-updater.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain aptitude.video-updater.com is registered by proxy through REGISTRAR OF DOMAIN NAMES REG.RU LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Fort Lauderdale, Florida within the United States which resides on the Infolink Global Corporation network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC

Server location:
Florida, United States (US)

Create date:
Saturday, February 14, 2015

Expires date:
Tuesday, February 14, 2017

Updated date:
Sunday, February 14, 2016

ASN:
AS15083 INFOLINK-MIA-US - Infolink Global Corporation,US

Root domain:
video-updater.com

Whois:
3 video-updater.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.installCore.Installer, PUP.installCore.Installer, PUP.installCore.OOOServisM.Installer (M), PUP.installCore.OOOAdvert.Installer (M), PUP.installCore.OOOServi.Installer (M), PUP.installCore.OOOAdver.Installer (M), PUP.installCore (M)
100.00%

Dr.Web
Trojan.InstallCore.206, Trojan.InstallCore.314
40.00%

ESET NOD32
Win32/InstallCore.XM potentially unwanted application, Win32/InstallCore.YN potentially unwanted application, Win32/InstallCore.YL potentially unwanted application
40.00%

avast!
Malware-gen
40.00%

K7 AntiVirus
Trojan , Adware
40.00%

Avira AntiVirus
PUA/InstallCore.Gen, PUA/InstallCore.A.2387
40.00%

AVG
InstallCore, Generic
40.00%

VIPRE Antivirus
Threat.4150696
40.00%

Bkav FE
W32.HfsAdware
40.00%

McAfee
Trojan.Artemis!CCC668FCDC41, Trojan.Artemis!841D2F484A2E
30.00%

Agnitum Outpost
PUA.InstallCore
30.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
30.00%

herdProtect (fuzzy)
a variant of bd7207f13a8c89ff9618cd09f6226bea282a2670, a variant of 5ede5a9aefedc0272cf80eabc97d8130c62b166b
20.00%

F-Secure
Gen:Variant.Kazy.576348
20.00%

G Data
Win32.Application.InstallCore.EG
20.00%

The domain aptitude.video-updater.com has been seen to resolve to the following 4 IP addresses.

185.53.177.10
July 13, 2016

185.53.177.6
July 4, 2016

54.72.9.51
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
May 24, 2016

65.111.162.137
mta8.helloresponse.com
May 5, 2015

File downloads found at URLs served by aptitude.video-updater.com.

1 / 68      (Adware)
http://aptitude.video-updater.com/dl.php?conversion_id=14272505811018&app_id=4&lp_id=962&v=ico&stub_id=149&v_id=4AO7872zVVeD9LdMMMvUhR asetw l2lyUDowXw5DW8=&dist_id=918&channel=ssqfc3&CID=03_102778569_2951f081-6fb9-4c95-8140-068ae462a4bf&AFID=354468_  (adobe_flash_setup.exe)

1 / 68      (Adware)
http://aptitude.video-updater.com/.../J3pbTn5Mann0EryaEE=&dist_id=918&channel=ssqfc3&CID=03_101994676_3a774247-4684-4c43-9545-98b25fb844bd&AFID=354468_  (adobe_flash_setup.exe)

1 / 68      (Adware)
http://aptitude.video-updater.com/dl.php?conversion_id=14272479721760&app_id=4&lp_id=962&v=ico&stub_id=149&v_id=K7IDEcjo9yERnHMbC qJ0VRPWT /.../3DKtg=&dist_id=918&channel=ssqfc3&CID=03_102631443_5809a9fe-79c3-4738-a7bb-fab765826c5f&AFID=354468_  (adobe_flash_setup.exe)

1 / 68      (Adware)
http://aptitude.video-updater.com/dl.php?conversion_id=14272479721760&app_id=4&lp_id=962&v=ico&stub_id=149&v_id=K7IDEcjo9yERnHMbC qJ0VRPWT /.../3DKtg=&dist_id=918&channel=ssqfc3&CID=03_102631443_5809a9fe-79c3-4738-a7bb-fab765826c5f&AFID=354468_  (adobe_flash_setup.exe)

1 / 68      (Adware)
http://aptitude.video-updater.com/dl.php?conversion_id=14268770885441&app_id=4&lp_id=324&v=ico&stub_id=146&v_id=5kpO FCCrz35fs7CJO95V3f5KVnXFJxhH01cjjdjBP8=&dist_id=840&channel=uu_tpoie&cid=eJ7B1OSy8fQCGmsfErPBFDTvF9SRik-XsjsUDmA2yPxy3Ws7UF_IkCaa6MeW_ecV5E2-JoQ2gereUixe-rtY275BT6LiRGB1bjcLDoM7Ggvr3pDArIUzmNLkBkb65TOHT5Ot9YJJdlAXZ9ux8GsgvGBwvIHY9pTHLCvULUIlxMqjin1CdybDC9077ER3j1TYeFzZhakeSDGdR-O-dQAo6b-C9I7OZFls937er8A898tM5w99jX69YH1T6sug  (adobe_flash_setup.exe)

