home

qqqelkdjfldfjk.org

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain qqqelkdjfldfjk.org is registered by proxy through Registrar of Domain Names REG.RU LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Irkutsk, Irkutsk within Russia which resides on the RIPE Network Coordination Centre network.
Registrar:
Registrar of Domain Names REG.RU LLC

Server location:
Irkutsk, Russia (RU)

ASN:
AS29182 ISPSYSTEM-AS ISPsystem, cjsc,LU

Whois:
2 qqqelkdjfldfjk.org records

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize.Installer (M), PUP.Amonitize (M), Threat.Win.Reputation.IMP
100.00%

Avira AntiVirus
ADWARE/ICLoader.pol, TR/Kazy.2895192, TR/Kazy.1895192
70.00%

Emsisoft Anti-Malware
Gen:Variant.Graftor.244309, Gen:Variant.Kazy.724825, Gen:Variant.Kazy.724810
50.00%

MicroWorld eScan
Gen:Variant.Graftor.244309, Gen:Variant.Kazy.724825, Gen:Variant.Kazy.724810
50.00%

Bitdefender
Gen:Variant.Graftor.244309, Gen:Variant.Kazy.724825, Gen:Variant.Kazy.724810
50.00%

G Data
Gen:Variant.Graftor.244309, Gen:Variant.Kazy.724825, Gen:Variant.Kazy.724810
50.00%

IKARUS anti.virus
AdWare.ICLoader
40.00%

Arcabit
Trojan.Graftor.D3BA55, Trojan.Kazy.DB0F59, Trojan.Kazy.DB0F4A
40.00%

Lavasoft Ad-Aware
Gen:Variant.Kazy.724825, Gen:Variant.Kazy.724810
40.00%

F-Secure
Gen:Variant.Kazy.724825, Gen:Variant.Kazy.724810
40.00%

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
30.00%

Dr.Web
Trojan.InstallCube.330
30.00%

McAfee
Artemis!4CB64C5F5724, Artemis!049D3ED8976C, Artemis!937A2100B0A6
30.00%

Trend Micro
TROJ_GEN.R00UC0OJ815, TROJ_GEN.R03EC0OIQ15
20.00%

Lavasoft Ad-Aware
Gen:Variant.Graftor.244309
10.00%

The domain qqqelkdjfldfjk.org has been seen to resolve to the following 3 IP addresses.

194.58.56.159
July 6, 2016

92.63.104.31
lucrum.me
December 1, 2015

62.109.26.55
mylittleftp.ru
July 15, 2015

File downloads found at URLs served by qqqelkdjfldfjk.org.

15 / 68    (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=Sn gen microsoft.rar  (finereader-11-pro.exe)

1 / 68      (Malware)
http://qqqelkdjfldfjk.org/dll.php?file_name=Privatniy_Cheat  (privatniy_cheat.exe)

3 / 68      (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=Cheat_setup.exe  (skachat-instrukciyu-bomann-bba-doc.exe)

13 / 68    (Malware)
http://qqqelkdjfldfjk.org/dll.php?file_name=kratkoe_soderzhanie  (the_dark_smart_tv_server_download-zip.exe)

4 / 68      (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=KontaktUnlim.zip.exe  (sidexis-xg-rar.exe)

4 / 68      (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=onlajn_porno_maloletki_zapretnoe_video.zip  (sidexis-xg-rar.exe)

15 / 68    (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=FineReader 11 Pro  (finereader-11-pro.exe)

10 / 68    (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=WinThruster_KeyGen.rar  (bdeinfosetup-rar.exe)

4 / 68      (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=??????? ? ??????? ???????? ??? ????? ????? ? WOT  (sidexis-xg-rar.exe)

5 / 68      (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=??????? ? ??????? ???????? ??? ????? ????? ? WOT  (code-43-error-windows-7-usb-fix.exe)

9 / 68      (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=wot_gold_hack.zip  (autocad-20keygen-rar.exe)

11 / 68    (PUP)
http://qqqelkdjfldfjk.org/dll.php?file_name=Daemon_Tools_Lite.rar  (daemon_tools_lite-rar.exe)

5 / 68      (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=vkracker.exe  (code-43-error-windows-7-usb-fix.exe)

4 / 68      (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=vkracker.exe  (sidexis-xg-rar.exe)

1 / 68      (Adware)
http://qqqelkdjfldfjk.org/dll.php?file_name=PowerColorHD7790OC1024MBGDDR5AX7790_driver.exe  (powercolorhd7790oc1024mbgddr5ax7790_driver-exe.exe)

URL:
http://qqqelkdjfldfjk.org/

Web server:
nginx/1.4.2

onlinelivevideo.org

theupdateschecker.org

incubcube.org

super-xxx-filex.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.