home

free-pcsoft.com

Privacy Protection Service INC d/b/a PrivacyProtect.org  (Proxy Registrant)

Domain Information

The domain free-pcsoft.com is registered by proxy through PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM and was originally registered in August of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
PDR LTD. D/B/A PUBLICDOMAINREGISTRY.COM

Server location:
Virginia, United States (US)

Create date:
Thursday, August 21, 2014

Expires date:
Sunday, August 21, 2016

Updated date:
Tuesday, July 28, 2015

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Whois:
2 free-pcsoft.com records

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), PUP.installCore (M), PUP.NewMedia.Installer.installCore.Installer (M), PUP.InstallCore.Internet.Installer.Meta (M), PUP.InstallCore.S (M), PUP.NewMedia.NMH.installCore.Installer (M), PUP.InstallCore.RES (M), PUP.InstallCore.RE48 (M), PUP.installCore.Program.Installer.Meta (M), PUP.Installer.Bundler.Installer.Meta (M)
93.55%

ESET NOD32
Win32/InstallCore.ZC potentially unwanted application, Win32/InstallCore.ZP potentially unwanted application, Win32/InstallCore.YW potentially unwanted application
12.90%

G Data
Win32.Application.InstallCore.EG
12.90%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
12.90%

Comodo Security
Application.Win32.InstallCore.DQW, Application.Win32.InstallCore.DQB
6.45%

Baidu Antivirus
Adware.Win32.InstallCore
6.45%

avast!
Malware-gen
3.23%

Fortinet FortiGate
Riskware/InstallCore
3.23%

VIPRE Antivirus
Threat.4150696
3.23%

Agnitum Outpost
Trojan.Badur
3.23%

NANO AntiVirus
Riskware.Win32.InstallCore.dsmwdi
3.23%

The domain free-pcsoft.com has been seen to resolve to the following 6 IP addresses.

107.23.203.23
ec2-107-23-203-23.compute-1.amazonaws.com
October 11, 2015

54.84.143.69
ec2-54-84-143-69.compute-1.amazonaws.com
October 11, 2015

52.7.132.182
ec2-52-7-132-182.compute-1.amazonaws.com
October 11, 2015

54.236.147.238
ec2-54-236-147-238.compute-1.amazonaws.com
June 19, 2015

54.209.232.94
ec2-54-209-232-94.compute-1.amazonaws.com
June 19, 2015

54.84.140.114
ec2-54-84-140-114.compute-1.amazonaws.com
June 19, 2015

File downloads found at URLs served by free-pcsoft.com.

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATiFOZgyOZAROM==&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1E dWE rLtDK5y2rgmIT1zvm2yIKiWvmREhKDyvmNjhLDSvmNBDz1mcQDjhTnmDZ0wvmNpDZ1fOTCROZC4AZCRvm5EIKiWXz74NZAdNzAyNZa=&pd=2323UENJDEx37XvlUK2l2kFj d0=&campaignId=9jn0AjC4AZg0AZMq  (googleearthsetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATLdNzaFAjM3Ng==&osos=VdluDrW3cw==&dr=cHaWck1JcrVu dDmIKNlvExthXN3DKV0NQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWxCCm7dREhKVuvmAWASDChTMm7dlChV8ROTC3AZMROTnm7K2pDZ1fAZgyAzMyNTnyAw==&pd=2323Um2l2k1oDXvlUmNJ i==&campaignId=9jn0AjC1NZCyAZMq  (openofficesetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=AzAdOTMdNjcwAw==&osos=VdluDrW3cw==&dr=cHaWck1F7KAm2r0Wc32lDXidvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1kLQDj rcWDK4m7z0RvmiWAkDjIKiWXzcFAT7wAZnFASDPDdlChV81Aza0AZM1ATaz&pd=2323UmxJ2dFB d5Cc32lDXiu7dWt&campaignId=9jn0AzMzOTcwAZMq  (yacsetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATidNZnFAji1Aw==&osos=VdluDrW3cw==&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChVWZiL1iiLlHTlWvxkDG2z1YIdVF2dWyDH0m XiWed1P2rNo2HlwDX0m K4We3sB7KNl KVu2H0m73iWe3xPcm2l2H0m EiWedlmidWu2rVu2ZpnfXtpDlNl7XvjIZpLfSDleHsyhXtP7dVpDH0m7XMWed5CcrWzIXxp dFWvmxdhXtCDXDp7dVWvEsyhXMt KluDKNy7KD0vExthXN3DKV0OSDzcj1QDyDPDdlChVWsxn2ST1ViX0ln&pd=2323UEsB7XCt rlGDSFj d0=&campaignId=9jn0AznRAZadAZMq  (minecraftsetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=NTazNzMRNZ70&osos=VdluDrW3cw==&dr=hd5C m0WedNyDK50IXDlfSDphXAmD3vpDZ0m rcWDK4m7dAWx0am7dREhKVuvmAWASDChTMm7dlChVWZiL1iiLlHTlWvxkDG2z1YIdVF2dWyDH0m XiWed1P2rNo2HlwDX0m K4We3sB7KNl KVu2H0m73iWe3xPcm2l2H0m EiWedlmidWu2rVu2ZpnfXtpDlNl7XvjIZpLfSDleHsyhXtP7dVpDH0m7XMWed5CcrWzIXxp dFWvmxdhXtCDXDp7dVWvEsyhXMt KluDKNy7KD0vExthXN3DKV0OSDzcj1QDyDPDdlChVWsxn2ST1ViX0ln&pd=2323UEsB7XCt rlGDSFj d0=&campaignId=9jn0AznzNZA4AZMq  (minecraftsetup.exe)

