home

atube-catcher.softonic.it

Softonic International SA

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Barcelona, Catalonia within Spain which resides on the RIPE Network Coordination Centre network.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.it

Whois:
2 softonic.it records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Bundler.PPI.Softonic.m, Bundler.PPI.Softonic.e, PUP.Softonic.Bundler (M), Bundler.SoftonicDownloader (M), PUP.Softonic (M)
100.00%

Malwarebytes
PUP.Optional.Softonic.A
67.65%

Dr.Web
Adware.Downware.2454, Adware.Downware.1657, Adware.Downware.910, Adware.Downware.2760, Adware.Downware.5107, Adware.Downware.4164
67.65%

VIPRE Antivirus
Softonic Downloader, Trojan.Win32.Generic, Threat.4150696, Threat.4786139
64.71%

K7 AntiVirus
Unwanted-Program
58.82%

Agnitum Outpost
PUA.Softonic, PUA.Downloader
55.88%

McAfee
Artemis!0536A00114D5, Artemis!B664E0B94A80, Artemis!173C1DFA4C25, Artemis!6D5918DDD64C, Artemis!4D23B2D3E6A0, Artemis!0FC0982E2C91, Artemis!073983099700, Artemis!58CC49455245, Artemis!9BACBDE017AB
50.00%

Trend Micro House Call
TROJ_GEN.F47V0325, TROJ_GEN.F47V0303, TROJ_GEN.F47V0415, TROJ_GEN.F47V0526, Suspicious_GEN.F47V0808, TROJ_GEN.F47V1108, TROJ_GEN.F47V0507, TROJ_GEN.F47V0510
50.00%

ESET NOD32
Win32/SoftonicDownloader (variant)
50.00%

Fortinet FortiGate
Riskware/Softonicdownloader, Riskware/Agent, Adware/SoftonicDownloader
50.00%

IKARUS anti.virus
not-a-virus:Downloader.Win32.Agent, PUA.Softonic, PUA.SoftSonicDownloader
50.00%

F-Prot
W32/Softonic.C.gen, W32/Softonic.C2.gen, W32/A-e1336866, W32/Agent.ABU.gen, W32/S-1281df00
50.00%

Kaspersky
not-a-virus:Downloader.Win32.Agent
44.12%

Baidu Antivirus
Adware.Win32.SoftonicDownloader, Hacktool.Win32.Downloader
38.24%

NANO AntiVirus
Trojan.Win32.Agent.ddwieh, Trojan.Win32.Agent.denwos, Trojan.Win32.Agent.dfxnbt, Trojan.Win32.Agent.dhiitm, Trojan.Win32.Agent.dfjvlj
38.24%

The domain atube-catcher.softonic.it has been seen to resolve to the following 2 IP addresses.

46.28.209.20
commoncobs.softonic.com
February 29, 2016

46.28.209.4
www.softonic.it
April 14, 2014

File downloads found at URLs served by atube-catcher.softonic.it.

1 / 68      (PUP)
http://atube-catcher.softonic.it/universaldownloader-launch  (softonicdownloader_per_atube-catcher.exe)

The following 10 files have been seen to comunicate with atube-catcher.softonic.it in live environments.

TCP » 46.28.209.20:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 46.28.209.20:80
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 46.28.209.20:80
{blocked}.exe

TCP » 46.28.209.20:80
softonicdownloader_pour_itools-for-windows.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_pour_speedy-video-capture.exe.infected (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_fuer_minecraft-skinedit.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_per_vlc-media-player.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_per_songr.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
online-guardian-v2.0.9.exe

TCP » 46.28.209.20:80
softonicdownloader_pour_winrar.exe (Application Setup)

URL:
http://atube-catcher.softonic.it/

Google Analytics:
UA-43493347

Title:
“aTube Catcher - Download”

Description:
“aTube Catcher, download gratis. aTube Catcher 3.8: Scarica e converti video da YouTube e Internet. Il download di aTube Catcher non è temporaneamente disponibile. aTube Catcher è l&#039;applicazione per scaricare”

Web server:
Apache

Facebook:
Shares:  2

Statistics are for the previous month.

softonic.com

softonic.com.br

softonic.jp

softonic.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.