home

learn2upgrade.theupgradeonline.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS30633 LEASEWEB-US - Leaseweb USA, Inc.,US

Root domain:
theupgradeonline.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/InstallCore.VW potentially unwanted application
100.00%

Avira AntiVirus
Adware/InstallCo.zlz
100.00%

Reason Heuristics
PUP.Installer.installCore
100.00%

Dr.Web
Trojan.InstallCore.57
100.00%

K7 AntiVirus
Trojan
100.00%

The domain learn2upgrade.theupgradeonline.com has been seen to resolve to the following IP address.

198.7.56.109
February 21, 2015

File downloads found at URLs served by learn2upgrade.theupgradeonline.com.

5 / 68      (Adware)
http://learn2upgrade.theupgradeonline.com/dl.php?conversion_id=14232418730412&app_id=63&lp_id=335&v=ico&stub_id=85&v_id=ZNN2IewQE84vOemTRToAAmIuAcslrmg0djVa0pgtxAc=&dist_id=292&channel=affl292&subid=102620_ec904bee23d0c9e3db9527bfe61beb44  (java_runtime_enviroment_setup.exe)

5 / 68      (Adware)
http://learn2upgrade.theupgradeonline.com/.../2jQK9bjzGCAIJQ4jnXjvH569xcsfh RU=&dist_id=292&channel=affl292&subid=102620_8977be3a660e1daac6c606b94f426432  (java_runtime_enviroment_setup.exe)

freeupgradelive.com

theonlinelive.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.