home

a.bar-job.org

Valeriy Udod

Domain Information

Currently this domain has been known to host various forms of malware. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
Dynadot, LLC

Server location:
Oregon, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
bar-job.org

Whois:
2 bar-job.org records

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, PUP.Optional.PCUtilities.Task.Meta (M)
100.00%

Emsisoft Anti-Malware
Gen:Variant.Strictor.88505, Adware.Agent.PQH
15.38%

F-Secure
Gen:Variant.Strictor.88505, Adware.Agent.PQH
15.38%

Dr.Web
Trojan.DownLoader13.35654, Trojan.DownLoader13.34960
15.38%

Lavasoft Ad-Aware
Gen:Variant.Strictor.88505, Adware.Agent.PQH
15.38%

avast!
Win32:MultiPlug-ZC [PUP]
15.38%

Avira AntiVirus
TR/Crypt.XPACK.Gen
15.38%

McAfee
Program.MultiPlug-FWG, Program.MultiPlug-FYT
15.38%

Norman
Gen:Variant.Strictor.88505, Adware.Agent.PQH
15.38%

Sophos
PUA 'MultiPlug' (of type Adware)
15.38%

MicroWorld eScan
Gen:Variant.Strictor.88505, Adware.Agent.PQH
15.38%

Zillya! Antivirus
Adware.MultiPlugGen.Win32.1
15.38%

Bitdefender
Gen:Variant.Strictor.88505, Adware.Agent.PQH
15.38%

K7 AntiVirus
Unwanted-Program
15.38%

ESET NOD32
Win32/Adware.MultiPlug.MF application, Win32/Adware.MultiPlug.MH application
15.38%

The domain a.bar-job.org has been seen to resolve to the following 7 IP addresses.

199.59.243.120
June 5, 2016

52.27.128.62
ec2-52-27-128-62.us-west-2.compute.amazonaws.com
August 13, 2015

52.27.128.59
ec2-52-27-128-59.us-west-2.compute.amazonaws.com
August 13, 2015

52.27.128.56
ec2-52-27-128-56.us-west-2.compute.amazonaws.com
August 13, 2015

54.200.195.191
ec2-54-200-195-191.us-west-2.compute.amazonaws.com
June 19, 2015

54.68.13.248
ec2-54-68-13-248.us-west-2.compute.amazonaws.com
June 19, 2015

54.213.72.9
ec2-54-213-72-9.us-west-2.compute.amazonaws.com
June 19, 2015

File downloads found at URLs served by a.bar-job.org.

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=WPDKe3ifF7d/tbcdefXgTavNV9VHVTeaiRMs9A37lGh/udNLcY0lnu7T8oWzlKV47lCSSLeKlCdHaXzM1kLHa7T B3OoZAS0I4QGMcMN9SNYkjl7Rr2pgCPpiPHgJldZFHQQHFdkhghqX8jr4Cd0Nj1diwUBNq2cmg nqmIFm7Yz/cUDwD64kcayiSMo/7xD03/.../xor1n  (download.exe)

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=qCy0Jrum4EMN789/XZIYiavhJYDuxSPzvd/rxaxqTYhf6gpTD9W1zlRXMWsEKC6hjWxYGUuQFSj07WVpbKPan/PVpeIMDXRVd7VeKVyRAYjYtYzI9A8xYynrKUGn2rmvM39FO4QGoM4N2plr5v8lmXpfEgvck1zw/p8nOAShGUp7SC7e57Wp3yTG4dYNapplL0Auz3S9YOyVLNow1UOvzpTaOakSZDkFZ9tSTa2eF MDKkpGRj19KdiTBAtHBWboZ5n4hmAmZhbg5gUvEI0AnHKwW1eU1cssjkL5J3tse823bKZm 4FNaIX31IbDu66w6Mnnm8WRo/ZZqwB ej72W2nSciEr0I2FGs88SUxWvFZgdm/GOqcOZCsZbfW2rqsrM15UMd3jXB/6wCLSve757JaAXRFMlz524gyTKfjDCnFBXdmz xRCOcXHESwh4OPg/x2eLLNgiBDvnOeW1xXyTvm0qYuWTStQTbeqfUMoGUL5nna8vWFZLWYk9rddAG1PKWtqVMnl0UaUdBK8ziYj5kBE9Am7L/8c3sNXVbzmEphvRJ6WnHKf4/LTtIbfUbDPJMQCMbGOzCwnZiOCUZSt8ogLBmfQdfLeOOeOFTxaVnlfwzkbv0kqyofDd7N q/7puw7TLZvdc4KjaOSgmn3eT6okK/.../r3rXpkL27SAG7kp6VGyu6YIftxdnNLmqPh2ktb4MurznBU2IeWY6muI  (free download xcom_ enemy within game full pc _ get free game,free ebook and free download.exe)

