home

d.baixakifiles42.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain d.baixakifiles42.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in November of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Sao Paulo, Sao Paulo within Brazil which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Sao Paulo, Brazil (BR)

Create date:
Wednesday, November 5, 2014

Expires date:
Thursday, November 5, 2015

Updated date:
Wednesday, November 5, 2014

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
baixakifiles42.com

Whois:
1 baixakifiles42.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.installCore, PUP.InstallCore.Bundler (M), PUP.InstallCore.RES (M)
85.71%

K7 AntiVirus
Trojan , Unwanted-Program
71.43%

Sophos
Generic PUA DD, PUA 'Install Core Click run software', Generic PUA JH, Generic PUA KP, Generic PUA LO
71.43%

VIPRE Antivirus
InstallCore, Threat.4150696, Trojan.Win32.Generic
71.43%

Avira AntiVirus
ADWARE/InstallCore.Gen7, TR/Dropper.Gen, Adware/InstallCore.688617
57.14%

ESET NOD32
Win32/InstallCore.RO (variant), Win32/InstallCore.QL (variant), Win32/InstallCore.QL potentially unwanted (variant)
57.14%

McAfee
Artemis!DB87E0830453, Artemis!33115866E8EE, Artemis!FE42B1A0D3D7, Artemis!B314250E49CD
57.14%

NANO AntiVirus
Riskware.Win32.InstallCore.dlayph, Riskware.Win32.InstallCore.dmhfwe
57.14%

Comodo Security
Application.Win32.FriedCookie.CIRK, Application.Win32.InstallCore.DAI
57.14%

Fortinet FortiGate
Riskware/InstallCore
57.14%

Baidu Antivirus
Adware.Win32.InstallCore
57.14%

Agnitum Outpost
PUA.InstallCore
57.14%

Trend Micro House Call
TROJ_GEN.R00UC0OAM15, Suspicious_GEN.F47V0106, Suspicious_GEN.F47V0108
42.86%

Malwarebytes
PUP.Optional.FriedCookie, PUP.Optional.InstallCore.SID.C
28.57%

IKARUS anti.virus
AdWare.InstallCo, AdWare.InstalCo
28.57%

The domain d.baixakifiles42.com has been seen to resolve to the following 2 IP addresses.

54.207.20.128
ec2-54-207-20-128.sa-east-1.compute.amazonaws.com
November 29, 2014

54.94.187.154
ec2-54-94-187-154.sa-east-1.compute.amazonaws.com
November 29, 2014

File downloads found at URLs served by d.baixakifiles42.com.

1 / 68      (PUP)
http://d.baixakifiles42.com/?ic_user_id=9289&data=sOTtByN8ft8bBCH22NeRo76fmiyzw4BvUx6nl1fag0U1Z27gjsHs/w/x1jMWhvF9nm8jq5w9snWirL5dPq 4uNJMjILnrfwbTTognFy92DD8TUw5ybFHx9cwUd8GMjPFCy3/nctUsQKOGQvdElm7JogzzQTQa/Gm9XJ WqI1Uf9Md1G7UDEDqsKMtGRIMU5iW5AX6djNSHmYnRhQE88T7k358ZXumERGwhDu3z02I7zuZ9NnqSNcfrSjQWb0SD2mY2AepVaajkH4qoO GZ3E8H9/i0OmUrEXgXGabeNQe0248LkG6hDdzZ8hYADiTBRQcML8Jy6BBrFmnf9T4zfFksUpCN5rRgNxKc1reSk1gnOBFSWs51zFvQ k9iMxDyvqi/BCQheAemFs52iNn6iPeJgd2/p0OlEVguFaqd2WY9DKzGEub3XMxlGox0OQCrSdJg6jcwn/fdt7JcZA8ZNYDsv7UInu8IPAy1p9/dYVY3b2n9j4cSqbwzXXbFdvWacvR4oQkcD9Y3t5ThzlcBzWO9SQS4NzIhntKoh9YXQg6sQYu9I3HdiCmXjPUeP7CA5Ug3ScPWYdS2f0dA/joOV4 VteDdWco Iv18DjDzMXq/Th7gr/8r3Fh4NqBxrON5Oifd 0DLSC3FjKDoFQ FXargATiacWGvY9gsY/Q/vIqM9Ai/e580CIX6IEMyXdLg8VGL9j2XEF/rJDU1nPfa16GQUGCV8Fsgoxym JoXvyQsBwzTuu0A==&key=N9 EzsnEMU35UGf7TWwwLZPEzmNGsjRUy/1JoLgZBi4lMT/DR D4ob7cPc3G9e4kHYUOKlF5Q91oDlDmMeB5QV6Sgl18CSTb3lYaFLfPsvaya0KZuRf3dp4cP3UmMgN5/.../9Zvkpt7  (elementary-32-bits.exe)

