dfr.eorezo.com

haurais jl

Domain Information

The domain dfr.eorezo.com registered by haurais jl was initially registered in March of 2004 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Remove Malware from dfr.eorezo.com - Powered by Reason Core Security
Registrar:
GANDI SAS

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Friday, March 19, 2004

Expires date:
Sunday, March 19, 2017

Updated date:
Friday, February 13, 2015

ASN:
AS16276 OVH OVH SAS,FR

Root domain:

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Tuto4PC.M, PUP.Installer.Tuto4PC.R, Unnamed.Threat.12, PUP.Installer.EorezoTuto4pc.M, PUP.Eorezo.Bundler (M)
80.00%

Boost by Reason
PUP.Installer.Tuto4PC.M, PUP.Installer.Tuto4PC.R
50.00%

Emsisoft Anti-Malware
Trojan.Click.IX, Win32.SuspectCrc!IK, Gen:Adware.Adseo
30.00%

ESET NOD32
Win32/Adware.EoRezo, Win32/Adware.EoRezo (variant)
20.00%

avast!
Win32:PUP-gen [PUP]
20.00%

Bitdefender
Adware.EoRezo.T, Application.Generic.409215
20.00%

Sophos
EoRezo Adware, Eorezo
20.00%

F-Secure
Adware.EoRezo.T, Application.Generic.409215
20.00%

VIPRE Antivirus
Adware.Eorezo.a, Trojan.Win32.Generic
20.00%

Avira AntiVirus
Adware/EoRezo.T.13, Adware/EoRezo.N.2
20.00%

G Data
Adware.EoRezo, Application.Generic.409215
20.00%

AhnLab V3 Security
ASD.Prevention
10.00%

Rising Antivirus
Trojan.Win32.Generic.12BC8155
10.00%

IKARUS anti.virus
Win32.SuspectCrc
10.00%

Panda Antivirus
Suspicious file
10.00%

The domain dfr.eorezo.com has been seen to resolve to the following 4 IP addresses.

dl4.eorezo.com
February 4, 2016

dl2.eorezo.com
January 31, 2016

dl9.eorezo.com
July 23, 2014

dl7.eorezo.com
November 16, 2013

File downloads found at URLs served by dfr.eorezo.com.

0 / 68

24 / 68    (PUP)

12 / 68    (Adware)

2 / 68      (Adware)
http://dfr.eorezo.com/clib/eorezo/fr/.../webinstaller.exe  (71365599f6acb301c0cf48a0f53641de)

2 / 68      (Malware)

2 / 68      (Adware)

2 / 68      (Adware)

2 / 68      (Adware)

0 / 68
http://dfr.eorezo.com/.../skypesetup.exe  (38b86ae6f16b9b74aaf6a5f3af22626c)

2 / 68      (Adware)
http://dfr.eorezo.com/clib/eorezo/fr/.../webinstaller.exe  (d11fc7287ed1972d76f8c081209760ac)

1 / 68
http://dfr.eorezo.com/.../install_virtualdj.exe  (9fee97f619ea9ab2025d2f44a5927f9c)

The following 9 files have been seen to comunicate with dfr.eorezo.com in live environments.

URL:
http://dfr.eorezo.com/

Title:
“eoRezo”

Web server:
Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze25 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o mod_perl/2.0.4 Perl/v5.10.1

Remove Malware from dfr.eorezo.com - Powered by Reason Core Security