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=3Ln5yUASzNjyYSUMOQwGBZ/1wklDaV7cg2Vp1B2nCgkGjmO9hJhF0bkfJe1G BOy epfiUAvM36sfeopQdtzflnt b3amnBIDr9cLKcDd6xdqo2AetLMIOc6O Cf7di9qClwA q6Xd22esVn ZrkVqxLV 8rnTOy4vAVZ4k/U7T4N8yW7SaR6cMpvRZ7sZKQhxDYLtbR9aooCNYVgAYjq3 1T5q8ZSN6MW58Gc4xU7ExEBoiV8K/h5Cvu7Zq197rsup5Sm4WqqhQU1bMAs7i1ofxmTYE/SawlHTBnRBMLIAwoeDitcboGhsZYWoj/DXQjp3ixiozjt4ZDDLrG7QHlKLH7FBYYklK2/s 8FbRgZcAe0sZ49Wk5a7Z0TEMB2bsGIQh2r8nUM0RQl0YFVAHhB3bYDfx5jNjmqnfGe40iIeBbTcCnf/ULsGE6tx0sAlN1Ru/.../nK4pww8NesjfZvTHaf  (14.dil.tu.hi.bataa-krrish.3.1080p.bluray.x264.dts-hd-ma-team.bcr.rar.exe)

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=OUwgRH4Wgr9yJefABCVewMAfp7mhzCFhd8pHsjYkCva7alUHzCukFWZ27owM5WaJLATaZ5a5rspEITQBy8NNap9l1En8Fy1LJCwZQDe9OMae5 pbgpVrqV6tz5oz LcVErzScVAafCZZ0i8BDlfnVRC9d7VeIXdzIh X35hUtCSuFoRCksUv0td0KBVbkCk4mcBdMayN11TGRadLeNHhvKWQwQ8YVWmrk3rmPmIjcS40 IWiRTATV2XJv0ToFNKU/.../6Q1n8  (zoo tycoon 1.exe)

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=1SjAtLjl2NqkdwysurhO4Ryf9ahM0ZOOr6OrLWdHwDA7IcuLBQsF 596MAg06DdzUHpwFZ 2KU/L6wsgrNWsSjSt3l5R/zcV83NTtrcA0sad6xe/eTEbdfqNy3jxBkd78JV5v0d46VMcBtWKOblEXyS8OzCmRqiurzbTVh Hvpex0swpEBmveTMHQOEPbUq19VKyOlMq1p84XvbTTdJnGkqfsPwh4Q dQHMEY o84sSblgpL61OPCePLV3 2JVONFRRVUAjvsJwH0/.../UA  (social_club_v1.1.0.1_setup.rar.exe)

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=wH2XTAXZ6S6D6789/XQItt9wTSYlZbutT6dOkdd7MbmIEFLkroYMD6FB/I2V17KDeItWDSMoxOT2BVTqxJN66UUzK3628NbYXqkmubCagAQGikIzON1XRmvYPEnHKx0Qbr/.../6aFGXx7aQPcolcv5FjcBBk1l5J52VbRLXR1ZihNEH 0T0mwSVgpEzzfFHahVGBYDTm9F0MDZtpNcxtSxyuAn0Am0yKcDtVUQ9etKbOgSPyPBmx  (mozila firefox.exe)

