home

files8.downloadster.org

Downloadster  (via a Proxy Registrant)

Domain Information

downloadster distributes apps with its download manager which bundles adware toolbars such as Babylon and Rally as well as other potentially unwanted software. "We're able to offer free software because we are advertiser supported. When you download software, it gives our advertisers a chance to speak to you. ALL OFFERS ARE OPTIONAL. Users may be offered to change their browser homepage during install." The domain files8.downloadster.org is registered by proxy through GoDaddy.com, LLC. This domain has been known to host and distribute potentially unwanted software. The hosted servers are located in Beaumaris, Victoria within Australia which resides on the Asia Pacific Network Information Centre network. The domain is associated with the publisher Downloadster who is located in SAN FRANCISCO, California in the United States.
Registrar:
GoDaddy.com, LLC

Server location:
Victoria, Australia (AU)

ASN:
AS133618 TRELLIAN-AS-AP Trellian Pty. Limited,AU

Root domain:
downloadster.org

Whois:
2 downloadster.org records

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Downloadster.U, PUP.Installer.DownloadAdmin.U, PUP.Tightrope.Bundler, PUP.Installer.Statscom.U, PUP.Installer.Tightrope, PUP.Tightrope.DownloadAdmin.Bundler (M), PUP.Tightrope.Sanflex.Bundler (M), PUP.Tightrope.Download.Bundler (M), PUP.Tightrope.Zoobam.Bundler (M)
100.00%

VIPRE Antivirus
Threat.4783369, Threat.4150696
73.91%

AVG
Generic
69.57%

K7 AntiVirus
Adware , Unwanted-Program
65.22%

Avira AntiVirus
ADWARE/Adware.Gen
65.22%

Dr.Web
Adware.Downware.2220, Threat.Undefined, Adware.DAdmin.151, Trojan.Vittalia.2
60.87%

ESET NOD32
Win32/DownloadAdmin.G potentially unwanted application, Win32/DownloadAdmin.H potentially unwanted application
56.52%

Sophos
Download Admin, PUA 'Download Admin', PUA 'DownloadAdmin' (of type Adware)
56.52%

Malwarebytes
PUP.Optional.DownloadAdmin
52.17%

Agnitum Outpost
Riskware.Agent
52.17%

Clam AntiVirus
Win.Adware.Downloadadmin, Win.Adware.Downloadadmin-1
52.17%

F-Secure
Adware:W32/WebInstallBundle
47.83%

AhnLab V3 Security
PUP/Win32.Downware
39.13%

NANO AntiVirus
Riskware.Win32.Downware.crgjbr, Riskware.Win32.Downware.djahkt, Trojan.Win32.DAdmin.djhtdm, Riskware.Nsis.Downware.dlgjls
34.78%

F-Secure
Spyware: Adware:W32/WebInstallBundle
26.09%

The domain files8.downloadster.org has been seen to resolve to the following 5 IP addresses.

103.224.182.244
lb-182-244.above.com
May 27, 2016

50.22.63.140
50.22.63.140-static.reverse.softlayer.com
October 9, 2014

50.22.63.138
50.22.63.138-static.reverse.softlayer.com
October 9, 2014

108.168.160.45
108.168.160.45-static.reverse.softlayer.com
September 3, 2014

50.97.63.217
50.97.63.217-static.reverse.softlayer.com
September 3, 2014

File downloads found at URLs served by files8.downloadster.org.

1 / 68      (Adware)
http://files8.downloadster.org/download/.../dl?bc=431617&pid=Bullet_CPA&brand=downloadster.org&aid=52060&s=downloadster&c=downloadster_vlc&country=US&cb=35560537&zTmp=1  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=52005&bc=431617&country=US&cb=-701405522&zTmp=1  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files8.downloadster.org/download/.../dl?bc=431617&pid=Bullet_CPA&brand=downloadster.org&aid=54241&s=downloadster&c=downloadster_vlc&country=US&cb=-757102129&zTmp=1  (wnl8uyn+.exe)

1 / 68      (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=52782&bc=431617&country=US&cb=718666215&zTmp=1  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=52782&bc=431617&country=US&cb=-315553900&zTmp=1  (vlcmediaplayer-setup.exe)

22 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?bc=431617&pid=Bullet_CPA&brand=downloadster.org&aid=52744&s=downloadster&c=downloadster_vlc&country=US&cb=703200783&zTmp=1  (vlcmediaplayer-setup.exe)

22 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?bc=431617&pid=Bullet_CPA&brand=downloadster.org&aid=52744&s=downloadster&c=downloadster_vlc&country=US&cb=1040710962&zTmp=1  (vlcmediaplayer-setup.exe)

22 / 68    (Adware)
http://files8.downloadster.org/dl?bc=431617&aid=52744&brand=downloadster.org&c=downloadster_vlc  (vlcmediaplayer-setup.exe)

