home

bestup.exe

The application bestup.exe has been detected as adware by 8 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler triggered daily at a specified time. This file is typically installed with the program best-markit by Revizer Technologies which is a potentially unwanted software program.
MD5:
a89ba60958e5efe6f1ad5397ad13d8c2

SHA-1:
e2fca5a00ac3a009d5d46793f8df1e1b39b42ca8

SHA-256:
e1f37aba4262ad78eeff7d905e427349d7ddc1d6c8d4000226066237710343c2

Scanner detections:
8 / 68

Status:
Adware

Analysis date:
7/4/2025 8:57:15 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Agent-ASMU [PUP]
2014.9-140303

AVG
Generic5
2015.0.3510

Baidu Antivirus
Adware.Win32.AddLyrics
4.0.3.1433

Comodo Security
Application.Win32.AddLyrics.X
17853

ESET NOD32
Win32/AdWare.AddLyrics.AF (variant)
8.9478

Reason Heuristics
Threat.Win.Reputation.IMP
14.4.9.0

Trend Micro House Call
TROJ_GEN.F47V0213
7.2.99

VIPRE Antivirus
Trojan.Win32.Generic
27478

File size:
230.5 KB (236,032 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\best-markit\bestup.exe

File PE Metadata
Compilation timestamp:
2/10/2014 8:08:52 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:qI4086BXdGtYvZfskzpDNxDRHeQpDUXniIFAsF4sYjmrisbR:qIX86BX8ChNlRHeWDU3iaAhartV

Entry address:
0x115E5

Entry point:
E8, 66, 92, 00, 00, E9, 89, FE, FF, FF, 6A, 0C, 68, C8, B3, 42, 00, E8, 85, 3A, 00, 00, 6A, 0E, E8, 63, 94, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B, 4E, 04, 85, C9, 74, 2F, A1, C0, F1, 42, 00, BA, BC, F1, 42, 00, 89, 45, E4, 85, C0, 74, 11, 39, 08, 75, 2C, 8B, 48, 04, 89, 4A, 04, 50, E8, 9A, DB, FF, FF, 59, FF, 76, 04, E8, 91, DB, FF, FF, 59, 83, 66, 04, 00, C7, 45, FC, FE, FF, FF, FF, E8, 0A, 00, 00, 00, E8, 74, 3A, 00, 00, C3, 8B, D0, EB, C5, 6A, 0E, E8, 2F, 93, 00, 00, 59, C3, CC, 8B, 54, 24, 04, 8B...
 
[+]

Code size:
132.5 KB (135,680 bytes)

Scheduled Task
Task name:
best-markit Update

Trigger:
Daily (Runs daily at 19:48)

Action:
bestup.exe \update


The file bestup.exe has been discovered within the following program.

best-markit  by Revizer Technologies
The Best-Markit adware program injects advertisements with its affiliate ad providers in order to serve a number of ad types including banner, inline text links and popups by adding a proxy server to the users computer which directs all web page requests through the Remarketable proxy.
best-markit.com/terms-of-service
84% remove it
 
Powered by Should I Remove It?

Remove bestup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.