» clipssoft.info
Overview
Analysis
IPs Addresses (2)
Downloads (4)
Network (73)
Website Detail
Related Domains (34)

clipssoft.info

none

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Beaumaris, Victoria within Australia which resides on the Asia Pacific Network Information Centre network.

Registrant:

none

Registrar:

Above.com Pty Ltd.

Server location:

Victoria, Australia (AU)

ASN:

AS133618 TRELLIAN-AS-AP Trellian Pty. Limited,AU

Whois:

2 clipssoft.info records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.OOOAlians.R, PUP.installCore.OOOAlians.Installer (M), PUP.installCore.OOOAlian.Installer (M)

100.00%

VIPRE Antivirus

Trojan.Win32.Generic

25.00%

K7 AntiVirus

Trojan

25.00%

NANO AntiVirus

Riskware.Win32.InstallCore.dfgool

25.00%

Dr.Web

Trojan.MulDrop5.38104

25.00%

Zillya! Antivirus

Adware.InstallCore.Win32.258

25.00%

Avira AntiVirus

Adware/InstallCore.aaa

25.00%

ESET NOD32

Win32/InstallCore.QL potentially unwanted application

25.00%

AVG

Generic

25.00%

The domain clipssoft.info has been seen to resolve to the following 2 IP addresses.

103.224.212.241

lb-212-241.above.com

February 11, 2016

184.168.221.36

ip-184-168-221-36.ip.secureserver.net

December 2, 2014

File downloads found at URLs served by clipssoft.info.

1 / 68 (Adware)

http://clipssoft.info/download.php?site_id=296&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=4150778501410362240&pubid=184117&c=20a4febe59cb94a853d80a5d31ff8739&v_id=323cc4852cbb0b87329cc6bd590bc0b3 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://clipssoft.info/download.php?site_id=296&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=17817338061410341205&pubid=316031&c=20a4febe59cb94a853d80a5d31ff8739&v_id=f053ab729c4f09f6011d6230a421c5e4 (adobe_flash_setup.exe)

1 / 68 (Adware)

http://clipssoft.info/download.php?site_id=296&app_id=4&lp_id=383&v=ico&dist_id=269&channel=acmnj&cid=361389081410370712&pubid=151018&c=20a4febe59cb94a853d80a5d31ff8739&v_id=31fd23ed24e2a99ee98c729996a14be1 (adobe_flash_setup.exe)

9 / 68 (Adware)

http://clipssoft.info/download.php?site_id=296&app_id=4&lp_id=382&v=ico&dist_id=269&channel=acmnj&cid=21531596671410362684&pubid=280198&c=20a4febe59cb94a853d80a5d31ff8739&v_id=8cb9f743c5efc510aecbdbd54821ce4d (adobe_flash_setup.exe)

The following 73 files have been seen to comunicate with clipssoft.info in live environments.

TCP » 184.168.221.36:80

googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.36:80

plus-hd-v1.4-codedownloader.exe (Plus-HD-V1.4 by Plus HD)

TCP » 184.168.221.36:80

c01208e4-b2ad-40c1-9810-40447884a00b-9.exe

TCP » 184.168.221.36:80

plus-hd-9.6-codedownloader.exe (Plus-HD-9.6 by Plus HD)

TCP » 184.168.221.36:80

DeskBarBundler.exe (DeskBarBundler)

TCP » 184.168.221.36:80

bd69fe80-f1b1-4f8f-b1a7-9e87900f7877-3.exe (Plus-HD-9.6 by Plus HD)

TCP » 184.168.221.36:80

32b680f6-a8a2-442b-a3e2-f38e5f18b673-5.exe (HQPro-2 by HQ-1.9)

TCP » 184.168.221.36:80

online-guardian-v2.0.9.exe

TCP » 184.168.221.36:80

1e6b0b48-9caa-476a-a6cd-2ce364810c11-5.exe (Plus-HD-9.6 by Plus HD)

TCP » 184.168.221.36:443

googleupdate.exe13d7b73 (globalUpdate Update by globalUpdate)

TCP » 184.168.221.36:80

72c1fa91-6c8e-4dd3-97a3-e65c79349242-9.exe

TCP » 184.168.221.36:80

bd69fe80-f1b1-4f8f-b1a7-9e87900f7877-4.exe (Plus-HD-9.6 by Plus HD)

TCP » 184.168.221.36:80

96431e5d-5723-4d78-ae7b-7096d51b336b-11.exe (Plus-HD-V1.4 by Plus HD)

TCP » 184.168.221.36:80

DeskBarBundler.exe (DeskBarBundler)

TCP » 184.168.221.36:80

96431e5d-5723-4d78-ae7b-7096d51b336b-4.exe (Plus-HD-V1.4 by Plus HD)

TCP » 184.168.221.36:80

4975674a-3c50-4880-8d29-5b35a177af1c-9.exe

TCP » 184.168.221.36:80

object browser-bg.exe (Object Browser)

TCP » 184.168.221.36:80

lsass.exe

TCP » 184.168.221.36:80

shop_an_up-1.4-codedownloader.exe (Shop_an_Up-1.4 by Winportal)

TCP » 184.168.221.36:80

1d7b69fe-9686-45b6-8a43-97659dd401d8-5.exe (Shop_an_Up-1.4 by Winportal)

Latest 20 of 74 files

URL:

http://clipssoft.info/

Title:

“clipssoft.info”

Web server:

Apache

Related Domains

filevideodownloader.com

fl-v.org

fluff2208.info

free-download-now.com

makemoredownloads.com

requirementsfiles.com

30 of 34 related domains

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.