dw.cbsi.com

CBS Interactive Inc.

Domain Information

The domain dw.cbsi.com registered by CBS Interactive Inc. was initially registered in July of 1993 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the CBS Interactive Inc. network.
Registrar:
MARKMONITOR INC.

Server location:
New York, United States (US)

Create date:
Tuesday, July 20, 1993

Expires date:
Wednesday, July 19, 2017

Updated date:
Wednesday, June 17, 2015

ASN:
AS6623 CBSI-1 - CBS Interactive Inc.

Root domain:

Scanner detections:
Detections  (73% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.WebInstall.f, PUP.Installer.WebInstall.P, PUP.Installer.ProinstallApplicationsSRL, PUP.Installer.CBS, PUP.Optional.Installer, PUP.Installer.Spigot, PUP.Bundler.CBS, Threat.CBS.Bundler, Threat.Installer.ProinstallApplicationsSRL, PUP.CBS.Bundler, PUP.CBS.WebInstall.Installer (M)
92.31%

Dr.Web
Adware.Downware.1159, Adware.Downware.9446, Threat.Undefined, Adware.Downware.8742, Trojan.Vittalia.81
82.05%

VIPRE Antivirus
Threat.4782786, Threat.5066599, WebInstall, Threat.4866784
76.92%

NANO AntiVirus
Riskware.Nsis.Downware.dlgjls, Trojan.Nsis.Downloader.doczdj, Trojan.Nsis.Downloader.dnpqiz, Riskware.Win32.Downware.crgjbr
66.67%

avast!
Adware-BGE [PUP], Adware-RW [PUP], Win32:Adware-BGE [PUP], InstMonetizer-BB [PUP]
61.54%

Agnitum Outpost
PUA.Downware
56.41%

K7 Gateway Antivirus
Trojan
48.72%

K7 AntiVirus
Trojan
48.72%

ESET NOD32
Win32/DownloadAdmin.G potentially unwanted application, Win32/Spigot.A potentially unwanted application, Win32/InstallMonetizer.AZ potentially unwanted application
46.15%

Bkav FE
W32.HfsOval, W32.HfsAdware
35.90%

Avira AntiVirus
ADWARE/Adware.Gen, TR/Dldr.Agent.1313288, APPL/Widgi.opqa, APPL/Downloader.Gen, PUA/WinWrapper.Gen, PUA/DownloadAdmin.Gen
33.33%

herdProtect (fuzzy)
a variant of c86796ae64b4c7ed3851086359273900d1f69c89, a variant of cecfaa54596718baf6b44ba99441b54eac85835c, a variant of a0b055c7755417c985f845cb570471400882629a
23.08%

ESET NOD32
Win32/OpenCandy (variant), Win32/DownloadAdmin, Win32/DownloadAdmin.G potentially unwanted
17.95%

AVG
Generic, Downloader
15.38%

Clam AntiVirus
Win.Adware.Agent-6650
12.82%

The domain dw.cbsi.com has been seen to resolve to the following 2 IP addresses.

phx1-dw-cbsi-xw-lb.cnet.com
February 2, 2014

phx2-dw-cbsi-xw-lb.cnet.com
December 18, 2013

File downloads found at URLs served by dw.cbsi.com.

 
Latest 30 of 245 download URLs

The following 21 files have been seen to comunicate with dw.cbsi.com in live environments.

 
Latest 20 of 23 files

URL:
http://dw.cbsi.com/

SSL certificate subject:
CN=*.cbsi.com, O=CBS Interactive Inc., L=San Francisco, S=California, C=US

SSL certificate issuer:
CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Web server:
Apache/2.4.3

Facebook:
Shares:  3

Twitter:
Shares:  24

Statistics are for the previous month.