upnow2app.checkupdatenow.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain upnow2app.checkupdatenow.com is registered by proxy through REGISTRAR OF DOMAIN NAMES REG.RU LLC and was originally registered in January of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
REGISTRAR OF DOMAIN NAMES REG.RU LLC

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Friday, January 30, 2015

Expires date:
Saturday, January 30, 2016

Updated date:
Friday, March 11, 2016

ASN:
AS16276 OVH OVH SAS,FR

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.installCore.OOOServisM.Installer (M), PUP.installCore.OOOServi.Installer (M)
100.00%

avast!
Malware-gen
33.33%

ESET NOD32
Win32/InstallCore.YL potentially unwanted application
33.33%

Avira AntiVirus
PUA/InstallCore.Gen
33.33%

K7 AntiVirus
Adware
33.33%

Dr.Web
Trojan.InstallCore.314
33.33%

Baidu Antivirus
Adware.Win32.InstallCore
33.33%

Qihoo 360 Security
HEUR/QVM06.1.Malware.Gen
33.33%

VIPRE Antivirus
Threat.4150696
33.33%

Bkav FE
W32.HfsAdware
33.33%

AVG
Generic
33.33%

Comodo Security
Application.Win32.InstallCore.DBX
33.33%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
33.33%

The domain upnow2app.checkupdatenow.com has been seen to resolve to the following IP address.

May 19, 2016

File downloads found at URLs served by upnow2app.checkupdatenow.com.

30 of 39 related domains