home

f43daa1bdf625c9bed4a3640fa58870b.gjhgfjdhgd.ru

Private Person  (Proxy Registrant)

Domain Information

The domain f43daa1bdf625c9bed4a3640fa58870b.gjhgfjdhgd.ru is registered by proxy through REGRU-RU and was originally registered in October of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Friday, October 16, 2015

Expires date:
Sunday, October 16, 2016

Root domain:
gjhgfjdhgd.ru

Whois:
1 gjhgfjdhgd.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SPKGEOTO (M)
100.00%

File downloads found at URLs served by f43daa1bdf625c9bed4a3640fa58870b.gjhgfjdhgd.ru.

1 / 68      (PUP)
http://f43daa1bdf625c9bed4a3640fa58870b.gjhgfjdhgd.ru/.../?f=YTo3OntzOjc6InNpdGVfaWQiO3M6NDoiMTQ5MSI7czo4OiJmaWxlX3VybCI7czoxNTA6Imh0dHA6Ly90ZHMuZmluY29uc3QucnUvMTlOcT9rZXl3b3JkPdCY0L3RgdGC0YDRg9C60YbQuNGPINC_0L4g0L_QsNC90LXQu9C4INC_0YDQuNCx0L7RgNC-0LIg0YTQvtC70YzQutGB0LLQsNCz0LXQvSDQv9Cw0YHRgdCw0YIg0LI1Ky5kb2MmY2hhcnNldD11dGYtOCI7czo5OiJmaWxlX25hbWUiO3M6MTAwOiLQmNC90YHRgtGA0YPQutGG0LjRjyDQv9C-INC_0LDQvdC10LvQuCDQv9GA0LjQsdC-0YDQvtCyINGE0L7Qu9GM0LrRgdCy0LDQs9C10L0g0L_QsNGB0YHQsNGCINCyNSsuZG9jIjtzOjk6ImZpbGVfdHlwZSI7czo0OiJ3b3JkIjtzOjk6ImZpbGVfc2l6ZSI7aTozNzk2ODkwNDtzOjY6InJhbmRvbSI7aToyMzMzMjY7czo0OiJ0aW1lIjtpOjE0NDU0NDYyODY7fQ,,&mark5=?????????? ?? ?????? ???????? ??????????? ?????? ?5   (instruktsiya_po_paneli_priborov_folksvagen_passat_v5.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.