home

qixuwonifb9b1zuxiru.kasareupayezi.info

Domain Information

Server location:
Madrid, Spain (ES)

Root domain:
kasareupayezi.info

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/TrojanDropper.Addrop.C trojan
100.00%

AVG
Onenet
100.00%

Reason Heuristics
PUP.Installer.OnekitInternet
100.00%

The domain qixuwonifb9b1zuxiru.kasareupayezi.info has been seen to resolve to the following IP address.

93.189.35.249
April 9, 2015

File downloads found at URLs served by qixuwonifb9b1zuxiru.kasareupayezi.info.

4 / 68      (Adware)
http://qixuwonifb9b1zuxiru.kasareupayezi.info/.../download?p=ADSTERRA&trckid=MzExN3w0ODA3fDEzNHw0MzQ5NnwxNDI2OTU2NjgyfDkxZmI4ZTQ1LWQxY2ItNGIyOS1jYjgwLWNlNzY1YmE0ZmVjMXw0MS4yNTEuMjA5LjI5fDAxOWI2YWRjMTQyNzMzMWMxN2YzZTVlZDVhMTVjZDBj  (installer_adobe_flash_player_arabe.exe)

The following file have been seen to comunicate with qixuwonifb9b1zuxiru.kasareupayezi.info in live environments.

TCP » 93.189.35.249:80
banaduy.exe (Maskaseft Visual Studio 2010 by Maskaseft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.