mystart.toolbarstart.com

Visicom Media inc.

Domain Information

The domain mystart.toolbarstart.com registered by Visicom Media inc. was initially registered in February of 2010 through DNC HOLDINGS, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Atlanta, Georgia within the United States which resides on the NationalNet, Managed Services network.
Registrar:
DNC HOLDINGS, INC.

Server location:
Georgia, United States (US)

Create date:
Wednesday, February 10, 2010

Expires date:
Friday, February 10, 2017

Updated date:
Sunday, December 27, 2015

ASN:
AS22384 NATIONALNET-1 - NationalNet, Inc.,US

Root domain:

Scanner detections:
Detections  (96% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MyStartToolbarInstaller.VisicomMedia.W, PUP.MyStartToolbarInstaller.VisicomMedia.O, PUP.Visicom.MyStartToolbarInstaller.Installer, PUP.Visicom.VisicomMedia.Installer (M), Adware.MyStart (M), Win32.Generic, PUP.Visicom.VisicomM.Installer (M), PUP.Visicom.VisicomM.Installer.Meta (M)
100.00%

Malwarebytes
PUP.Optional.MyStartTB.A, PUP.Optional.MyStartTB.ShrtCln
30.77%

Dr.Web
Tool.InstallToolbar.129, Adware.Shopper.489, Adware.Toolbar.272, Adware.Toolbar.283, hacktool program Tool.InstallToolbar.174, Adware.Toolbar.283
30.77%

ESET NOD32
Win32/Toolbar.Visicom (variant), Win32/Toolbar.Visicom.A potentially unwanted (variant)
30.77%

Trend Micro House Call
TROJ_GEN.F47V0412, Suspicious_GEN.F47V0731, Suspici.8C7FCC2E, TROJ_GEN.R08NH07BJ15, TROJ_GEN.R047H07BJ15
23.08%

Fortinet FortiGate
Riskware/Toolbar_Visicom, Riskware/Visicom, Riskware/Agent
23.08%

Agnitum Outpost
PUA.Toolbar.Visicom, PUA.Toolbar.Agent
23.08%

McAfee
Artemis!378E50795A33, Artemis!DDBB24927832, Artemis!663AA5DC1A25, Artemis!90BFF7B1BE4B, Artemis!CD9CE5F337B3
19.23%

K7 AntiVirus
Unwanted-Program
19.23%

Kaspersky
not-a-virus:WebToolbar.Win32.Agent
19.23%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
15.38%

Zillya! Antivirus
Adware.Agent.Win32.43878, Adware.AdLoad.Win32.6973
15.38%

G Data
Win32.Application.Agent.68WY77, Win32.Application.Agent.T4QMLM, Win32.Application.Agent.YHYW5Z, Win32.Application.Agent.YKUG4X
15.38%

NANO AntiVirus
Riskware.Nsis.Adware.dmihbl, Riskware.Win32.InstallToolbar.dpqueo
11.54%

AVG
Generic
11.54%

The domain mystart.toolbarstart.com has been seen to resolve to the following 2 IP addresses.

webquest-13.nationalnet.com
March 31, 2016

visicom-98.nationalnet.com
January 2, 2016

File downloads found at URLs served by mystart.toolbarstart.com.

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (PUP)

1 / 68      (Adware)

1 / 68      (Adware)

2 / 68      (false positives)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

6 / 68      (PUP)

11 / 68    (PUP)

17 / 68    (PUP)

16 / 68    (PUP)

1 / 68      (PUP)

12 / 68    (PUP)

1 / 68      (PUP)
http://mystart.toolbarstart.com/download/.../  (mystarttb_5.5.0.2_samba.exe)

7 / 68      (PUP)

15 / 68    (PUP)

1 / 68      (PUP)

1 / 68      (PUP)

URL:
http://mystart.toolbarstart.com/

Title:
“Parking Page - NationalNet, Inc.”

Web server:
Apache/2.2.16 (Debian)