1 / 68      (Adware)
http://free-pcsoft.com/?dl=1&pi=AzM1Nz71ATi4NM==&osos=VdluDrW3cw==&chnl=&dr=cHaWck1E2r5fSVDfcd5uXd5uDHvl7XAm2r0Wc32lDXidvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vTQDj rcWDK4m7z0RvmiWAkDjIKiWXzgRAZcFOTMFASDPDdlChV8wOZc3OTMzATaz&pd=2323Umtp2dCtc3VuUmNJ i==&campaignId=9jn0Azi4OZ7yAZMq  (gtaivsanandreassetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck1zcrW0IKDFvExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8RAZadNjARNZnm7K2pDZ1fNZ7dOZg1NTnwAw==&pd=2323UEVw rWPDk1E d2JUmNJ i==&campaignId=9jn0Ajc4ATcdAZMq  (spotifysetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATLwAziyAjAwNw==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck13IKFy7Xam2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKDyvmNjhLDSvmNBDz1mcQDjhTnmDZ0wvmNpDZ1fAznFNj7FAZCRvm5EIKiWXzCzAjgzNzcwAjA=&pd=2323Um5wcHAtDdV0UmNJ i==&campaignId=9jn0AzAdNzg0AZMq  (winrarsetup.exe)

1 / 68      (Adware)
http://free-pcsoft.com/?dl=1&pi=AzndNZn4AzMdAM==&osos=VdluDrW3cw==&chnl=&dr=cHaWck1mIXvlDmW4vExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWIXim7dAWSVim7dREhKl0vmAWASDChTMm7dlChV83Njn4AzgwOTnm7K2pDZ1fNjLwAj7ROTn0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AzLwAZgdAZMq  (firefoxsetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATi1NTc0NzaROM==&osos=VdluDrW3cw==&dr=cHaWck13IKFy7Xam2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKDyvmNjhLDSvmNBDz1mcQDjhTnmDZ0wvmNpDZ1fAznFNj7FAZCRvm5EIKiWXzCzAjgzNzcwAjA=&pd=2323Um5wcHAtDdV0UmNJ i==&campaignId=9jn0AznRATLyAZMq  (winrarsetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATL4OTi4AZc3Ai==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1w 3sj 3vuUXxp KLm2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhL55vmNBDz1l QDjhTnmDZ0wvmNpDZ1fOZgzNjC4AZCRvm5EIKiWXzCRNZCzNTAyNZa=&pd=2323Um2JDd8t2XsB d5CUmNJ i==&campaignId=9jn0Azi4AziwAZMq  (popcorntimesetup.exe)

