home

dl2.vin4installer.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS22822 LLNW-AS Limelight Networks, INC. proxy AS object

Root domain:
vin4installer.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.InstallX.K
100.00%

avast!
PUP-gen [PUP]
100.00%

Dr.Web
Adware.Downware.9371
100.00%

ESET NOD32
Win32/InstallIQ.A potentially unwanted application
100.00%

VIPRE Antivirus
Threat.4783689
100.00%

Kaspersky
not-a-virus:Downloader.NSIS.Agent
100.00%

Avira AntiVirus
W32/Sality.Q
100.00%

AVG
Adware InstallIQ.CF
100.00%

Sophos
PUA 'InstallQ'
100.00%

Malwarebytes
PUP.Optional.SafeInstall.A
100.00%

Zillya! Antivirus
Downloader.Agent.Win32.229676
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

NANO AntiVirus
Riskware.Win32.Searcher.csnymk
100.00%

Comodo Security
Application.Win32.InstallIQ.B
100.00%

G Data
Win32.Application.InstallIQ
100.00%

The domain dl2.vin4installer.com has been seen to resolve to the following 2 IP addresses.

208.111.160.6
cdn-208-111-160-6.iad.llnw.net
January 31, 2015

208.111.161.254
cdn-208-111-161-254.iad.llnw.net
January 31, 2015

File downloads found at URLs served by dl2.vin4installer.com.

19 / 68    (Adware)
http://dl2.vin4installer.com/download/Base/145344/.../expertpdf7.exe  (0b5d7a650e82671e81bdb9a8034647df)

The following 85 files have been seen to comunicate with dl2.vin4installer.com in live environments.

TCP » 208.111.161.254:80
AppVerifierapc.exe (AppApcVerifier)

TCP » 208.111.160.6:80
AppVerifierapc.exe (AppApcVerifier)

TCP » 208.111.161.254:80
crossbrowse.exe (Crossbrowse)

TCP » 208.111.160.6:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.161.254:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 208.111.161.254:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 208.111.160.6:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.160.6:80
1stbrowser.exe (1stBrowser by The 1stBrowser Authors)

TCP » 208.111.160.6:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 208.111.161.254:80
Patcher.exe (Audition Patcher by Axeso5.com)

TCP » 208.111.161.254:80
sysmon.exe (SysMon)

TCP » 208.111.160.6:80
SimpleMalwareProtector.exe (Simple Malware Protector by SimpleStar)

TCP » 208.111.161.254:80
AdvancedSystemProtector.exe (ASP)

TCP » 208.111.160.6:80
AdvancedSystemProtector.exe (ASP)

TCP » 208.111.161.254:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.160.6:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.160.6:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.161.254:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 208.111.160.6:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 208.111.161.254:443
vosteran.exe

 
Latest 20 of 135 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.