install.downloadwiz.com
Air Software (via a Proxy Registrant)
Domain Information
The domain install.downloadwiz.com is registered by proxy through ENOM, INC. and was originally registered in September of 2004. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network. The domain is associated with the publisher Air Software who is located in Victoria, British Columbia in Canada.
Server location:
New York, United States (US)
Create date:
Monday, September 13, 2004
Expires date:
Tuesday, September 13, 2016
Updated date:
Saturday, December 19, 2015
ASN:
AS393406 DIGITALOCEAN-ASN-NY3 - Digital Ocean, Inc.,US
Scanner detections:
Detections (75% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Bundler.Air Software, PUP.Air Software.DownloadAssistant.Bundler (M), PUP.Vittalia.InstallH (M)
75.00%
Dr.Web
Trojan.Vittalia.30, Trojan.Vittalia.194
50.00%
NANO AntiVirus
Trojan.Win32.Vittalia.dqfrig
50.00%
Comodo Security
Application.Win32.DownloadAssistant.S
50.00%
VIPRE Antivirus
Threat.4782985
25.00%
avast!
Win32:Adware-CKC [PUP]
25.00%
ESET NOD32
Win32/DownloadAssistant.A potentially unwanted (variant)
25.00%
Rising Antivirus
PE:Malware.XPACK-HIE/Heur!1.9C48
25.00%
Zillya! Antivirus
Trojan.DownloadAssistGen.Win32.1
25.00%
The domain install.downloadwiz.com has been seen to resolve to the following 2 IP addresses.
fd-03-do-e-ny-3.gtdlrfwd.com
February 1, 2016
useast.gtdlrfwd.com
May 2, 2015
File downloads found at URLs served by install.downloadwiz.com.
The following 14 files have been seen to comunicate with install.downloadwiz.com in live environments.
URL:
http://install.downloadwiz.com/
Title:
“Welcome to nginx!”
Web server:
nginx/1.4.6 (Ubuntu)
Related Domains
