home

www.savevideoplugin.com

A HAPPY DREAMHOST CUSTOMER

Domain Information

The domain www.savevideoplugin.com registered by A HAPPY DREAMHOST CUSTOMER was initially registered in November of 2009 through NEW DREAM NETWORK, LLC. Currently this domain has been known to host various forms of malware. The hosted servers are located in Beauharnois, Quebec within Canada which resides on the OVH Hosting, Inc. network.
Registrar:
DREAMHOST, LLC

Server location:
Quebec, Canada (CA)

Create date:
Sunday, November 29, 2009

Expires date:
Tuesday, November 29, 2016

Updated date:
Monday, January 27, 2014

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
savevideoplugin.com

Whois:
2 savevideoplugin.com records

Scanner detections:
Malware distribution  (67% detected)

Scan engine
Details
Detections

McAfee
Artemis!3266EE8C98ED, Artemis!CB039327585E, Artemis!7CE11253C88F, Artemis!E17866E46EA9
80.00%

K7 AntiVirus
NetWorm
80.00%

Vba32 AntiVirus
BScope.Trojan-Dropper.Injector
80.00%

Reason Heuristics
Threat.Win.Reputation.IMP
80.00%

Bkav FE
W32.Clodeae.Trojan, W32.Clod88d.Trojan
60.00%

Trend Micro House Call
TROJ_GEN.F47V0830
20.00%

Trend Micro
PAK_Generic.001
20.00%

avast!
Win32:Malware-gen
20.00%

The domain www.savevideoplugin.com has been seen to resolve to the following 2 IP addresses.

158.69.24.60
us5.default-host.net
April 7, 2016

69.163.146.76
apache2-argon.aberlour.dreamhost.com
August 23, 2014

File downloads found at URLs served by www.savevideoplugin.com.

1 / 68      (inconclusive)
http://www.savevideoplugin.com/flv-player/download/.../FLVPlayer.exe  (5b7988cb83b51cf700e77ef99c136591)

5 / 68      (Malware)
http://www.savevideoplugin.com/flv-player/download/.../FLVPlayer.exe  (c3b3ee2b132507c16f15a85ddaf014ca)

4 / 68      (Malware)
http://www.savevideoplugin.com/flv-player/download/.../FLVPlayer.exe  (e17866e46ea9ddd7effc3d54bb275840)

5 / 68      (Malware)
http://www.savevideoplugin.com/flv-player/download/.../FLVPlayer.exe  (cb039327585e5d59bc81a149932c753f)

0 / 68
http://www.savevideoplugin.com/.../  (savevideopluginforie_setup.exe)

0 / 68
http://www.savevideoplugin.com/download  (savevideopluginforie_setup.exe)

7 / 68      (Malware)
http://www.savevideoplugin.com/nano/download/.../FLVPlayer.exe  (flvplayer.ussafe.exe)

The following 3 files have been seen to comunicate with www.savevideoplugin.com in live environments.

TCP » 158.69.24.60:80
jingling.exe

TCP » 158.69.24.60:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 158.69.24.60:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://www.savevideoplugin.com/

Google Analytics:
UA-40353045

Title:
“Save Video Plugin for Internet Explorer | Home Page | Video Downloader, Converter and Player”

Description:
“SaveVideo Plugin lets you download videos from websites and play them on your computer! Check out the best video downloader to download videos from the Internet.”

Web server:
nginx

Facebook:
Likes:  1
Shares:  5

Statistics are for the previous month.

flv-player-nano.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.