nowinstallupgrade.newvideolive.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain nowinstallupgrade.newvideolive.com is registered by proxy through REGISTRAR OF DOMAIN NAMES REG.RU LLC and was originally registered in February of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Fort Lauderdale, Florida within the United States which resides on the Infolink Global Corporation network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC

Server location:
Florida, United States (US)

Create date:
Saturday, February 14, 2015

Expires date:
Sunday, February 14, 2016

Updated date:
Wednesday, May 13, 2015

ASN:
AS15083 INFOLINK-MIA-US - Infolink Global Corporation,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.installCore.Installer, PUP.installCore.AdvertaizingGrupp.Installer (M), PUP.installCore.OOOAdvert.Installer (M), PUP.installCore.OOOAdver.Installer (M), PUP.installCore (M)
100.00%

avast!
Malware-gen
40.00%

F-Secure
Riskware.Application.Bundler.Outbrowse, Gen:Variant.Kazy.576348
40.00%

Avira AntiVirus
PUA/InstallCore.A.2387
40.00%

VIPRE Antivirus
Threat.4150696
40.00%

Dr.Web
Trojan.InstallCore.206
40.00%

ESET NOD32
Win32/InstallCore.YN potentially unwanted application
40.00%

Bkav FE
W32.HfsAdware
40.00%

K7 AntiVirus
Trojan
40.00%

Agnitum Outpost
PUA.InstallCore
40.00%

AVG
InstallCore
40.00%

herdProtect (fuzzy)
a variant of 64c3bf817a7940764b87e900b452c87241136a3a
20.00%

McAfee
Trojan.Artemis!841D2F484A2E
20.00%

The domain nowinstallupgrade.newvideolive.com has been seen to resolve to the following 2 IP addresses.

lb-212-247.above.com
July 8, 2016

mta8.helloresponse.com
May 5, 2015

File downloads found at URLs served by nowinstallupgrade.newvideolive.com.

The following 11 files have been seen to comunicate with nowinstallupgrade.newvideolive.com in live environments.