home

crazy85.free.fr

FREE SAS  (Proxy Registrant)

Domain Information

The domain crazy85.free.fr is registered by proxy through ONLINE SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Bezons, Ile-De-France within France which resides on the RIPE Network Coordination Centre network.
Registrar:
ONLINE SAS

Server location:
Ile-De-France, France (FR)

ASN:
AS12322 PROXAD Free SAS

Root domain:
free.fr

Whois:
1 free.fr record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

MicroWorld eScan
Trojan.Generic.8712369
100.00%

McAfee
Artemis!8AF7107EE9D8
100.00%

K7 AntiVirus
Trojan
100.00%

NANO AntiVirus
Trojan.Win32.Ardamax.jwzgm
100.00%

F-Prot
W32/AutoItX.ATT
100.00%

Norman
AutoRun.ADUM
100.00%

Trend Micro House Call
TROJ_SPNR.03JR11
100.00%

avast!
AutoIt:Dropper-A [Drp]
100.00%

Kaspersky
Trojan-Spy.Win32.Ardamax
100.00%

Bitdefender
Trojan.Generic.8712369
100.00%

Agnitum Outpost
TrojanSpy.Ardamax
100.00%

ViRobot
Trojan.Win32.Autoit.3045897
100.00%

Comodo Security
UnclassifiedMalware
100.00%

F-Secure
Trojan.Generic.8712369
100.00%

VIPRE Antivirus
Trojan.Win32.AutoIt.gen.1
100.00%

The domain crazy85.free.fr has been seen to resolve to the following IP address.

212.27.63.110
perso110-g5.free.fr
November 19, 2013

File downloads found at URLs served by crazy85.free.fr.

31 / 68    (PUP)
http://crazy85.free.fr/Maitre NOCH - lol/NOD32 4 antivirus/.../ESET fix.exe  (ESET fix.exe)

The following 4 files have been seen to comunicate with crazy85.free.fr in live environments.

TCP » 212.27.63.110:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 212.27.63.110:80
online-guardian-v2.0.9.exe

TCP » 212.27.63.110:80
meteo-live.exe

TCP » 212.27.63.110:80
UCBrowser.exe (UC Browser by UCWeb)

URL:
http://crazy85.free.fr/

Web server:
Apache/ProXad [Aug 5 2010 16:17:11] (PHP/5.1.3RC4-dev)

online.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.