home

jujuju47bd6roko.kacikupareif.info

Domain Information

Server location:
Madrid, Spain (ES)

Root domain:
kacikupareif.info

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software
100.00%

F-Secure
Gen:Variant.Adware.Symmi.49926
100.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Symmi.49926
100.00%

VIPRE Antivirus
Threat.4782985
100.00%

avast!
Win32:Malware-gen
100.00%

Kaspersky
not-a-virus:AdWare.Win32.AirAdInstaller
100.00%

ESET NOD32
Win32/AirAdInstaller.E potentially unwanted application
100.00%

Dr.Web
Adware.Downware.9668
100.00%

Clam AntiVirus
Win.Adware.Agent-36527
100.00%

Lavasoft Ad-Aware
Gen:Variant.Adware.Symmi.49926
100.00%

MicroWorld eScan
Gen:Variant.Adware.Symmi.49926
100.00%

Malwarebytes
PUP.Optional.AirAdInstaller
100.00%

Zillya! Antivirus
Adware.AirAdInstaller.Win32.791
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

NANO AntiVirus
Riskware.Win32.AirAdInstaller.dmnhfn
100.00%

The domain jujuju47bd6roko.kacikupareif.info has been seen to resolve to the following 2 IP addresses.

93.189.35.250
February 13, 2015

93.189.35.249
February 13, 2015

File downloads found at URLs served by jujuju47bd6roko.kacikupareif.info.

24 / 68    (Adware)
http://jujuju47bd6roko.kacikupareif.info/.../download?p=MATOMY-SDD&trckid=131745|20AW3O1axmRRxX6S1x6cxU1yekwY000.&affid=30679&sdd=1&ce_cid=20AW3O1axmRRxX6S1x6cxU1yekwY000.  (installer_java_french.exe)

The following file have been seen to comunicate with jujuju47bd6roko.kacikupareif.info in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.