home

www.bestmediafree.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain www.bestmediafree.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in October of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Oregon, United States (US)

Create date:
Wednesday, October 30, 2013

Expires date:
Thursday, October 30, 2014

Updated date:
Wednesday, November 6, 2013

Root domain:
bestmediafree.com

Whois:
1 bestmediafree.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ADLSoft.U, PUP.Installer.SuperCoolApplications.U, PUP.installCore.SuperCoolApplications.Installer (M), PUP.installCore (M)
100.00%

VIPRE Antivirus
InstallCore.b, Threat.4788237
50.00%

Avira AntiVirus
ADWARE/InstallCore.Gen7
50.00%

AVG
InstallCore, Adware InstallCore.LA
50.00%

F-Prot
W32/Skintrim.1!Generic
25.00%

ESET NOD32
Win32/InstallCore.LR (variant)
25.00%

Agnitum Outpost
Trojan.Injected
25.00%

Sophos
Install Core Click run software
25.00%

Dr.Web
Trojan.Packed.25861
25.00%

Zillya! Antivirus
Adware.Agent.Win32.8971
25.00%

ESET NOD32
Win32/InstallCore.IK potentially unwanted application
25.00%

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
25.00%

The domain www.bestmediafree.com has been seen to resolve to the following 3 IP addresses.

54.213.231.162
ec2-54-213-231-162.us-west-2.compute.amazonaws.com
April 13, 2014

54.213.175.151
ec2-54-213-175-151.us-west-2.compute.amazonaws.com
April 13, 2014

54.200.119.244
ec2-54-200-119-244.us-west-2.compute.amazonaws.com
April 13, 2014

File downloads found at URLs served by www.bestmediafree.com.

1 / 68      (Adware)
http://www.bestmediafree.com/?dl=1&meta=cmVP k1w r5FDXat7dRJ2KiJDrW0UdWjUzWPDrFthXtjcmVP2rldDX0mIT1zvm2yIKiWvmREhSDj7z1sVkDj rcWvmAWASDChTMm7dlChV84NZMzNZMRNjnmI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfS7m7K2pDZ1fOZi4NZLzNzCyAZn=  (realplayercloudsetup.exe)

1 / 68      (Adware)
http://www.bestmediafree.com/?dl=1&meta=cmVP k1w r5FDXat7dRJ2KiJDrW0UdWjUzWPDrFthXtjcmVP2rldDX0mIT1zvm2yIKiWvmREhSDj7z1HiQDj rcWvmAWASDChTMm7dlChV84OZMyNZMRNjnmI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfS7m7K2pDZ1fOZ71ATiwNjCyAZn=  (realplayercloudsetup.exe)

10 / 68    (Adware)
http://www.bestmediafree.com/?dl=1&meta=cmVP k1w r5FDXat7dRJ2KiJDrW0UdWjUzWPDrFthXtjcmVP2rldDX0mIT1zvm2yIKiWvmREhSDj7z1nxSDj rcWvmAWASDChTMm7dlChV84AZ7RNZMRNjnmI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfS7m7K2pDZ1fOZgyOTM0NTCyAZn=  (realplayercloudsetup.exe)

6 / 68      (Adware)
http://www.bestmediafree.com/?dl=1&meta=cmVP k1w r5FDXat7dRJ2KiJDrW0UdWjUzWPDrFthXtjcmVP2rldDX0mIT1zvm2yIKiWvmREhSDj7z1VLyDj rcWvmAWASDChTMm7dlChV84Ajc4NTiRNjnmI3cWedtleX2JcmxWvm10hXtt7XxjIHxFcrVWvm1uhXtw r5jDK1l ExWvmN0hXt07XvEDXxWvmF0hXtpDCNJ Exl Ei6xH1YIKDTDK5y7dg6VH0mDXPwcj1Y7KNlIKxWvm5whXtPDHsJcdl0IKWufSDC2j1YDrVdIKNlfS7m7K2pDZ1fOZM0NTa1AjAzAZn=  (RealPlayerCloudSetup.exe)

URL:
http://www.bestmediafree.com/

Google Analytics:
UA-45293343

Title:
“RealPlayer”

Description:
“Missing”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.4.3 (PHP/5.3.28)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.