The domain download-file.windownload.net is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Strasbourg, Alsace within France which resides on the RIPE Network Coordination Centre network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Alsace, France (FR)
Create date:
Tuesday, February 4, 2014
Expires date:
Saturday, February 4, 2017
Updated date:
Tuesday, December 9, 2014
ASN:
AS8972 PLUSSERVER-AS PlusServer AG,DE
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.QuickDownloader.S, PUP.Installer.QuickDownloader.R, PUP.Installer.QuickDownloader.U, PUP.Installer.QuickDownloader.M, PUP.Installer.Adlogica, PUP.Adlogica.QuickDownloader.Bundler (M), PUP.installCore.OOOTehSnab.Installer (M), PUP.Adlogica.SoftDownloads.Bundler (M), PUP.Adlogica.FastDownloads.Bundler (M), PUP.Adlogica.QuickDow.Bundler (M), PUP.Adlogica.FastDown.Bundler (M), PUP.Adlogica.SoftDown.Bundler (M), PUP.Adlogica (M)
100.00%
VIPRE Antivirus
Threat.4786018, Threat.5063361, InstallCore
44.68%
K7 AntiVirus
Unwanted-Program , Trojan
44.68%
ESET NOD32
Win32/InstallCore.PK potentially unwanted application, Win32/InstallCore.QC potentially unwanted application
42.55%
Sophos
Install Core, PUA 'Install Core', Generic PUA CH
42.55%
Dr.Web
Adware.InstallCore.406, Trojan.Packed.28458, Trojan.InstallCore.37
42.55%
Avira AntiVirus
Adware/InstallCore.A.417, ADWARE/InstallCore.Gen9
40.43%
SUPERAntiSpyware
PUP.InstallCore/Variant
38.30%
Malwarebytes
PUP.Optional.Downloader, PUP.Optional.Downloadster
21.28%
herdProtect (fuzzy)
a variant of a06bf243f99f86f9db5a72c03ebd670348ea4bd5, a variant of 751cd478f8ecb6c3be3d637ffa0681f667095dac, a variant of 31d66574a12ff1bffa49e6443855fe657763657f
17.02%
Comodo Security
Application.Win32.Installcore.PL
17.02%
NANO AntiVirus
Riskware.Text.Drop.deoyhc, Riskware.Win32.InstallCore.dfgmmj
12.77%
F-Prot
W32/InstallCore.AC.gen
12.77%
Clam AntiVirus
Win.Adware.Installcore-548
8.51%
McAfee
Trojan.Artemis!287883BC7233, Trojan.Artemis!191535997293
4.26%
The domain download-file.windownload.net has been seen to resolve to the following 8 IP addresses.
static-ip-62-75-207-166.inaddr.ip-pool.com
January 26, 2016
ec2-54-72-130-31.eu-west-1.compute.amazonaws.com
August 11, 2015
ec2-54-76-3-212.eu-west-1.compute.amazonaws.com
August 11, 2015
(CloudFlare)
July 14, 2014
File downloads found at URLs served by download-file.windownload.net.
Latest 30 of 47 download URLs
URL:
http://download-file.windownload.net/
Title:
“| WinDownload - Windownload”
Web server:
nginx/1.0.15 (PHP/5.3.3)
Related Domains