12 / 68    (PUP)
http://d.baixakifiles42.com/?ic_user_id=9289&data=8rTLabLZAp4yqyZqe6KWZbJxOR0aSqmXC/ZUDxg4T1Je/hLgiO25NML/SLU7aMhA6Svq/F/AlRuckFP8PG9oCGzZP4lgtVPbuQOoeSAMly/BBGr9YrG/jwIKytBnYqqqtJx2MCqLfEai8VhRyXYhSjgh142jYbH7koOkPbgX6kB/RSaK1FDcAFblS3nuzA5QhPFIrN1E vfqoYCztkhtVr9LFe/XUU9N6U3y shPQvXdUY8pYe4ossm2EXV5wIjVonoA2C2SuZjJfWz0qhXOT32ezEpCy9zZ5fO7EcJVveMMZ Xq23QDx9xh379SKdBPWoy2xokxTNMasFHJkELTqcMrkBkC4UCHHgF/IlAHPZrDRuI0XKoxL6xMPMuk48mVpDkjjQXHeM6 AB6//8LEOCVMKepUSMLgqtzPojFt1/uMYhR5reN5MOjk1JCxQxlqr/NoRV/ecxlFuq8v9YjtFh/nbYPeeSrxaZJxfO4s64wPFU5N6kwlueLx/PLvzJaLjEMnhvMqV2ZcwWwgbD36t AY9xzGxma2H7rwD Jl0SiBxUYon48l wHKlwwmYBwSeZDgdFtUBilJ8F4FlzzNEMTbuZ8wOJLlZU34TnPzxSqP1wsbUBMPKGqygsnPOcIIbV3rV26NvRy/UIFvojJ6Y LzdEI8LL5LGRHI PcuchuSs8U3 Q RuTjwcsQZ8Yq1wLKoj0B6V AlagW9JvApScqAXdPYbFlqiHld68DzTant7XJKv3njGi7Eg/.../XM  (media-player-codec-pack-4-3-5-32-bits.exe)

14 / 68    (PUP)
http://d.baixakifiles42.com/?ic_user_id=9289&data=M5zMuw9RHrcEVsxlmZbJOxAlxNaUXdnEfK897F4u/LJ7AWU8yeAtrEMT7kpsm J9fVsyL/pux jEzTau1k3sxOY5HzioVtpwmSkFgSoVE VrpNracnFfVz2bnkFpliyIyx2xI1B9wtP9wm0YoZlVEMbjqTbkwyv CrbZuAQxyH9ITucy4o9ynA6IZcUgIxS5P2krDGBPHZixuqpFt9 DAFmAIkdIDqP3PW2DYJhCTppxkM f5GxRbSb9sZKAFmSdCAB4CoT8Yr92TH0pLVvZz8lQMTnMo8FKd5XokbiJqSnKVARWuH/x7gwwxzkhN0WFBhAaYBtDuwDEopsyCrpqDl6fnCbEMBT5LzbnWLS2 CwH29kGUodkZHnEHS10Xq2r0GAXqUmK/9/uU/QtJMQvS0dkVzBqrZbTeOaVLup2R21uWbiwZDU98XjY20FFu21KZWagtZlurSClC0KP8CRtTIgWr/Meic3qjD/gg43PpD2PmQLhm95VVWwfzl2C6BJBSGZvS2SeISX2hv46W4n3hmqL s FHSQ9l5aETUsYToprNhmdfH7dB2CtwtaJ2kKhnfJEGWAvN8XSVcKrslayUoVQtvcIXRfM9lIhcXzb8NOeLBTClIkXfxQHEVcNQB9hqONoqessMuhKJsrObL91MZBwAOJ8ZjISDRwhBU8oV8pPFxeiL5ASiFJTzt5obpfrfkDRmLVA7ygLDP0QEbiLUOpArSTwMJWynVMHeukuvxTcAptcyCIcY7kWqudNJXG2w675BOTc0CclRgY=&key=bvwUqgOJOKatIYWCMDfFf0tCPjH/29PzXe2zeAjgDcDKJKu7AO 5I4KcC/FXf1C/.../m11HnLaeIioqKcm2fUMgJlvd4cYwObOJywOMgKFYLG EfjofQdwhyF8DJwvO7Ix66Gl4u 5IdrPTThaJJryCSVrKdIji1RI  (spin-tires-1-3-beta-32-bits.exe)

