Adware distribution site from Adlogica using a customized download manager such as the iBryte Optimum Installer. The site provides users with downloadble software bundled with various potentially unwanted software such as web browser toolbars and search hijackers including Babylon, Funmmods and Search.us. The domain downloader.downloadinfo.co is registered by proxy through GODADDY.COM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Downloadinfo who is located in SAN FRANCISCO, California in the United States.
Northern Ireland, United Kingdom (GB)
Thursday, September 27, 2012
Monday, September 26, 2016
Sunday, September 27, 2015
Detections (85% detected)
W32/Sality.AT, ADWARE/InstallCore.Gen, Adware/InstallCo.HK, APPL/Downloader.Gen, APPL/Softpulse.Gen8, Adware/Agent.909545
Win32.Sector.21, Adware.InstallCore.86, Adware.InstallCore.80, Adware.Downware.693, Adware.InstallCore.86, Adware.InstallCore.122, Trojan.Crossrider1.49350
InstallCore, Trojan.Win32.Generic, Threat.4791934, Threat.4783235, Optimum Installer, Threat.4778314, Threat.4150696, Threat.4786018
W32/Sality.gen2, W32/InstallCore.W2.gen, W32/InstallCore.S.gen, W32/InstallCore.W.gen, W32/InstallCore.R.gen, W32/Ibryte.C.gen
Install Core, PUA 'iBryte Optimum Installer', PUA.iBryte Optimum Installer, PUA 'Install Core'
ApplicUnwnt, UnclassifiedMalware, ApplicUnwnt.Win32.AdWare.iBryte.H, Application.Win32.Agent.I
PUP.InstallCore.Installer.EE, PUP.ThinkLABsCoKG.J, PUP.Installer.DigitalPluginSL.F, PUP.Installer.Adknowledge, PUP.Bundler.Adknowledge, Threat.Adknowledge.Bundler, Threat.Win.Reputation.IMP, PUP.Adknowledge.OptimumInstaller.Installer (M), PUP.installCore.SecureInstaller (M), PUP.installCore.SecureInstaller.Installer (M)
PE:Malware.XPACK-LNR/Heur!1.5594, PE:Malware.InstallCore!6.4, PE:Trojan.Win32.Rouge.d!1075354374, PE:Malware.InstallCore!6.4[F1]
Unwanted-Program , Adware
Adware.InstallCore.gen, Downware.InstallCore, Downware.VB.AndreClient, BScope.Adware.Softpulse, SScope.Adware.OptimusInstaller.26607
K7 Gateway Antivirus
Unwanted-Program , Adware , Backdoor
Win32/InstallCore.BL potentially unwanted application, Win32/DownloadSponsor.A potentially unwanted application, Win32/Adware.iBryte.G application
AhnLab V3 Security
Packed/Win32.InstallCore, PUP/Win32.InstallCore, PUP/Win32.SmartSecure, Adware/Win32.Agent
McAfee Web Gateway
Artemis!2DDD9860F6B8, Artemis!F13CBBFF5A93, BehavesLike.Win32.CryptDoma.tc, Artemis!F01CFFC90ED5, Adware-FOO!808D236FC62D
Adware Generic5.BDFX, Adware Skodna.Bundle.BF.dropper, Adware Generic5.ABMW, Adware Generic5.BDFT, Adware Generic5.ZQX
The domain downloader.downloadinfo.co has been seen to resolve to the following 7 IP addresses.
May 5, 2015
May 1, 2014
File downloads found at URLs served by downloader.downloadinfo.co.
Latest 30 of 58 download URLs
The following 183 files have been seen to comunicate with downloader.downloadinfo.co in live environments.