The domain freempr9.softsofast.com is registered by proxy through SOLUCIONES CORPORATIVAS IP,SLU and was originally registered in September of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Madrid, Madrid within Spain which resides on the RIPE Network Coordination Centre network.
Registrant:
Only contact by email, all postal mail will be rejected
Registrar:
SOLUCIONES CORPORATIVAS IP,SLU
Server location:
Madrid, Spain (ES)
Create date:
Thursday, September 11, 2014
Expires date:
Friday, September 11, 2015
Updated date:
Thursday, September 11, 2014
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.VittaliaInternetSL.CC, PUP.Zoobam.CC, PUP.Zoobam.e, PUP.Tightrope.Bundler, PUP.AstroDeliveryFriedCookie.CC, PUP.Installer.DownloadAssistant.e, PUP.Installer.Air Software, PUP.Bundler.Vittalia, PUP.Vittalia.VittaliaInternetSL.Bundler (M), PUP.InstallCore.Installer (M), PUP.Air Software.DownloadAssistant.Bundler (M), PUP.Tightrope.Statscom.Bundler (M), PUP.Air Software.Download.Bundler (M), PUP.Vittalia.Bundler (M), PUP.InstallCore.FC (M), PUP.Tightrope.Sanflex.Bundler (M), PUP.Tightrope.Zoobam.Bundler (M), PUP.Tightrope (M)
96.30%
VIPRE Antivirus
Adware.InstallCore, DownloadAdmin, Threat.4783369, Trojan.Win32.Generic, Threat.4782985, Threat.5063361
51.85%
Malwarebytes
PUP.Optional.Vittalia, PUP.Optional.DownloadAdmin, PUP.Optional.FriedCookie, PUP.Optional.DownloadAssistant, PUP.Optional.InstallCore
48.15%
Sophos
Generic PUA CH, Generic PUA MP, DownloadAdmin, AirInstaller, Generic PUA NI, PUA 'AirInstaller', PUA 'Install Core Click run software'
44.44%
K7 AntiVirus
Unwanted-Program , Trojan
40.74%
Dr.Web
Trojan.Packed.28459, Adware.Downware.2220, Trojan.InstallCore.15, Adware.Conduit.170, Trojan.Vittalia.2
40.74%
Avira AntiVirus
ADWARE/InstallCore.Gen9, ADWARE/Adware.Gen, Adware/InstallCore.rfpa, APPL/Downloader.Gen
40.74%
ESET NOD32
Win32/InstallCore.QH (variant), Win32/DownloadAdmin (variant), Win32/InstallCore.QW (variant), Win32/InstallCore.QF (variant)
33.33%
Agnitum Outpost
Riskware.Agent, PUA.InstallCore
29.63%
G Data
Application.Bundler.GA, Win32.Application.DownloadAdmin, Application.Bundler.FX, Win32.Application.InstallCore.CM, Application.Bundler.KJ
29.63%
Fortinet FortiGate
Riskware/InstallCore, Riskware/DownloadAdmin
25.93%
Baidu Antivirus
Adware.Win32.Bbylon, Adware.Win32.DownloadAdmin, Adware.Win32.InstallCore, Trojan.Win32.Addrop
25.93%
NANO AntiVirus
Riskware.Win32.Conduit.dhhkky, Riskware.Win32.InstallCore.dimyzq, Riskware.Win32.Downware.djahkt, Trojan.Nsis.Downloader.dqlxfr
25.93%
F-Prot
W32/InstallCore.AC.gen, W32/A-9949dfbf, W32/A-cd1300c2, W32/InstallCore.AG.gen, W32/S-92ce39bf
22.22%
The domain freempr9.softsofast.com has been seen to resolve to the following 2 IP addresses.
File downloads found at URLs served by freempr9.softsofast.com.
The following file have been seen to comunicate with freempr9.softsofast.com in live environments.
URL:
http://freempr9.softsofast.com/
Web server:
nginx/1.1.19 (PHP/5.3.10-1ubuntu3.9)