home

java.bredesas.com

Domain Information

Server location:
Madrid, Spain (ES)

Root domain:
bredesas.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.CodeTechno.W
100.00%

F-Secure
Trojan.Generic.12349511
100.00%

Emsisoft Anti-Malware
Trojan.Generic.12349511
100.00%

ESET NOD32
Win32/DownloadAdmin.H potentially unwanted application
100.00%

Kaspersky
not-a-virus:Downloader.Win32.Agent
100.00%

VIPRE Antivirus
Threat.4150696
100.00%

Dr.Web
Adware.Downware.2220
100.00%

Avira AntiVirus
ADWARE/Adware.Gen
100.00%

Clam AntiVirus
Win.Adware.Downloadadmin
100.00%

Norman
Trojan.Generic.12349511
100.00%

MicroWorld eScan
Trojan.Generic.12349511
100.00%

nProtect
Trojan.Generic.12349511
100.00%

Malwarebytes
PUP.Optional.DownloadAdmin
100.00%

Zillya! Antivirus
Downloader.Agent.Win32.230167
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

The domain java.bredesas.com has been seen to resolve to the following 2 IP addresses.

93.189.35.250
January 20, 2015

93.189.35.249
January 20, 2015

File downloads found at URLs served by java.bredesas.com.

25 / 68    (PUP)
http://java.bredesas.com/.../download?p=REVENUE&trckid=000031462017227662856  (installer_java_english.exe)

The following file have been seen to comunicate with java.bredesas.com in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.