home

dbb.freevideosoftwaredownload.com

Domains By Proxy, LLC  (Proxy Registrant)

Domain Information

The domain dbb.freevideosoftwaredownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in August of 2012. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Akamai Technologies, Inc. network.
Registrar:
GODADDY.COM, LLC

Server location:
Massachusetts, United States (US)

Create date:
Monday, August 20, 2012

Expires date:
Thursday, August 20, 2015

Updated date:
Thursday, August 21, 2014

ASN:
AS20940 AKAMAI-ASN1 Akamai International B.V.

Root domain:
freevideosoftwaredownload.com

Whois:
2 freevideosoftwaredownload.com records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Quick Heal
Adware.Babylon (Not a Virus)
100.00%

Avira AntiVirus
Adware/Bundlore.C
100.00%

Reason Heuristics
PUP.Bundlore.Q
100.00%

Bkav FE
W32.Clod2ce.Trojan
100.00%

K7 AntiVirus
Riskware
100.00%

AVG
MultiBundle.H
100.00%

McAfee
GenericTRA-BJ!6E6FA0C56CD7
100.00%

Comodo Security
TrojWare.Win32.Agent.iwb
100.00%

Rising Antivirus
PE:Trojan.Win32.Generic.1336005F!322306143
100.00%

Malwarebytes
PUP.BundleInstaller.VG
100.00%

Trend Micro House Call
TROJ_SPNR.28JP12, ADW_BUNDTRACK
100.00%

Dr.Web
Adware.Downware.453, Adware.Downware.459
100.00%

VIPRE Antivirus
Bundlore
100.00%

Trend Micro
TROJ_SPNR.28JP12, TROJ_GEN.R0CBC0EHM13
100.00%

AhnLab V3 Security
PUP/Win32.BundleInstaller
100.00%

The domain dbb.freevideosoftwaredownload.com has been seen to resolve to the following 4 IP addresses.

23.0.160.32
a23-0-160-32.deploy.static.akamaitechnologies.com
December 2, 2014

23.0.160.8
a23-0-160-8.deploy.static.akamaitechnologies.com
December 2, 2014

23.67.250.136
a23-67-250-136.deploy.static.akamaitechnologies.com
April 11, 2014

23.67.250.145
a23-67-250-145.deploy.static.akamaitechnologies.com
April 11, 2014

File downloads found at URLs served by dbb.freevideosoftwaredownload.com.

33 / 68    (Adware)
http://dbb.freevideosoftwaredownload.com/download/bin/.../video_downloader.exe  (be74e42570dd60a90d7f4fc13729454f)

24 / 68    (Adware)
http://dbb.freevideosoftwaredownload.com/download/bin/.../video_downloader.exe  (be7c9b775e78f549dfb7a38e669f7a9c)

The following 52 files have been seen to comunicate with dbb.freevideosoftwaredownload.com in live environments.

TCP » 23.0.160.32:80
sidebar.exe (Windows Sidebar by Microsoft)

TCP » 23.0.160.32:80
chmjbmkmgbfcjchbimamdpopjkmkbioi.crx

TCP » 23.0.160.32:80
ibehpgcbmjfhlhkdppkmamhghpkjpgah.crx

TCP » 23.0.160.32:80
chmjbmkmgbfcjchbimamdpopjkmkbioi.crx

TCP » 23.0.160.32:80
hojpcnhghmamaompgncpjnjknhjjhjpm.crx

TCP » 23.0.160.32:80
kpadkachjeoboghibckddaiboolikooa.crx

TCP » 23.0.160.32:80
fcfenhgcgkodlgnjohkljmglclkjpoeb.crx

TCP » 23.0.160.32:80
olekgnofofincahkppkdenpmjeffimph.crx

TCP » 23.0.160.32:80
fcfenhgcgkodlgnjohkljmglclkjpoeb.crx

TCP » 23.0.160.32:80
ngbmnkfdajmegijnmgpclinofpkpfncf.crx

TCP » 23.0.160.32:80
fpnnogogihegcbpaodbnepofjfiepfcb.crx

TCP » 23.0.160.32:80
popkkghdbodfbfmobegcedpjgjapiikg.crx

TCP » 23.0.160.32:80
nofipaokfpfmoiijkdjolhcjhamjccgb.crx

TCP » 23.0.160.32:80
oedbdopeomhfdadjfjalggcfjnfkilbn.crx

TCP » 23.0.160.32:80
iobjjcahfhldcakcacmcomhgepfcppkc.crx

TCP » 23.0.160.32:80
chmjbmkmgbfcjchbimamdpopjkmkbioi.crx

TCP » 23.0.160.8:80
client.exe

TCP » 23.0.160.8:80
proc.exe

TCP » 23.0.160.8:80
s2082.exe (III|I|XL by Installer Setup)

TCP » 23.0.160.8:80
dw20.exe (Microsoft .NET Framework by Microsoft)

 
Latest 20 of 55 files

URL:
http://dbb.freevideosoftwaredownload.com/

Web server:
Apache/2.2.3 (CentOS) (PHP/5.3.26)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.