home

mozilla-thunderbird.en.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Detections  (83% detected)

Scan engine
Details
Detections

Reason Heuristics
Bundler.PPI.Softonic.m, Bundler.PPI.Softonic.k, Bundler.PPI.Softonic.n, PUP.Softonic.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.Softonic.A
60.00%

Agnitum Outpost
PUA.Softonic, PUA.Downloader
60.00%

Dr.Web
Adware.Downware.2454, Adware.Downware.6706, Adware.Downware.4164
60.00%

VIPRE Antivirus
Softonic Downloader, Threat.4786139
60.00%

Baidu Antivirus
Adware.Win32.SoftonicDownloader
60.00%

ESET NOD32
Win32/SoftonicDownloader (variant)
40.00%

Fortinet FortiGate
Riskware/Softonicdownloader
40.00%

McAfee
Artemis!24C434F566F3, Artemis!77450B7F9C82
40.00%

K7 AntiVirus
Unwanted-Program
40.00%

Comodo Security
Application.Win32.Agent.SOFE
20.00%

Rising Antivirus
PE:Malware.Obscure/Heur!1.9E03
20.00%

Trend Micro House Call
TROJ_GEN.F47V0326
20.00%

Bkav FE
W32.Clod543.Trojan
20.00%

ESET NOD32
Win32/SoftonicDownloader.G potentially unwanted application
20.00%

The domain mozilla-thunderbird.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13
April 14, 2014

File downloads found at URLs served by mozilla-thunderbird.en.softonic.com.

1 / 68      (PUP)
http://mozilla-thunderbird.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_mozilla-thunderbird.exe)

1 / 68      (PUP)
http://mozilla-thunderbird.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_mozilla-thunderbird.exe)

0 / 68
http://mozilla-thunderbird.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANs2rDG86M7OZm0W2c 1FX8vGiFSwHUDQ7ZR3fNcX5WDxstrn fVASZyiYbzj840l42H8VP j8B8j5VNiZsYf/.../VUcJuB27GffYpX0CI9BH83VlZdvMeBiQaS5E cL5LKeEjRNro8R3V8rX0a 5T8sinMgdKUlEzPhow==  (thunderbird setup 24.0.exe)

9 / 68      (Adware)
http://mozilla-thunderbird.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_mozilla-thunderbird.exe)

14 / 68    (Adware)
http://mozilla-thunderbird.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_mozilla-thunderbird.exe)

13 / 68    (PUP)
http://mozilla-thunderbird.en.softonic.com/universaldownloader-launch  (SoftonicDownloader.exe )

The following 4 files have been seen to comunicate with mozilla-thunderbird.en.softonic.com in live environments.

TCP » 46.28.209.13:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80
kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80
Client.exe

TCP » 46.28.209.13:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.