» setup.pereday.ru
Overview
Analysis
IPs Addresses (2)
Downloads (59)
Network (2)
Website Detail
Related Domains (26)

setup.pereday.ru

Private Person (Proxy Registrant)

Domain Information

The domain setup.pereday.ru is registered by proxy through ARDIS-RU and was originally registered in February of 2008. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Steinsel, Luxembourg within Luxembourg which resides on the RIPE Network Coordination Centre network.

Registrant:

Private Person

Registrar:

ARDIS-RU

Server location:

Luxembourg, Luxembourg (LU)

Create date:

Friday, February 1, 2008

Expires date:

Wednesday, February 1, 2017

ASN:

AS5577 ROOT root SA,LU

Root domain:

pereday.ru

Whois:

3 pereday.ru records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.RECORD, PUP.RECORD (M), PUP.RECORD.Installer (M), Threat.Win.Reputation.IMP

78.95%

Bkav FE

W32.HfsAdware

63.16%

Dr.Web

Adware.Downware.10568, Program.VKontakteDJ.1

63.16%

IKARUS anti.virus

AdWare.AdInstaller

63.16%

AVG

AdInstaller.kontakte

57.89%

McAfee

Artemis!0DA8CB2323C1, Artemis!C601DC226BD3, Artemis!6E4D8719F28D, Artemis!AECF9C605B98, Artemis!0F5CF592E0CE, Artemis!28F52DD6EE7D

52.63%

VIPRE Antivirus

Trojan.Win32.Generic, Adware AdInstaller.kontakte

52.63%

MicroWorld eScan

Gen:Variant.Application.Downloader.207

47.37%

K7 AntiVirus

Adware , Riskware

47.37%

Bitdefender

Gen:Variant.Application.Downloader.207

47.37%

Lavasoft Ad-Aware

Gen:Variant.Application.Downloader.207

47.37%

F-Secure

Gen:Variant.Application.Downloader

47.37%

Avira AntiVirus

TR/Dldr.Agent.244408, TR/Dldr.Agent.241848.2, TR/Dldr.Agent.230072, TR/Dldr.Agent.230072.5, TR/Dldr.Agent.244408.1, TR/Dldr.Agent.232632.1

47.37%

G Data

Gen:Variant.Application.Downloader.207

47.37%

Trend Micro House Call

Suspicious_GEN.F47V0501, Suspicious_GEN.F47V0507, Suspicious_GEN.F47V0430, Suspicious_GEN.F47V0510, Suspicious_GEN.F47V0617

42.11%

The domain setup.pereday.ru has been seen to resolve to the following 2 IP addresses.

94.242.221.153

ip-static-94-242-221-153.as5577.net

July 16, 2015

5.149.248.122

July 1, 2015

File downloads found at URLs served by setup.pereday.ru.

20 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=???? "????????"(?.???????) - Muzyk nocy(Live) (â˜†crazy town - [come my lady]come my lady come, come my lady you're my butterfly sugar baby come my)

16 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=?? - ????? ??? ???????? ?????? (??? ??? 2101) (ebru gundes - tesekkur ederim by_farmakoloq - ebru gundes - tesekkur ederim.exe)

1 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmYzAwMDAwMWU3MDAwMWU3MDAwMWU3MzVkMWRkZWM2OQ==&name=Dj MG feat. Ominus & Alkmini - Kauto Kalokairi (Hot Mytilini Remix)DEMO (klaas - heartbeat (original mix).exe)

16 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=null - null (ebru gundes - tesekkur ederim by_farmakoloq - ebru gundes - tesekkur ederim.exe)

21 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=Nava - Cuartito Saloon-Borracho y Loco-Huracanes del Norte (cover) ([mp3 dl] trespassing - adam lambert (mediafire hq).exe)

21 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=?? ???????????? - ?????? ???? - ????? ([mp3 dl] trespassing - adam lambert (mediafire hq).exe)

16 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=?????? ?? ???????????? - ????? - ??? (ebru gundes - tesekkur ederim by_farmakoloq - ebru gundes - tesekkur ederim.exe)

7 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=13 - Donatan - Cleo - Nie Pozwol (Feat. Kamil Bednarek) (katy perry - dark horse (feat. juicy j).exe)

1 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmYzAwMDAwMWU3MDAwMWU3MDAwMWU3MzVkMWRkZWM2OQ==&name=Muzica noua 2014 Februarie - New Club Mix 2014 - New Party mix - Romanian Dance Music Mix 2014 (klaas - heartbeat (original mix).exe)

