» www.downloaddino.com
Overview
Analysis
IPs Addresses (1)
Downloads (6)
Network (230)

www.downloaddino.com

Domain Information

Server location:

Northern Ireland, United Kingdom (GB)

Root domain:

downloaddino.com

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.OptimumInstaller.S, PUP.Installer.OptimumInstaller.F, PUP.Installer.FUSIONINSTALLER.H, PUP.Installer.SOFTWAREINSTALLER.H

100.00%

avast!

Win32:Installer-J [PUP], Win32:IBryte-DR [PUP]

100.00%

Dr.Web

Adware.Downware.1285, Adware.Downware.2216

100.00%

F-Prot

W32/Ibryte.C.gen, W32/A-512ed8f8

100.00%

ESET NOD32

Win32/Adware.iBryte.G application, Win32/AdWare.iBryte.T application

100.00%

VIPRE Antivirus

Threat.4778314, Optimum Installer, Threat.4150696

100.00%

AVG

Adware Generic5.ABSU, Skodna.Generic

100.00%

Malwarebytes

PUP.Optional.Ibryte, PUP.Optional.OptimumInstaller.A

100.00%

Zillya! Antivirus

Adware.Agent.Win32.8293, Adware.Agent.Win32.7980, Downloader.Agent.Win32.185015

100.00%

K7 AntiVirus

Unwanted-Program , Adware

100.00%

Norman

Agent.ASWDM, Gen:Variant.Application.Bundler.OptimumInstaller.3

100.00%

NANO AntiVirus

Riskware.Win32.Agent.csnrpm, Trojan.Win32.Downware.cukphe

100.00%

Rising Antivirus

PE:Trojan.Win32.Rouge.d!1075354374, PE:Malware.iBryte!6.14B5

100.00%

Sophos

PUA 'iBryte Optimum Installer'

100.00%

Comodo Security

Application.Win32.IBryte.ZD, ApplicUnwnt.Win32.AdWare.iBryte.H, Application.Win32.IBryte.S

100.00%

The domain www.downloaddino.com has been seen to resolve to the following IP address.

unallocated.barefruit.co.uk

May 4, 2015

File downloads found at URLs served by www.downloaddino.com.

28 / 68 (Adware)

http://www.downloaddino.com/direct/.../torrent.exe (ab93e2790fb26decaf717f79a9d43238)

32 / 68 (Adware)

http://www.downloaddino.com/direct/.../torrent.exe (ed32e9f66b87b3ef9ea2cc93f13f7179)

28 / 68 (Adware)

http://www.downloaddino.com/direct/.../?source=matomy_mplayer-US-direct&adprovider=Matomy&subid=176681&ce_cid=20l8Rf1DBqYrCrkX1kDdBF1uW52m000. (mplayer_setup.exe)

28 / 68 (Adware)

http://www.downloaddino.com/direct/.../?source=matomy_mplayer-US-direct&adprovider=Matomy&subid=176681&ce_cid=20l8Rf1DBqYrCrkX1kDdBF1uW51n000. (mplayer_setup.exe)

28 / 68 (Adware)

http://www.downloaddino.com/direct/.../?source=matomy_mplayer-US-direct&adprovider=Matomy&subid=176681&ce_cid=20l8Rf1DBqYrCrkX1kDdBF1uW51h000. (mplayer_setup.exe)

34 / 68 (Adware)

http://www.downloaddino.com/direct/.../?source=matomy_mplayer-US-direct&adprovider=Matomy&subid=176681&ce_cid=20l8Rf1DBqYrCrkX1kDdBF1uW519000. (Setup.exe)

The following 230 files have been seen to comunicate with www.downloaddino.com in live environments.

TCP » 92.242.140.21:80

smelled.exe (Smelled)

TCP » 92.242.140.21:443

dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80

marini.exe (Marini)

TCP » 92.242.140.21:443

client.exe (ClientWrapper)

TCP » 92.242.140.21:80

thebrowser.exe (TheBrowser by Goobzo)

TCP » 92.242.140.21:443

dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:443

WindowService.exe (WindowService)

TCP » 92.242.140.21:443

ciuninstall.exe

TCP » 92.242.140.21:1866

TCP » 92.242.140.21:443

dca-monitoring.exe (Compete DCA Monitoring Tool by Compete)

TCP » 92.242.140.21:80

masterupdater.exe

TCP » 92.242.140.21:80

pricemeterexpress.crx

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

TCP » 92.242.140.21:80

Latest 20 of 230 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.