home

nvidia-forceware.en.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Adware/unwanted app distribution

Scan engine
Details
Detections

McAfee
Artemis!CAA1A2D623A8
100.00%

Malwarebytes
PUP.Optional.Softonic.A
100.00%

Kaspersky
not-a-virus:Downloader.Win32.Agent
100.00%

Agnitum Outpost
PUA.Softonic
100.00%

Dr.Web
Adware.Downware.1657
100.00%

VIPRE Antivirus
Trojan-Downloader.Win32.Agent
100.00%

ESET NOD32
Win32/SoftonicDownloader (variant)
100.00%

Rising Antivirus
PE:Malware.Obscure/Heur!1.9E03
100.00%

Reason Heuristics
Bundler.PPI.Softonic
100.00%

The domain nvidia-forceware.en.softonic.com has been seen to resolve to the following IP address.

46.28.209.13
February 27, 2016

File downloads found at URLs served by nvidia-forceware.en.softonic.com.

0 / 68
http://nvidia-forceware.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAO1kze7L2OAYlu bKkCgXAUstDgjxX0U0wk80UXN2vlVDz5d3zwdlbQlcpsWMPQOtPVsD vtTFJuYRFuJP2ECoykCuT5UoVBGdEQbVcxvg2s8uRRitAKo2br2fVj5fTlxYuOqNt8PDSYOlxsioL4M170dEKeZz6hRlcna7EukfwaA==  (91.31_winxp2kmce_international_whql.exe)

9 / 68      (PUP)
http://nvidia-forceware.en.softonic.com/universaldownloader-launch  (softonicdownloader_for_nvidia-forceware.exe)

0 / 68
http://nvidia-forceware.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAO1kze7L2OAYlu bKkCgXAUstDgjxX0U0wk80UXN2vlVDz5d3zwdlbQlcpsWMPQOtPVsD vtTFJuYRFuJP2ECoykCuT5UoVBGdEQbVcxvg2s8uRRitAKo2br2fVj5fTlxYuOqNt8PDSYOlxsioL4M170dEKeZz6hRlcna7EukfwaA==  (91.31_winxp2kmce_international_whql.exe)

The following 4 files have been seen to comunicate with nvidia-forceware.en.softonic.com in live environments.

TCP » 46.28.209.13:80
OrbitDM.exe (Orbit Downloader by Orbitdownloader.com)

TCP » 46.28.209.13:80
kmp_3.8.0.122.exe (Softonic Downloader by Softonic)

TCP » 46.28.209.13:80
Client.exe

TCP » 46.28.209.13:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.