download.lovivkontakte.ru

Private Person  (Proxy Registrant)

Domain Information

The domain download.lovivkontakte.ru is registered by proxy through REGGI-RU and was originally registered in November of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
REGGI-RU

Server location:
Moscow City, Russia (RU)

Create date:
Sunday, November 23, 2008

Expires date:
Wednesday, November 23, 2016

ASN:
AS199860 SDN-AS Stack Data Network LLC,RU

Root domain:

Scanner detections:
Detections  (95% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.iTVA.J, Threat.Win.Reputation.IMP, PUP.Installer.ITVA, PUP.iTVA.ITVALimitedLiabilityCompany.Installer.Meta (M), PUP.ITVALimitedLiabilityCompany.Installer (M), PUP.iTVA.Installer (M), PUP.ITVA.LimitedL.Installer (M)
95.24%

Dr.Web
Adware.Downware.6456, Adware.Downware.10462, Adware.Downware.12375, Adware.Downware.11337
38.10%

ESET NOD32
Win32/Itva, Win32/Itva.D potentially unwanted (variant), Win32/Itva.A potentially unwanted, Win32/Itva.E potentially unwanted
33.33%

IKARUS anti.virus
PUA.Itva, Trojan.Win32.Agent, AdWare.Downware
33.33%

McAfee
Artemis!1846D41EA7DC, Artemis!20FD45091068, Artemis!22A9832F29C6, Artemis!11468FC21884, Artemis!17E93D280861, Artemis!231185AF7D2A
28.57%

VIPRE Antivirus
Trojan.Win32.Generic
23.81%

Agnitum Outpost
Riskware.Agent
19.05%

Fortinet FortiGate
Riskware/Itva
19.05%

Trend Micro House Call
Suspicious_GEN.F47V0822, Suspicious_GEN.F47V0413, Suspicious_GEN.F47V0715
14.29%

AVG
nbsp;
14.29%

K7 AntiVirus
Adware
14.29%

NANO AntiVirus
Riskware.Win32.Downware.dgvnpv, Riskware.Win32.Downware.dsdvwr
14.29%

Avira AntiVirus
ADWARE/Downware.13451936, TR/Avti.4227536.3, TR/Avti.2124912.4
14.29%

Sophos
Generic PUA OA, Generic PUA CL (PUA)
9.52%

Rising Antivirus
PE:Trojan.Win32.Generic.15EBE64F!367781455, PE:Malware.Generic/QRS!1.9E2D [F]
9.52%

The domain download.lovivkontakte.ru has been seen to resolve to the following IP address.

September 30, 2014

File downloads found at URLs served by download.lovivkontakte.ru.

2 / 68      (false positives)

1 / 68      (PUP)

3 / 68      (PUP)
http://download.lovivkontakte.ru/setup_lvk.exe  (bbca8f38647135a46461c54cb0e71fc6)

1 / 68      (PUP)

1 / 68      (PUP)
http://download.lovivkontakte.ru/LoviVKSetupRU.exe  (2257a5f4cc088250fd87f290079cf9fc)

1 / 68      (PUP)

12 / 68    (PUP)

1 / 68      (PUP)
http://download.lovivkontakte.ru/LoviVKontakteSetup.exe  (0d4a86cbcdbe46ccbc442ee66a5d7779)

1 / 68      (Adware)

4 / 68      (Adware)
http://download.lovivkontakte.ru/LoviVKontakteSetupRU.exe  (adcec12afba81fd7a77ec55f566e10a6)

15 / 68    (Adware)

5 / 68      (PUP)
http://download.lovivkontakte.ru/LoviVKontakteSetup.exe  (11468fc218842853421cb9d8149a46e1)

5 / 68      (PUP)

1 / 68      (PUP)
http://download.lovivkontakte.ru/LoviVKSetupRU.exe  (966f80406dc9cd49bd3682701943be9a)

1 / 68      (PUP)

6 / 68      (Adware)

20 / 68    (Adware)
http://download.lovivkontakte.ru/setup_lvk.exe  (231185af7d2a9d346fdba63113bf4bb3)

1 / 68      (PUP)

2 / 68      (PUP)
http://download.lovivkontakte.ru/LoviVKontakteSetup.exe  (30b471e1fcf18c9b100064fd3f275157)

4 / 68      (Adware)

3 / 68      (Adware)

10 / 68    (PUP)

URL:
http://download.lovivkontakte.ru/

Web server:
nginx/1.9.9

30 of 34 related domains