home

setupupgrade.theupdateschecker.org

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain setupupgrade.theupdateschecker.org is registered by proxy through Registrar of Domain Names REG.RU LLC (R1943-LROR). This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
Registrar of Domain Names REG.RU LLC (R1943-LROR)

Root domain:
theupdateschecker.org

Whois:
1 theupdateschecker.org record

Google Safe Browsing:
phishing

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.OOOAdvert.Installer (M), PUP.installCore.OOOAdver.Installer (M)
100.00%

avast!
Malware-gen
50.00%

ESET NOD32
Win32/InstallCore.XM potentially unwanted application
50.00%

K7 AntiVirus
Trojan
50.00%

Avira AntiVirus
PUA/InstallCore.Gen
50.00%

AhnLab V3 Security
PUP/Win32.InstallCore
50.00%

Dr.Web
Trojan.InstallCore.206
50.00%

McAfee
Trojan.Artemis!53E51514A5D3
50.00%

VIPRE Antivirus
Threat.4150696
50.00%

AVG
InstallCore
50.00%

Agnitum Outpost
PUA.InstallCore
50.00%

Bkav FE
W32.HfsAdware
50.00%

Malwarebytes
PUP.Optional.InstallCore.C
50.00%

NANO AntiVirus
Riskware.Win32.InstallCore.drfvus
50.00%

herdProtect (fuzzy)
a variant of 24a074607f9a8bdbccb2e08b272244abfb7b84cc
50.00%

File downloads found at URLs served by setupupgrade.theupdateschecker.org.

1 / 68      (Adware)
http://setupupgrade.theupdateschecker.org/dl.php?conversion_id=14264483954591&app_id=4&lp_id=719&v=ico&stub_id=140&v_id=wWAFJJbtfq/.../CVz0=&dist_id=292&channel=affl292&subid=102620_c59c323d6005ee0e09c64e5edf4daf31  (adobe_flash_setup.exe)

15 / 68    (Adware)
http://setupupgrade.theupdateschecker.org/dl.php?conversion_id=14264499987244&app_id=63&lp_id=335&v=ico&stub_id=140&v_id=Esl7SdL/.../solV6d70U=&dist_id=292&channel=affl292&subid=102620_0b59cc8b9db56463d6088c614af0bd15  (java_runtime_enviroment_setup.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.