home

codecplayer.begin.pro

Domain Information

Server location:
Madrid, Spain (ES)

Root domain:
begin.pro

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Dr.Web
Adware.Downware.2220
100.00%

ESET NOD32
Win32/DownloadAdmin.H potentially unwanted application
100.00%

F-Secure
Riskware.Application.Bundler.KJ
100.00%

Lavasoft Ad-Aware
Application.Bundler.KJ
100.00%

avast!
Win32:DownloadAdmin-B [PUP]
100.00%

Emsisoft Anti-Malware
Application.Bundler.KJ
100.00%

VIPRE Antivirus
Threat.4783369
100.00%

Clam AntiVirus
Win.Adware.Downloadadmin
100.00%

MicroWorld eScan
Application.Bundler.KJ
100.00%

Malwarebytes
PUP.Optional.DownloadAdmin
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

F-Prot
W32/S-518b5669
100.00%

Total Defense
Win32/Tnega.IQCCUAC
100.00%

Bitdefender
Application.Bundler.KJ
100.00%

The domain codecplayer.begin.pro has been seen to resolve to the following IP address.

93.189.35.249
March 14, 2015

File downloads found at URLs served by codecplayer.begin.pro.

23 / 68    (Adware)
http://codecplayer.begin.pro/.../download?p=UK-7SEARCH&kw=adobe flash player  (installer_adobe_flash_player_english.exe)

The following file have been seen to comunicate with codecplayer.begin.pro in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.