Adware distribution site from Adlogica using a customized download manager such as the iBryte Optimum Installer. The site provides users with downloadble software bundled with various potentially unwanted software such as web browser toolbars and search hijackers including Babylon, Funmmods and Search.us. The domain downloader2.downloadinfo.co is registered by proxy through GODADDY.COM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Downloadinfo who is located in SAN FRANCISCO, California in the United States.
Northern Ireland, United Kingdom (GB)
Thursday, September 27, 2012
Monday, September 26, 2016
Sunday, September 27, 2015
Detections (92% detected)
PUP.Installer.OutBrowse.F, PUP.Adknowledge.INSTALLDOTEXE.Installer (M), PUP.installCore.SecureInstaller.Installer (M), PUP.installCore.SecureInstaller (M), PUP.Outbrowse.Bundler (M), PUP.Adknowledge.TINYINSTALLER.Installer (M), PUP.Adknowledge.PremiumInstaller.Installer (M), PUP.Adknowledge.WARPINSTALL.Installer (M), PUP.Adlogica.FastDownloads.Bundler (M), PUP.Adlogica.QuickDownloader.Bundler (M), PUP.Downloadius.Downloadious.Installer (M), PUP.Adknowledge.OptimumInstaller.Installer (M)
OutBrowse, Threat.4786018, Trojan.Win32.Kryptik.blxe, Conduit, InstallCore, Threat.4778314, Trojan.Win32.Generic, Threat.4150696
Adware.Downware.1664, Adware.InstallCore.133, Adware.Downware.1554, Trojan.MulDrop4.64479, Trojan.Siggen6.14707, Trojan.Packed.28561, Trojan.Packed.30508, Trojan.Crossrider1.49350
OutBrowse, PUA 'Install Core', PUA 'iBryte Optimum Installer', Mal/Generic-S
Win32:Malware-gen, Win32:PUP-gen [PUP], Win32:OutBrowse-CH [PUP], Win32:IBryte-BY [PUP], Win32:Somoto-N [PUP], Win32:Installer-J [PUP]
Win32/InstallCore.BY potentially unwanted application, Win32/InstallCore.GQ potentially unwanted application, Win32/Adware.iBryte.CB.Gen application, Win32/InstallCore.DF potentially unwanted application, Win32/InstallCore.BL potentially unwanted application
W32/A-dbe1ec51, W32/S-352b3331, W32/DomaIQ.G2.gen, W32/DomaIQ.G.gen, W32/InstallCore.R.gen, W32/Ibryte.C.gen
K7 Gateway Antivirus
Unwanted-Program , Adware , Riskware , Trojan , Backdoor
Unwanted-Program , Adware , Riskware
Downloader.OutBrowse, Downware.InstallCore, SScope.Malware-Cryptor.iBryte, suspected of Trojan.Downloader.gen.h, Downloader.Agent
OutBrowse, Adware InstallCore.WH, Adware Skodna.Generic, Adware AdPlugin, Generic_s, Adware InstallCore.VA, Adware Generic5
Trojan.OutBrowse.r5, PUA.Quickdownl.Gen, Adware.iBryte.EK4, Adware.iBryte.DK4, Downloader.Agent.r4 (Not a Virus), PUA.Optimumins.Gen
PUP.Optional.Smart, PUP.Optional.InstallCore, PUP.Optional.OptimumInstaller.A, PUP.Optional.Ibryte
PUA.OutBrowse, PUA.InstallCore, Riskware.AdWare, PUA.Downloader, Adware.iBryte
McAfee Web Gateway
Artemis!E5E1996838AE, BehavesLike.Win32.CryptInno.jc, BehavesLike.Win32.Sality.jc, BehavesLike.Win32.Expiro.tc, BehavesLike.Win32.Trojan.dc
The domain downloader2.downloadinfo.co has been seen to resolve to the following 9 IP addresses.
August 1, 2014
May 1, 2014
File downloads found at URLs served by downloader2.downloadinfo.co.
Latest 30 of 210 download URLs
The following 183 files have been seen to comunicate with downloader2.downloadinfo.co in live environments.