home

files4.downloadster.org

Downloadster

Domain Information

downloadster distributes apps with its download manager which bundles adware toolbars such as Babylon and Rally as well as other potentially unwanted software. "We're able to offer free software because we are advertiser supported. When you download software, it gives our advertisers a chance to speak to you. ALL OFFERS ARE OPTIONAL. Users may be offered to change their browser homepage during install." This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Belfast, Northern Ireland within United Kingdom which resides on the RIPE Network Coordination Centre network. The domain is associated with the publisher Downloadster who is located in SAN FRANCISCO, California in the United States.
Registrar:
Ulysses S. Grant, LLC

Server location:
Northern Ireland, United Kingdom (GB)

Root domain:
downloadster.org

Whois:
4 downloadster.org records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.DownloadAdmin.U, PUP.Tightrope.Bundler, PUP.Tightrope.DownloadAdmin.Bundler (M), PUP.Tightrope.Download.Bundler (M), PUP.Tightrope (M)
100.00%

Dr.Web
Adware.Downware.225, Adware.Downware.411, Adware.Downware.80, Adware.Siggen.18261
19.23%

VIPRE Antivirus
Threat.4783369, DownloadAdmin
15.38%

K7 AntiVirus
Unwanted-Program
15.38%

Sophos
Download Admin, PUA 'Download Admin'
15.38%

Avira AntiVirus
Adware/DownAdmin.D, ADWARE/Adware.Gen9, ADWARE/DownloadAd.CK
15.38%

ESET NOD32
Win32/DownloadAdmin.G potentially unwanted application, Win32/DownloadAdmin.A.Gen potentially unwanted application
11.54%

Trend Micro House Call
HV_DOWNADMIN_CA2201C3.TOMC, HV_ZYX_BK0839ED.TOMC
7.69%

NANO AntiVirus
Trojan.Text.Downware.bemmom, Riskware.Nsis.Downware.dlgjls
7.69%

SUPERAntiSpyware
Trojan.Agent/Gen-DownloadAdmin
7.69%

ESET NOD32
Win32/DownloadAdmin.A.Gen
7.69%

F-Secure
Spyware: Adware:W32/WebInstallBundle
3.85%

Qihoo 360 Security
Malware.QVM28.Gen
3.85%

Bkav FE
W32.HfsAdware
3.85%

Malwarebytes
PUP.Optional.DownloadAdmin.C
3.85%

The domain files4.downloadster.org has been seen to resolve to the following 3 IP addresses.

103.224.182.244
lb-182-244.above.com
February 14, 2016

184.168.221.37
ip-184-168-221-37.ip.secureserver.net
December 23, 2015

92.242.140.21
unallocated.barefruit.co.uk
May 28, 2015

File downloads found at URLs served by files4.downloadster.org.

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=20&bc=11640&country=US&cb=-933374153  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=16&bc=134&country=us&cb=-576878162  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=10&bc=11640&country=US&cb=745889452  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_OOWriter&brand=downloadster.org&pid=BULLETMEDIA&aid=04&bc=135&country=us&cb=1048736258  (openofficewriter-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_OOWriter&brand=downloadster.org&pid=BULLETMEDIA&aid=04&bc=135&country=us&cb=-1603376444  (openofficewriter-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=00&bc=17984&country=US&cb=1709728452  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=vlcplayer&bc=146&country=uk&cb=-937879762  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_OOWriter&brand=downloadster.org&pid=BULLETMEDIA&aid=22&bc=135&country=us&cb=-885070221  (openofficewriter-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=22&bc=10725&country=us&cb=-938328909  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=13&bc=316&country=ca&cb=1021557712  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=06&bc=134&country=us&cb=-603901621  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Bullet_Media&c=downloadster_gimp&brand=downloadster.org&pid=BULLETMEDIA&aid=01&bc=10965&country=us&cb=1578957146  (gimp-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_tidy&brand=downloadster.org&pid=Bullet_CPA&aid=12&bc=15364&country=US&cb=1495785837  (tidyview-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=09&bc=316&country=ca&cb=-431369406  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=abode_flash_player_9&bc=146&country=uk&cb=2140715708  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=09&bc=11398&country=US&cb=2129565456  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=06&bc=11640&country=US&cb=460342436  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=05&bc=5993&country=us&cb=1422052595  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=16&bc=11640&country=US&cb=636818787  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_OO&brand=downloadster.org&pid=Bullet_CPA&aid=12&bc=15344&country=US&cb=516120804  (openofficewriter-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=21&bc=11640&country=US&cb=-2113320320  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=07&bc=11640&country=US&cb=735232815  (vlcmediaplayer-setup.exe)

9 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=05&bc=5993&country=us&cb=512087017  (vlcmediaplayer-setup.exe)

3 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_OOWriter&brand=downloadster.org&pid=BULLETMEDIA&aid=08&bc=135&country=us&cb=1936700827  (openofficewriter-setup.exe)

11 / 68    (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=windows_media_player_12&bc=134&country=us&cb=-1562803575  (vlcmediaplayer-setup.exe)

10 / 68    (Adware)
http://files4.downloadster.org/download?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA_UK&aid=DSTO_VLC_vlc_s&bc=14650&country=UK&cb=381504016  (vlcmediaplayer-setup.exe)

9 / 68      (Adware)
http://files4.downloadster.org/download?s=Google&c=downloadster_vlc&brand=downloadster.org&pid=BULLETMEDIA&aid=12&bc=134&country=us&cb=-1223401160  (vlcmediaplayer-setup.exe)

The following 245 files have been seen to comunicate with files4.downloadster.org in live environments.

TCP » 92.242.140.21:80
smelled.exe (Smelled)

TCP » 184.168.221.37:80
produpd.exe (produpd.exe by Vested Development, Inc)

TCP » 184.168.221.37:80
jingling.exe

TCP » 184.168.221.37:80
ContentFinder.exe (ContentFinder by DigitalSoftware Group)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 184.168.221.37:80
powerdvdplayer.exe

TCP » 92.242.140.21:80
marini.exe (Marini)

TCP » 184.168.221.37:80
ContentSinder.exe (ContentSinder by ContentSinder Company)

TCP » 184.168.221.37:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 184.168.221.37:25
www.exe

TCP » 184.168.221.37:80
online-guardian-v2.0.9.exe

TCP » 184.168.221.37:80
mp4player.exe

TCP » 92.242.140.21:443
client.exe (ClientWrapper)

TCP » 92.242.140.21:80
thebrowser.exe (TheBrowser by Goobzo)

TCP » 184.168.221.37:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 92.242.140.21:443
dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 184.168.221.37:80
ContentFinder.exe (ContentFinder by ContentFinder Company)

TCP » 184.168.221.37:80
mp4player.exe

TCP » 184.168.221.37:587
www.exe

TCP » 92.242.140.21:443
WindowService.exe (WindowService)

 
Latest 20 of 246 files

URL:
http://files4.downloadster.org/

Title:
“downloadster.org”

Web server:
Apache

adlogica.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.