down1oads.com

Somoto Ltd.  (via a Proxy Registrant)

Domain Information

The domain down1oads.com is registered by proxy through GODADDY.COM, LLC and was originally registered in April of 2012. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Dusseldorf, Nordrhein-Westfalen within Germany which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Somoto Ltd. who is located in Tel Aviv, Israel.
Remove Malware from down1oads.com - Powered by Reason Core Security
Registrar:
GODADDY.COM, LLC

Server location:
Nordrhein-Westfalen, Germany (DE)

Create date:
Monday, April 16, 2012

Expires date:
Sunday, April 16, 2017

Updated date:
Tuesday, May 05, 2015

ASN:
AS25074 INETBONE-AS MESH GmbH

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.BetterInstaller.Somoto.O, PUP.BetterInstaller.Somoto.j, PUP.BetterInstaller.Somoto.x, PUP.BetterInstaller.Somoto.p, PUP.BetterInstaller.Somoto.U, PUP.BetterInstaller.Somoto.DD
100.00%

Sophos
Somoto BetterInstaller
100.00%

ESET NOD32
Win32/Somoto
100.00%

G Data
Win32.Application.Somoto, NSIS.Application.Somoto
100.00%

AVG
AdInstaller.Somoto, Downloader
100.00%

Malwarebytes
PUP.Optional.Somoto, PUP.Optional.Somoto.A
100.00%

avast!
Win32:Somoto-F [PUP], Win32:Somoto-J [PUP], Win32:Somoto-O [PUP]
100.00%

Dr.Web
Adware.Somoto.17, Adware.Downware.1184, Trojan.MulDrop4.11744
92.86%

Clam AntiVirus
Win.Adware.Somoto, Adware.Somoto-1, Trojan.Agent-267630
92.86%

VIPRE Antivirus
BetterInstaller, Trojan.Win32.Generic
92.86%

Avira AntiVirus
APPL/Somoto.Gen2
92.86%

Comodo Security
Application.Win32.Somoto.A, Application.Win32.Somoto.DTL
85.71%

Trend Micro House Call
TROJ_GEN.R0CBH07LB13, TROJ_GEN.R0CBH07LA13, TROJ_GEN.F0C2C00KU13, TROJ_GEN.R0C1H07LC13, TROJ_GEN.R0CBB01AD14, TROJ_GEN.F0C2C00LJ13
85.71%

McAfee Web Gateway
Artemis!2CF8AEC346D5, Artemis!68F7DC990191, Artemis!9F78EFC83AB2, Artemis!BB978F87AABD, Artemis!A501B6FBA1F1, Artemis!09577EFA29E9
85.71%

K7 AntiVirus
Unwanted-Program
78.57%

The domain down1oads.com has been seen to resolve to the following IP address.

January 6, 2014

File downloads found at URLs served by down1oads.com.

23 / 68    (Adware)

22 / 68    (Adware)
http://down1oads.com/.../FLVPlayerSetup-N3MiW2hVY.exe  (d20506bbead5df7c5e7ce8fb18071d06)

23 / 68    (Adware)

22 / 68    (Adware)
http://down1oads.com/.../FreeZipSetup-NeQsoHjEZ.exe  (b3cd80045962ccd29f85337bda151fd9)

31 / 68    (Adware)
http://down1oads.com/.../FreeZipSetup-N2hUpG7ZB.exe  (b4cde987e49b0b52d9f789eb5b4c9a07)

18 / 68    (Adware)

19 / 68    (Adware)

13 / 68    (Adware)
http://down1oads.com/.../FreeZipSetup-N6r619NCj.exe  (221de2f2df8de3230ee5c01e6feec76a)

25 / 68    (Adware)

27 / 68    (Adware)
http://down1oads.com/.../reaver-aC1k9HK.exe  (advancedsystemcarepro710387multilingual-7tcst79.exe)

27 / 68    (Adware)
http://down1oads.com/.../AvastISAV-9rJzAbf.exe  (advancedsystemcarepro710387multilingual-7tcst79.exe)

25 / 68    (Adware)

25 / 68    (Adware)

24 / 68    (Adware)
http://down1oads.com/.../7Zip-aT54p0h.exe  (ouvrageshydrauliquesbykingbreakwwwtunisiasatcom-aqffgof.exe)

24 / 68    (Adware)
http://down1oads.com/.../7Zip-4syGIvV.exe  (ouvrageshydrauliquesbykingbreakwwwtunisiasatcom-aqffgof.exe)

24 / 68    (Adware)
http://down1oads.com/.../7Zip-0Q15KeX.exe  (ouvrageshydrauliquesbykingbreakwwwtunisiasatcom-aqffgof.exe)

25 / 68    (Adware)
http://down1oads.com/.../FreeZipSetup-eD16COk.exe  (09577efa29e931953644cbd815d26812)

22 / 68    (Adware)
http://down1oads.com/.../SERVER_CCCAM_9NITRI-3KooDCl.exe  (basemyoussefa5erklammazika2daycom-fjs8aet.exe)

18 / 68    (Adware)

23 / 68    (Adware)
http://down1oads.com/.../FreeZipSetup-9vXODZK.exe  (a501b6fba1f10ccd47a21aeac9065da8)

22 / 68    (Adware)
http://down1oads.com/.../FLVPlayerSetup-1zEsmH7.exe  (basemyoussefa5erklammazika2daycom-fjs8aet.exe)

19 / 68    (Adware)
http://down1oads.com/.../FreeZipSetup-fwoHTOw.exe  (bb978f87aabd9a37e2f7a50fc29262b5)

January 6, 2014

URL:
http://down1oads.com/

Web server:
nginx

Remove Malware from down1oads.com - Powered by Reason Core Security