home

nero-burning-rom.softonic.de

Domain Information

Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.de

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Bundler.PPI.Softonic.i, Bundler.SoftonicDownloader (M)
100.00%

Malwarebytes
PUP.Optional.Softonic.A
50.00%

Agnitum Outpost
PUA.Softonic
50.00%

Kaspersky
not-a-virus:Downloader.Win32.Agent
50.00%

Comodo Security
Application.Win32.Agent.SOFE
50.00%

Dr.Web
Adware.Downware.1657
50.00%

VIPRE Antivirus
Trojan-Downloader.Win32.Agent
50.00%

ESET NOD32
Win32/SoftonicDownloader (variant)
50.00%

Rising Antivirus
PE:Malware.Obscure/Heur!1.9E03
50.00%

The domain nero-burning-rom.softonic.de has been seen to resolve to the following 2 IP addresses.

46.28.209.20
commoncobs.softonic.com
May 28, 2016

46.28.209.12
www.softonic.de
March 27, 2014

File downloads found at URLs served by nero-burning-rom.softonic.de.

1 / 68      (Adware)
http://nero-burning-rom.softonic.de/universaldownloader-launch  (softonicdownloader_fuer_nero-burning-rom.exe)

9 / 68      (PUP)
http://nero-burning-rom.softonic.de/universaldownloader-launch  (softonicdownloader_fuer_nero-burning-rom.exe)

The following 11 files have been seen to comunicate with nero-burning-rom.softonic.de in live environments.

TCP » 46.28.209.20:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 46.28.209.20:80
APK2Mobile.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 46.28.209.12:80
AVKProxy.exe (G Data Security Software by G Data Software AG)

TCP » 46.28.209.20:80
{blocked}.exe

TCP » 46.28.209.20:80
softonicdownloader_pour_itools-for-windows.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_pour_speedy-video-capture.exe.infected (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_fuer_minecraft-skinedit.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_per_vlc-media-player.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
softonicdownloader_per_songr.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.20:80
online-guardian-v2.0.9.exe

TCP » 46.28.209.20:80
softonicdownloader_pour_winrar.exe (Application Setup)

softonic.com

softonic.cn

softonic.com.br

softonic.fr

softonic.it

softonic.jp

softonic.nl

softonic.pl

softonicdownloads.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.