home

recuva.softonic.com

Domain Information

This domain is owned and operated by Softonic International.
Server location:
Catalonia, Spain (ES)

ASN:
AS51773 SOFTONIC-AS SOFTONIC INTERNATIONAL S.L.

Root domain:
softonic.com

Registered by:
Softonic International

Scanner detections:
Adware/unwanted app distribution

Scan engine
Details
Detections

Vba32 AntiVirus
Malware-Cryptor.Win32.General.4
50.00%

ESET NOD32
Win32/Bundled.Toolbar.Google
50.00%

ESET NOD32
Win32/Bundled.Toolbar.Google.D potentially unsafe application
50.00%

Reason Heuristics
PUP.Bundle.Toolbar (M)
50.00%

The domain recuva.softonic.com has been seen to resolve to the following IP address.

46.28.209.1
www.softonic.com
December 1, 2014

File downloads found at URLs served by recuva.softonic.com.

2 / 68
http://recuva.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvGBwIpOyJQHULsGkn/5HGzfdnWqxccihnG5l29VD27XNhp07D5Ack6W2VUkEUX83BdiBsP7g/.../KfxC1qM6JrY=  (rcsetup149.exe)

0 / 68
http://recuva.softonic.com/descargar#  (video recuva.htm)

2 / 68
http://recuva.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvGBwIpOyJQHULsGkn/.../aWr4tIbm7l zj I0uC5NI2AUtMJtnAW9he2gRUdc 2hJdgLgpxL0121A=  (rcsetup151.exe)

The following file have been seen to comunicate with recuva.softonic.com in live environments.

TCP » 46.28.209.1:80
{blocked}.exe

softonic.com.br

softonic.com.it

softonic.com.fr

softonic.com.de

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.