home

dls.downloadinfo.co

Downloadinfo  (via a Proxy Registrant)

Domain Information

Adware distribution site from Adlogica using a customized download manager such as the iBryte Optimum Installer. The site provides users with downloadble software bundled with various potentially unwanted software such as web browser toolbars and search hijackers including Babylon, Funmmods and Search.us. The domain dls.downloadinfo.co is registered by proxy through GODADDY.COM, INC. and was originally registered in September of 2012. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Seattle, Washington within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform. The domain is associated with the publisher Downloadinfo who is located in SAN FRANCISCO, California in the United States.
Registrar:
GODADDY.COM, INC.

Server location:
Washington, United States (US)

Create date:
Wednesday, September 26, 2012

Expires date:
Friday, September 26, 2014

Updated date:
Wednesday, July 24, 2013

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
downloadinfo.co

Whois:
1 downloadinfo.co record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.Downloadster
100.00%

ESET NOD32
Win32/Toolbar.MyWebSearch (variant)
100.00%

Reason Heuristics
PUP.Installer.Downloadinfo.M, PUP.Installer.Downloadinfo.Q, PUP.Installer.Downloadinfo.S
100.00%

Trend Micro House Call
TROJ_GEN.F47V1019, TROJ_GEN.F47V0902
66.67%

herdProtect (fuzzy)
a variant of 150d3f8a149d3cef36996619841f90fa8b7f2f87, a variant of 9742635ea8319bff131f2e5f31a27e374a9b9294
66.67%

Boost by Reason
Trojan.Adw.Installer.Downloadinfo.M
33.33%

IKARUS anti.virus
Win32.SuspectCrc
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

avast!
Win32:PUP-gen [PUP]
33.33%

Sophos
Ez Toolbar Downloader
33.33%

Dr.Web
Adware.Downware.2468
33.33%

AVG
Skodna.Generic
33.33%

The domain dls.downloadinfo.co has been seen to resolve to the following 2 IP addresses.

205.251.242.188
s3-1-w.amazonaws.com
February 6, 2014

176.32.101.73
December 11, 2013

File downloads found at URLs served by dls.downloadinfo.co.

8 / 68      (Adware)
http://dls.downloadinfo.co/.../adobe_reader_setup.exe  (98bbc3934bc14cc454bbfbfd3b29ec9f)

6 / 68      (Adware)
http://dls.downloadinfo.co/.../winrar_setup.exe  (84ac07aaed3462e55758ced620fb8649)

6 / 68      (Adware)
http://dls.downloadinfo.co/.../angrybirds_setup.exe  (0a042c8b1edac1b575cefd78327d2122)

The following 4 files have been seen to comunicate with dls.downloadinfo.co in live environments.

TCP » 205.251.242.188:80
imf.exe (IObit Malware Fighter by IObit)

TCP » 205.251.242.188:80
imf.exe (IObit Malware Fighter by IObit)

TCP » 205.251.242.188:80
driverscanner.exe (DriverScanner by Uniblue Systems)

TCP » 205.251.242.188:80
imf.exe (IObit Malware Fighter by IObit)

Alexa:
US rank:  10,365
Global rank:  22,858
Backlinks:  133

Compete.com:
US visitors:  137

Statistics are for the previous month (Alexa statistics are for entire downloadinfo.co).

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.