home

poverpoint.ru

Private Person  (Proxy Registrant)

Domain Information

The domain poverpoint.ru is registered by proxy through REGRU-RU and was originally registered in November of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Thursday, November 12, 2015

Expires date:
Saturday, November 12, 2016

Whois:
1 poverpoint.ru record

Scanner detections:
Detections  (88% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallMonster.PlatynumKLABAITITOV (M), PUP.InstallMonster.NODASOFT (M), PUP.InstallMonster.Platynum (M)
87.50%

NANO AntiVirus
Trojan.Win32.Ramnit.cspjsp
12.50%

File downloads found at URLs served by poverpoint.ru.

1 / 68      (PUP)
http://poverpoint.ru/eyJ2ZXIiOiIxIiwic2lkIjoiODA2MiIsInVybCI6Imh0dHA6Ly9pbm90ZWJveC5jb20vRGpWdSBSZWFkZXIuZXhlIiwibmFtZSI6IkRqVnUgUmVhZGVyLmV4ZSIsInR5cGUiOiJzZXR1cCIsInNpemUiOjMwMDAwMDAsImZvcmNlMnppcCI6ZmFsc2UsInN1Yl9pZDIiOiIwIiwicm5kMCI6MTk4MDgxNDc3NTQ1MjB9  (djvu reader.exe)

1 / 68      (PUP)
http://poverpoint.ru/eyJ2ZXIiOiIxIiwic2lkIjoiODA2MyIsInVybCI6Imh0dHA6Ly9hbWJlcnNvZnQucnUvZmlsZXMvUERGIFJlYWRlci5leGUiLCJuYW1lIjoiUERGIFJlYWRlci5leGUiLCJ0eXBlIjoic2V0dXAiLCJzaXplIjozMDAwMDAwLCJmb3JjZTJ6aXAiOmZhbHNlLCJzdWJfaWQyIjoiMCIsInJuZDAiOjY5OTQyMzg2OTgzODkzfQ  (pdf reader.exe)

1 / 68
http://poverpoint.ru/eyJ2ZXIiOiIxIiwic2lkIjoiODA2MiIsInVybCI6Imh0dHA6Ly9pbm90ZWJveC5jb20vRGpWdSBSZWFkZXIuZXhlIiwibmFtZSI6IkRqVnUgUmVhZGVyLmV4ZSIsInR5cGUiOiJzZXR1cCIsInNpemUiOjMwMDAwMDAsImZvcmNlMnppcCI6ZmFsc2UsInN1Yl9pZDIiOiIwIiwicm5kMCI6Njc0MTY0Njg0OTI0NjR9  (djvulibre-3.5.25.4_djview-4.9.2_setup.exe)

1 / 68      (PUP)
http://poverpoint.ru/eyJ2ZXIiOiIxIiwic2lkIjoiODA2MyIsInVybCI6Imh0dHA6Ly9hbWJlcnNvZnQucnUvZmlsZXMvUERGIFJlYWRlci5leGUiLCJuYW1lIjoiUERGIFJlYWRlci5leGUiLCJ0eXBlIjoic2V0dXAiLCJzaXplIjozMDAwMDAwLCJmb3JjZTJ6aXAiOmZhbHNlLCJzdWJfaWQyIjoiMCIsInJuZDAiOjU2Mjc4Njk4OTA1ODUwfQ  (pdf reader.exe)

1 / 68      (PUP)
http://poverpoint.ru/eyJ2ZXIiOiIxIiwic2lkIjoiODA2MyIsInVybCI6Imh0dHA6Ly9hbWJlcnNvZnQucnUvZmlsZXMvUERGIFJlYWRlci5leGUiLCJuYW1lIjoiUERGIFJlYWRlci5leGUiLCJ0eXBlIjoic2V0dXAiLCJzaXplIjozMDAwMDAwLCJmb3JjZTJ6aXAiOmZhbHNlLCJzdWJfaWQyIjoiMCIsInJuZDAiOjQxNzUwNzg3NjQ5OTE1fQ  (pdf reader.exe)

1 / 68      (PUP)
http://poverpoint.ru/eyJ2ZXIiOiIxIiwic2lkIjoiODA2MyIsInVybCI6Imh0dHA6Ly9hbWJlcnNvZnQucnUvZmlsZXMvUERGIFJlYWRlci5leGUiLCJuYW1lIjoiUERGIFJlYWRlci5leGUiLCJ0eXBlIjoic2V0dXAiLCJzaXplIjozMDAwMDAwLCJmb3JjZTJ6aXAiOmZhbHNlLCJzdWJfaWQyIjoiMCIsInJuZDAiOjQ1NDA2NDY0ODgzMTI2fQ  (pdf reader.exe)

1 / 68      (PUP)
http://poverpoint.ru/eyJ2ZXIiOiIxIiwic2lkIjoiMzQ0MyIsInVybCI6Imh0dHA6Ly9wZGYtbWFnLnJ1L2VkaXRvci5leGUiLCJuYW1lIjoiQWRvYmUgUERGIEVkaXRvci5leGUiLCJ0eXBlIjoic2V0dXAiLCJzaXplIjozMDAwMDAwLCJmb3JjZTJ6aXAiOmZhbHNlLCJybmQwIjo5MDM5NDM0NjI5OTU4MX0  (adobe pdf editor.exe)

1 / 68      (PUP)
http://poverpoint.ru/eyJ2ZXIiOiIxIiwic2lkIjoiODA2MiIsInVybCI6Imh0dHA6Ly9pbm90ZWJveC5jb20vRGpWdSBSZWFkZXIuZXhlIiwibmFtZSI6IkRqVnUgUmVhZGVyLmV4ZSIsInR5cGUiOiJzZXR1cCIsInNpemUiOjMwMDAwMDAsImZvcmNlMnppcCI6ZmFsc2UsInN1Yl9pZDIiOiIwIiwicm5kMCI6ODYzNTY3ODM3MjgxMTV9  (djvu reader.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.