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=uuy0Jrt0Bra7ERJLFHqj4Q8ZVgebTXSttSE7vh7gz 8xDUPFq9YDPRPUe4Nw8QJZ EXfP/Kg0nyaM920nd6NmMo1MPDO0Xse9LJwUb nUKBTgMpBPstPveFs9DrPa4yPHyDHs7lfOhifqh5IopFsHagmlwDbeOyHDNBkPEA70UG9FbmhxOqOw1eRFYs6NMyuysULlwJ9flCzsu0WEpm j2RdAECPxR8wnEyDepBNVXDbFM9M1wLyur3KSRegnu8/.../iH4 b8OXBG2qjiR5A6Bk3lIeW57J332  (download.exe)

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=0evcG4a9dDwhqpnikger8KnexzwEIdyX9ibBoYkTkBzOg4StPEexu3vk7b8YSwZ8jPPFecdyOq7iYOrg5 1IO5CvaFEED ioRcQGKxaUvagYcJEgH2nd2 5M6RY3t7GnKJGkjoX boPpN4bJ9FLLejuChtNiaEuDko9aHd6ph67WdR4MIozhH0pA8Tbpzz/ZcmwjbuPeg3ojQRInR69qEkHh7ah66ZL9FYt8vrSFLpDj7S vN41THrdhFzW4wu/.../mClPPF8m26fpgNs7HvWbwXlkGOf8TPZ YSOboj0FvD3  (download.exe)

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=U8fMQEg261MlvQIKEGriYUApwxR35x0L91zdaTJSZ7A6h1q5D1Qb5Sudt2Cpk230mAfssE8a6X4dRBURD2PXsoOUzfk3OzjDYE4MT5IjijtAhHuiQL2nJEl8Y5DGPv6 yzlWzVE8tjFPkoXjXvn8h4MCHB9/.../GsMNx0JbE3Orr9X8uBdNS4Z6U eN68uV2yo4gbqI3eF6vC3EU8bJAEQPP9n WzUkFhol Y7UYPlM QlZMsZyVKIaJBvCSSJIs9SLA1C5EG4VdKif9w  (wifikill.adfree.1.7.android.rar.exe)

1 / 68      (Malware)
http://a.bar-job.org/hp/?q=ZnKoj8PHxkXYA45678U4wIoKzkvnRuZtlkPES65QOaz1yQRqH4N2Rk6bDSJchQDjtGmdRxNmT60XtSFnqD4ETg71yPRSVJIHvCzuTvUYtCMtk/KBpTyakL93/cuhsAoyMgCzGUGYW48JKSRALr2i8DNmT6g3P4FXrIGPoGMEmtl4pctrEWltG55aAdz19ZLU7XYzpHgxodv3Z3cTn4uTJqgcc Ti8PAZA9uMsDK8qZNfV7Vg7qzvqFBYCbasYu3chKi63YzylNXDhv6/4B2fvGKU/Y9rDEMbC/dUmc84Bq11kwoza0R wDiJltbVQ utOazs KIM 9Evqy/.../FpZ3lSvwG9oCeW3Oy2pXFLcbyARc3wOVD0u1e93nfWYVFsSRjxHFa F 3I9cHV202ZSmbEsqCl4NVgHWH5Xv69CxPwa0QW  (interstellar 2014 1080p bluray h264 aac-rarbg.exe)

