home

steam_setup.zip

The file steam_setup.zip has been detected as a potentially unwanted program by 4 anti-malware scanners. The file has been seen being downloaded from a.softwaredownloads2.com.
MD5:
a6bc4532d7a6c4b2e57ed985ae7b694e

SHA-1:
154864f9bffdef20cab37c7842f5fd0d24e17232

SHA-256:
014cdbda82e6ee427d80f2b68837ca92a2161b90deeb2047e8c1591cda493508

Scanner detections:
4 / 68

Status:
Potentially unwanted

Explanation:
Bundles additional software, mostly toolbars and other potentially unwanted applications using the Vittalia monitization installer.

Analysis date:
12/26/2024 3:23:24 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
infected with Trojan.Vittalia.157
9.0.1.05190

ESET NOD32
Win32/DownloadAssistant.C potentially unwanted application
7.0.302.0

Kaspersky
not-a-virus:Downloader.Win32.DownloadAsist
15.0.0.562

Sophos
PUA 'Download Assistant' (of type Adware)
5.21

File size:
893.7 KB (915,187 bytes)

Common path:
C:\users\{user}\downloads\steam_setup.zip

The file steam_setup.zip has been seen being distributed by the following URL.

http://a.softwaredownloads2.com/v2/click/pn8b7cor/?d=http://software.every-download.com/SteamSetup.exe&sid=Steam-US-GEM&uid=5588269&key=e0bf352e7393615215770da44270a5ff5b263c12853478616551534411a83e9a&affiliate_image=https://s3.amazonaws.com/evdlimages/.../installer.png&product_image=https://s3.amazonaws.com/evdlimages/.../product.png&n=Steam&filename=Steam_Setup

Remove steam_setup.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.