download.windowsplayer.ru
Private Person (Proxy Registrant)
Domain Information
The domain download.windowsplayer.ru is registered by proxy through REGGI-RU and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Moscow, Moscow City within Russia which resides on the RIPE Network Coordination Centre network.
Registrant:
Private Person
Server location:
Moscow City, Russia (RU)
Create date:
Monday, March 4, 2013
Expires date:
Saturday, March 4, 2017
ASN:
AS199860 SDN-AS Stack Data Network LLC,RU
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.iTVA.T, PUP.Installer.iTVA.Q, PUP.Installer.ITVA, Threat.Win.Reputation.IMP, PUP.iTVA.Installer (M)
100.00%
Dr.Web
Adware.Downware.6456, Adware.Downware.10462, Adware.Downware.11337, Adware.Downware.11301
63.64%
ESET NOD32
Win32/Itva, Win32/Itva.D potentially unwanted (variant), Win32/Itva.E potentially unwanted
63.64%
IKARUS anti.virus
PUA.Itva
45.45%
Trend Micro House Call
Suspicious_GEN.F47V0716, Suspicious_GEN.F47V0822, Suspicious_GEN.F47V0529, Suspicious_GEN.F47V0510, Suspicious_GEN.F47V0102
45.45%
Avira AntiVirus
TR/avti.A, TR/Avti.4107520, TR/Avti.12533728
36.36%
Fortinet FortiGate
Riskware/Itva
36.36%
McAfee
Artemis!79B68F292E6C, Artemis!295B937DEA4F, Artemis!05B5DCD973AC
27.27%
K7 AntiVirus
Trojan , Adware
27.27%
Agnitum Outpost
Riskware.Agent
27.27%
NANO AntiVirus
Riskware.Win32.Downware.dsdvwr, Riskware.Win32.Downware.drxyai, Riskware.Win32.Downware.dlnonn
27.27%
Norman
Suspicious_Gen4.GYDSI
18.18%
Sophos
Generic PUA MI
18.18%
avast!
Win32:Malware-gen
18.18%
The domain download.windowsplayer.ru has been seen to resolve to the following 2 IP addresses.
File downloads found at URLs served by download.windowsplayer.ru.
URL:
http://download.windowsplayer.ru/
Related Domains