2 / 68      (PUP)
http://a.bar-job.org/hp/?q=D3FigMWLect MOQIKEu38w9 FP vmwpnrCaN8JIoHojmF1CBtXoX/TbK/a6FWXpdCzc/jRZ6SADQcxrKnveOzCNuwHKrJIA0YrwG1GgwPKgsVfkpcE9uskbIL9tD95WOCUGoCLNtJZ26ADfuYzZGoeiWyCC984yoBzMJyGbDo pT1SCRcgLBPxDZKlaOba0qZ 232LMJc8pbVoCz MHZ35EN72yAy8NTu0GQdOw2iGxZu/O6X8z3R21V2s0i74VFWuGSPd4CotrPa4vJOR5QN0x0JIfQFvRE4yXh E8mIhUwjI1GE3kfUcka0rA2 zgVIaDvpW5NqAQbVyJyN5L2LXbDvgX5qNvI6gq hcK4l 6XcE/LMU Yu3mHWocAc6U1DZWXenXHP1xZrNMmky6q poHAXrIbfgy6veS 4U703dUTuf/Yepuzv4KHIb k0gyDODI9G/ALD3Zv3/SUhFKmPkzTDBi75K0UJ8xgPYYemPSWT073nciAYnJKNSa5k5W2SvgvNP7enShGULeZ9tvzCz4qXo5713fPp7E/jd 9Ei6BJYkQ98y2LDH77Wqt7S/70JsN6pU9HvNGYZS X4u3v2eqkoYbfp4hmde77/5w Cb3Y9VpcVR1cv6mCmuut0y/.../0RKm8HQK01H71bWlOuubZNkGpOT  (avengers age of ultron - - (720p) - [hdts] - makintos13.exe)

23 / 68    (PUP)
http://a.bar-job.org/hp/?q=PC laFa5fRIfbg0123CbVwJTRkYN4e6Hy2wKgm5wmeiYjuTEvogFcOSlxKgX9AWFoGIk7PpiPEs8ZCQe92z0L0AvD7K7/myVjgEfkVoilSzQG2qEGUH/ojFvVCmOoNHIACGOGUG Gyr0wvtPMNn76wMXxYmhCUqhpNKcWn CbciTPs4KZbwAeGmhxf2WFV/a354TeakqjxVSHCahV912Lh5bnFZg0R8Sl3D6zXTzCdVl2hZMfpqg51IR7pp o4ntbcmCyIySUAkTxOZvFE92GMd0INZg0R8/tgqbZhgz94N3DTmO96AvxVoN Dg3IESqU9XzFdgp5n9miGCiU/.../77yK XlGx5bRju0MOU2awGJlOPgwtijE4C5alsxCo0A5jxisJo6N  (windows 7 ultimate 32bit build 7100.exe)

22 / 68    (PUP)
http://a.bar-job.org/hp/?q=YGk79 6ZwYBMyPRJLFvoz/DpT AJyU64LK67Swd7Im0QRU3rITF38Gy3IcG4JHLeBthyeP9s0igIdSu0GBEPu5epAv9qVAJupaWlPgL78H08VqweBs x1unQbxoOdGCU5P1Gx/sJW2GREeoadj YjANiPfEZSn ITRwQZ9bXE914/kpio3PVYV4s x5IpFA73//aT 8BpUWipEcpSx4B5S0PuE3zvZLP8GStIc gVHF0dmdy49LslNgSeUr0 bWg9H5H9Q/Fq3u41PGcV RN2GsFsvVLMLPNXunUwq1XMrLbxUp5lnQ4R41rKErlV3fALfFVkSDfsL66fxVmsV27qZScYKUqygQCbukui0GOazAi6UElpDtakVtmhHqFchIhgJAzzsaj//lcQ58pEe 6XTGa  (oddisee_-_the_beauty_in_all___v0_.rar.exe)

The following 7 files have been seen to comunicate with a.bar-job.org in live environments.

TCP » 199.59.243.120:80
qvtp.crx

TCP » 52.27.128.56:80
updating.exe

TCP » 52.27.128.59:80
download.exe

TCP » 52.27.128.62:80
updating.exe

TCP » 54.213.72.9:80
setup installer.exe (Win by Microsoft)

TCP » 54.213.72.9:80
tmp5600.tmp

TCP » 54.213.72.9:80
tmp61f7.tmp

TCP » 54.68.13.248:80
tmp781a.tmp

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.