home

dl.kbm2.com

Moniker Privacy Services  (Proxy Registrant)

Domain Information

The domain dl.kbm2.com is registered by proxy through Moniker Online Services and was originally registered in December of 2011. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Florida, New York within the United States which resides on the Rook Media USA, Inc. network.
Registrar:
Moniker Online Services

Server location:
New York, United States (US)

Create date:
Friday, December 16, 2011

Expires date:
Friday, December 16, 2016

Updated date:
Wednesday, November 19, 2014

ASN:
AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc,VG

Root domain:
kbm2.com

Whois:
1 kbm2.com record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Babylon.K, PUP.Installer.OutBrowse.G, PUP.Installer.Yontoo.K, PUP.Optional.Installer.L, PUP.YolobarInstaller.VisicomMedia.K, PUP.Betwikx.Installer (M), PUP.Sendori.Installer (M)
100.00%

ESET NOD32
Win32/Toolbar.Babylon, Win32/DownWare, Win32/Adware.Yontoo (variant), Win32/OutBrowse
57.14%

VIPRE Antivirus
Babylon, OutBrowse, Yontoo
42.86%

Trend Micro House Call
TROJ_GEN.F47V0723, ADW_BPROTECT, TROJ_GEN.F47V1101
42.86%

Fortinet FortiGate
Adware/Toolbar, Adware/OutBrowse, Riskware/Yontoo
42.86%

Boost by Reason
Adware.Installer.Babylon.K, Trojan.Adw.Installer.OutBrowse.G
28.57%

ViRobot
Trojan.Win32.A.Agent.67584.F, Adware.Babylon.956272
28.57%

Dr.Web
Adware.Toolbar.146, Adware.Siggen.24249
28.57%

Malwarebytes
PUP.Optional.Babylon.A
14.29%

MicroWorld eScan
Win32/Toolbar.Babylon
14.29%

Trend Micro
ADW_BPROTECT
14.29%

Emsisoft Anti-Malware
Trojan.Win32.OutBrowse.AMN
14.29%

AVG
Toolbar.Babylon
14.29%

NANO AntiVirus
Trojan.Html.Plugin.bopldg
14.29%

Norman
Yontoo.BG
14.29%

The domain dl.kbm2.com has been seen to resolve to the following 2 IP addresses.

208.73.210.29
January 4, 2016

8.25.35.126
June 19, 2015

File downloads found at URLs served by dl.kbm2.com.

14 / 68    (Adware)
http://dl.kbm2.com/.../?beta=b0cQF35cWmATAR4zD0I7dktBfzcHE3kdcy5KD0UqP3hQOWkKSxgxYzkaFU4g  (793f35a.tmp)

1 / 68      (PUP)
http://dl.kbm2.com/download/.../IWM1MwYDXycWRGwRR1loNih7XBVtWT9MEEJDDkN2ZUk DklkHBhDLQ==  (7935e4f.tmp)

3 / 68      (PUP)
http://dl.kbm2.com/download/.../aiVMRDNBdwVERjJCTkgrajU=  (strongvault.exe)

1 / 68      (PUP)
http://dl.kbm2.com/.../?beta=Ogx2DHEUJgUgVFd5aVk0IwAOJH4DDX5RKTMfDwIpcTNAM3ASBntEfyJAdBQFOS53cj10SH4QBmdtFUcjaA==  (7935073.tmp)

1 / 68      (Adware)
http://dl.kbm2.com/.../?beta=NglsMmVMZmxDZyAjc2cgLwUXDW0IAkZjaWBmICAwcSFjO2QaRCEzaC1AbSgNYGI6W207RX5 YWIHQicCZmQcXws7A0Rt  (79378b.tmp)

14 / 68    (Adware)
http://dl.kbm2.com/download/.../20120816.exe  (793f35a.tmp)

8 / 68      (Adware)
http://dl.kbm2.com/Download/.../BabylonSetup04042012.exe  (Setup_Stub.exe)

12 / 68    (Adware)
http://dl.kbm2.com/.../Claro20121015.exe  (iClaro.exe)

URL:
http://dl.kbm2.com/

Title:
“kbm2.com”

Web server:
Apache

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.