home

downloads.shareware.de

Domain Information

Server location:
Bayern, Germany (DE)

ASN:
AS24940 HETZNER-AS Hetzner Online AG

Root domain:
shareware.de

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic, PUP.Installer.sharewaredeSWVGmbH.a
100.00%

ESET NOD32
Win32/DownloadSponsor.A potentially unwanted application
50.00%

VIPRE Antivirus
Threat.4791934
50.00%

Dr.Web
Adware.Downware.927
50.00%

AVG
Adware Skodna.Bundle.BF.dropper
50.00%

SUPERAntiSpyware
Adware.DownloadSponsor/Variant
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

Avira AntiVirus
APPL/Downloader.Gen
50.00%

Vba32 AntiVirus
Downware.VB.AndreClient
50.00%

The domain downloads.shareware.de has been seen to resolve to the following 2 IP addresses.

88.198.27.201
www1.thinklabs-cluster.de
March 28, 2014

46.4.173.131
www2.thinklabs-cluster.de
March 28, 2014

File downloads found at URLs served by downloads.shareware.de.

10 / 68    (PUP)
http://downloads.shareware.de/?pid=sharewarede&cid=m358869&lastchange=1368516091  (businesscardsmx-setup-downloader.exe)

1 / 68      (PUP)
http://downloads.shareware.de/?pid=sharewarede&cid=h356061&lastchange=1361370160  (sammelbde_setup-downloader.exe)

The following 8 files have been seen to comunicate with downloads.shareware.de in live environments.

TCP » 88.198.27.201:80
ocs_v71a.exe (OCS)

TCP » 46.4.173.131:80
ocs_v71a.exe (OCS)

TCP » 46.4.173.131:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

TCP » 46.4.173.131:80
ocs_v71b.exe (OCS)

TCP » 46.4.173.131:80
CyberGhost.exe (CyberGhost VPN 5 by CyberGhost S.R.L)

TCP » 46.4.173.131:80
sysTPLService.exe (sysTPLService by Tlapia)

TCP » 46.4.173.131:80
ocs_v71b.exe (OCS)

TCP » 46.4.173.131:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
sysTPLService.exe (sysTPLService by Tlapia)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

TCP » 88.198.27.201:80
ocs_v71b.exe (OCS)

download-sponsor.de

freeware.de

icq-tools.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.