home

paint-ceiling.ru

Private Person  (Proxy Registrant)

Domain Information

The domain paint-ceiling.ru is registered by proxy through REGRU-RU and was originally registered in August of 2016. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Thursday, August 4, 2016

Expires date:
Friday, August 4, 2017

Whois:
1 paint-ceiling.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

F-Secure
Variant.Strictor.102255
100.00%

Reason Heuristics
PUP.LoadMoney.OOOKulSt (M)
100.00%

ESET NOD32
Win32/Kryptik.FEFQ trojan
100.00%

File downloads found at URLs served by paint-ceiling.ru.

3 / 68      (PUP)
http://paint-ceiling.ru/MTExNTk7aHR0cCUzQSUyRiUyRm1lZGlhLWFuZHJvaWQucnUlMkYlMjFjODUxZWQzZGJjZmZjYzEwNGUxY2M4YjQ4YjE5MTAyMGQ1YTg5ZWE3MTJjNTdlMDJmYjI0OGM2NDY5NzY1ZDJkO25hbWU9aW50cm8rZnJvZ2dlcys4NC5yYXI7c2l6ZT00NTA0NTM1NTt0eXBlPWFyY2hpdmU7dXRtPWV5SnpiM1Z5WTJVaU9pSTVNVEV3SWl3aWJXVmthWFZ0SWpvaUlpd2lZMkZ0Y0dGcFoyNGlPaUlpTENKMFpYSnRJam9pSWl3aVkyOXVkR1Z1ZENJNklpSjk7cmVhbF9yZWZlcmVyPTtmb3JjZV9maWxlPXRydWU=  (intro frogges 84.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.