home

free-wifi-hotspot.en.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bundler.BeijingT.Installer.Meta (M)
50.00%

F-Secure
Win32.Sality.3
50.00%

VIPRE Antivirus
Threat.4721115
50.00%

ESET NOD32
Win32/Sality.NBA virus
50.00%

F-Prot
W32/Sality.gen2
50.00%

Microsoft Security Essentials
Threat.Undefined
50.00%

AVG
Win32/Sality
50.00%

avast!
Win32:SaliCode
50.00%

Emsisoft Anti-Malware
Win32.Sality
50.00%

Dr.Web
Win32.Sector.30
50.00%

Kaspersky
Virus.Win32.Sality
50.00%

Norman
Win32.Sality.3
50.00%

The domain free-wifi-hotspot.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13
February 1, 2016

File downloads found at URLs served by free-wifi-hotspot.en.softonic.com.

11 / 68    (Infected)
http://free-wifi-hotspot.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANI0jFJOXFWHsYqkgKBsD4OZr9unOrm0Vz0CTbU3RL6hrSznfj5vSRSiDylnrl7q38gfKarQTJHmt7ddsHTppfobIbC38ME7NNZOXs7zZg/.../dcc=  (freewifihotspot_ccc.exe)

1 / 68      (PUP)
http://free-wifi-hotspot.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANI0jFJOXFWHsYqkgKBsD4OZr9unOrm0Vz0CTbU3RL6hrSznfj5vSRSiDylnrl7q38gfKarQTJHmt7ddsHTppfobIbC38ME7NNZOXs7zZg/.../dcc=  (freewifihotspot_ccc.exe)

The following 4 files have been seen to comunicate with free-wifi-hotspot.en.softonic.com in live environments.

TCP » 46.28.209.13:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80
kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80
Client.exe

TCP » 46.28.209.13:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.