home

freempr9.butotiresa.com

Domain Information

Server location:
Madrid, Spain (ES)

Root domain:
butotiresa.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

McAfee
Program.Adware-OutBrowse.c
100.00%

ESET NOD32
Win32/OutBrowse.BK potentially unwanted application
100.00%

AVG
Potentially harmful program Downloader.CPA
100.00%

Malwarebytes
PUP.Optional.OutBrowse
100.00%

AhnLab V3 Security
PUP/Win32.OutBrowse
100.00%

Reason Heuristics
PUP.BonDonJov.c
100.00%

The domain freempr9.butotiresa.com has been seen to resolve to the following 2 IP addresses.

93.189.35.250
January 2, 2015

93.189.35.249
January 2, 2015

File downloads found at URLs served by freempr9.butotiresa.com.

6 / 68      (Adware)
http://freempr9.butotiresa.com/.../download?p=ADCASH&trckid=10487898301418033011  (installer_adobe_flash_player_dutch.exe)

The following file have been seen to comunicate with freempr9.butotiresa.com in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.