home

scribus.en.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
Bundler.PPI.Softonic.m, PUP.Softonic (M)
100.00%

Malwarebytes
PUP.Optional.Softonic.A
66.67%

Agnitum Outpost
PUA.Softonic, PUA.Downloader
66.67%

Comodo Security
Application.Win32.Agent.SOFE, Application.Win32.SoftonicDownloader.A
66.67%

Dr.Web
Adware.Downware.2454, Adware.Downware.5107
66.67%

VIPRE Antivirus
Softonic Downloader, Threat.4150696
66.67%

Bkav FE
W32.Clod543.Trojan, W32.HfsAdware
66.67%

ESET NOD32
Win32/SoftonicDownloader (variant)
33.33%

Rising Antivirus
PE:Malware.Obscure/Heur!1.9E03
33.33%

Baidu Antivirus
Adware.Win32.SoftonicDownloader
33.33%

McAfee
Artemis!24C434F566F3
33.33%

Trend Micro House Call
TROJ_GEN.F47V0326
33.33%

Fortinet FortiGate
Riskware/Softonicdownloader
33.33%

ESET NOD32
Win32/SoftonicDownloader.G potentially unwanted application
33.33%

Kaspersky
not-a-virus:Downloader.Win32.Agent
33.33%

The domain scribus.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13
April 14, 2014

File downloads found at URLs served by scribus.en.softonic.com.

1 / 68      (PUP)
http://scribus.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_scribus.exe)

0 / 68
http://scribus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOMniWtY23bPMLtVDpOQtw5wkTj3zREAbNtoxdSF Aj AkfhZq6TFmwR54ExRNakTCReZMMdLD89iThQs8uSB3CuBDdEJ533t7GLl9aGnJmKCdrOd7BUmx7MBD/nIUoSukikimJ8wroRr/qo7FVjh6OXFQ2uxY3Xd61gN L2OMdlRP11h0iLeoXa1tt1cWSfSVaqMYOqaav9s8Bv26WX5hEcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlXfdUMEqqZPkwmgFzvTFw/7kn9idNpBuw/.../QfvzkZBdlCKGjseZiwKeUkJ7fu6oGml1sHBwHD1Y1N8hq6IShDmvfyeaRVhhLcjc4M3usUDXjlEE s8PdXjs8mhY5aR8xqiXEP28DtYkrN ROnAuueLy98mRXpxS8dqVqluwDGOD siiThQs1ed5ThJJsvz73aznQLatlc6ePz1UVTBM5kl7I65GUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c7x5D3vZFgWeTUE6UfoYAXwP2RD0AutC0ZsDcvApsDnbgTPUjm6EQ3sLkEzRA6yMN8ho32pF0hrxU3gEuo9 YpI=  (scribus-1-4-2-windows.exe)

0 / 68
http://scribus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOMniWtY23bPMLtVDpOQtw5wkTj3zREAbNtoxdSF Aj AkfhZq6TFmwR54ExRNakTCReZMMdLD89iThQs8uSB3CuBDdEJ533t7GLl9aGnJmKCdrOd7BUmx7MBD/nIUoSukikimJ8wroRr/qo7FVjh6OXFQ2uxY3Xd61gN L2OMdlRP11h0iLeoXa1tt1cWSfSVaqMYOqaav9s8Bv26WX5hEcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWoKK1PSw2MNBeQbZQmQzV1gRk1ah9Ldrg0g5cU9Lc41uc4EW3Gmz6WyrBDNDva0os vtRfd/NKkwglyWZf/j3wcDQZe9sXB4t7ZZwkMFRT/ GM 63rDiBOrkl22dfJTasb89I89s9pw8gd5xlO7z4NY/.../Rv2VhN7NfOhUwdTdATilWCn0wk1I54gB1ZNGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c7x5D3vZFgWeTUE6UfoYAXwP2RD0AutC0ZsDcvApsDnbgTPUjm6EQ3sLkEzRA6yMN8ho32pF0hrxU3gEuo9 YpI=  (scribus-1-4-2-windows.exe)

0 / 68
http://scribus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOMniWtY23bPMLtVDpOQtw5wkTj3zREAbNtoxdSF Aj AkfhZq6TFmwR54ExRNakTCReZMMdLD89iThQs8uSB3CuBDdEJ533t7GLl9aGnJmKCdrOd7BUmx7MBD/nIUoSukikimJ8wroRr/qo7FVjh6OXFQ2uxY3Xd61gN L2OMdlRP11h0iLeoXa1tt1cWSfSVaqMYOqaav9s8Bv26WX5hEcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlU5T93ypzgUeHXUYXXak/UG X7UEkACZiNNi985HuiSrlbQHJhL/JRPGZh8a4jxBurydKR/6z1lBppBadIT9tQbGvlN5nLxVyNCUP0Qqx72TaxuhneUXZCFghgThXXjbmzklajPafYJOdJ4GTq7pDq1J/9iQxoKc A/FE5DOskiGWHg8LdmdahdF ohtC/yo7PrnXnhqnREz/.../KBJGY3IWV5smFznsbehYmvxPOCQZkbXwndGUU5M7nvTYOzY85h6mM6MpYE4WVia29Mzlmuhy3z7c7x5D3vZFgWeTUE6UfoYAXwP2RD0AutC0ZsDcvApsDnbgTPUjm6EQ3sLkEzRA6yMN8ho32pF0hrxU3gEuo9 YpI=  (scribus-1-4-2-windows.exe)

16 / 68    (Adware)
http://scribus.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_scribus.exe)

13 / 68    (PUP)
http://scribus.en.softonic.com/universaldownloader-launch  (SoftonicDownloader.exe )

The following 4 files have been seen to comunicate with scribus.en.softonic.com in live environments.

TCP » 46.28.209.13:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80
kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80
Client.exe

TCP » 46.28.209.13:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.