home

freefilesync.winsoftware-forum.de

Domain Information

Server location:
Baden-Wurttemberg, Germany (DE)

ASN:
AS8560 ONEANDONE-AS 1&1 Internet AG

Root domain:
winsoftware-forum.de

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Bkav FE
W32.HfsAdware
100.00%

Malwarebytes
PUP.Optional.OpenCandy
100.00%

McAfee
Artemis!B1C12E7E165C, Artemis!0F877B7D02DD
100.00%

Panda Antivirus
PUP/OpenCandy
100.00%

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
100.00%

AVG
OpenCandy
100.00%

Baidu Antivirus
Adware.Win32.OpenCandy
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0607
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

The domain freefilesync.winsoftware-forum.de has been seen to resolve to the following IP address.

87.106.10.223
hb-bot.com
July 16, 2015

File downloads found at URLs served by freefilesync.winsoftware-forum.de.

8 / 68      (PUP)
http://freefilesync.winsoftware-forum.de/FreeFileSync_7.1_Windows_Setup.exe  (b1c12e7e165cffdfa02a6193d80183ff)

8 / 68      (PUP)
http://freefilesync.winsoftware-forum.de/FreeFileSync_7.2_Windows_Setup.exe  (freefilesync_7.2_win_setup.exe)

The following file have been seen to comunicate with freefilesync.winsoftware-forum.de in live environments.

TCP » 87.106.10.223:80
spybotsd162.tmp

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.