home

rarzilla-free-unrar.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PhilippBWinterberg.Installer (M), PUP.Softonic.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.OpenCandy
50.00%

Trend Micro House Call
TROJ_GEN.F47V1210
50.00%

Agnitum Outpost
Riskware.OpenCandy
50.00%

Dr.Web
Adware.OpenCandy.7
50.00%

ESET NOD32
Win32/OpenCandy potentially unsafe application
50.00%

Rising Antivirus
PE:PUF.OpenCandy!1.9DE5
50.00%

Fortinet FortiGate
Riskware/OpenCandy
50.00%

Sophos
PUA.OpenCandy
50.00%

G Data
NSIS.Application.OpenCandy
50.00%

The domain rarzilla-free-unrar.softonic.com has been seen to resolve to the following IP address.

46.28.209.1
www.softonic.com
December 19, 2015

File downloads found at URLs served by rarzilla-free-unrar.softonic.com.

10 / 68    (Adware)
http://rarzilla-free-unrar.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../mxkTyRvWgA vWPm3dAwTy2IVOhqGKkVxM7OzT69YgOd4c=  (InstallRarZilla.exe)

1 / 68      (PUP)
http://rarzilla-free-unrar.softonic.com/universaldownloader-launch  (softonicdownloader_para_rarzilla-free-unrar.exe)

The following file have been seen to comunicate with rarzilla-free-unrar.softonic.com in live environments.

TCP » 46.28.209.1:80
{blocked}.exe

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.