home

updater.shadowl2.es

Domain Information

Server location:
Nord-Pas-De-Calais, France (FR)

ASN:
AS16276 OVH OVH Systems

Root domain:
shadowl2.es

The domain updater.shadowl2.es has been seen to resolve to the following IP address.

87.98.231.17
cluster006.ovh.net
May 24, 2016

File downloads found at URLs served by updater.shadowl2.es.

0 / 68
http://updater.shadowl2.es/.../Updater.exe  (422683fd542f03912c587ad3b08f8a47)

6 / 68      (PUP)
http://updater.shadowl2.es/Instalador.exe  (2c7f6f9d94ff59222089f63244e1c378)

The following 4 files have been seen to comunicate with updater.shadowl2.es in live environments.

TCP » 87.98.231.17:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 87.98.231.17:80
onlineguardian-v2.exe

TCP » 87.98.231.17:80
updater.exe

TCP » 87.98.231.17:80
online-guardian-v2.0.9.exe

bcncultura.cat

cephuelva.org

connecta2000.com

drvdownload.co.uk

fotomusica.net

jcode.space

pandreonline.com

radionebunya.ro

zoominformatica.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.