dl.dasoftopc.com

Tuto4PC.com GROUP

Domain Information

The domain dl.dasoftopc.com registered by Tuto4PC.com GROUP was initially registered in April of 2014 through GANDI SAS. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
GANDI SAS

Server location:
Nord-Pas-De-Calais, France (FR)

Create date:
Wednesday, April 16, 2014

Expires date:
Sunday, April 16, 2017

Updated date:
Monday, January 11, 2016

ASN:
AS16276 OVH OVH SAS,FR

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.TUTO4PCCOMINTERNATIONALSL.N, PUP.Eorezo.Installer, PUP.Eorezo.TUTO4PCCOMINTERNATIONAL.Installer (M)
100.00%

avast!
Win32:Eorezo-CD [PUP], Win32:PUP-gen [PUP], Win32:Eorezo-CH [PUP], Win32:Eorezo-CM [PUP]
83.33%

NANO AntiVirus
Trojan.Win32.EoRezo.cumlzb, Riskware.Win32.EoRezo.cwyapg, Riskware.Win32.EoRezo.czkvoy, Riskware.Win32.Graftor.dbzums
77.78%

Malwarebytes
Adware.EoRezo, PUP.Optional.FreeSoftToday.A, PUP.Optional.FirstSeenToday
72.22%

Dr.Web
Adware.Eorezo.29, Adware.Eorezo.30, Adware.Downware.3239, Threat.Undefined, Adware.Eorezo.31, Adware.Downware.8084, Adware.Downware.10973, Adware.Eorezo.291
72.22%

AVG
Generic5
72.22%

Baidu Antivirus
Adware.Win32.EoRezo
66.67%

Avira AntiVirus
Adware/Agent.NYU, Adware/EoRezo.BB.78, Adware/EoRezo.BB.140, Adware/EoRezo.BB.103, ADWARE/EoRezo.Gen, Adware/EoRezo.cxl
55.56%

MicroWorld eScan
Adware.Agent.NYU, Adware.Eorezo.BB, Application.Generic.641889, Adware.Eorezo.BF, Adware.Eorezo.BK, Adware.Eorezo.CC, Adware.Eorezo.CD
50.00%

Kaspersky
not-a-virus:AdWare.Win32.Eorezo, Trojan-Downloader.Win32.Genome
50.00%

Bitdefender
Adware.Agent.NYU, Adware.Eorezo.BB, Application.Generic.641889, Adware.Eorezo.BF, Adware.Eorezo.BK, Adware.Eorezo.CC, Adware.Eorezo.CD
50.00%

Sophos
Eorezo, Generic PUA BB, Generic PUA MJ, Generic PUA LA, Generic PUA GC, Generic PUA KI, TUTO4PC, PUA 'TUTO4PC', PUA 'Eorezo' (of type Adware)
50.00%

VIPRE Antivirus
Adware.Agent, Tuto4PC, Threat.4895339
50.00%

G Data
Adware.Agent.NYU, Adware.Eorezo.BB, Application.Generic.641889, Adware.Eorezo.BF, Adware.Eorezo.BK, Adware.Eorezo.CC, Adware.Eorezo.CD
50.00%

ESET NOD32
Win32/AdWare.EoRezo.AU (variant), Win32/Adware.EoRezo.AJ (variant)
50.00%

The domain dl.dasoftopc.com has been seen to resolve to the following 6 IP addresses.

dl0.eorezo.com
May 17, 2016

dl1.eorezo.com
April 7, 2016

dl7.eorezo.com
April 5, 2016

dl4.eorezo.com
March 3, 2016

dl6.eorezo.com
February 9, 2016

dl5.eorezo.com
February 1, 2016

File downloads found at URLs served by dl.dasoftopc.com.

21 / 68    (Adware)

30 / 68    (Adware)

18 / 68    (Adware)

7 / 68      (Adware)

8 / 68      (Adware)

19 / 68    (Adware)

8 / 68      (Adware)

1 / 68      (Adware)

16 / 68    (Adware)

24 / 68    (Adware)

13 / 68    (Adware)

16 / 68    (Adware)

11 / 68    (Adware)

1 / 68      (Adware)

17 / 68    (Adware)

2 / 68      (Adware)

29 / 68    (Adware)

7 / 68      (Adware)

The following 22 files have been seen to comunicate with dl.dasoftopc.com in live environments.

 
Latest 20 of 25 files

URL:
http://dl.dasoftopc.com/

Title:
“eoRezo”

Web server:
Apache/2.2.16 (Debian) PHP/5.3.3-7+squeeze25 with Suhosin-Patch mod_ssl/2.2.16 OpenSSL/0.9.8o mod_perl/2.0.4 Perl/v5.10.1

30 of 30 related domains