veekee.free.fr

FREE SAS  (Proxy Registrant)

Domain Information

The domain veekee.free.fr is registered by proxy through ONLINE SAS. Currently this domain has been known to host various forms of malware. The hosted servers are located in Bezons, Ile-De-France within France which resides on the RIPE Network Coordination Centre network.
Registrar:
ONLINE SAS

Server location:
Ile-De-France, France (FR)

ASN:
AS12322 PROXAD Free SAS

Root domain:

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

McAfee
Artemis!93F4A3A43093, Artemis!4C03CD5BA13B
100.00%

NANO AntiVirus
Riskware.Win32.SnadBoy.iaul, Trojan.Win32.Click2.bcqwud
100.00%

Norman
Suspicious_Gen2.AACZF.dropper, Suspicious_Gen4.CAJLH
100.00%

Trend Micro House Call
TROJ_GEN.R4ACEE6, TROJ_GEN.R0CBB01K813
100.00%

Dr.Web
Tool.PassRevel, Trojan.Click2.42124
100.00%

VIPRE Antivirus
Trojan.Win32.Generic
100.00%

Trend Micro
TROJ_GEN.R4ACEE6, PAK_Generic.001
100.00%

Rising Antivirus
Trojan.Win32.Generic.1234DCB6, PE:Trojan.Win32.Generic.11EC0A0B!300681739
100.00%

IKARUS anti.virus
not-a-virus:PSWTool.Win32.SnadBoy, Trojan-Dropper.Agent
100.00%

Fortinet FortiGate
Riskware/SnadBoy, W32/Dx.RL!tr
100.00%

Reason Heuristics
Unnamed.Threat.14
100.00%

K7 AntiVirus
Unwanted-Program
50.00%

F-Prot
W32/HackTool.BUS
50.00%

Kaspersky
not-a-virus:PSWTool.Win32.SnadBoy
50.00%

Sophos
SnadBoy
50.00%

The domain veekee.free.fr has been seen to resolve to the following IP address.

perso113-g5.free.fr
November 19, 2013

File downloads found at URLs served by veekee.free.fr.

18 / 68    (Malware)
http://veekee.free.fr/.../toutfr-lite.exe  (4c03cd5ba13b24637e70adf2912d3274)

18 / 68    (PUP)
http://veekee.free.fr/.../r_fr.exe  (93f4a3a43093351750899954a9373a75)

The following 3 files have been seen to comunicate with veekee.free.fr in live environments.

URL:
http://veekee.free.fr/

Title:
“Page d'accueil”

Description:
“Joomla! - le portail dynamique et système de gestion de contenu”

Web server:
Apache (PHP/5.2.17)