home

downloader-toolbar.info

Domain Information

Server location:
Northern Ireland, United Kingdom (GB)

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.WebPick.Installer, Adware.WebPick.Installer (M)
100.00%

Bkav FE
HW32.CDB
50.00%

MicroWorld eScan
Trojan.Generic.10010889
50.00%

nProtect
Trojan.Generic.10010889
50.00%

K7 AntiVirus
Trojan
50.00%

Agnitum Outpost
Trojan.XPACK
50.00%

avast!
Win32:Downloader-TRK [Adw]
50.00%

Kaspersky
not-a-virus:HEUR:Downloader.Win32.AdLoad
50.00%

Bitdefender
Trojan.Generic.10010889
50.00%

NANO AntiVirus
Riskware.Win32.Downware.crunuw
50.00%

Lavasoft Ad-Aware
Gen:Variant.Application.Bundler.InstallRex.2
50.00%

Comodo Security
Application.Win32.InstalleRex.KG
50.00%

F-Secure
Riskware.Gen:Variant.Application.Bundler
50.00%

Dr.Web
Adware.Downware.980
50.00%

VIPRE Antivirus
Installerex/WebPick
50.00%

The domain downloader-toolbar.info has been seen to resolve to the following 3 IP addresses.

185.28.193.192
192.193.28.185.gransy.com
June 26, 2016

31.170.178.179
June 26, 2016

92.242.140.21
unallocated.barefruit.co.uk
May 7, 2015

File downloads found at URLs served by downloader-toolbar.info.

1 / 68      (Adware)
http://downloader-toolbar.info/.../?product_name=Asterix and Obelix 2012.flv.flv&installer_file_name=Asterix and Obelix 2012.flv.flv&r=672  (asterix and obelix 2012.flv.flv.exe)

37 / 68    (Adware)
http://downloader-toolbar.info/.../  (download.exe)

The following 251 files have been seen to comunicate with downloader-toolbar.info in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 185.28.193.192:80
mdquickyksvc.exe (ModenQuick Service by PT. USENET)

TCP » 185.28.193.192:80
mdruyksvc.exe (ModernRu Service by PT. USENET)

TCP » 185.28.193.192:80
winmbskillssvc.exe (MobinSkills Service by PT.USENET)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 185.28.193.192:80
triggerlogs.exe

TCP » 185.28.193.192:80
wdm.bin

TCP » 185.28.193.192:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 185.28.193.192:80
winmbtuscasvc.exe (MobinTusca Service by PT.USENET)

TCP » 185.28.193.192:80
online-guardian-v2.0.9.exe

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 185.28.193.192:80
Downloader.exe (Downloader)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 185.28.193.192:80
onlineguardian-v2.exe

TCP » 185.28.193.192:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 185.28.193.192:80
d9re-markablep23.exe

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

TCP » 92.242.140.21:443
ciuninstall.exe

 
Latest 20 of 251 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.