1 / 68      (Adware)
http://free-pcsoft.com/?dl=1&pi=ATawNZ7yAj7dAw==&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzAwATMzOZMFASDPDdlChV80AjARAja4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Azi1OTgyAZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=Ajg4NzcRNZi1OM==&osos=VdluDrW3cw==&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1p2kDj7z1vVkDj rcWIXim7z0RvmiWAkDjIKiWXzgRNZidOTMFASDPDdlChV81NjiyATA3AZaz&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0Ajg0ATndAZMq  (javaruntimeenvironmentsetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=Ajg4NzcyAT71Aw==&osos=VdluDrW3cw==&dr=cHaWck1z7K1z2KFEUKtpDXAm2r0Wc32lDXidvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1LSkDj rcWDK4m7z0RvmiWAkDjIKiWXzAwNZn1OTMFASDPDdlChV8FOT71OZcdAZaz&pd=2323Um2J diteKVzUmNJ i==&campaignId=9jn0Ajg1OTA0AZMq  (samsungkiessetup.exe)

1 / 68      (Adware)
http://free-pcsoft.com/?dl=1&pi=AzMROZLdOTgdNg==&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXznRNZidOTMFASDPDdlChV8yAzcFOTa3AZaz&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0Aza1ATCyAZMq  (javaruntimeenvironmentsetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=NZc4NZi0ATA=&osos=VdluDrW3cw==&chnl=b_sa_chwin8&dr=cHaWck1E dWE rLtDK5y2rgm2r0Wc32lDXi1vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzCzAjgFOZMFASDPDdlChV80AzizNzczAjiy&pd=2323UENJDEx37XvlUK2l2kFj d0=&campaignId=9jn0Azi3OZAdAZMq  (googleearthsetup.exe)

0 / 68
http://free-pcsoft.com/?dl=1&pi=Ajg4NzcRNzg0Ni==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzi1AZMzOZMFASDPDdlChV8ROTMwAja4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Ajg4NzMdAZMq  (208190.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATi1ATa4AZCzNw==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzMdAZMzOZMFASDPDdlChV81OZawAja4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzMRNTayAZMq  (googlechromesetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATi4OZcdAjgFOi==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck13IKFy7Xam2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKDyvmNjhLDSvmNBDz1mcQDjhTnmDZ0wvmNpDZ1fAznFNj7FAZCRvm5EIKiWXzCzAjgzNzcwAjA=&pd=2323Um5wcHAtDdV0UmNJ i==&campaignId=9jn0Azi0NziwAZMq  (winrarsetup.exe)

1 / 68      (Adware)
http://free-pcsoft.com/?dl=1&pi=Ajg4NzcyAZgzAw==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1TxSDj rcWDK4m7z0RvmiWAkDjIKiWXzaFAjAzOZMFASDPDdlChV8dAznyNzA4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0Ajc3AZMdAZMq  (googlechromesetup.exe)

1 / 68      (Adware)
http://free-pcsoft.com/?dl=1&pi=AznzNTL0NTLFAw==&osos=VdluDrW3cw==&chnl=b_sa_sign_win8&dr=c3aW7mcm2r0Wc32lDXimcHaWck1q7XDPvmCWcyDEcmlChSDBDz1w2kDj7z1kLQDj rcWcHim7z0RvmiWAkDjIKiWXzARNZidOTMFASDPDdlChV84AZCyAZA3AZaz&pd=2323UmxJ2d4tDdV0UmNJ i==&campaignId=9jn0AzidAzCdAZMq  (javaruntimeenvironmentsetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATa3AZn1NzA3Ng==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1mcmWz2H2pcmLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXz70Nzi4OTMFASDPDdlChV80NzA0NzARATaz&pd=2323Umluc3xP rwtDrW3 QFj d0=&campaignId=9jn0AzidOZgyAZMq  (frostwiresetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=NjMFAziyNZMy&osos=VdluDrW3cw==&dr=cHaWck13IKFP XMm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1vxkDj rcWDK4m7z0RvmiWAkDjIKiWXzMwAzM3OTMFASDPDdlChV8zOZgRNTi4AZaz&pd=2323UmxJ2d4tcrWwUmNJ i==&campaignId=9jn0AzM4OZi4AZMq  (winampsetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATi1ATAwAz7dAM==&osos=VdluDrW3cw==&dr=cHaWck1jIHvJ KLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1HiQDj rcWDK4m7z0RvmiWAkDjIKiWXzMdAZMzOZMFASDPDdlChV81OZawAja4ATiy&pd=2323UExJck1EIXDlUmNJ i==&campaignId=9jn0AzMdNjcwAZMq  (googlechromesetup.exe)

