home

uninstallspyware.virusremovals.org

individual

Domain Information

The hosted servers are located in Provo, Utah within the United States which resides on the Unified Layer network.
Registrar:
Name.com, LLC

Server location:
Utah, United States (US)

ASN:
AS46606 UNIFIEDLAYER-AS-1 - Unified Layer,US

Root domain:
virusremovals.org

Whois:
2 virusremovals.org records

The domain uninstallspyware.virusremovals.org has been seen to resolve to the following 2 IP addresses.

173.254.28.156
just156.justhost.com
May 3, 2015

173.254.28.129
just129.justhost.com
February 6, 2014

File downloads found at URLs served by uninstallspyware.virusremovals.org.

0 / 68
http://uninstallspyware.virusremovals.org/freedownload  (sh_installer.exe)

1 / 68      (inconclusive)
http://uninstallspyware.virusremovals.org/freedownload  (spyhunter-installer.exe)

0 / 68
http://uninstallspyware.virusremovals.org/freedownload  (esg_uninstall.exe~)

0 / 68
http://uninstallspyware.virusremovals.org/freedownload  (esg_uninstall.exe~)

1 / 68      (inconclusive)
http://uninstallspyware.virusremovals.org/freedownload  (SHDownloader.exe)

The following 5 files have been seen to comunicate with uninstallspyware.virusremovals.org in live environments.

TCP » 173.254.28.129:80
online-guardian-v2.0.9.exe

TCP » 173.254.28.129:80
online-guardian-v2.exe

TCP » 173.254.28.129:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 173.254.28.156:80
online-guardian-v2.0.9.exe

TCP » 173.254.28.156:587
wrk.exe

TCP » 173.254.28.129:80
online-guardian-v2.0.9.exe

URL:
http://uninstallspyware.virusremovals.org/

Title:
“unintsall spyware”

Web server:
nginx/1.8.1

littlehandsillustration.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.