cdn77.airdwnlds.com

Air Software  (via a Proxy Registrant)

Domain Information

The domain cdn77.airdwnlds.com is registered by proxy through ENOM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute potentially unwanted software. The domain is associated with the publisher Air Software who is located in Victoria, British Columbia in Canada.
Registrar:
ENOM, INC.

Create date:
Tuesday, September 11, 2012

Expires date:
Sunday, September 11, 2016

Updated date:
Saturday, December 19, 2015

Root domain:

Scanner detections:
Detections  (85% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SearchProtect.Conduit.M, Unnamed.Threat.11, PUP.Optional.SmartPCSolutions.H, PUP.Downloader.Uycilgt.H, PUP.Downloader.Csznyaeltvxdp.H, PUP.Systweak.ThePhone.Installer.Meta (L), PUP.Brightcircle.WinstonProject.Installer (M), Adware.BrightCircle.ClashProjectBrightCircleInvestments, Adware.BrightCircle.Engpwsdpwmco.Installer (M), PUP.Injekt.CrazyIdeaDevelopment.Installer (M)
91.30%

Dr.Web
Adware.Conduit.6, Adware.Searcher.2542, Adware.Downware.1716, Trojan.Crossrider.1343, Trojan.StartPage.54170, Adware.Shopper.423, Adware.Plugin.274
52.17%

ESET NOD32
Win32/Toolbar.Conduit, Win32/Wajam, Win32/SpeedingUpMyPC (variant), Win32/Packed.ScrambleWrapper, Win32/Packed.ScrambleWrapper (variant)
47.83%

McAfee
Artemis!51A0627A1116, Artemis!E40E69623607, Artemis!11556ECDC22C, Artemis!EAE451558E67, Artemis!2BE3144251E9, Artemis!F51A30D33776, Artemis!13C1F11B40C3
39.13%

Malwarebytes
PUP.Optional.Conduit.A, PUP.Optional.Wajam, PUP.Optional.SearchHijacker.A, PUP.Optional.OfferBlvd, PUP.Optional.Clara.A, PUP.Optional.CrossRider.A
34.78%

Agnitum Outpost
Riskware.SpeedingUpMyPC, Riskware.ScrambleWrapper, PUA.Agent, Trojan.DL.Agent, PUA.Mutabaha, Trojan.Graftor, Riskware.Agent
34.78%

Kaspersky
not-a-virus:AdWare.Win32.Agent, Trojan-Downloader.Win32.Agent, Trojan-FakeAV.Win32.Agent, not-a-virus:AdWare.NSIS.Adwapper
30.43%

IKARUS anti.virus
not-a-virus:AdWare.Win32.Agent, Trojan.Win32.SuspectCRC, not-a-virus:Downloader.Agent, PUA.RiskWare.NetFilter, Trojan.SuspectCRC
30.43%

AVG
Generic, Dropper.Generic9, DealApp
30.43%

VIPRE Antivirus
Conduit, Wajam, Adware.Agent, InfoAtoms, Adware.Crossid, Trojan.Win32.Generic
26.09%

Trend Micro House Call
TROJ_GEN.F47V1216, TROJ_GEN.R047H07BS14, TROJ_GEN.F47V0108, TROJ_GEN.R0CBH07CF14, TROJ_GEN.R0C1H09IQ14, TROJ_GE.B9819B76
26.09%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, AdWare.Agent.ajdu
21.74%

G Data
Win32.Application.ConduitBrothersoftTB, Gen:Variant.Kazy.461155, Trojan.GenericKD.1868287, Win32.Application.Agent.7DM70S
17.39%

Emsisoft Anti-Malware
Trojan-Ransom.Win32.LockScreen, Gen:Variant.Kazy.461155, Trojan.GenericKD.1868287, Gen:Application.Elex
17.39%

NANO AntiVirus
Riskware.Win32.Unwanted.cuwapi, Trojan.Win32.Generic.ctnytf, Trojan.Win32.Click.ctxnst, Trojan.Win32.Crossrider.dlayty
17.39%

File downloads found at URLs served by cdn77.airdwnlds.com.

7 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

15 / 68    (PUP)

20 / 68    (Adware)

1 / 68      (Adware)

9 / 68      (Adware)
http://cdn77.airdwnlds.com/downloads/offers/.../setup_shop_br5.exe  (250c41e3f8b58511751b8fb9ee5f38296b76b83a72cdffe34a0066210e4618ce)

1 / 68      (Adware)

19 / 68    (Adware)

21 / 68    (Adware)

8 / 68      (PUP)

3 / 68      (PUP)

7 / 68      (PUP)

4 / 68      (inconclusive)

1 / 68      (PUP)