1 / 68      (Adware)
http://free-pcsoft.com/?dl=1&pipi=Ajg4NzcRNZAdAi==&osos=VdluDrW3cw==&dr=cHaWck1E dWE rLtDHvp2mLm2r0Wc32lDXiyvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzLRNjiRAzn0ASDPDdlChV81NjgyOTMzATMz&pd=2323UmxJ2dFB d5CUKRlDdVuDr5yeSFj d0=&campaignId=9jn0Aj74ATLwAZMq  (googledrivesetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=AznFOTiwNjLyNM==&osos=VdluDrW3cw==&chnl=b_sa_ch&dr=cHaWck1E2r5fSVDfcd5uXd5uDHvl7XAm2r0Wc32lDXidvENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1sLQDj rcWDK4m7z0RvmiWAkDjIKiWXziRAZcFOTMFASDPDdlChV8zNzcyAZnzATaz&pd=2323Umtp2dCtc3VuUmNJ i==&campaignId=9jn0AzA4OTM4AZMq  (gtaivsanandreassetup.exe)

1 / 68      (Adware)
http://free-pcsoft.com/?dl=1&pi=Ajg4NzcyAzi3Ai==&osos=VdluDrW3cw==&dr=cHaWck10DK5t2mll2dVyvExthXN3DKV0AQDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV84AZg0OTgwOTnm7K2pDZ1fOZnFOZgyAza0Ag==&pd=2323UmDyDKVBDK2l mxPcECu7dWt&campaignId=9jn0AjgwNzgdAZMq  (teamviewersetup.exe)

1 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=ATMFOTMzNjnzAM==&osos=VdluDrW3cw==&dr=cHaWck1mIXvlDmW4vExthXN3DKV0NSDzcj1QDyDphXAmD3vpDZ0m rcWDK4m7dAWVVAm7dREhKVuvmAWASDChTMm7dlChV8FAZ7dOTgwOTnm7K2pDZ1fOZMFAj71Aza0Ag==&pd=2323UEvP2rLt2XNlUmNJ i==&campaignId=9jn0AjC0NTCyAZMq  (firefoxsetup.exe)

6 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=Ajg4NzcRAzAFAg==&osos=VdluDrW3cw==&dr=cHaWck1tIKFl73vPDEim2r0Wc32lDXi1vENyhKvEvmCWcyDEcmlChSDBDz1l QDj7z1VLyDj rcWDK4m7z0RvmiWAkDjIKiWXzcRATgFOZMFASDPDdlChV83AZMwAjczAjiy&pd=2323UmRlDdVuDrVyeS1PcHszUmNJ i==&campaignId=9jn0Ajg3OZCdAZMq  (minecraftsetup.exe)

4 / 68      (PUP)
http://free-pcsoft.com/?dl=1&pi=Ajg4NzcyAzi3Ai==&osos=VdluDrW3cw==&dr=cHaWck1tDKxp7S1w r5FDXam2r0Wc32lDXimc3aW7mcmIT1zvm2yIKiWvmREhKVuvmNjhVVTvmNBDz1l QDjhTnmDZ0wvmNpDZ1fNZa0OZMyATiRvm5EIKiWXzCFOZa1ATCzOZa=&pd=2323UEVw rWPDk1C 32uUmNJ i==&campaignId=9jn0AjCRNjayAZMq  (windowsmediaplayersetup.exe)

 
Latest 30 of 32 download URLs

The following 3 files have been seen to comunicate with free-pcsoft.com in live environments.

TCP » 54.84.143.69:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 54.84.143.69:80
notifier64.exe (Notifications)

TCP » 54.84.143.69:80
ContentFinder.exe (ContentFinder by ContentFinder Company)

URL:
http://free-pcsoft.com/

Google Analytics:
UA-54135222

Title:
“Download Manager”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.4.7

free-pcsoft.info

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.