1 / 68      (Adware)
http://aptitude.video-updater.com/dl.php?conversion_id=14272488746963&app_id=4&lp_id=961&v=ico&stub_id=149&v_id=17AGKVeDsdJ6BQ2uZfBkvYWc1KvcoP 06zcPmvo9AaA=&dist_id=931&channel=self_fl_key_sve&source=8898675  (adobe_flash_setup.exe)

1 / 68      (Adware)
http://aptitude.video-updater.com/dl.php?conversion_id=14272220447407&app_id=63&lp_id=515&v=ico&stub_id=148&v_id=84ACIKGLby36y hxdOqRTFdBnmzrW33hPtqhts7PtOM=&dist_id=913&channel=ssqj515&CID=03_100981888_c704d47d-4d0b-4d58-8d29-902f7157127d&AFID=354468_  (java_runtime_enviroment_setup.exe)

14 / 68    (Adware)
http://aptitude.video-updater.com/dl.php?conversion_id=14266267112092&app_id=4&lp_id=941&v=ico&stub_id=139&v_id=glnUKEN5MDs64CPlPTWDpXRPDs/.../M=&dist_id=251&channel=mrkfp&dast=c2xpZD0wJmJyc3I9Mzg0MSZjaXBpZD0yMDIyMDMwJmN1ND0xOCZjaXJpZD0xQUI1QjA5MEExMjUyMjIwNzA4MzA1MjE2JmNpY21wPTQ2NTIyOCZvc2lkPTUzNSZjaXNpZD0xQUI1QjA5MEExMjUyMjE5MTEwNDY3NjcwNSZibz0yJmNpdWlkPS04Nzg5ODg0MDE2OTk3Njc0MTkyJnN1YmlkPTIwMDE5MTIwNzcyMzAwMDAwMCZtbXQ9LTEmY250cnk9MjI2JnNvPTImY3JpZD0yOTU3MTc4JmV4Y2lkPTIyJnB1YmlkPTYxNzYy  (adobe_flash_setup.exe)

14 / 68    (Adware)
http://aptitude.video-updater.com/dl.php?conversion_id=14272391424123&app_id=4&lp_id=963&v=ico&stub_id=149&v_id=eMcsj6BKBHyTGW1UAoVSA/eJC/.../Y=&dist_id=917&channel=ssqfc2&CID=03_102071991_bb069a52-018c-4a28-b4e4-5c95fad94583&AFID=354468_  (adobe_flash_setup.exe)

14 / 68    (Adware)
http://aptitude.video-updater.com/dl.php?conversion_id=14266844188082&app_id=4&lp_id=468&v=ico&stub_id=139&v_id=WtzrAyeHLxIA Wikc4eeKcRET3ht5KX7rO2jBJ0rS9g=&dist_id=832&channel=ima_f4&CLICK_ID=oXDmFzJUJ6SowIcpW_EC9QiSPSHBWcb0baGGJcLRUuELhmPSd9gW2o0A6bminVBMXAA3OQ2yuYI-ay91Gf_-8ZabwStSQp6j_iDhpvfAqyjzAigsvjOGoeHa4xF-TBNojrSvdB36WHiUdB0a3peORlBHzO1RRQemyh6RsOF4VOTO134jut_IG7lEhG4A56qvNMbRBF7EAtBMETzvH4kAcykj9TIpf678HsVRlPp_pcPlizCCFLnIYbXkGY-8cIbavP-TcA9lwtIb3nihZ1NN3zXOPR9WdKnqrO2HGZ333DEXedyaCNkszjyogPi5qxBVxjzFBNP-QruOkJmxCcOnpBexYFychdcbTpjwNnkop7Bw6i62AUz5UhlKjeh6UJT9-fznfBZaxYEQaFKW75knjJeMNw1l1XQeu61N1mMCQq8iJhqlepGtSlrXTMl6obsybgYtySViIAbC3qc0VLRZug  (adobe_flash_setup.exe)

13 / 68    (Adware)
http://aptitude.video-updater.com/.../BZK Jng6H2eUin4wGFNp buN6M6PU=&dist_id=393&channel=ac_f2&cid=34722288401426872586&pubid=361638  (adobe_flash_setup.exe)

13 / 68    (Adware)
http://aptitude.video-updater.com/.../BZK Jng6H2eUin4wGFNp buN6M6PU=&dist_id=393&channel=ac_f2&cid=34722288401426872586&pubid=361638  (adobe_flash_setup.exe)

The following 215 files have been seen to comunicate with aptitude.video-updater.com in live environments.

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
onedrvup.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80
1799877.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80
charles.exe (by Apple)

TCP » 54.72.9.51:80
onedrv.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80
install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
g.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

 
Latest 20 of 219 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.