file.soft365.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain file.soft365.com is registered by proxy through GODADDY.COM, LLC and was originally registered in July of 2004. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Seattle, Washington within the United States which resides on the SoftLayer Technologies Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Washington, United States (US)

Create date:
Saturday, July 24, 2004

Expires date:
Tuesday, July 24, 2018

Updated date:
Tuesday, April 28, 2015

ASN:
AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.BanyanTreeTechnologyLimited.H, PUP.SkytouchTechnologyCoLimited.H, PUP.337TechnologyLimited.AA, PUP.337TechnologyLimited.V, PUP.Installer.ElexdoBrasilParticipacoesa.n, PUP.337TechnologyLimited.U
88.24%

ESET NOD32
Win32/ELEX (variant)
82.35%

Trend Micro House Call
TROJ_GEN.R047H0AI213, TROJ_GEN.R0CBH05HT13, TROJ_GEN.R03LH0AHH13, TROJ_GEN.R047H08I713, TROJ_GEN.R0C1H0AIA13, TROJ_GEN.R0CBH0AHI13, TROJ_GEN.F47V1030
70.59%

Dr.Web
Adware.Mutabaha.20, Trojan.Click2.64117, Trojan.Click2.60353, Adware.Mutabaha.29, Adware.Downware.1558
64.71%

Comodo Security
TrojWare.Win32.Trojan.Agent.Gen, Heur.Suspicious, ApplicUnwnt
58.82%

Fortinet FortiGate
Packed!tr, W32/Staser.FV!tr, W32/Dloadr.DSY!tr, W32/ELEX.N, W32/Agent.ACUL!tr, Adware/D365
58.82%

Malwarebytes
PUP.Optional.ESafe.A, Trojan.Staser, Trojan.Clicker, PUP.Optional.Desk365.A
58.82%

Kingsoft AntiVirus
Win32.Troj.Undef.(kcloud), Win32.Troj.Generic.a.(kcloud), Win32.Troj.Staser.r.(kcloud)
58.82%

McAfee
Generic Packed, Artemis!2F9035669A8E, Artemis!FCD5C26ED2DE, Generic PUP.u, RDN/Generic PUP.x!b2v, Artemis!38D46B35ED89, RDN/Generic.dx!c2c, RDN/Generic PUP.x!b2r
52.94%

VIPRE Antivirus
Elex Installer, Trojan.Win32.Generic
52.94%

McAfee Web Gateway
Generic Packed, Artemis!2F9035669A8E, Artemis!FCD5C26ED2DE, Generic PUP.u, RDN/Generic PUP.x!b2v, Artemis!38D46B35ED89, RDN/Generic.dx!c2c
52.94%

Antiy Labs AVL
Trojan/Win32.Staser, Trojan/Win32.StartPage, Trojan/Win32.Generic
52.94%

IKARUS anti.virus
Trojan.Win32.Staser, Trojan.SuspectCRC, Application.ExqPage, Win32.SuspectCrc, not-a-virus:AdWare.Win32
52.94%

Kaspersky
Trojan.Win32.Staser, UDS:DangerousObject.Multi.Generic, not-a-virus:AdWare.Win32.D365
47.06%

AhnLab V3 Security
Trojan/Win32.Swisyn, Trojan/Win32.Staser
47.06%

The domain file.soft365.com has been seen to resolve to the following 6 IP addresses.

50.22.198.68-static.reverse.softlayer.com
November 16, 2013

208.43.232.117-static.reverse.softlayer.com
November 16, 2013

208.43.232.114-static.reverse.softlayer.com
November 16, 2013

50.22.226.194-static.reverse.softlayer.com
November 16, 2013

50.22.226.195-static.reverse.softlayer.com
November 16, 2013

208.43.232.115-static.reverse.softlayer.com
November 16, 2013

File downloads found at URLs served by file.soft365.com.

1 / 68      (Adware)

1 / 68      (Adware)

12 / 68    (Adware)

13 / 68    (Adware)

2 / 68      (Adware)

The following 2 files have been seen to comunicate with file.soft365.com in live environments.