home

6e6213dd7c2ef2438ed5c4b71c54a31a.efiryery.ru

Private Person  (Proxy Registrant)

Domain Information

The domain 6e6213dd7c2ef2438ed5c4b71c54a31a.efiryery.ru is registered by proxy through REGRU-RU and was originally registered in November of 2015. This domain has been known to host and distribute adware as well as other potentially unwanted software.
Registrar:
REGRU-RU

Create date:
Tuesday, November 10, 2015

Expires date:
Thursday, November 10, 2016

Root domain:
efiryery.ru

Whois:
1 efiryery.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Amonitize (M)
100.00%

File downloads found at URLs served by 6e6213dd7c2ef2438ed5c4b71c54a31a.efiryery.ru.

1 / 68      (Adware)
http://6e6213dd7c2ef2438ed5c4b71c54a31a.efiryery.ru/.../?f=YTo3OntzOjc6InNpdGVfaWQiO3M6MzoiNTQ3IjtzOjg6ImZpbGVfdXJsIjtzOjY2OiJodHRwOi8vaW1ob21tb3JwZy5ydS93cC1jb250ZW50L3VwbG9hZHMvMjAxNS8wNS82MC1TZWNvbmRzLVJVUy5yYXIiO3M6OToiZmlsZV9uYW1lIjtzOjE4OiI2MC1TZWNvbmRzLVJVUy5yYXIiO3M6OToiZmlsZV90eXBlIjtzOjU6InNldHVwIjtzOjk6ImZpbGVfc2l6ZSI7TjtzOjY6InJhbmRvbSI7aTozMjU1O3M6NDoidGltZSI7aToxNDQ3NTk1NDk1O30,  (60-seconds-rus.exe)

1 / 68      (Adware)
http://6e6213dd7c2ef2438ed5c4b71c54a31a.efiryery.ru/.../?f=YTo3OntzOjc6InNpdGVfaWQiO3M6NDoiMTcyNyI7czo4OiJmaWxlX3VybCI7czo0ODoiaHR0cDovL2dhbWVzYm9vbS5uZXQvZW5naW5lL2Rvd25sb2FkLnBocD9pZD0xNjI5IjtzOjk6ImZpbGVfbmFtZSI7czozNjoiNjBzZWNvbmRzLlJlUGFjay5SLkcuRnJlZWRvbS50b3JyZW50IjtzOjk6ImZpbGVfdHlwZSI7czo3OiJ0b3JyZW50IjtzOjk6ImZpbGVfc2l6ZSI7aTozNTk2NjE1ODtzOjY6InJhbmRvbSI7aTo5MTgxNzE7czo0OiJ0aW1lIjtpOjE0NDc1OTU3Mjk7fQ,,  (60seconds_repack_r_g_freedom.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.