13 / 68    (PUP)
http://d.baixakifiles42.com/?ic_user_id=9289&data=YWWBvPqFMMEjwskia42lUcCTKJtaWo1WKMKgXD7 0h17mZSdyYfUAx5hYHze5kaMiDxBlGmxzTafIGjDVfU5EqYFPypyoRbD/MA/JzP21G8H 3 eFi3EEnYOo1e3xw5AQdpD14cSUmTPPC/LDR sNOtMq7 g0d7p8pTO xszJI1kLf8XkeF75ibXirIgeKEroDAtU82LsXUZDntiGv XLRMIeiTqxjTPAmjgjcxxOnyqaJPoQFbJFq38R18G6VA9ca3tvI/eewTo6YEbHWpi5PXwGXRQDPTp7zHIdg9fGJ/IKztIQytABuhC8qEoDjRHMLmxRK/OuOKfETHzwoM8BNYims870mdt9f8Oaw4Kbes2lemapyty8a7KvzYBZcs/c/6nsXajffaEsbpGF2mAKMDrJ4xCkYKVzt xd9qLeGMemAy5EALa6x6SNlqqe3D8Y/Q/sSehUVLsVf48VXgdgbHW/UexDqlIpVjvzGzfuiatRigpJyvjqtZzR uMKDpsWhzObz53U8vo 0powfbgwx jZ8YK/BeAMzZ8Y8LPnGYD0aveRI4crcuYrTPbPka275SpILmZ4ENz9cOHp0ScGgGQ20lOvHocs9eIBj5aN2myRbBRDqLTzN2005P5bISc7jgVoZDxB6byZmDmMh5ayXEEtiNIiceUrJ9eqCTtpJKaXA3idt4s7TRC5VJPqf6mtAlNXRiQ7tlfCy7OSQSYw/YAzFGxBKU9kL5Z0Zzopa4cOuNrh2H8Rkz4bEs=&key=UBDtMKAeuwdHncfzjqHV2q5e/v2Uab8/718PXMILVqBGzPSLOtO94Vee4VTeTyNPfNJtuZjrP5rJzXMp8tB6FsnimZnszQCZMo05QPv6VpF1o NH9z6jM6ESHRwo60FHYI0XIc7d2y6HUpQ7CR62icTS3teqiDDdWh/.../iHFlDGBUIoJjcTeP  (mozilla-firefox-34-0-5-32-bits.exe)

1 / 68      (PUP)
http://d.baixakifiles42.com/?ic_user_id=9289&data=V8DB78rWBcC/8SoCq60nZCfDg9j5ryxZo/XPU3lZTZHDSoZHC4sg1sE0n8F2P6pdE3YwbnkQKX7QuU5xdIM7JCd oZ/fXwy2zA250Huc/ M/RASC noF2 DI8QT0KY6S/ZQAS5znqILotIzouoX4Qm2ngQHWrK5QHJx1EKBhsgoOSDXRj9/6pU0VFjMPmubAnF8crSKVNmKDBFTAw9KTxaXI7rPvLSPfmn3IvpwZ2i1QDqx5Jjn4ypT0TH2GCiAg37yr2Ze6FUpKLaU3tcv focwAqbDvc0qf4EabQb9SlMQl893lPkvzgWL l13ZRjtRWHW Fxc0z8wOWuv7gdCoUlZocdOVrifIZKzHDsfLnOXMh68iTmKs39LSMSnIqYREGxJX9Cb ukHMAV6EeAoiOyHCzXSr lYDqHvELTr/j67gsV23tgm7Cfk7Vi VGndZwrl5xFCxV1O Hh3ch9xf7Rmi70AkClBYLalgd8e1bKufeNtxUGZ6eLvIIO3XdoBbcTuZrPEx1DC83zFIV9NLLYDphveP5Pkqk0EaBYTQAaOIa5Jknsz7WiCQJG66GPNxqRXOnagoqg/JevW3sMCJmTh721KqC1wNiXJvAxPeQxoPXVzepUJlAWQSr7AEG3KYoiP3n5IkKG88Bg9cMUbvV R7IXxlIi1P XaForuf0XTD28QFQkyFvwSgg==&key=cHQNK eO eOLupNUM2wzcOz5fy6iaBxAn1YXaOCVOZxH63WP6T3 YSFZugQPzpLGdr6meMXkXipPSgjt1hazCSBXHujVbw11DoEadjM1A8XvSzgdYMvjzfiGDpGUAk7D8w/KuiTMa45UyCnBYBhU52JmPBhQ4HE8P8hVnir8VTP/CCtTpli3/.../LQ7TNLr3U2csGMN9tZPRX  (danfe-view-2-2-20-32-bits.exe)

