The domain ttb.softdls.com registered by Tuguu SLU was initially registered in March of 2012 through SOLUCIONES CORPORATIVAS IP,SLU. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Portland, Oregon within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform from the US West (Oregon) region datacenter.
Registrar:
SOLUCIONES CORPORATIVAS IP, SL
Server location:
Oregon, United States (US)
Create date:
Tuesday, March 27, 2012
Expires date:
Monday, March 27, 2017
Updated date:
Thursday, October 15, 2015
ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.SmartSecureSoftwareSl.BB, PUP.SmartSecureSoftwareSl.M, Threat.Win.Reputation.IMP, PUP.VolvanPremiumSL.Q, PUP.Softpulse.Appsecure.Bundler (M), PUP.Tuguu.Bundler (M), PUP.Softpulse.Bundler (M), PUP.Softpulse.SmartSecureSoftwareSl.Bundler (M), PUP.Softpulse.VolvanPr.Bundler (M), PUP.Softpulse.SmartSec.Bundler (M), PUP.Softpulse.Appsecur.Bundler (M), PUP.Softpulse (M)
100.00%
Avira AntiVirus
TR/Dropper.Gen, SPR/Dldr.Agent.cdvd, PUA/Softpulse.rtfa
35.71%
AVG
Found Win32/DH{gRJ UIEHeVRPFVGBFYEJHFOBE0GBDw}, Generic
35.71%
Panda Antivirus
Trj/Genetic.gen
35.71%
VIPRE Antivirus
Threat.4783235, Threat.4150696
28.57%
avast!
Win32:GenMalicious-HN [PUP], Win32:GenMalicious-RJ [PUP], Win32:SoftPulse-BB [PUP]
28.57%
McAfee
Program.Socrydo, SoftPulse
28.57%
K7 AntiVirus
Unwanted-Program
28.57%
ESET NOD32
Win32/SoftPulse.J potentially unwanted application, Win32/SoftPulse.Q potentially unwanted application, Win32/SoftPulse.X potentially unwanted application
21.43%
Sophos
Smart Secure Software, Adware.SoftPulse
21.43%
herdProtect (fuzzy)
a variant of 87dee090fce7a942f70f22608ac3c07d3ec0a1cc, a variant of 4bf1b19f1f80e95fffa88eb4d147c5e76a7654b3, a variant of 298bf6e61ed1af52a066788f407a03dee8b8a108
21.43%
Dr.Web
Trojan.DownLoader11.32266, Adware.SoftPulseENT.1, Trojan.Domaiq.131
21.43%
Malwarebytes
PUP.Optional.DomaIQ, PUP.Optional.SoftPulse
21.43%
G Data
Win32.Application.Softpulse, Gen:Variant.Application.Bundler.SoftPulse, Win32.Application.DriverUpd
21.43%
Vba32 AntiVirus
BScope.Adware.Softpulse, Signed-Adware.Softpulse, suspected of Trojan.Downloader.gen.h
21.43%
The domain ttb.softdls.com has been seen to resolve to the following 4 IP addresses.
ec2-54-149-159-30.us-west-2.compute.amazonaws.com
August 19, 2015
ec2-52-10-156-255.us-west-2.compute.amazonaws.com
August 19, 2015
ec2-54-201-201-245.us-west-2.compute.amazonaws.com
August 17, 2014
ec2-50-112-177-75.us-west-2.compute.amazonaws.com
August 17, 2014
File downloads found at URLs served by ttb.softdls.com.
The following 2 files have been seen to comunicate with ttb.softdls.com in live environments.
URL:
http://ttb.softdls.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
nginx (PHP/5.3.10-1ubuntu3.17)