home

br.freesoftpc.com

Only contact by email, all postal mail will be rejected  (Proxy Registrant)

Domain Information

The domain br.freesoftpc.com is registered by proxy through SOLUCIONES CORPORATIVAS IP,SLU and was originally registered in July of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Madrid, Madrid within Spain which resides on the RIPE Network Coordination Centre network.
Registrar:
SOLUCIONES CORPORATIVAS IP,SLU

Server location:
Madrid, Spain (ES)

Create date:
Wednesday, July 17, 2013

Expires date:
Thursday, July 17, 2014

Updated date:
Wednesday, July 17, 2013

ASN:
AS45037 HISPAWEB-NETWORK Propelin Consulting S.L.U.

Root domain:
freesoftpc.com

Whois:
1 freesoftpc.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.100BlogsSL.a, PUP.Vittalia.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.InstallCore
66.67%

VIPRE Antivirus
InstallCore.b
66.67%

ESET NOD32
Win32/InstallCore.MW
66.67%

McAfee
Artemis!D2CFE8BA58A5
66.67%

Trend Micro House Call
TROJ_GEN.F47V0428
66.67%

Agnitum Outpost
PUA.InstallCore
66.67%

Comodo Security
Application.Win32.InstallCore.HYE
66.67%

Avira AntiVirus
Adware/InstallCore.144181
66.67%

Sophos
Install Core Click run software
66.67%

Vba32 AntiVirus
Downware.InstallCore
66.67%

Fortinet FortiGate
Riskware/InstallCore
66.67%

AVG
Generic_c
66.67%

Qihoo 360 Security
Win32/Virus.Adware.f76
66.67%

avast!
Win32:Malware-gen
66.67%

The domain br.freesoftpc.com has been seen to resolve to the following 2 IP addresses.

54.72.9.51
ec2-54-72-9-51.eu-west-1.compute.amazonaws.com
May 22, 2016

93.189.33.11
rack6u11.hispaweb.net
April 11, 2014

File downloads found at URLs served by br.freesoftpc.com.

1 / 68      (Adware)
http://br.freesoftpc.com/.../download?p=BR  (installer_photofiltre_studio_portuguese.exe)

16 / 68    (Adware)
http://br.freesoftpc.com/.../download?p=BR  (a596cc991b432d0a8515d3c78b8f23bc.exe)

16 / 68    (Adware)
http://br.freesoftpc.com/.../download?p=BR  (01657726075bdc295b23321b28e9ed2a.exe)

The following 215 files have been seen to comunicate with br.freesoftpc.com in live environments.

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
onedrvup.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
247843.ftf (Optimizer Pro v3.2 by PC Utilities Software Limited)

TCP » 54.72.9.51:80
1799877.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
install_flashplayer14x32_x64md_aaa_aih.exe (bon joueur)

TCP » 54.72.9.51:80
optimizerproinstaller.exe (Optimizer Pro v3.2 by PCUtilities Software Limited)

TCP » 54.72.9.51:80
charles.exe (by Apple)

TCP » 54.72.9.51:80
onedrv.exe

TCP » 54.72.9.51:80
IEError.exe (IEError)

TCP » 54.72.9.51:80
updater27793.exe (CouponDropDown Plugin by Innovative Apps)

TCP » 54.72.9.51:80
install_flashplayer16x33_masp_aaa_aih.exe (by Apple)

TCP » 54.72.9.51:80
toolbarupdaterservice.exe

TCP » 54.72.9.51:80
hdnInstaller.exe (hdnInstaller)

TCP » 54.72.9.51:80
g.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
smlb.jpg

TCP » 54.72.9.51:80
hqghumeaylnlf.exe (Optimizer Pro v3.2 by PC Utilities Software Limited)

 
Latest 20 of 219 files

URL:
http://br.freesoftpc.com/

Title:
“Freesoftpc.com - Download de software para PC”

Description:
“Download de software para PC, Freesoftpc.com oferece downloads gratuitos e 100% seguro.”

Web server:
Apache (PHP/5.3.10-1ubuntu3.9)

Facebook:
Likes:  778
Comments:  2

Twitter:
Shares:  2

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.