home

c04.files.inst.avg.com

AVG Netherlands B.V.

Domain Information

The domain c04.files.inst.avg.com registered by AVG Netherlands B.V. was initially registered in November of 1994 through GODADDY.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Suwanee, Georgia within the United States which resides on the Quality Technology Services Santa Clara, LLC network.
Registrar:
MARKMONITOR INC.

Server location:
Georgia, United States (US)

Create date:
Wednesday, November 2, 1994

Expires date:
Tuesday, November 1, 2022

Updated date:
Wednesday, April 22, 2015

ASN:
AS20141 QUALITYTECH-SUW-300 - Quality Technology Services, LLC.

Root domain:
avg.com

Whois:
2 avg.com records

Scanner detections:
Detections  (64% detected)

Scan engine
Details
Detections

Dr.Web
Adware.Downware.1923, Adware.Downware.1622, Adware.Downware.1348, Win32.Sector.30
75.00%

Reason Heuristics
PUP.Installer.WebSyssro.BB, PUP.Installer.WebSyssro.Y, PUP.Installer.AfterDawn.H, PUP.Installer.AfterDawn.R, PUP.Installer.AfterDawn.T, PUP.Installer.AfterDawn.Q, PUP.Installer.AfterDawn.O, PUP.Installer.AfterDawn.q, PUP.Installer.AfterDawn.P, PUP.Installer.AfterDawn.U, PUP.Installer.WebSyssro.V, PUP.Installer.AfterDawn.K, PUP.Installer.AfterDawn.Y, PUP.Installer.AfterDawn.DD, PUP.OpenInstall.AfterDawn.Installer (M), PUP.OpenInstall.AfterDaw.Installer (M), PUP.OpenInstall (M)
66.67%

Trend Micro House Call
TROJ_GEN.F47V1120, TROJ_GEN.F47V0809, TROJ_GEN.F47V0223, TROJ_GEN.F47V0118, HV_A0OCZOJ_BK083E49.TOMC, TROJ_GEN.F47V0222
63.89%

Sophos
Open Install, PUA 'Open Install'
61.11%

ESET NOD32
Win32/OpenInstall (variant)
41.67%

ESET NOD32
Win32/OpenInstall potentially unwanted application, Win32/Sality.NBA virus
33.33%

McAfee
Artemis!619733826DC3, Artemis!3719C6E783EF, Artemis!AD7A90655937, Artemis!7E83609DC550, Artemis!97DD17671AD5, Virus.W32/Virut.n.gen
22.22%

Emsisoft Anti-Malware
Trojan.Generic.10143455, Win32.Sality
19.44%

K7 AntiVirus
Unwanted-Program , Trojan
19.44%

Agnitum Outpost
Riskware.OpenInstall
16.67%

herdProtect (fuzzy)
a variant of 93c0bdf4aeee0e46c72ed5fc28f539c84b4da3d5, a variant of 65cc89139fa22939fbdb7363522fd81ad1eb184a, a variant of c33108a8a09949721397f92b867445565b1b59fa
16.67%

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
13.89%

Fortinet FortiGate
Riskware/DomaIQ, Riskware/EmployeeActMon, Riskware/OpenInstall
13.89%

Avira AntiVirus
Adware/OpenInstall.AD.9
2.78%

F-Secure
Win32.Sality.3
2.78%

The domain c04.files.inst.avg.com has been seen to resolve to the following 2 IP addresses.

204.193.144.89
August 1, 2014

204.193.144.51
submit-portal.cloud.avg.com
December 18, 2013

File downloads found at URLs served by c04.files.inst.avg.com.

1 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2013/06/03/.../webcam7v09943.exe  (f9fa3b8794340d2d71116da632b165de)

1 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2013/06/14/.../iTunesv1104.exe  (269501240d88db72fac0a25d32f332cd)

2 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2013/07/18/.../ReliefDataEntrySystem20.exe  (349b320e4b014c5423df067a7d9f4df3)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2014/02/02/.../SafariInstaller.exe  (8090ce41e0187676ab77c61d93cdee06)

1 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2014/05/31/.../MicrosoftOfficeProfessional2007.exe  (f36f6101da9aee3383d7e25a29d52f8e)

1 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2014/03/27/.../BlueStacksAppPlayerv0823036Beta.exe  (d6a7368f6a95584cbd2f3eaf15964eca)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/05/31/.../BroadwayCondensed_DB_Font_Installer.exe  (087db615ed20839f4cddeed0b0a61d99)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/06/11/.../Ginga.exe  (428bb5da668d8e6ead68c957420543e7)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/06/11/.../Ballpark_Font_Installer.exe  (75978214171eb44435036089b36fed6a)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/06/11/.../Forelle.exe  (1738407e0ea3cbbcea7789d6befb10a5)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/06/11/.../xxx_Dirty_Jokes_xxx_Font_Installer.exe  (75623b989c56b3ccf1e39c2c8669dfec)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/06/11/.../Porcelain_Font_Installer.exe  (f28cc95e5f2b7241271a286444e140bc)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/06/11/.../Porcelain_Paper_Pie_Font_Installer.exe  (3c9d0e247fc42fed955ccd46c1924783)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/06/11/.../HoneyScript.exe  (58e3a3e451979d943b38f70064328ddf)

10 / 68    (Infected)
http://c04.files.inst.avg.com/dl/patched/2014/02/28/.../WinRAR32-bitInstaller.exe  (82cd2019f36302ab71b772353ddfeca9)

5 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2013/11/22/.../WinZip180.exe  (46f894121ba43508942e31f0b2841590)

1 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2014/05/14/.../AdobeFlashPlayerFirefoxMozillaOperaChrome64-bitv116602180.exe  (e5cd76b4d985be72ead15fd18f833968)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/09/01/.../KrutiDev010Bold.exe  (f66d541dac24ae838e7cd890cdc20d6f)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/12/24/.../FLVPlayerDownloader.exe  (e401563d9f24a892f5f3f284832d372c)

1 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2013/07/10/.../WinRARv500Beta6.exe  (00a84d42ce338b5eccfa04d79eef4b65)

1 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2014/02/23/.../DaumPotPlayer64-bitv1544465.exe  (260f6c00d1c6f6f0c852fe0978411240)

6 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2013/12/04/.../VirtualRouterInstaller_v10msi.exe  (ee2182e6d4d99da6fb7bcce085fc3bed)

9 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2014/01/19/.../WinZip180.exe  (379e6fab4e4a55b9bce8607c2be31106)

6 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2013/07/30/.../VLCv208.exe  (fc551857aae335c2333696aa4a8bd445)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2013/06/07/.../Currency_Font_Installer.exe  (f24e3c3494473338d40e4bf883f282f4)

10 / 68    (PUP)
http://c04.files.inst.avg.com/dl/patched/2013/10/30/.../WinZip180.exe  (7e83609dc550202b43e279061ac3e11c)

5 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2014/05/20/.../FolderGuard_installer.exe  (b0c6d7d45805f57da90ae9ca5da51b61)

6 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2014/05/18/.../VobSubv223.exe  (731a8d7cfc72a820e6b48b8625485617)

1 / 68      (PUP)
http://c04.files.inst.avg.com/dl/patched/2013/11/17/.../SAMSUNGKies20011014_49_2.exe  (628a223add45ad5a8ffce7a169a3115a)

0 / 68
http://c04.files.inst.avg.com/dl/patched/2014/01/13/.../Melbourne.exe  (7f4e31a1ee259e97bc5b6706478ce562)

 
Latest 30 of 110 download URLs

oicdn.com

winzip.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.