windowsetup.com
Domains By Proxy, LLC (Proxy Registrant)
Domain Information
The domain windowsetup.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Scottsdale, Arizona within the United States which resides on the GoDaddy.com, LLC network.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Arizona, United States (US)
Create date:
Wednesday, July 30, 2014
Expires date:
Saturday, July 30, 2016
Updated date:
Friday, July 31, 2015
ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC, US
Scanner detections:
Detections (89% detected)
Scan engine
Details
Detections
Avira AntiVirus
ADWARE/InstallCore.Gen9
87.50%
ESET NOD32
Win32/InstallCore.PY (variant), Win32/InstallCore.PX (variant), Win32/InstallCore.QO (variant), Win32/InstallCore.PZ (variant)
87.50%
Qihoo 360 Security
Win32/Virus.Adware.f22
75.00%
Baidu Antivirus
Adware.Win32.InstallCore
62.50%
SUPERAntiSpyware
PUP.InstallCore/Variant
50.00%
Sophos
Generic PUA BE, Generic PUA FA, Generic PUA FP, Generic PUA EC
50.00%
Fortinet FortiGate
Riskware/InstallCore
50.00%
Trend Micro House Call
Suspicious_GEN.F47V0811, Suspicious_GEN.F47V0814
37.50%
McAfee
Artemis!7828138DB3B5, Virus.W32/Swisyn.ag
25.00%
Reason Heuristics
PUP.InstallCore.Bundler (M)
12.50%
VIPRE Antivirus
Trojan.Win32.Generic
12.50%
Microsoft Security Essentials
Threat.Undefined
12.50%
F-Prot
W32/VB.AD.gen
12.50%
ESET NOD32
Win32/VB.OSK trojan
12.50%
avast!
Win32:VB-OJQ [Wrm]
12.50%
The domain windowsetup.com has been seen to resolve to the following 2 IP addresses.
ip-184-168-221-84.ip.secureserver.net
August 23, 2016
File downloads found at URLs served by windowsetup.com.
Latest 30 of 190 download URLs
The following file have been seen to comunicate with windowsetup.com in live environments.
Subdomains
Related Domains