25 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=DJ S3RL - Pika Girl (tweet - my place.exe)

25 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=Wohnout - Svaz ceských bohému (Prostejov 1. 3. 2013) (tweet - my place.exe)

25 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=PAT THE CAT - Hotel California (tweet - my place.exe)

21 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=KREED - O Bozhe mama mama ya shozhu s uma eyo ulybka svodit menya s uma ([mp3 dl] trespassing - adam lambert (mediafire hq).exe)

18 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=Jarabe de Palo - La Flaca (jolly.exe)

1 / 68 (Malware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDA2NzAwMDA4YzAwMDAwMWRhMDAwMWRhMDAwMWRhMzgxM2M5MGM4Yw==&name= (vkontaktedjd.exe)

20 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDA2NzAwMDIwNDAwMDAwMWY1MDAwMWY1MDAwMWY1YzBhZGQ4ZDdmNA==&name= (vkontaktedjd.exe)

7 / 68 (Adware)

http://setup.pereday.ru/partnership.main.redirect/.../??????? ?????????) - 06 ??? ????? (katy perry - dark horse (feat. juicy j).exe)

7 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=Muzikalni Bratishka - Rene Dale - Angel (Quantum and Orbion Acoustic Mix) (katy perry - dark horse (feat. juicy j).exe)

8 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDA2NTAwMDA4YTAwMDAwMWRiMDAwMWRiMDAwMWRiZjhmOWEyOWI2Nw==&name=?????? ???????????-C???????? (irina-амена лаве ду ес.exe)

20 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=Nao Tokisawa (OST Gokukoku no Brynhildr) - BRYNHILDR IN THE DARKNESS -Ver. EJECTED Extended (â˜†crazy town - [come my lady]come my lady come, come my lady you're my butterfly sugar baby come my)

16 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=Anna Jantar - Tyle slonca w calym miescie (Profesjonalne Podklady Muzyczne) (ebru gundes - tesekkur ederim by_farmakoloq - ebru gundes - tesekkur ederim.exe)

20 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=DJ Bobo - Respect Yourself (B and B Remix) EuroDance (kenzaki kazuma (tsubaki takayuki) - wanna be strong.exe)

21 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=????? ??????? - ?????, ? ?????? ?? ??? ([mp3 dl] trespassing - adam lambert (mediafire hq).exe)

8 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDA2NTAwMDA4YTAwMDAwMWRiMDAwMWRiMDAwMWRiZjhmOWEyOWI2Nw==&name=??????? ?????-??? ????? ????. Cha Cha Cha (irina-амена лаве ду ес.exe)

1 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDIwZTAwMDAwMWZlMDAwMWZlMDAwMWZlZjA2MDE4OTJlYw==&name=Betty Blue - Intr-o secunda ^ 2014 (milow - ayo technology (official music video - high quality).exe)

1 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDIxMTAwMDAwMjAxMDAwMjAxMDAwMjAxYWRhMTg5OGQ5OA==&name=Orquesta Color Tango - Ezequiel - Malandraca (sin confirmar 272156.crdownload)

16 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=Otabek Mutalxo'jayev - Onamni yig'latmanglar ?????? ??????????? - ?????? ???????????? (david byron - what's going on (prev unreleased version).exe)

16 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=RAFFY MATIAS - MI AMIGO EL CORAZON (ebru gundes - tesekkur ederim by_farmakoloq - ebru gundes - tesekkur ederim.exe)

1 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDA2OTAwMDA4ZTAwMDAwMWUwMDAwMWUwMDAwMWUwNzc1ZjJlMjk0OA== (vkontaktedjd.exe)

7 / 68 (Adware)

http://setup.pereday.ru/.../?advert_key=ZWMwMDAxMDBiNDAwMDFmZjAwMDAwMWVkMDAwMWVkMDAwMWVkZmIyMDRmYWEwMg==&name=?????? ??????? 2015 - BANANAFOX vs Rihanna feat. Kanye West and Paul McCartney - FourFiveSeconds (katy perry - dark horse (feat. juicy j).exe)

Latest 30 of 59 download URLs

The following 2 files have been seen to comunicate with setup.pereday.ru in live environments.

TCP » 94.242.221.153:80

vkontaktedjd.exe (Vkontakte DJ Installer)

TCP » 94.242.221.153:80

edmond ayvazyan ev arman papoyan - de asa de xosa -- armenian pop -- hf exclusive -- hd.exe (Vkontakte DJ Installer)

URL:

http://setup.pereday.ru/

Web server:

nginx

Related Domains

downloadmusicapp.co.uk

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.