home

freempr9.guretoreisane.com

Domain Information

Server location:
Madrid, Spain (ES)

Root domain:
guretoreisane.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Trend Micro House Call
Suspicious_GEN.F47V0206
100.00%

Kaspersky
not-a-virus:Downloader.NSIS.Agent
100.00%

ESET NOD32
Win32/TrojanDropper.Addrop
100.00%

The domain freempr9.guretoreisane.com has been seen to resolve to the following 2 IP addresses.

93.189.35.250
February 20, 2015

93.189.35.249
February 20, 2015

File downloads found at URLs served by freempr9.guretoreisane.com.

3 / 68      (PUP)
http://freempr9.guretoreisane.com/.../download?p=VELISMEDIA&trckid=nym1CNXizq7m0eK2TRACGPTq8aDQmqq4QiIPMTczLjI0My4xODcuMTc5KAEwvei_pQU.  (installer_adobe_flash_player_english.exe)

The following file have been seen to comunicate with freempr9.guretoreisane.com in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.