nowinstallupgrade.checkerweb.com
Code-M LTD
Domain Information
The domain nowinstallupgrade.checkerweb.com registered by Code-M LTD was initially registered in January of 2015 through REGISTRAR OF DOMAIN NAMES REG.RU LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Chicago, Illinois within the United States which resides on the SingleHop, Inc. network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC
Server location:
Illinois, United States (US)
Create date:
Wednesday, January 14, 2015
Expires date:
Saturday, January 14, 2017
Updated date:
Friday, January 15, 2016
ASN:
AS32475 SINGLEHOP-INC - SingleHop,US
Google Safe Browsing:
phishing
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
avast!
Trojan-gen, Malware-gen
81.82%
ESET NOD32
Win32/InstallCore.YK potentially unwanted application, Win32/InstallCore.YL potentially unwanted application, Win32/InstallCore.ZC potentially unwanted application
81.82%
Reason Heuristics
Threat.installCore.Installer, PUP.installCore.OOOMadAdvert.Installer (M), PUP.installCore.OOOMadAd.Installer (M)
81.82%
VIPRE Antivirus
Threat.4150696, Trojan.Win32.Generic
63.64%
Dr.Web
Trojan.InstallCore.508
54.55%
Comodo Security
Application.Win32.InstallCore.DAF
45.45%
herdProtect (fuzzy)
a variant of c2ebba608cb91fdd2a69db81d30df2e7234e123d, a variant of 5b5a6855b0bb02d664544788c062eba1b911c048, a variant of 2a08e65d48af5ee7f1bb3f5576f20f4feec42e19
45.45%
K7 AntiVirus
Adware
45.45%
AVG
InstallCore, Adware InstallCore.AGG
45.45%
Avira AntiVirus
PUA/InstallCore.IB
27.27%
Bkav FE
W32.HfsAdware
27.27%
AhnLab V3 Security
PUP/Win32.Bundler
18.18%
Malwarebytes
PUP.Optional.InstallCore.A
9.09%
Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
9.09%
The domain nowinstallupgrade.checkerweb.com has been seen to resolve to the following 2 IP addresses.
usdedi2.cipo.me
May 6, 2015
File downloads found at URLs served by nowinstallupgrade.checkerweb.com.
Related Domains
