The domain up.br.bav.baidu.com registered by Beijing Baidu Netcom Science Technology Co., Ltd. was initially registered in October of 1999 through MARKMONITOR INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Los Angeles, California within the United States which resides on the Beyond The Network America, Inc. network.
Registrant:
Beijing Baidu Netcom Science Technology Co., Ltd.
Registrar:
MARKMONITOR INC.
Server location:
California, United States (US)
Create date:
Monday, October 11, 1999
Expires date:
Wednesday, October 11, 2017
Updated date:
Thursday, September 10, 2015
ASN:
AS3491 BTN-ASN - Beyond The Network America, Inc.,US
Scanner detections:
Detections (54% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Ammyy.F, PUP.Installer.BonjoySoftware.O, PUP.OpenCandy.Installer (L), PUP.Atube.Optional.Installer.Meta (M), PUP.Solimba.DelimaxC (M), PUP.Sien.SIENSA.Installer (M), PUP.Freemake.Bundle.Installer.Meta (L), PUP.Bandoo.BandooMe.Installer (M), Adware.Bundler.YeYizhou.Installer.Meta (M), PUP.Solimba.Vetaform (M), PUP.Outbrowse.runappsf.Bundler (M), PUP.Sien.SIENSA.Bundler (M), PUP.Midia Technologies.MIDIATEC.Bundler (M), PUP.BR Software.GENCOLAB.Installer (M), PUP.Sien (M)
80.00%
Dr.Web
Trojan.OutBrowse.92, Adware.OpenCandy.137, Adware.Toolbar.665, Adware.Toolbar.276, c:\users\test\appdata\local\temp\3015a6656393586e011358262f78dcb13d97349c c:\users\test\appdata\loca
23.33%
ESET NOD32
Win32/RemoteAdmin.Ammyy (variant), Win32/OpenCandy (variant), Win32/OutBrowse.BT potentially unwanted, Win32/OpenCandy.C potentially unsafe (variant)
20.00%
Baidu Antivirus
Hacktool.Win32.Ammyy, Adware.Win32.OpenCandy, PUA.Win32.OutBrowse
16.67%
McAfee
Artemis!2CBF5657FFD8, Artemis!FD2F7DD0058B, Artemis!B3CA238F0A6E, Artemis!857FB8F2E2E5
13.33%
VIPRE Antivirus
Opencandy, Trojan.Win32.Generic
13.33%
G Data
Win32.Application.OpenCandy, Win64.Application.Agent.QX43TM
13.33%
Trend Micro House Call
Suspicious_GEN.F47V0104, Suspici.5DB26E85, Suspicious_GEN.F47V0610
10.00%
ESET NOD32
Detection.Undefined, Win32/OpenCandy.C potentially unsafe application, Win32/OpenCandy.A potentially unsafe application
10.00%
Agnitum Outpost
PUA.OutBrowse, Riskware.Agent
10.00%
Kaspersky
not-a-virus:RemoteAdmin.Win32.Ammyy, not-a-virus:NetTool.Win64.NetFilter
6.67%
NANO AntiVirus
Trojan.Nsis.OutBrowse.dnosmc, Riskware.Win32.OpenCandy.dzfvgw
6.67%
Avira AntiVirus
APPL/Outbrowse.Gen, PUA/OpenCandy.Gen
6.67%
Fortinet FortiGate
Riskware/OutBrowse, Riskware/OpenCandy
6.67%
AhnLab V3 Security
Unwanted/Win32.RemoteAdmin
3.33%
The domain up.br.bav.baidu.com has been seen to resolve to the following 3 IP addresses.
63-217-158-78.static.pccwglobal.net
May 3, 2015
File downloads found at URLs served by up.br.bav.baidu.com.
10 / 68 (false positives)
Latest 30 of 113 download URLs
URL:
http://up.br.bav.baidu.com/