home

portable-scribus.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Adware/unwanted app distribution

Scan engine
Details
Detections

Reason Heuristics
Bundler.PPI.Softonic.i
100.00%

herdProtect (fuzzy)
a variant of 54b575c4e621061b2b1dac41a7efbfe7dbb434eb
100.00%

Malwarebytes
PUP.Optional.Softonic.A
100.00%

VIPRE Antivirus
Softonic Downloader
100.00%

ESET NOD32
Win32/SoftonicDownloader (variant)
100.00%

McAfee
Artemis!6D79E1B7A986
100.00%

Kaspersky
not-a-virus:Downloader.Win32.Agent
100.00%

Agnitum Outpost
PUA.Softonic
100.00%

Dr.Web
Adware.Downware.1657
100.00%

Rising Antivirus
PE:Malware.Obscure/Heur!1.9E03
100.00%

Qihoo 360 Security
Win32/Virus.Downloader.591
100.00%

The domain portable-scribus.softonic.com has been seen to resolve to the following IP address.

46.28.209.1
www.softonic.com
December 27, 2013

File downloads found at URLs served by portable-scribus.softonic.com.

0 / 68
http://portable-scribus.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtjVOcEIbIvK9GHCkEMGWva5n3W5qN /Zb7pVWlrM6/3mACQmrbeQ8SjRCK3DHZl v/wjl3QlybkG2cALvoa3a82Vco7WyLOd2Id1 nRZ4vcRIPikqvODv5oZbRNk6mFUtXunVRREmQou7cH7 JsclQ6oDqqb0DIub239DXBjKqE30ZO3FaJncvbY9dLiZVO6EFlmXqXACqZ9nyitr9xUSVJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugygtjxjkTu WgyjVmwGMjcDf 9D0I5M8gJXP gd6HPK a4vtBuGSssJHS3pfJ xAP3ihRgyThVBHyDyEaRA7Rcp4JgFx mU/EYLX1emhM/OjtrC h5oIVcav6JtH5Zsxl7NdzT54gOGhTdT6oUkdaoUeFezuwVH/JY9IZMtrSN5Fpbd0Sj277NkzRum/wjgBK2y6Y7i6eK1JH4V Lws2hE7iwyuWyXPaqqhpTzkqWnGvTGMbloVTBE1vLtkVoMBg6aIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbYFxDOL4PWNy7q iLTN2o5n8qDUow04DJ/.../DTZPuUQ9A QD2BUluw9qZOoqnsajx2m9Nw2g1Jgh yvQnM=  (ScribusPortable_1.4.0_Rev_2.paf.exe)

0 / 68
http://portable-scribus.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtjVOcEIbIvK9GHCkEMGWva5n3W5qN /Zb7pVWlrM6/3mACQmrbeQ8SjRCK3DHZl v/wjl3QlybkG2cALvoa3a82Vco7WyLOd2Id1 nRZ4vcRIPikqvODv5oZbRNk6mFUtXunVRREmQou7cH7 JsclQ6oDqqb0DIub239DXBjKqE30ZO3FaJncvbY9dLiZVO6EFlmXqXACqZ9nyitr9xUSVJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugzKAw6maTQegoS/0g4j9ZqvSFKEN33ve1pisw/aOL2GvE7cWrAZIv/pddxhPvgAWvWzkxq1hpJmOyI9 ZMLfFBxwNfjbUOFfT6ft4HDz Kx9ZHjJFc/SyAOoASkY4bOn5xzBB67XoIZW zyIZXsO0M0ADaqJ9aI0GVfux0Gl0fWEBZJIdfibgwtSu1gK OyixDrfi/XS0h7dflxbuwJlLnoxT8y5MpCbOWR8DwWg0lkATWHF0Yb38vD5o rHZdSfPyIigrcIoeOFnhAsldxrbq3SZNPmGKcadQzxbbGJ VEbYFxDOL4PWNy7q iLTN2o5n8qDUow04DJ/.../DTZPuUQ9A QD2BUluw9qZOoqnsajx2m9Nw2g1Jgh yvQnM=  (ScribusPortable_1.4.0_Rev_2.paf.exe)

11 / 68    (PUP)
http://portable-scribus.softonic.com/universaldownloader-launch  (softonicdownloader_para_portable-scribus.exe)

The following file have been seen to comunicate with portable-scribus.softonic.com in live environments.

TCP » 46.28.209.1:80
{blocked}.exe

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.