home

es.brothersoft.com

Domain Information

Server location:
Texas, United States (US)

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.

Root domain:
brothersoft.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer, Win32.Generic
100.00%

Dr.Web
Trojan.InstallCore.38
50.00%

VIPRE Antivirus
Threat.4786140
50.00%

ESET NOD32
Win32/InstallCore.VV potentially unwanted application
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

NANO AntiVirus
Trojan.Win32.InstallCore.dlztaf
50.00%

Agnitum Outpost
PUA.InstallCore
50.00%

Avira AntiVirus
Adware/InstallCo.zlf
50.00%

AVG
Generic
50.00%

The domain es.brothersoft.com has been seen to resolve to the following IP address.

108.168.197.129
108.168.197.129-static.reverse.softlayer.com
March 1, 2015

File downloads found at URLs served by es.brothersoft.com.

1 / 68      (PUP)
http://es.brothersoft.com/downloader/bdm.php?url=http://esfiles.brothersoft.com/home_educations/.../derive_6_1.exe&name=Derive  (brothersoftdownloader_for_derive.exe)

9 / 68      (PUP)
http://es.brothersoft.com/soft-133476.download  (brothersoft_downloader_for_zgesti_n_2009.exe)

The following 17 files have been seen to comunicate with es.brothersoft.com in live environments.

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

TCP » 108.168.197.129:80
Orbitnet.exe (P2P service of Orbit Downloader by Orbitdownloader.com)

brothersoft.de

brothersoft.es

brothersoft.fr

brothersoft.jp

ie7pro.com

orbitdownloader.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.