The domain installsofttech.com is registered by proxy through Moniker Online Services and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Moniker Privacy Services
Registrar:
Moniker Online Services
Server location:
Virginia, United States (US)
Create date:
Wednesday, May 21, 2014
Expires date:
Saturday, May 21, 2016
Updated date:
Thursday, December 17, 2015
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (94% detected)
Scan engine
Details
Detections
G Data
Win32.Application.Agent.0U7FQ8, Win32.Application.Agent.O80155, Win32.Adware.Wajam, NSIS.Application.Wajam
78.00%
NANO AntiVirus
Trojan.Nsis.Wajam.dqgtqq
74.00%
Zillya! Antivirus
Trojan.Win32.1DB12147
72.00%
Dr.Web
Adware.Searcher.2792, Adware.Searcher.2859, Threat.Undefined
72.00%
Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen, HEUR/QVM42.1.Malware.Gen, Win32/Trojan.6ca, HEUR/QVM03.0.Malware.Gen, Win32/Trojan.Spy.352
42.00%
F-Prot
W32/MSIL_Injector.AE.gen
42.00%
Baidu Antivirus
PUA.Win32.Wajam, Adware.NSIS.Wamaj
32.00%
Reason Heuristics
(M), PUP.Wajam.Installer.Meta, PUP.Wajam.colonialetechnology.Installer (M), PUP.Wajam.Installer.Meta (M), PUP.Wajam.preverttechnology.Installer (M)
30.00%
IKARUS anti.virus
AdWare.Win32.Wajam, PUA.MSIL.Wajam, PUA.Wajam, Trojan-Spy.Win32.Agent
30.00%
Kaspersky
not-a-virus:AdWare.NSIS.Wamaj, not-a-virus:AdWare.Win32.Agent, not-a-virus:AdWare.Win32.Wajam, Trojan-Spy.Win32.Agent, HEUR:Trojan.Win32.Generic
26.00%
Trend Micro House Call
TROJ_GEN.R047H05C315, Suspicious_GEN.F47V0406, Suspici.41E64941, TROJ_GEN.R047H05EK15, Suspici.3501C17C, TROJ_GEN.R047H05F215, Suspici.2C1AF03D
22.00%
ESET NOD32
Win32/Wajam.K potentially unwanted, MSIL/Wajam.C potentially unwanted (variant)
20.00%
ESET NOD32
Detection.Undefined, MSIL/Wajam.C potentially unwanted application, Win32/Wajam.AC potentially unwanted application
20.00%
Avira AntiVirus
Adware/Wajam.2503016, ADWARE/Wajam.A.505, ADWARE/Wajam.A.657, ADWARE/Wajam.A.686, ADWARE/Wajam.A.244, ADWARE/Wajam.A.761, W32/Sality.AT
18.00%
Panda Antivirus
Generic Suspicious, Trj/CI.A
18.00%
The domain installsofttech.com has been seen to resolve to the following IP address.
ec2-54-208-23-129.compute-1.amazonaws.com
January 4, 2016
File downloads found at URLs served by installsofttech.com.
Latest 30 of 78 download URLs
The following 38 files have been seen to comunicate with installsofttech.com in live environments.
URL:
http://installsofttech.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Apache/2.2.14 (Ubuntu) (PHP/5.3.2-1ubuntu4.19)