home

uu.updateinstant.com

Domain Information

Server location:
Zurich, Switzerland (CH)

ASN:
AS19905 NEUSTAR-AS6 - NeuStar, Inc.,US

Root domain:
updateinstant.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.FC (M)
100.00%

The domain uu.updateinstant.com has been seen to resolve to the following IP address.

141.8.224.239
August 16, 2016

File downloads found at URLs served by uu.updateinstant.com.

1 / 68      (Adware)
http://uu.updateinstant.com/dl.php?conversion_id=14204786284034&site_id=1224&app_id=23&lp_id=419&v=ico&stub_id=71&v_id=b8ea61b6f0cfa3858762d05b9f3c3b04&dist_id=450&channel=mrkcc&dast=YnJzcj0zODQxJmJvPTImY2lwaWQ9MjAyMjExMCZjaXNpZD1FRkJDMTdFQ0E3NTA4MDY5NTQwMzcxNDY0JmNpcmlkPUVGQkMxN0VDQTc1MDgwNzAxOTM3NDY1ODI2JnNsaWQ9MCZzdWJpZD03Nzc3NzcwMDAwMDAwMDAwMDAmY2l1aWQ9MTQ0MTA1MDUzODA4MTkwMTcwJnNvPTImY3JpZD0yOTkwMDg4JmV4Y2lkPTIyJm1tdD0tMSZvc2lkPTUzMyZjbnRyeT0yOSZjaWNtcD00OTM3NTgmY3U0PTE4JnB1YmlkPTY0NDQ5  (ccleaner_setup.exe)

The following 2 files have been seen to comunicate with uu.updateinstant.com in live environments.

TCP » 141.8.224.239:80
dislike.crx

TCP » 141.8.224.239:443
droppad.crx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.