17 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?bc=431617&pid=Bullet_CPA&brand=downloadster.org&aid=140530&s=downloadster&c=downloadster_vlc&country=US&cb=-1356885393&osName=Windows&osVersion=7&browserName=Chrome&browserVersion=39&zTmp=1  (vlcmediaplayer-setup.exe)

17 / 68    (Adware)
http://files8.downloadster.org/dl?bc=431617&aid=140530&brand=downloadster.org&c=downloadster_vlc  (vlcmediaplayer-setup.exe)

8 / 68      (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA_UK&aid=12913&bc=970696&country=GB&cb=1610231522  (vlcmediaplayer-setup.exe)

8 / 68      (Adware)
http://files8.downloadster.org/dl?bc=970696&aid=12913&brand=downloadster.org&c=downloadster_vlc  (vlcmediaplayer-setup.exe)

15 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=51851&bc=431617&country=US&cb=-1918808530&zTmp=1  (vlcmediaplayer-setup.exe)

15 / 68    (Adware)
http://files8.downloadster.org/dl?bc=431617&aid=51851&brand=downloadster.org&c=downloadster_vlc  (vlcmediaplayer-setup.exe)

17 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=51851&bc=431617&country=US&cb=-20119710&zTmp=1  (vlcmediaplayer-setup.exe)

17 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=51851&bc=431617&country=US&cb=-415158500&zTmp=1  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files8.downloadster.org/download/.../dl?bc=431617&pid=Bullet_CPA&brand=downloadster.org&aid=52016&s=downloadster&c=downloadster_vlc&country=US&cb=-173338414&zTmp=1  (vlcmediaplayer-setup.exe)

1 / 68      (Adware)
http://files8.downloadster.org/dl?bc=431617&aid=52016&brand=downloadster.org&c=downloadster_vlc  (vlcmediaplayer-setup.exe)

13 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=52966&bc=431617&country=US&cb=-1219546303&zTmp=1  (vlcmediaplayer-setup.exe)

13 / 68    (Adware)
http://files8.downloadster.org/dl?bc=431617&aid=52966&brand=downloadster.org&c=downloadster_vlc  (vlcmediaplayer-setup.exe)

13 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=52966&bc=431617&country=US&cb=-1269725411&zTmp=1  (vlcmediaplayer-setup.exe)

9 / 68      (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=52966&bc=431617&country=US&cb=-1023828102&zTmp=1  (vlcmediaplayer-setup.exe)

12 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA_UK&aid=52013&bc=970696&country=GB&cb=-19774317&zTmp=1  (vlcmediaplayer-setup.exe)

12 / 68    (Adware)
http://files8.downloadster.org/dl?bc=970696&aid=52013&brand=downloadster.org&c=downloadster_vlc  (vlcmediaplayer-setup.exe)

12 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=52016&bc=431617&country=US&cb=-1555788296&zTmp=1  (vlcmediaplayer-setup.exe)

14 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?bc=431617&pid=Bullet_CPA&brand=downloadster.org&aid=51851&s=downloadster&c=downloadster_vlc&country=US&cb=-449324683&zTmp=1  (vlcmediaplayer-setup.exe)

13 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?bc=970696&pid=Bullet_CPA_UK&brand=downloadster.org&aid=51869&s=downloadster&c=downloadster_vlc&country=GB&cb=-1626680164&zTmp=1  (vlcmediaplayer-setup.exe)

10 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=52005&bc=431617&country=US&cb=1621443948&zTmp=1  (vlcmediaplayer-setup.exe)

10 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA&aid=52005&bc=431617&country=US&cb=-1565505148&zTmp=1  (vlcmediaplayer-setup.exe)

15 / 68    (Adware)
http://files8.downloadster.org/download/.../dl?s=downloadster&c=downloadster_vlc&brand=downloadster.org&pid=Bullet_CPA_UK&aid=51869&bc=970696&country=GB&cb=-1470233101&zTmp=1  (vlcmediaplayer-setup.exe)

 
Latest 30 of 37 download URLs

The following 237 files have been seen to comunicate with files8.downloadster.org in live environments.

TCP » 50.97.63.217:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.97.63.217:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.97.63.217:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.97.63.217:80
TNT2User.exe (by Eshield)

TCP » 50.97.63.217:80
eshieldtoolbar.exe (by Eshield)

TCP » 50.22.63.138:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.97.63.217:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.140:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
update_31.exe (Fast Downloader Media)

TCP » 50.22.63.140:80
windowssoftwareupdater.exe (SoftwareUpdater)

TCP » 50.22.63.138:80
updateadmin.exe

TCP » 50.22.63.138:80
windowssoftwareupdater.exe (SoftwareUpdater)

TCP » 50.22.63.140:80
updateadmin.exe

TCP » 50.22.63.140:80
update_31.exe (Fast Downloader Media)

TCP » 50.22.63.138:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.138:80
netdownloader.exe

TCP » 50.22.63.140:80
netdownloader.exe

TCP » 50.97.63.217:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 50.22.63.140:80
update_14.exe (Fast Downloader Media)

 
Latest 20 of 320 files

adlogica.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.