home

freempr13.critypuredxa.com

Domain Information

Server location:
Madrid, Spain (ES)

Root domain:
critypuredxa.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Kaspersky
not-a-virus:Downloader.NSIS.OutBrowse, not-a-virus:Downloader.Win32.FrieCook
100.00%

Dr.Web
Trojan.OutBrowse.55, Trojan.InstallCore.15
100.00%

ESET NOD32
Win32/OutBrowse.BQ potentially unwanted application, Win32/InstallCore.TL potentially unwanted application
100.00%

Reason Heuristics
PUP.SalyutemPlyus.e, PUP.Installer.FreeDownloadFriedCookie.e
100.00%

avast!
Malware-gen
50.00%

VIPRE Antivirus
Threat.4786018
50.00%

Malwarebytes
PUP.Optional.FriedCookie
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

Comodo Security
Application.Win32.FriedCookie.CIRK
50.00%

Avira AntiVirus
Adware/InstallCore.787800.4
50.00%

AVG
Generic
50.00%

The domain freempr13.critypuredxa.com has been seen to resolve to the following 2 IP addresses.

93.189.35.250
January 16, 2015

93.189.35.249
January 16, 2015

File downloads found at URLs served by freempr13.critypuredxa.com.

11 / 68    (Adware)
http://freempr13.critypuredxa.com/.../download?p=VELISMEDIA&trckid=ams1CJ2X7uGQjYaDMRACGILb_oD6xsLfNSINODYuMTYwLjI0OS45MCgBMLGkhqUF  (installer_adobe_flash_player_english.exe)

4 / 68      (Adware)
http://freempr13.critypuredxa.com/.../download?p=VELISMEDIA1&trckid=wK-7yoL-wrfq-T48eiwpJLfk0-5KRUkmaTHD3bWwRYc334goalJ5gdZ1PIYZJ0M0HZ0pV43_qSukZwr7SkORHSrD6XxNRgPspua66inNswpVXBK4tjnLECEQHoqScsjn2ktY8qbKm11J6XgSCWsAM-8nhj_TIqkMVNLSBxGpX8hgNCRQqUsWgcjsZMQWnQfmnMBvH7PYbJ4qf0Bt2jYEbhCS0SDz6AMSm8pdzLhfW-yKX6bj9S_i46SzJ07DVHTFmCAmcmaXVOdOqWAr1ZB90EhweUvoWJA0k78DdkXUt3M54_GjgAPY4DIY3mgfZ2Rpi5PUayDxAhIWMDIwXJkzHQziRwUul6bnsXp0x12P9YPpAfTmnOHPa3PlTUKe6R2Vx5YJLg5uj1HS6YcERjXMX_gfgUpGaiSHTiXmm9gAm-fcugk-ARchP2O7DvUAUek7  (installer_adobe_flash_player_english.exe)

The following file have been seen to comunicate with freempr13.critypuredxa.com in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.