home

codecpack.mutajoreto.com

Domain Information

Server location:
Madrid, Spain (ES)

Root domain:
mutajoreto.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.Outbrowse
100.00%

Dr.Web
Trojan.OutBrowse.51
100.00%

VIPRE Antivirus
Threat.4784459
100.00%

ESET NOD32
Win32/OutBrowse.BK potentially unwanted application
100.00%

avast!
OutBrowse-V [PUP]
100.00%

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.Outbrowse.1
100.00%

Emsisoft Anti-Malware
Gen:Variant.Adware.Jatif.300
100.00%

McAfee
Program.Adware-OutBrowse.c
100.00%

AVG
Win.Threat.Medium
100.00%

MicroWorld eScan
Gen:Variant.Adware.Jatif.300
100.00%

Malwarebytes
PUP.Optional.OutBrowse
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

Agnitum Outpost
PUA.OutBrowse
100.00%

Trend Micro House Call
Suspici.0C6DACD5
100.00%

Bitdefender
Gen:Variant.Application.Bundler.Outbrowse.1
100.00%

The domain codecpack.mutajoreto.com has been seen to resolve to the following 2 IP addresses.

93.189.35.249
March 23, 2015

93.189.35.250
March 23, 2015

File downloads found at URLs served by codecpack.mutajoreto.com.

24 / 68    (Adware)
http://codecpack.mutajoreto.com/.../download?p=MATOMY&trckid=131745|20AWYK0Mf6tnemHD1wCTbC1xX.hN000.&affid=680786&sdd=1&ce_cid=20AWYK0Mf6tnemHD1wCTbC1xX.hN000.  (installer_codec_pack_dutch.exe)

The following file have been seen to comunicate with codecpack.mutajoreto.com in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.