home

cdn.tuto4pc.com

Tuto4PC.com GROUP

Domain Information

The domain cdn.tuto4pc.com registered by Tuto4PC.com GROUP was initially registered in June of 2010 through GANDI SAS. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Tuto4PC.com who is located in Paris, Ile-De-France in France.
Registrar:
GANDI SAS

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Monday, June 7, 2010

Expires date:
Tuesday, June 7, 2016

Updated date:
Monday, April 11, 2016

ASN:
AS16276 OVH OVH SAS,FR

Root domain:
tuto4pc.com

Whois:
2 tuto4pc.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.TUTO4PCCOMINTERNATIONALSL.K, PUP.Installer.TUTO4PCCOMINTERNATIONALSL.O
100.00%

Dr.Web
Adware.Downware.1597
100.00%

NANO AntiVirus
Riskware.Win32.EoRezo.cusolv, Trojan.Win32.Downware.cumjql
100.00%

Vba32 AntiVirus
AdWare.Agent, Downware.InstallCore
100.00%

ESET NOD32
Win32/Toolbar.Funmoods (variant)
66.67%

VIPRE Antivirus
Threat.4895339
33.33%

Microsoft Security Essentials
Threat.Undefined
33.33%

ESET NOD32
multiple threats
33.33%

Kaspersky
not-a-virus:AdWare.NSIS.Agent
33.33%

MicroWorld eScan
Adware.Eorezo.AX
33.33%

nProtect
Adware.Eorezo.AX
33.33%

McAfee
Adware-Eorezo
33.33%

Malwarebytes
Adware.EoRezo
33.33%

avast!
Win32:Eorezo-CB [PUP]
33.33%

Bitdefender
Adware.Eorezo.AX
33.33%

The domain cdn.tuto4pc.com has been seen to resolve to the following 3 IP addresses.

87.98.147.90
87-98-147-90.ovh.net
April 14, 2014

188.165.42.238
188-165-42-238.ovh.net
April 14, 2014

188.165.53.145
188-165-53-145.ovh.net
April 14, 2014

File downloads found at URLs served by cdn.tuto4pc.com.

22 / 68    (Adware)
http://cdn.tuto4pc.com/s/tuto4pc/download/.../setup_clickmein_fst_pl_6.exe  (nsh7f02.tmp.exe)

5 / 68      (Adware)
http://cdn.tuto4pc.com/s/tuto4pc/download/.../Tutorial_Flash.exe  (c12f848d736398bd2378b75ffb2eb34b)

5 / 68      (Adware)
http://cdn.tuto4pc.com/s/tuto4pc/download/.../Tutorial_Flash.exe  (5f82e2cef8b11d8c574b9cb433131f20)

The following 20 files have been seen to comunicate with cdn.tuto4pc.com in live environments.

TCP » 188.165.53.145:80
gmsd_ra_005010101.exe

TCP » 188.165.42.238:80
fst_jp_71.exe

TCP » 188.165.53.145:80
mbot_tr_25.exe

TCP » 188.165.53.145:80
gmsd_gb_130.exe

TCP » 188.165.53.145:80
gmsd_br_002030031.exe

TCP » 188.165.53.145:80
gmsd_ra_005010069.exe

TCP » 188.165.53.145:80
gmsd_ra_005010100.exe

TCP » 188.165.53.145:80
gmsd_ra_005010107.exe

TCP » 188.165.53.145:80
gmsd_re_005010117.exe

TCP » 188.165.53.145:80
gmsd_gb_005010095.exe

TCP » 188.165.53.145:80
gmsd_ra_005010137.exe

TCP » 188.165.53.145:80
gmsd_ru_025010129.exe

TCP » 188.165.53.145:80
gmsd_ra_005010102.exe

TCP » 188.165.53.145:80
gmsd_tr_005010159.exe

TCP » 188.165.53.145:80
mbot_id_014010155.exe

TCP » 87.98.147.90:80
LookThisUp.exe (LookThisUp)

TCP » 87.98.147.90:80
gmsd_ru_005010035.exe

TCP » 87.98.147.90:80
mbot_ca_499.exe

TCP » 87.98.147.90:80
gmsd_ra_005010069.exe

TCP » 87.98.147.90:80
gmsd_ra_005010083.exe

 
Latest 20 of 23 files

URL:
http://cdn.tuto4pc.com/

Web server:
Apache/2.2.16 (Debian) mod_perl/2.0.4 Perl/v5.10.1

Facebook:
Shares:  1

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.