Duba.com

By GoldSparrow in Browser Hijackers

Threat Scorecard

Ranking: 1,303
Threat Level: 50 % (Medium)
Infected Computers: 63,179
First Seen: September 8, 2015
Last Seen: September 21, 2023
OS(es) Affected: Windows

Duba.com is a Chinese portal that is promoted as an excellent start page for your browser besides provide quick searches via Baidu.com. The Duba.com page does not have a version in English and is not suitable for use by non-Chinese speakers. Computer users may load Duba.com on their screens after installing the Baidu Toolbar, which may travel with freeware bundles on the Internet and accompany Kele55.

The Duba.com page may not be welcoming to English-speaking users, but it has useful links to news agencies, movie studios, music production studios, and online shops that are popular in China. You can find dating services on Duba.com as well. Unfortunately, hackers have managed to break the security of Duba.com and uploaded malware on a subdomain named Hotnews.Duba.com. The parasite was deployed as a ZIP archive. The corrupted ZIP file on Hotnews.Duba.com triggered alerts by security scanners, and the Duba.com domain was flagged as untrusted. Additionally, the 58.218.208.146 IP address is detected in communications of adware like PassShow and Trojans like Sality.

Researchers do not advise users to install applications that are connected to Duba.com because it may load content from any of its subdomains. The security of the Duba.com may not be adequate and users may be offered to download and open potentially harmful files. Chinese-speaking users may want to seek alternatives to Duba.com that provide similar quality of services and will not drop threats on their PCs. You should incorporate a trusted anti-malware shield that can protect your Windows OS.

SpyHunter Detects & Remove Duba.com

Registry Details

Duba.com may create the following registry entry or registry entries:
CLSID
{30CCE6D9-A7B6-4020-B5DF-1C33CC41D8F2}
{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}
Software\Microsoft\Internet Explorer\DOMStorage\duba.com
SOFTWARE\Microsoft\Internet Explorer\DOMStorage\hotnews.duba.com
SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\duba.com
SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{DDEA5705-1BB0-4C03-AC1E-8FF9716A0D51}

URLs

Duba.com may call the following URLs:

https://www.duba.com/

Trending

Most Viewed

Loading...