home

www.freedriverbackup.com

HANG XUESONG

Domain Information

The domain www.freedriverbackup.com registered by HANG XUESONG was initially registered in September of 2013 through ENOM, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dallas, Texas within the United States which resides on the Linode network.
Registrar:
ENOM, INC.

Server location:
Texas, United States (US)

Create date:
Tuesday, September 3, 2013

Expires date:
Thursday, September 3, 2015

Updated date:
Monday, August 11, 2014

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Root domain:
freedriverbackup.com

Whois:
3 freedriverbackup.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.TechEvolveGMBH.Q, PUP.Optional.Installer.Q, PUP.Optional.TechEvolveGMBH.Q, Win32.Generic
100.00%

ESET NOD32
Win32/Adware.RK.AO.Gen, Win32/InstallMonetizer.AF, Win32/OpenCandy (variant), Win32/InstallCore.QL (variant), Win32/InstallCore.TB (variant)
83.33%

NANO AntiVirus
Trojan.Win32..chcmud, Riskware.Win32.InstallCore.djedzw
50.00%

Trend Micro House Call
TROJ_GEN.F47V0118, Suspicious_GEN.F47V0822
33.33%

Malwarebytes
PUP.Optional.Amonetize
33.33%

Avira AntiVirus
ADWARE/InstallCore.Gen9
33.33%

Baidu Antivirus
Adware.Win32.InstallCore
33.33%

Comodo Security
ApplicUnwnt
16.67%

XVirus List
Win.Detected
16.67%

SUPERAntiSpyware
PUP.InstallCore/Variant
16.67%

F-Prot
W32/InstallCore.AC.gen
16.67%

Sophos
Generic PUA AI
16.67%

Fortinet FortiGate
Riskware/InstallCore
16.67%

K7 AntiVirus
Unwanted-Program
16.67%

Norman
InstallCore.CERT
16.67%

The domain www.freedriverbackup.com has been seen to resolve to the following 2 IP addresses.

45.56.68.213
li918-213.members.linode.com
May 3, 2015

173.230.156.221
li166-221.members.linode.com
December 18, 2013

File downloads found at URLs served by www.freedriverbackup.com.

1 / 68      (PUP)
http://www.freedriverbackup.com/FreeDriverBackup.exe  (13e8b780db16c01b2b8f9ebecdbe3118)

10 / 68    (PUP)
http://www.freedriverbackup.com/package/.../FreeDriverBackup.php  (freedriverbackup.exe)

10 / 68    (PUP)
http://www.freedriverbackup.com/FreeDriverBackup.exe  (07236859835e4e5d3d25640109b56fec)

10 / 68    (PUP)
http://www.freedriverbackup.com/FreeDriverBackup.exe  (9b4e00eec97624852178f1417dbd6474)

2 / 68      (PUP)
http://www.freedriverbackup.com/FreeDriverBackup.exe  (b8f2aca5fe79949b3f9076bb368f09de)

5 / 68      (PUP)
http://www.freedriverbackup.com/FreeDriverBackup.exe  (b726b8b5b98c2528b665f7f5833b68d7)

4 / 68      (PUP)
http://www.freedriverbackup.com//FreeDriverBackup.exe  (ebc99ff11debfc367cc2fa713a4a9f67)

4 / 68      (PUP)
http://www.freedriverbackup.com/FreeDriverBackup.exe  (ebc99ff11debfc367cc2fa713a4a9f67)

The following 19 files have been seen to comunicate with www.freedriverbackup.com in live environments.

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
goup.exe

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 45.56.68.213:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
freeocrtoword.exe (Software by FreeAudioVideo)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
freedriverbackup.exe (Internet Web by Installer)

TCP » 45.56.68.213:80
freeshortcutremover.exe

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 45.56.68.213:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

URL:
http://www.freedriverbackup.com/

Google Analytics:
UA-43764422

Title:
“Free Driver Backup - Free Device Driver Backup - Free System Driver Backup - Backup and Restore Windows Device Drivers”

Description:
“Free Driver Backup helps backup and restore Windows device drivers.”

Web server:
Apache/2.4.7 (PHP/5.5.9-1ubuntu4.9)

Facebook:
Likes:  5
Shares:  19

Twitter:
Shares:  4

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.