home

www.soft-creation.fr

CHARRIER Dominique Olivier

Domain Information

This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roubaix, Nord-Pas-De-Calais within France which resides on the RIPE Network Coordination Centre network.
Registrar:
OVH

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH Systems

Root domain:
soft-creation.fr

Whois:
2 soft-creation.fr records

Scanner detections:
Detections  (83% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Bundler (M), PUP.SoftCrea.Installer (M), PUP (M)
90.91%

Clam AntiVirus
Win.Adware.Eorezo-374, Win.Adware.Eorezo-528
27.27%

Trend Micro House Call
Suspicious_GEN.F47V0620
9.09%

The domain www.soft-creation.fr has been seen to resolve to the following IP address.

213.186.33.2
cluster002.ovh.net
October 20, 2014

File downloads found at URLs served by www.soft-creation.fr.

1 / 68      (Malware)
http://www.soft-creation.fr/amimo-plus.exe  (4fcc44a803a4e1957ec2d8fef8747100)

1 / 68      (PUP)
http://www.soft-creation.fr/ChequeExpress.exe  (7a31f4abe21de1a5b178828a9dab88af)

1 / 68      (PUP)
http://www.soft-creation.fr/MesLivres.exe  (d96f9827c0380ebd4fa1cb3ffed690d4)

1 / 68      (PUP)
http://www.soft-creation.fr/CollectionTimbres.exe  (626a3210a4015b04031a00ad7909717a)

2 / 68      (PUP)
http://www.soft-creation.fr/amimo-plus.exe  (74567a0b265c0ef22ac1aad1df1461a4)

1 / 68      (PUP)
http://www.soft-creation.fr/amimo-plus.exe  (027bdfbc07b5aa017e4d9bcd5c827e02)

1 / 68
http://www.soft-creation.fr/motamo.exe  (843cacafba3035d242ab2a61b9f25848)

1 / 68      (PUP)
http://www.soft-creation.fr/MaCDtheque.exe  (a93101434502ba2851882ef35e46d38d)

2 / 68      (PUP)
http://www.soft-creation.fr/MaCDtheque.exe  (f19bf7effd3d4ee2b1fbeadeea4b8cf8)

1 / 68      (PUP)
http://www.soft-creation.fr/MesLivres.exe  (e3ea703e5fd146a5b46a444d918b8bcd)

2 / 68      (PUP)
http://www.soft-creation.fr/CollectionTimbres.exe  (69f135f17979ee20ba582ec0d77c3fc1)

0 / 68
http://www.soft-creation.fr/amimo-plus.exe  (0f6b90a5976a5c7beae4bdeb863690dd)

The following 23 files have been seen to comunicate with www.soft-creation.fr in live environments.

TCP » 213.186.33.2:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.2:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.2:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 213.186.33.2:80
UCBrowser.exe (by UCWeb)

TCP » 213.186.33.2:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.2:80
apptrailers.exe

TCP » 213.186.33.2:80
browser.exe (speed browser by Smart Applications)

TCP » 213.186.33.2:80
online-guardian-v2.0.9.exe

TCP » 213.186.33.2:80
Havij.exe (Havij by ITSecTeam)

TCP » 213.186.33.2:80
onlineguardian-v2.exe

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:587
wrk.exe

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:80
avwebgrd.exe (Avira Product Family by Avira Operations GmbH & Co. KG)

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:80
sumo.exe (SUMo by KC Softwares)

TCP » 213.186.33.2:80
ymsgr_tray.exe (Yahoo! Messenger by Yahoo!)

TCP » 213.186.33.2:80
Connectify.exe (Connectify)

TCP » 213.186.33.2:80
PandoraService.exe (by Pandora.TV)

 
Latest 20 of 25 files

URL:
http://www.soft-creation.fr/

Google Analytics:
UA-57747080

Title:
“Logiciels tlcharger, scrabble, vidothque...”

Description:
“Soft cration propose des logiciels en tlchargement et sur CD, jeux de lettres et utilitaires, gerez vos collections...”

Web server:
Apache

Facebook:
Likes:  3
Shares:  9
Comments:  3

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.