The domain win-software.net is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Montreal, Quebec within Canada which resides on the OVH (NWK) network.
Registrant:
Only contact by email, all postal mail will be rejected
Registrar:
SOLUCIONES CORPORATIVAS IP, SL
Server location:
Quebec, Canada (CA)
Create date:
Tuesday, May 20, 2014
Expires date:
Friday, May 20, 2016
Updated date:
Thursday, August 6, 2015
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.GeryonAdsSL.T, PUP.Installer.SoftInstall.T, PUP.GeryonAdsSL.FF, PUP.EilioDevelopmentssl.X, PUP.installCore.GeryonAds.Installer (M), PUP.installCore.GeryonAds (M), PUP.Solimba.Bechiros (M), PUP.installCore (M)
100.00%
Baidu Antivirus
Adware.Win32.InstallCore, Adware.Win32.Solimba
42.86%
Dr.Web
Trojan.MulDrop5.38104, Trojan.MulDrop5.38502, Trojan.Packed.28933, Adware.Downware.9221, Trojan.InstallCore.151
35.71%
ESET NOD32
Win32/InstallCore.QL (variant), Win32/InstallCore.PV (variant), Win32/InstallCore.QC (variant), Win32/InstallCore.PL (variant)
35.71%
AVG
Generic, Adware BundleApp_r.AV
32.14%
McAfee
Artemis!31BB5DD36201, Artemis!4AE5F6919B55, Artemis!E9C3418311AB, Artemis!34BF57868FDE, Artemis!9A71C3E0FC50, Artemis!475339BD396A
28.57%
VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696, InstallCore, Threat.4782980, Threat.4786018
28.57%
Avira AntiVirus
ADWARE/InstallCore.Gen9, ADWARE/InstallCore.Gen7, APPL/Firseria.Gen8, PUA/InstallCore.Gen7
28.57%
K7 AntiVirus
Trojan , Unwanted-Program
25.00%
Fortinet FortiGate
Riskware/InstallCore, Riskware/Morstars
25.00%
Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen, Downware.Morstar
25.00%
Sophos
Install Core Click run software, Generic PUA MG, Generic PUA JI, Generic PUA FO, Generic PUA JH (PUA)
17.86%
Trend Micro House Call
Suspicious_GEN.F47V0808, TROJ_GEN.R047C0OK214, Suspicious_GEN.F47V1130, Suspicious_GEN.F47V1029
14.29%
ESET NOD32
Win32/InstallCore.PS potentially unwanted application, MSIL/Solimba.AK.gen potentially unwanted application, Win32/InstallCore.SO potentially unwanted application, Win32/InstallCore.AEO.gen potentially unwanted application
14.29%
Qihoo 360 Security
Win32/Virus.Adware.f22, HEUR/Malware.QVM06.Gen, Malware.QVM20.Gen
10.71%
The domain win-software.net has been seen to resolve to the following 2 IP addresses.
File downloads found at URLs served by win-software.net.
URL:
http://win-software.net/
Title:
“Download Minecraft for FREE”
Related Domains