home

download.projectbearshare.com

Domain Information

Server location:
Tel Aviv, Israel (IL)

ASN:
AS6461 MFNX MFN - Metromedia Fiber Network

Root domain:
projectbearshare.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.X, PUP.Optional.Musiclab.Installer
100.00%

McAfee
Artemis!8F13E31C35E5
50.00%

Malwarebytes
PUP.Optional.MusicToolbar.A
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

ESET NOD32
Win32/BearShare (variant)
50.00%

AVG
SearchSuite
50.00%

The domain download.projectbearshare.com has been seen to resolve to the following IP address.

94.31.0.25
94.31.0.25.IPYX-076665-ZYO.above.net
January 5, 2015

File downloads found at URLs served by download.projectbearshare.com.

1 / 68      (PUP)
http://download.projectbearshare.com/BearShareSetup.exe  (bearsharesetup-r1411-n-bc.exe)

6 / 68      (PUP)
http://download.projectbearshare.com/BearShareSetup.exe  (bearsharesetup-r20-n-bf.exe)

The following 15 files have been seen to comunicate with download.projectbearshare.com in live environments.

TCP » 94.31.0.25:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 94.31.0.25:80
FreeScreenVideo.exe (FreeScreen2Video by Koyote Soft)

TCP » 94.31.0.25:80
setup21_freeconverter.exe (Free mp3 Wma Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
setup_freevideoconverter.exe (Free Video Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
700d4b1585aaf7497320bf79add541c19984a2ee0ec7b733d0cac144b2136fd7 (Free Easy CD DVD Burner by Koyote-Lab Inc)

TCP » 94.31.0.25:80
freeflvconvertersetup-r20-n-bc.exe (Free FLV Converter by Koyote-Lab Inc)

TCP » 94.31.0.25:80
setup_31freevideoconverter.exe (Free Video Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
f_0002b2 (Free Easy CD DVD Burner by Koyote-Lab Inc)

TCP » 94.31.0.25:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 94.31.0.25:80
FreeFLVConverterSetup-r119-n-bc.exe (Free FLV Converter by Koyote-Lab Inc)

TCP » 94.31.0.25:80
freevideoconvertersetup-r144-n-bi.exe (Free Video Converter by Koyote-Lab Inc)

TCP » 94.31.0.25:80
setup_freeburner.exe (Free Easy CD DVD Burner by Bandoo Media Inc)

TCP » 94.31.0.25:80
VideosToDVD.exe (Videos To DVD Converter by Koyote Soft)

TCP » 94.31.0.25:80
setup_freeflvconverter.exe (Free FLV Converter by Bandoo Media Inc)

TCP » 94.31.0.25:80
freehdconvertersetup.exe (Free HD Converter by Koyote-Lab)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.