home

downloaden.superfiles.com

Only contact by email, all postal mail will be rejected  (Proxy Registrant)

Domain Information

The domain downloaden.superfiles.com is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in July of 1998. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Madrid, Madrid within Spain which resides on the RIPE Network Coordination Centre network.
Registrar:
SOLUCIONES CORPORATIVAS IP, SL

Server location:
Madrid, Spain (ES)

Create date:
Sunday, July 19, 1998

Expires date:
Friday, March 13, 2020

Updated date:
Thursday, May 14, 2015

ASN:
AS45037 HISPAWEB-NETWORK Propelin Consulting S.L.U.

Root domain:
superfiles.com

Whois:
2 superfiles.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.VittaliaLimited.HH, PUP.VittaliaInternetSL.t, PUP.Tightrope.Bundler, PUP.Vittalia.VittaliaInternet.Bundler (M), PUP.Vittalia.Bundler (M), PUP.Vittalia (M)
100.00%

VIPRE Antivirus
Threat.4782551, Threat.4783369
42.86%

Dr.Web
Trojan.DownLoader11.17819, Trojan.Packed.28459, Adware.Downware.2220
42.86%

AVG
BundleApp_r.T, Generic
42.86%

Agnitum Outpost
Riskware.Agent
28.57%

ESET NOD32
Win32/InstallCore.QH (variant), Win32/DownloadAdmin (variant)
28.57%

Malwarebytes
PUP.Optional.Vittalia, PUP.Optional.DownloadAdmin
28.57%

Avira AntiVirus
ADWARE/InstallCore.Gen9, ADWARE/Adware.Gen
28.57%

ESET NOD32
Win32/Vittalia.Q potentially unwanted application
14.29%

NANO AntiVirus
Trojan.Win32.DownLoader11.dblner
14.29%

Sophos
Vittalia
14.29%

IKARUS anti.virus
AdWare.BundleApp
14.29%

MicroWorld eScan
Gen:Variant.Kazy.363119
14.29%

Bitdefender
Gen:Variant.Kazy.363119
14.29%

Lavasoft Ad-Aware
Gen:Variant.Kazy.363119
14.29%

The domain downloaden.superfiles.com has been seen to resolve to the following 4 IP addresses.

109.70.129.203
February 21, 2016

23.0.160.8
a23-0-160-8.deploy.static.akamaitechnologies.com
September 27, 2014

23.0.160.17
a23-0-160-17.deploy.static.akamaitechnologies.com
September 27, 2014

109.70.128.130
rack1u31.hispaweb.net
June 26, 2014

File downloads found at URLs served by downloaden.superfiles.com.

1 / 68      (Adware)
http://downloaden.superfiles.com/lv/software/.../kl671171.htm?lang=nl  (installer_photofiltre_10_7_3_dutch.exe)

1 / 68      (Adware)
http://downloaden.superfiles.com/lv/software/.../kl671455.htm?lang=nl  (installer_limewire_5_5_16_dutch.exe)

1 / 68      (Adware)
http://downloaden.superfiles.com/lv/software/.../kl658931.htm?lang=nl  (installer_microsoft_office_home_and_student_2010_14_0_5128_dutch.exe)

1 / 68      (Adware)
http://downloaden.superfiles.com/lv/software/.../kl92646.htm?lang=nl  (installer_mixmeister_fusion_7_4_2_dutch.exe)

10 / 68    (Adware)
http://downloaden.superfiles.com/lv/software/.../kl664235.htm?lang=nl  (installer_duplicates_remover_for_outlook_2_7_1_dutch.exe)

11 / 68    (Adware)
http://downloaden.superfiles.com/lv/software/.../kl92359.htm?lang=nl  (installer_presentation_to_video_converter_5_9_dutch.exe)

16 / 68    (Adware)
http://downloaden.superfiles.com/lv/software/.../kl79640.htm?lang=nl  (installer_office_convert_word_txt_to_image_jpgjpeg_6_4_dutch.exe)

The following 28 files have been seen to comunicate with downloaden.superfiles.com in live environments.

TCP » 23.0.160.17:80
iamjpabkjdeomjcadgemaoildalbpoej.crx

TCP » 23.0.160.17:80
lmihdpllccgkjbljiacepmhkekempnip.crx

TCP » 23.0.160.17:80
okmbhmfbghnekneejbbmeofpjoemplee.crx

TCP » 23.0.160.17:80
afmjbhgpegkmhbockiombccdeehcoknj.crx

TCP » 23.0.160.17:80
kgfiahkfcopaddnpncbgopejfkeaopmi.crx

TCP » 23.0.160.17:80
afmjbhgpegkmhbockiombccdeehcoknj.crx

TCP » 23.0.160.17:80
imbmfmehojifgeabfblhkehpdongildk.crx

TCP » 23.0.160.8:80
client.exe

TCP » 23.0.160.8:80
proc.exe

TCP » 23.0.160.8:80
s2082.exe (III|I|XL by Installer Setup)

TCP » 23.0.160.8:80
dw20.exe (Microsoft .NET Framework by Microsoft)

TCP » 23.0.160.8:80
infonaut-setup-1.10.0.14.exe (Infonaut)

TCP » 23.0.160.8:80
wordwizard-setup-1.10.0.24.exe (WordWizard)

TCP » 23.0.160.8:80
hdpaccbmcceekpfnnjiifkmgnmcoipcb.crx

TCP » 23.0.160.8:80
jmdmmbjcjhpaafdgennllaonkiamcppp.crx

TCP » 23.0.160.8:80
ed9256a4.exe (SS)

TCP » 23.0.160.8:80
ijipnnnohmolfcpeglabapmjcjnpfbcb.crx

TCP » 23.0.160.8:80
client.exe (ClientWrapper)

TCP » 23.0.160.8:80
proc.exe

TCP » 23.0.160.8:80
onheklgeghhphlhgpbfpgmlpjinjoida.crx

 
Latest 20 of 28 files

Facebook:
Shares:  1

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.