update-plus.net

GreenSoft LTD

Domain Information

The domain update-plus.net registered by GreenSoft LTD was initially registered in October of 2014 through REGISTRAR OF DOMAIN NAMES REG.RU LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Manassas, Virginia within the United States which resides on the Leaseweb USA, Inc. network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC

Server location:
Virginia, United States (US)

Create date:
Wednesday, October 29, 2014

Expires date:
Thursday, October 29, 2015

Updated date:
Wednesday, October 29, 2014

ASN:
AS30633 LEASEWEB-US - Leaseweb USA, Inc.,US

Google Safe Browsing:
phishing

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.installCore, PUP.installCore.OOOTehSnab.Installer (M), PUP.InstallCore.FC.Installer (M), PUP.installCore.OOOTehSn.Installer (M), PUP.InstallCore.FC (M), PUP.installCore (M)
85.71%

avast!
Malware-gen
28.57%

VIPRE Antivirus
Threat.4150696
28.57%

Malwarebytes
PUP.Optional.TehSnab
28.57%

K7 AntiVirus
Trojan
28.57%

Total Defense
Win32/Tnega.JbTPVR
28.57%

Comodo Security
Application.Win32.InstallCore.RFAW
28.57%

Avira AntiVirus
Adware/InstallCore.rfaw
28.57%

AVG
Generic11_c
28.57%

ESET NOD32
Win32/InstallCore.QF potentially unwanted application
14.29%

Dr.Web
Trojan.InstallCore.38
14.29%

Kaspersky
Packed.Win32.Krap
14.29%

Trend Micro House Call
Suspicious_GEN.F47V0418
14.29%

IKARUS anti.virus
Packed.Win32.Krap
14.29%

herdProtect (fuzzy)
a variant of a2e8ffa24a18ae0f019d0c40d569ebe6aa95abd8
14.29%

The domain update-plus.net has been seen to resolve to the following IP address.

January 25, 2015

File downloads found at URLs served by update-plus.net.