dhc.freewindowsmediaconverter.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain dhc.freewindowsmediaconverter.com is registered by proxy through GODADDY.COM, LLC and was originally registered in February of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Wednesday, February 13, 2013

Expires date:
Thursday, February 13, 2014

Updated date:
Wednesday, February 13, 2013

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Scanner detections:
Detections  (85% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Bundlore.F, PUP.Installer.IronInstall.F, PUP.Installer.Bundlore.I, PUP.Tuguu.Bundler (M), PUP.Tuguu.TuguuSL.Bundler (M)
100.00%

VIPRE Antivirus
Bundlore, InstallCore
72.73%

avast!
Win32:Bundlore-A [PUP], Win32:Installer-I [PUP]
72.73%

Dr.Web
Adware.Downware.925
63.64%

Bkav FE
W32.Clod357.Trojan, W32.Clodc14.Trojan, W32.Clodd04.Trojan
54.55%

ESET NOD32
Win32/Toolbar.Conduit, Win32/InstallCore.BH (variant)
54.55%

Malwarebytes
PUP.Optional.Bundlore
45.45%

Fortinet FortiGate
Adware/WebCake
45.45%

Norman
Agent.ASCUC, Bundlore.CERT
45.45%

Trend Micro House Call
TROJ_GEN.F47V0507, TROJ_GEN.F47V0510, TROJ_GEN.F47V0517, TROJ_GEN.R002H05IT14
45.45%

McAfee
Artemis!D0AA0A857FBF, Artemis!B469EB85CBB3
45.45%

Sophos
Generic PUA JD, Bundlore
18.18%

K7 AntiVirus
Trojan
9.09%

Avira AntiVirus
ADWARE/InstallCore.Gen
9.09%

Boost by Reason
Adware.Installer.IronInstall.F
9.09%

The domain dhc.freewindowsmediaconverter.com has been seen to resolve to the following 4 IP addresses.

a23-67-242-35.deploy.static.akamaitechnologies.com
November 19, 2013

a23-67-242-80.deploy.static.akamaitechnologies.com
November 19, 2013

November 17, 2013

November 17, 2013

File downloads found at URLs served by dhc.freewindowsmediaconverter.com.

11 / 68    (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

5 / 68      (Adware)

11 / 68    (Adware)

11 / 68    (Adware)

8 / 68      (Adware)

11 / 68    (Adware)

The following 53 files have been seen to comunicate with dhc.freewindowsmediaconverter.com in live environments.

 
Latest 20 of 53 files

URL:
http://dhc.freewindowsmediaconverter.com/

Web server:
Apache/2.2.3 (CentOS)