home

shieldav.com

Domain Information

Server location:
Arizona, United States (US)

ASN:
AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Trend Micro House Call
Suspicious_GEN.F47V1115
100.00%

Kaspersky
HEUR:Trojan-Downloader.Win32.Generic
100.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
100.00%

Reason Heuristics
PUP.Optional.Installer.U
100.00%

The domain shieldav.com has been seen to resolve to the following IP address.

184.168.172.1
p3nlhg230c1230.shr.prod.phx3.secureserver.net
March 9, 2015

File downloads found at URLs served by shieldav.com.

4 / 68      (PUP)
http://shieldav.com/.../  (ShieldAntiVirusSetup.exe)

The following 4 files have been seen to comunicate with shieldav.com in live environments.

TCP » 184.168.172.1:80
online-guardian-v2.0.9.exe

TCP » 184.168.172.1:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 184.168.172.1:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 184.168.172.1:80
UCBrowser.exe (UC Browser by UCWeb)

computerspeedoptimizer.com

innovacioncreativadigital.net

lunduke.com

pccleaningtool.com

shieldapps.info

siainteractive.com

snowpure.com

speedoptimizerpro.com

tiemporealmovil.mx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.