home

software.filefolio.com

WHOISGUARD, INC.  (Proxy Registrant)

Domain Information

The domain software.filefolio.com is registered by proxy through ENOM, INC. and was originally registered in April of 2005. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in New York City, New York within the United States which resides on the Digital Ocean, Inc. network.
Registrar:
ENOM, INC.

Server location:
New York, United States (US)

Create date:
Wednesday, April 6, 2005

Expires date:
Thursday, April 6, 2017

Updated date:
Monday, March 7, 2016

ASN:
AS46652 SERVERSTACK-ASN - ServerStack, Inc.

Root domain:
filefolio.com

Whois:
2 filefolio.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
DownloadManager.AirSoftware.F, PUP.Vittalia.InstallH.Installer (M)
100.00%

Dr.Web
Trojan.SMSSend.5375
50.00%

avast!
Win32:Adware-gen [Adw]
50.00%

ESET NOD32
Win32/AirAdInstaller.A potentially unwanted application
50.00%

VIPRE Antivirus
Threat.4784938
50.00%

Malwarebytes
PUP.Optional.AirAdInstaller
50.00%

K7 AntiVirus
Unwanted-Program
50.00%

Agnitum Outpost
PUA.AirAdInstaller
50.00%

Sophos
AirInstaller
50.00%

Comodo Security
Application.Win32.AirAdInstaller.A
50.00%

Avira AntiVirus
ADWARE/Adware.Gen
50.00%

Rising Antivirus
PE:PUF.Airinstall!1.9C4C
50.00%

IKARUS anti.virus
PUA.AirAdInstaller
50.00%

AVG
Adware BundleApp_r
50.00%

Panda Antivirus
Adware/AirInstaller
50.00%

The domain software.filefolio.com has been seen to resolve to the following 2 IP addresses.

159.203.107.180
fd-03-do-e-ny-3.gtdlrfwd.com
April 19, 2016

192.241.139.115
justice.airinstaller.com
September 5, 2014

File downloads found at URLs served by software.filefolio.com.

1 / 68      (Adware)
http://software.filefolio.com/v2/click/56c93be7/?d=http://software.downloadwiz.com/ooVoo.msi&key=12fe535cea9af6ac0c117d0f4a1ac970a3dfedba416d81238b0fe32bd7636e01&sid=US-OO&uid=&affiliate_image=http://.../40-oovoo.png&product_image=http://.../325-oovoo.png&n=Oovoo&filename=Oovoo_Setup_2015  (Oovoo_Setup_2015.exe)

27 / 68    (Adware)
http://software.filefolio.com/get/click/342977b2/?filename=setup&done_url=http://filefolio.com/.../gift.php  (setup.exe)

URL:
http://software.filefolio.com/

Title:
“Welcome to nginx!”

Web server:
nginx/1.4.6 (Ubuntu)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.