21 / 68    (Adware)
http://d.baixakifiles42.com/?ic_user_id=853&data=qcMvrHmM0VVfgR4oFBkna6Urm1l572BhcUmm9Wl5cg0jEUzjh2F1/cN8fgGdD5SFl3pCRTyWBoO 11sUGKGghowjH57HpKs6cUigvSjez0YVG4yjT8cyHLH7xfAfGs9oQWMQEaUqhyVCwx4nVlBtqwC0E0Os15fDx65PwchzFW3AX t1j9k8jrFhFJdD7K5iT8/tEMot8QYq ePuK3EIm3XjIUcfZIpHu3Ll6 38QfoJ3v7BgrrPKxg5FGScCsSq0Rd/VsmwnVzNUahOQXkB74z9nCCrVfYx C Tp7YrAXqJDuOY6C YfUi57vOqfJ5jRkHPBIDNPcmN53QvQjjPN0Q8U TV/aaY7xujpcJ4iK4/tvCvbZ1cpk1egs/wN9UJOk3NMgbLmGFZB5/7UPTtBjDp/47R6lmsahRao80qODV0YcCkb3nJLQCwD5t36ecIV8fetKdhfvglaZqKWmDhbeJIUF1rfTtG32G8FGey Jovywk CluO6Bq 6SU1clMyNivSKPxeGpRNtjP9VPZ0pGqhqlVP/ uAV413BlC85I8 atwpxW6CkwpqOdocgGFxDNK2nLvUsGa1W2NE703cxx d OzTzDvttruoqIhebeMRzYglDJIW1je8m3yXS7LYbghODjNdN3bXA7/w3OFSf78INhXA TT3hzq/ajJfkOCzHrIjRPdt3AMNH GXo0fEJ7xwWt5O38USVlK3WrYO0BCpdG3tktHfpBvCSOw3IceDIvXGWtjBV8hgMgJUcS5873iAenWvo9NXO0ucnWBDFaZ8yyOeGV YLPpjU9AdnPhpFuloMA==&key=J85DtoIuAFtNQhDyLMalsgT1FEyiPjmx/.../KGOezIiPh5eRQifjX2GB9ry85LXLsv2zxVMMEkuotUTXgMlrgjM5hjTDbfabpVF68E0QpM5Stv198HRcocIFjdUIWF  (megacubo-10-3-3-32-bits.exe)

6 / 68      (Adware)
http://d.baixakifiles42.com/?ic_user_id=254&data=tR9JTeWsSyVXuce1 cQDpFX5j4iZTUXo RBLJexUPCCPcuZbhp1ALL4yUPqw1Qp6V3PeTfiFbhCHBOWxttzfFsjGUQIrTm/SIVlXyKASaN3tDWLNd9DL9BnWfhLe 2EPLSVXt6q4mTTlqxa1 NyCF70gwTlW2mTCezKOqMsaD7eaD0ksr6ociW/rKsVbi4W2VGBH/3kRM0cHeQLPawoQjhY0U748znyCBgkYYfTtk7xrmsBdDMZfpAvF5CKjG1RgCvLUMi7HFtELiXDsH/A3sDHfw5EBTZ7rA8LeLYgPFZWSI5R9z8L0DgKtgexxMvzuCcjTPeTUTgZuX4BagGVan3JSEMHabmsxgLLrVoxlynA7dWiPNIsVTNh cCVKzl2cUn/K/kyzojvS/EV9sgHLe/ZqY4RX nZAQIFJskrN70qmcOL 36Mix0UOPvP4WeTlyCfmUXMsLwj0L386e2xS1CYaXcHRhDMOY4 dzwIoU3CnVFV4WGYeo1ZMCg7VXjW T4H71vo2NzVr1hMy5fpvZUaaPiE857B2nqrB7SR35YRRXuLDVHqDwm74403Y4qC/CeW8c0r8MqMdmKCjoQgVhKzTeRapRZdTy6H9WvNFN52KeZzPqrQ3L6p8D6Jpg6IXgsEE6Kr2jS0tKR3v SFMTx7q0mX IQVTG6LPq2IcVOucDoADQ4 qd679Wwl4wlA&key=At8YdYLAOyISxDDwaqzSBR MemGigXiOU6gfJDwjdnXaKShJyLH/RYl1BbwB9R 9UQ9a9Opl5rK6K Y2D5ygP38PLm hFztJ9ciaIncS8JQhksgvYHGoY1mqQ3nZ/bh84nDpJP5DuR87hm38N/5C8phITn8Kf4mm7T/.../lBC5ilGkQTZWjuWe5Hr1kvW  (winrar-5-11-32-bits.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.