home

freempr9.gunifrenagece.com

Domain Information

Server location:
Madrid, Spain (ES)

Root domain:
gunifrenagece.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.CLICKTOSTART.d
100.00%

ESET NOD32
Win32/OutBrowse.BR potentially unwanted application
100.00%

Kaspersky
not-a-virus:Downloader.NSIS.OutBrowse
100.00%

Malwarebytes
PUP.Optional.OutBrowse
100.00%

K7 AntiVirus
Trojan
100.00%

Avira AntiVirus
APPL/Downloader.Gen
100.00%

Vba32 AntiVirus
Downloader.OutBrowse
100.00%

Fortinet FortiGate
Riskware/OutBrowse
100.00%

AVG
Downloader
100.00%

The domain freempr9.gunifrenagece.com has been seen to resolve to the following 2 IP addresses.

93.189.35.250
January 27, 2015

93.189.35.249
January 27, 2015

File downloads found at URLs served by freempr9.gunifrenagece.com.

9 / 68      (Adware)
http://freempr9.gunifrenagece.com/.../download?p=VELISMEDIA2&trckid=pD370YzcUqrfA3MNTjRfMJNgNWAMvSk4EYgeXjy4VNcxaVEIJuQq0OD5Fubm-_E3q53ia5wwtDU8N0-cIfzP-i76IVdW2WfyDwuGSl4kZezTVjj7vHupWbjsCgN6NczOheb3C0q1fludp1bRqAW9YlDcDhsM1cmJekaTQCkoBvoKoKQ-xa6dDuK2XWY22K28U65nv5dYy1BmKZ3sz8p-xHq4NY730fuyxb_fjOc8wOfYTyMkYPEZ7rRdFYE  (installer_adobe_flash_player_french.exe)

The following file have been seen to comunicate with freempr9.gunifrenagece.com in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.