home

codepackjav.butotiresa.com

Domain Information

Server location:
Madrid, Spain (ES)

ASN:
AS45037 HISPAWEB-NETWORK Propelin Consulting S.L.U.

Root domain:
butotiresa.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/OutBrowse.BK potentially unwanted application, Win32/DownloadAdmin.H potentially unwanted application
100.00%

VIPRE Antivirus
Threat.4823950, Threat.4150696
100.00%

AVG
Potentially harmful program Downloader.CPI, Generic
100.00%

McAfee
Program.Adware-OutBrowse.c
50.00%

Reason Heuristics
PUP.Installer.CodeTechno
50.00%

Emsisoft Anti-Malware
Application.Bundler.KJ
50.00%

Dr.Web
Adware.Downware.2220
50.00%

avast!
Win32:DownloadAdmin-N [PUP]
50.00%

Lavasoft Ad-Aware
Application.Bundler.KJ
50.00%

Clam AntiVirus
Win.Adware.Downloadadmin
50.00%

F-Secure
Adware:W32/WebInstallBundle
50.00%

MicroWorld eScan
Application.Bundler.KJ
50.00%

Malwarebytes
PUP.Optional.DownloadAdmin
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

The domain codepackjav.butotiresa.com has been seen to resolve to the following 3 IP addresses.

109.70.128.156
March 23, 2015

93.189.35.250
January 4, 2015

93.189.35.249
January 4, 2015

File downloads found at URLs served by codepackjav.butotiresa.com.

25 / 68    (PUP)
http://codepackjav.butotiresa.com/.../download?p=MATOMY&trckid=131745|20AW3O4sacG6y9hE1wCTbC1xXUJb000.&affid=30679&sdd=1&ce_cid=20AW3O4sacG6y9hE1wCTbC1xXUJb000.  (installer_java_dutch.exe)

4 / 68      (Adware)
http://codepackjav.butotiresa.com/.../download?p=MATOMY&trckid=131745|20AW3O0IMeIrNKeV1zrxCQ1xXZPD000.&affid=30679&sdd=1&ce_cid=20AW3O0IMeIrNKeV1zrxCQ1xXZPD000.  (installer_java_english.exe)

The following file have been seen to comunicate with codepackjav.butotiresa.com in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.