www.backuppcfiles.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain www.backuppcfiles.com is registered by proxy through GODADDY.COM, LLC and was originally registered in September of 2010. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
GODADDY.COM, LLC

Server location:
Virginia, United States (US)

Create date:
Wednesday, September 01, 2010

Expires date:
Thursday, September 01, 2016

Updated date:
Tuesday, June 23, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant), Win32/Bundled.Toolbar.Ask.D potentially unsafe (variant), Win32/Bundled.Toolbar.Ask.G potentially unsafe (variant)
85.71%

Reason Heuristics
PUP.Optional.Nicetex.Q, PUP.Optional.Installer, Win32.Generic.Installer.Meta, Win32.Generic.FedderCorporation.Installer.Meta
71.43%

Malwarebytes
PUP.Optional.BundledToolBar.A, PUP.Optional.Spigot.A, PUP.Optional.APNToolBar.A
57.14%

Dr.Web
Adware.Downware.1417, Threat.Undefined
57.14%

McAfee Web Gateway
Artemis
28.57%

VIPRE Antivirus
Trojan.Win32.Generic
28.57%

NANO AntiVirus
Trojan.Win32.Generic.cthmyi
28.57%

avast!
Win32:Adware-gen [Adw]
28.57%

McAfee
Artemis!5AF31AB0CB87
28.57%

Bkav FE
W32.Clod2a9.Trojan
14.29%

Trend Micro House Call
TROJ_GEN.F47V1011
14.29%

ESET NOD32
Win32/Bundled.Toolbar.Ask.D potentially unsafe application
14.29%

K7 Gateway Antivirus
Unwanted-Program
14.29%

K7 AntiVirus
Unwanted-Program
14.29%

Baidu Antivirus
Adware.Win32.AskToolbar
14.29%

The domain www.backuppcfiles.com has been seen to resolve to the following IP address.

ec2-23-21-195-213.compute-1.amazonaws.com
May 21, 2014

File downloads found at URLs served by www.backuppcfiles.com.

3 / 68      (PUP)
http://www.backuppcfiles.com/Backup_Installer.exe  (461b5547c9be5001b72be5d764e6311f)

7 / 68      (PUP)
http://www.backuppcfiles.com/Backup_Installer.exe  (backup_installer - copy.exe)

2 / 68      (inconclusive)
http://www.backuppcfiles.com/Backup_Installer.exe  (710cbd0ab8d0629bbce222d15a63634c)

8 / 68      (PUP)
http://www.backuppcfiles.com/Backup_Installer.exe  (5af31ab0cb875e310e6f115b8e398fe3)

2 / 68      (PUP)
http://www.backuppcfiles.com/Backup_Installer.exe  (f74fe2bddc4e73fa94bc45eb62d0ef27)

8 / 68      (PUP)
http://www.backuppcfiles.com/Backup_Installer.exe  (8d3e3c0f16a3288ba16384b48d68e6c7)

0 / 68
http://www.backuppcfiles.com/Backup_Installer.exe  (8aff40101a736c26a19976fd3edcd6fd)

6 / 68      (PUP)
http://www.backuppcfiles.com/Backup_Installer.exe  (7d7aec5c43ed20308fa72cbddd1dcbe5)

The following file have been seen to comunicate with www.backuppcfiles.com in live environments.

URL:
http://www.backuppcfiles.com/

Google Analytics:
UA-33753069

Title:
“BackupPCFiles.com - Backup Your Files Now!”

Network:
Amazon Web Services (AWS), running an EC2 instance

SSL certificate subject:
CN=www.backuppcfiles.com, OU=Domain Control Validated

SSL certificate issuer:
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 2.0.50727)

Facebook:
Shares:  6

Statistics are for the previous month.