home

loveellenfowl.barneos.com.ar

Domain Information

Server location:
Noord-Holland, Netherlands (NL)

ASN:
AS5580 HIBERNIA TripartZ B.V.,NL

Root domain:
barneos.com.ar

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

avast!
Win32:Apanas [Trj], Win32:Malware-gen, Win32:SMSSend-CIW [PUP]
100.00%

Kaspersky
Virus.Win32.Neshta, Trojan.Win32.Inject
100.00%

Dr.Web
Win32.HLLP.Neshta, Trojan.InstallMonster.146
100.00%

VIPRE Antivirus
Virus.Win32.Neshta.a, Trojan.Win32.Generic, Threat.4150696
100.00%

MicroWorld eScan
Win32.Neshta.A, Gen:Variant.Graftor.133416
66.67%

Malwarebytes
Trojan.Agent, Trojan.SMSHoax
66.67%

K7 AntiVirus
Virus, Trojan
66.67%

Norman
Neshta.C, InstallMonster.H
66.67%

Agnitum Outpost
Win32.Neshta.A, Riskware.Agent
66.67%

F-Secure
Win32.Neshta.A, Gen:Variant.Graftor.133416
66.67%

Emsisoft Anti-Malware
Win32.Neshta, Trojan.Generic.11382908
66.67%

G Data
Win32.Neshta, Win32.Application.Installmonstr
66.67%

ESET NOD32
Win32/Neshta.A virus, Win32/InstallMonstr.IX potentially unwanted application
66.67%

IKARUS anti.virus
Virus.Win32.Neshta, Graftor
66.67%

Fortinet FortiGate
W32/Neshta.A, W32/Injector.BCBB!tr
66.67%

The domain loveellenfowl.barneos.com.ar has been seen to resolve to the following IP address.

5.149.255.168
May 28, 2014

File downloads found at URLs served by loveellenfowl.barneos.com.ar.

6 / 68      (PUP)
http://loveellenfowl.barneos.com.ar/.../?j=c2lkPTQ2MDAmdXJsPWh0dHAlM0ElMkYlMkZ0ZHMuZmluY29uc3QucnUlMkYlM0YxJTI2a2V5d29yZCUzRCVEMCU5NCVEMCVCRCVEMCVCNSVEMCVCMiVEMCVCRCVEMCVCOCVEMCVCQV8lRDAlOTIlRDAlQjglRDAlQkUlRDAlQkIlRDAlQjUlRDElODIlRDElODIlRDElOEIucmFyJTI2Y2hhcnNldCUzRHV0Zi04Jm5hbWU9JUQwJTk0JUQwJUJEJUQwJUI1JUQwJUIyJUQwJUJEJUQwJUI4JUQwJUJBXyVEMCU5MiVEMCVCOCVEMCVCRSVEMCVCQiVEMCVCNSVEMSU4MiVEMSU4MiVEMSU4QiZ0eXBlPWFyY2hpdmUmc2l6ZT0xMDAmcm5kMD05OTIyODg0NzE4OTgwNg  (дневник_виолетты.exe)

17 / 68    (PUP)
http://loveellenfowl.barneos.com.ar/.../?j=c2lkPTQ2MDAmdXJsPWh0dHAlM0ElMkYlMkZ0ZHMuZmluY29uc3QucnUlMkYlM0YxJTI2a2V5d29yZCUzRElvYml0X01hbHdhcmVfRmlnaHRlcl8lRDAlOUElRDAlQkUlRDAlQjRfJUQwJTkwJUQwJUJBJUQxJTgyJUQwJUI4JUQwJUIyJUQwJUIwJUQxJTg2JUQwJUI4JUQwJUI4LlJhci5yYXIlMjZjaGFyc2V0JTNEdXRmLTgmbmFtZT1Jb2JpdF9NYWx3YXJlX0ZpZ2h0ZXJfJUQwJTlBJUQwJUJFJUQwJUI0XyVEMCU5MCVEMCVCQSVEMSU4MiVEMCVCOCVEMCVCMiVEMCVCMCVEMSU4NiVEMCVCOCVEMCVCOC5SYXImdHlwZT1hcmNoaXZlJnNpemU9MTAwJnJuZDA9ODEzMzA3Njc5OTU2Nzc  (iobit_malware_fighter_код_активации.exe)

40 / 68    (Infected)
http://loveellenfowl.barneos.com.ar/.../?j=c2lkPTQ2MDAmdXJsPWh0dHAlM0ElMkYlMkZ0ZHMuZmluY29uc3QucnUlMkYlM0YxJTI2a2V5d29yZCUzRElvYml0X01hbHdhcmVfRmlnaHRlcl8lRDAlOUElRDAlQkUlRDAlQjRfJUQwJTkwJUQwJUJBJUQxJTgyJUQwJUI4JUQwJUIyJUQwJUIwJUQxJTg2JUQwJUI4JUQwJUI4LlJhci5yYXIlMjZjaGFyc2V0JTNEdXRmLTgmbmFtZT1Jb2JpdF9NYWx3YXJlX0ZpZ2h0ZXJfJUQwJTlBJUQwJUJFJUQwJUI0XyVEMCU5MCVEMCVCQSVEMSU4MiVEMCVCOCVEMCVCMiVEMCVCMCVEMSU4NiVEMCVCOCVEMCVCOC5SYXImdHlwZT1hcmNoaXZlJnNpemU9MTAwJnJuZDA9ODEzMzA3Njc5OTU2Nzc  (iobit_malware_fighter_код_активации.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.