The domain hosting the installer is called installreports[dot]com and this time we found it was hosting a tech support screenlocker. Malwarebytes web protection module blocks the domain and detects the installer as Trojan.TechSupportScam. The advertised number on the lockscreen leads back to the domain getfixpc.com. The same personal data was used to register brmediahub.com with the same physical address we also found an email address baskark****@outlook.in.”]
Source: https://blog.malwarebytes.com/cybercrime/2017/03/advanis-tech-support-screenlocker/