home

opal-import-multiple-vcards-to-outlook.en.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP, Bundler.PPI.Softonic.AA
100.00%

Bkav FE
HW32.Packed
50.00%

McAfee
Artemis!19A4E277F6E4
50.00%

Total Defense
Win32/Tnega.aDQSBaD
50.00%

AVG
Adware MultiBundle.AJ
50.00%

Dr.Web
Adware.Downware.5743
50.00%

ESET NOD32
Win32/SoftonicDownloader.G potentially unwanted application
50.00%

VIPRE Antivirus
Threat.4786139
50.00%

Malwarebytes
PUP.Optional.Softonic.A
50.00%

Zillya! Antivirus
Downloader.Agent.Win32.202187
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

NANO AntiVirus
Trojan.Win32.Agent.dchxde
50.00%

F-Prot
W32/Softonic.C2.gen
50.00%

Trend Micro House Call
TROJ_GEN.R021B01K214
50.00%

Kaspersky
not-a-virus:Downloader.Win32.Agent
50.00%

The domain opal-import-multiple-vcards-to-outlook.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13
November 10, 2014

File downloads found at URLs served by opal-import-multiple-vcards-to-outlook.en.softonic.com.

15 / 68    (Adware)
http://opal-import-multiple-vcards-to-outlook.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_opal-import-multiple-vcards-to-outlook.exe)

4 / 68      (Malware)
http://opal-import-multiple-vcards-to-outlook.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAO5GjYLt2FuXfL6tICKFThXytc260JfxvHi3fjIc9cmRTe3/h4zuhgme8iAj/.../MxNkebkh0DUAlsS8aux3Fkds0OT6FEOjEuqj13QVb9TaWiBM9SOboRDewuQTNEDrIw3yGjfakXSGvFTeAS6j35ikg==  (vcard2outlook-setup.exe)

The following 4 files have been seen to comunicate with opal-import-multiple-vcards-to-outlook.en.softonic.com in live environments.

TCP » 46.28.209.13:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80
kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80
Client.exe

TCP » 46.28.209.13:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.