home

s.bstoragedownload-about.com

Domain Information

Server location:
Florida, United States (US)

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.,US

Root domain:
bstoragedownload-about.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Conduit
100.00%

Dr.Web
Trojan.PWS.Stealer.13174
100.00%

ESET NOD32
Win32/ClientConnect.A potentially unwanted application
100.00%

avast!
Adware-BRM [PUP]
100.00%

VIPRE Antivirus
Threat.4786236
100.00%

Kaspersky
not-a-virus:WebToolbar.Win32.Agent
100.00%

Malwarebytes
PUP.Optional.ClientConnect
100.00%

K7 AntiVirus
Trojan
100.00%

NANO AntiVirus
Riskware.Win32.Conduit.dbqqxi
100.00%

Total Defense
Win32/Tnega.ALHeNWC
100.00%

Agnitum Outpost
PUA.Toolbar.Conduit
100.00%

G Data
Win32.Application.Conduit
100.00%

Fortinet FortiGate
Riskware/Toolbar_Conduit
100.00%

AVG
Generic
100.00%

The domain s.bstoragedownload-about.com has been seen to resolve to the following 2 IP addresses.

23.62.6.168
a23-62-6-168.deploy.static.akamaitechnologies.com
March 8, 2015

23.62.6.179
a23-62-6-179.deploy.static.akamaitechnologies.com
March 8, 2015

File downloads found at URLs served by s.bstoragedownload-about.com.

14 / 68    (Adware)
http://s.bstoragedownload-about.com/7/692/ct6924107/43fb74312cf04b6fb483e2f8d09cb5e7/Downloads/Prod/SmallStub1.3.9.0.140504.01/.../AutoGK_v2.55.exe  (autogk_v2.55_tsa38cise.exe)

The following 10 files have been seen to comunicate with s.bstoragedownload-about.com in live environments.

TCP » 23.62.6.179:80
plugin.exe

TCP » 23.62.6.179:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.62.6.179:80
browser.exe (Browser)

TCP » 23.62.6.168:80
plugin.exe

TCP » 23.62.6.168:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.62.6.168:80
PSANHost.exe (Cloud Antivirus Platform by Panda Security, S.L)

TCP » 23.62.6.168:80
plugin.exe

TCP » 23.62.6.179:80
slimcleanerplus.exe (SlimCleaner Plus by SlimWare Utilities)

TCP » 23.62.6.179:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.62.6.179:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 23.62.6.179:443
UCBrowser.exe (UC Browser by UCWeb)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.