The domain opensoftwareupdater.com registered by GlobalDnsProvider.com Inc was initially registered in February of 2014 through TLDS, LLC DBA SRSPLUS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Los Angeles, California within the United States which resides on the CloudFlare, Inc. network. The domain uses the CloudFlare CDN, a distributed domain name server service which utilizes a number of reverse proxy IP Addresses (see below).
Registrant:
GlobalDnsProvider.com Inc
Registrar:
TLDS, LLC DBA SRSPLUS
Server location:
California, United States (US)
Create date:
Friday, February 21, 2014
Expires date:
Tuesday, February 21, 2017
Updated date:
Monday, February 22, 2016
ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US
Scanner detections:
Detections (92% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.INSTALLERTECHNOLOGYCO.J, PUP.Installer.INSTALLERTECHNOLOGYCO.N, PUP.INSTALLERTECHNOLOGYCO.S, PUP.INSTALLERTECHNOLOGYCO.P, PUP.InstallerTechnologyCo.P, PUP.INSTALLERTECHNOLOGYCO.Installer (M), PUP.INSTALLERTECHNOLOGYCO (M), PUP.InstallerTech.InstallerTechnologyCo.Installer.Meta (M), PUP.INSTALLE (M), PUP.Dowloader.Installer.Meta (M), PUP.InstallerTech.Installer.Meta (M), PUP.InstallerTech.Meta (M)
91.67%
Rising Antivirus
NS:PUF.SilenceInstaller!1.9DDF, NS:PUF.SilenceInstaller!1.9DDF[F1]
58.33%
Dr.Web
Adware.Downware.2519, Adware.Downware.3736, Adware.Downware.2185, Adware.Downware.12954, Adware.Downware.9973, Adware.Downware.14087
50.00%
VIPRE Antivirus
InstallerTech, Threat.4786240
47.92%
Sophos
Installer Technology Co, PUA 'Installer Technology Co'
39.58%
McAfee
Artemis!6ED90DB4C05C, Artemis!5F9FE41F925E, Artemis!6C321553C464, Artemis!E1B6701ACA8F, Artemis!70559443E5E4, Artemis!152F08C77249, Artemis!92A9B8255730, Artemis!DABA63F5EDCB, Artemis!F457551CFA04, Artemis!9605BD2C27E9
25.00%
Trend Micro House Call
Suspicious_GEN.F47V0628, Suspicious_GEN.F47V0807, Suspicious_GEN.F47V0730, Suspicious_GEN.F47V0718, Suspicious_GEN.F47V0626, Suspicious_GEN.F47V0203
18.75%
ESET NOD32
Win32/AdWare.GorillaPrice, Win32/Packed.VMDetector, Win32/Conduit.SearchProtect.Z potentially unwanted, Win32/Packed.VMDetector (variant)
8.33%
IKARUS anti.virus
PUA.VMDetector, Virus.SuspectCRC, PUA.SearchProtect
8.33%
ESET NOD32
Win32/Packed.VMDetector.G potentially unwanted application, Win32/OpenDownloadManager.A potentially unwanted application
8.33%
K7 AntiVirus
Unwanted-Program
6.25%
Malwarebytes
PUP.Optional.OpenSoftwareUpdater, PUP.Optional.Bundle
6.25%
Kaspersky
not-a-virus:Downloader.Win32.Agent
6.25%
G Data
Generic.Malware.FPVPk!g.0B5B965F, Win32.Application.VMDetect
4.17%
Comodo Security
UnclassifiedMalware, ApplicUnwnt
4.17%
The domain opensoftwareupdater.com has been seen to resolve to the following 22 IP addresses.
File downloads found at URLs served by opensoftwareupdater.com.
URL:
http://opensoftwareupdater.com/
Title:
“Open Software Updater”
SSL certificate subject:
CN=ssl346512.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated
SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Web server:
cloudflare-nginx
Facebook:
Likes: 2
Shares: 5
Comments: 8
Statistics above are for the previous month of November 2024.