mires.eorezo.com

haurais jl

Domain Information

The domain mires.eorezo.com registered by haurais jl was initially registered in March of 2004 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GANDI SAS

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Friday, March 19, 2004

Expires date:
Sunday, March 19, 2017

Updated date:
Friday, February 13, 2015

ASN:
AS16276 OVH OVH SAS,FR

Root domain:

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Tuto4PC.N, PUP.Installer.TUTO4PCCOMINTERNATIONALSL.N, PUP.Installer.TUTO4PCCOMINTERNATIONALSL.K, PUP.Eorezo.EorezoTu.Installer (M)
100.00%

Malwarebytes
PUP.Eorezo, Adware.EoRezo
75.00%

avast!
Win32:Eorezo-AI [PUP], Win32:Eorezo-CC [PUP], Win32:Eorezo-CB [PUP]
75.00%

Dr.Web
Adware.Siggen.24550, Adware.Downware.1597
75.00%

ESET NOD32
Win32/Adware.EoRezo.AC, Win32/Adware.EoRezo.AT (variant)
75.00%

Avira AntiVirus
Adware/EoRezo.G, Adware/EoRezo.BE.2
62.50%

MicroWorld eScan
Trojan.Generic.8513548, Adware.Eorezo.AX
50.00%

nProtect
Adware.Eorezo.AL, Adware.Eorezo.AX
50.00%

Trend Micro House Call
TROJ_GEN.R0CBH0AJO13, TROJ_GEN.F47V1226
50.00%

Bitdefender
Trojan.Generic.8513548, Adware.Eorezo.AX
50.00%

Sophos
EoRezo Adware, Eorezo
50.00%

F-Secure
Trojan.Generic.8513548, Adware.Eorezo.AX
50.00%

Emsisoft Anti-Malware
Trojan.Generic.8513548, Adware.Eorezo.AX
50.00%

G Data
Trojan.Generic.8513548, Adware.Eorezo.AX
50.00%

IKARUS anti.virus
AdWare.Win32.EoRezo, AdWare.Eorezo
50.00%

The domain mires.eorezo.com has been seen to resolve to the following 4 IP addresses.

dl6.eorezo.com
April 17, 2016

dl4.eorezo.com
February 3, 2014

dl2.eorezo.com
December 11, 2013

dl7.eorezo.com
November 16, 2013

File downloads found at URLs served by mires.eorezo.com.

1 / 68      (Adware)

1 / 68      (Adware)

6 / 68      (Adware)

19 / 68    (Adware)

7 / 68      (Adware)

22 / 68    (Adware)

22 / 68    (Adware)

22 / 68    (Adware)

The following 10 files have been seen to comunicate with mires.eorezo.com in live environments.

URL:
http://mires.eorezo.com/

Title:
“eoRezo”

Web server:
Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze25 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o mod_perl/2.0.4 Perl/v5.10.1