polk2.mooo.com

Joshua Anderson

Domain Information

The domain polk2.mooo.com registered by Joshua Anderson was initially registered in March of 2000 through DOMAIN.COM, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Montreal, Quebec within Canada.
Registrar:
DOMAIN.COM, LLC

Server location:
Quebec, Canada (CA)

Create date:
Friday, March 24, 2000

Expires date:
Thursday, March 24, 2016

Updated date:
Sunday, March 8, 2015

ASN:
AS32613 IWEB-AS - iWeb Technologies Inc.

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

avast!
Win32:RemoteAdmin-B [PUP]
100.00%

Rising Antivirus
PE:Malware.Ammyy!6.1139
100.00%

Dr.Web
riskware program Program.RemoteAdmin.701
100.00%

Reason Heuristics
Win32.Generic, Win32.Generic.Ammyy.Meta
100.00%

Kaspersky
not-a-virus:RemoteAdmin.Win32.Ammyy
100.00%

K7 AntiVirus
Unwanted-Program
50.00%

ESET NOD32
Win32/RemoteAdmin.Ammyy.B potentially unsafe application
50.00%

F-Prot
W32/RemoteAdmin.Ammyy
50.00%

VIPRE Antivirus
Remote-Access.Win32.Ammyy
50.00%

NANO AntiVirus
Riskware.Win32.RemoteAdmin.dskdxp
50.00%

ESET NOD32
Win32/RemoteAdmin.Ammyy.C potentially unsafe (variant)
50.00%

Agnitum Outpost
Riskware.RemoteAdmin
50.00%

Baidu Antivirus
Hacktool.Win32.Ammyy
50.00%

AVG
RemoteAdmin
50.00%

Panda Antivirus
Generic Suspicious
50.00%

The domain polk2.mooo.com has been seen to resolve to the following IP address.

ammyy.com
June 19, 2015

File downloads found at URLs served by polk2.mooo.com.

12 / 68    (PUP)
http://polk2.mooo.com/AA_v3.exe  (5cbc07b5f2cf7c820758f5b87e936e83)

8 / 68      (PUP)
http://polk2.mooo.com/AA_v3.exe  (11bc606269a161555431bacf37f7c1e4)

URL:
http://polk2.mooo.com/

Google Analytics:
UA-21138530

Title:
“Ammyy Admin - Free Zero-Config Remote Desktop Software, Remote Desktop Connection and Remote Access Software”

Description:
“Popular zero-config free remote desktop software. It's used for system administration, webinars and instant remote desktop connection over the Internet. Free remote access software Ammyy Admin makes control of a remote PC quick and simple.”

Web server:
Apache/2.2.3 (CentOS)