api.kbm2.com

Moniker Privacy Services  (Proxy Registrant)

Domain Information

The domain api.kbm2.com is registered by proxy through Moniker Online Services and was originally registered in December of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Florida, New York within the United States which resides on the Rook Media USA, Inc. network.
Remove Malware from api.kbm2.com - Powered by Reason Core Security
Registrar:
Moniker Online Services

Server location:
New York, United States (US)

Create date:
Friday, December 16, 2011

Expires date:
Friday, December 16, 2016

Updated date:
Wednesday, November 19, 2014

ASN:
AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc,VG

Root domain:

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.sterkly.H, PUP.Installer.BestDownloadManager.I, Adware.Installer.SimpleLeads.M, Adware.Installer.sterkly.T, PUP.Installer.BestDownloadManager.L, PUP.Installer.BestDownloadManager.E, PUP.Installer.sterkly.I, PUP.Yontoo.sterkly.Installer (M)
100.00%

VIPRE Antivirus
sterkly LLC, Threat.4782986
94.87%

Dr.Web
Adware.Plugin.85, Adware.Downware.662, Adware.Downware.1175, Adware.Plugin.18, Adware.Plugin.13
92.31%

ESET NOD32
Win32/KBM (variant), Win32/KBM.A potentially unwanted
87.18%

Trend Micro House Call
TROJ_GEN.R047H01GT13, TROJ_GEN.F47V1216, TROJ_GEN.F47V0201, HV_ZYX_BL132A80.TOMC, TROJ_GEN.F47V1217, TROJ_GEN.F47V1116, TROJ_GEN.F47V1127, TROJ_GEN.F47V0813, TROJ_GEN.F47V0319
79.49%

AVG
AdInject.Sterkly, AdInject.Bdmngr
74.36%

Agnitum Outpost
Riskware.Agent
71.79%

McAfee
Artemis!CF353635510D, Artemis!EBF6D0316D83, Artemis!001529AB0AB4, Artemis!8D4C47D900B9, Artemis!9C41EB22A576, Artemis!88BCBA632220, Artemis!3C87979A32B5, Artemis!34075C6B7DCD, Artemis!113D1252986B, Artemis!9D06144E0042, Artemis!AA6BD34C0CEF, Artemis!9FD43A604812, Artemis!2F4838350D84, Artemis!DAB4377D4A20
66.67%

Malwarebytes
PUP.Optional.BundleInstaller.A, PUP.AdBundle
66.67%

Fortinet FortiGate
Riskware/MultiPlug, Riskware/InstallIQ, Riskware/KBM, W32/Vittalia.J
64.10%

McAfee Web Gateway
Artemis!CF353635510D, Artemis!EBF6D0316D83, Artemis!001529AB0AB4, Artemis!8D4C47D900B9, Artemis!9C41EB22A576, Artemis!88BCBA632220
61.54%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud), Win32.Troj.Undef.(kcloud)
30.77%

NANO AntiVirus
Riskware.Win32.Plugin.cxiows, Riskware.Win32.Plugin.deanuz
25.64%

IKARUS anti.virus
AdWare.Win32.KBM, PUA.KBM
23.08%

avast!
Win32:Adware-AJR [PUP]
20.51%

The domain api.kbm2.com has been seen to resolve to the following 3 IP addresses.

November 25, 2015

February 8, 2014

August 4, 2013

File downloads found at URLs served by api.kbm2.com.

1 / 68      (Adware)
http://api.kbm2.com/downloadLauncher.ashx?cid=32  (mediaplayerclassicsetup.exe)

12 / 68    (Adware)

14 / 68    (Adware)

16 / 68    (Adware)

12 / 68    (Adware)

11 / 68    (Adware)

8 / 68      (Adware)

16 / 68    (Adware)

11 / 68    (Adware)

11 / 68    (Adware)

9 / 68      (PUP)

12 / 68    (Adware)

12 / 68    (Adware)

10 / 68    (Adware)

13 / 68    (Adware)

11 / 68    (Adware)

12 / 68    (Adware)

11 / 68    (Adware)

11 / 68    (Adware)

11 / 68    (Adware)

9 / 68      (Adware)

11 / 68    (Adware)

12 / 68    (Adware)

11 / 68    (Adware)

11 / 68    (Adware)

9 / 68      (Adware)

5 / 68      (Adware)

13 / 68    (Adware)

 
Latest 30 of 40 download URLs

URL:
http://api.kbm2.com/

Title:
“kbm2.com”

Web server:
Apache

Remove Malware from api.kbm2.com - Powered by Reason Core Security