home

ultrafobos.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Detections  (67% detected)

Scan engine
Details
Detections

Reason Heuristics
Bundler.PPI.Softonic.m, PUP.Softonic (M)
66.67%

McAfee
Artemis!24C434F566F3
33.33%

Malwarebytes
PUP.Optional.Softonic.A
33.33%

Agnitum Outpost
PUA.Softonic
33.33%

Trend Micro House Call
TROJ_GEN.F47V0326
33.33%

Comodo Security
Application.Win32.Agent.SOFE
33.33%

Dr.Web
Adware.Downware.2454
33.33%

VIPRE Antivirus
Softonic Downloader
33.33%

ESET NOD32
Win32/SoftonicDownloader (variant)
33.33%

Rising Antivirus
PE:Malware.Obscure/Heur!1.9E03
33.33%

Fortinet FortiGate
Riskware/Softonicdownloader
33.33%

Baidu Antivirus
Adware.Win32.SoftonicDownloader
33.33%

Bkav FE
W32.Clod543.Trojan
33.33%

Quick Heal
(Suspicious) - DNAScan
33.33%

The domain ultrafobos.softonic.com has been seen to resolve to the following IP address.

46.28.209.1
www.softonic.com
April 14, 2014

File downloads found at URLs served by ultrafobos.softonic.com.

1 / 68      (PUP)
http://ultrafobos.softonic.com/universaldownloader-launch  (softonicdownloader_para_ultrafobos.exe)

1 / 68      (inconclusive)
http://ultrafobos.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvZS3/LZYCnwV4GtwYCjHd4j/uCJxAuU5B08 98ecJT8Wjx2S7VJTIrWZIiynaRZXznsOIJpYD5ReuAhJjtx6JcFphi31TrlIJWJGRAxET5gkGt73tpMPvW5gZgj 4uybbAv ZhqLhL8tCHXyMSz/DjZC2hPBMDlrQGAF5p2IRjjbzkpSgd6tWTqGGZ5VsdWG0oMWVKs0NMNUZsqoGklvefJ3TV4GoNUjAsLEKDLx0zvYoeaQwBXMMWuRK7LaCUugyQwjikjiqM1aQZ06XTe1jFtJV1AdWFV8VKgC5VxPOo6BKbZN6ZIgUBv/W4 rhWeXy0my izGSoo0XxGTnj/lixHVHFwoyRg8huGHBDTgkHaF5BqH0Ccnj3Bmp21taOQ 0C3m8i 9K0PdBBklsmil41M0iNkFExAXpLLfAqzU2DEhTK98PCj78g/zOXwcwVdbO7CjPg542zX6Gw hKtGPBv1tuWZOoh4ojQFVPc/70KGDmQ35jIPBrWq/.../fit1QdL  (ultrafobos.exe)

13 / 68    (PUP)
http://ultrafobos.softonic.com/universaldownloader-launch  (SoftonicDownloader.exe )

The following file have been seen to comunicate with ultrafobos.softonic.com in live environments.

TCP » 46.28.209.1:80
{blocked}.exe

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.