home

www.shar-m.com

Whois Privacy Corp.

Domain Information

The domain www.shar-m.com registered by Whois Privacy Corp. was initially registered in November of 2013 through INTERNET.BS CORP.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Roosendaal, Noord-Brabant within Netherlands which resides on the RIPE Network Coordination Centre network.
Registrar:
INTERNET DOMAIN SERVICE BS CORP

Server location:
Noord-Brabant, Netherlands (NL)

Create date:
Wednesday, November 13, 2013

Expires date:
Sunday, November 13, 2016

Updated date:
Friday, December 11, 2015

ASN:
AS43350 NFORCE NFOrce Entertainment BV,NL

Root domain:
shar-m.com

Whois:
3 shar-m.com records

Google Safe Browsing:
malware

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.FINEDREAMINVEST.K, PUP.FINEDREAMINVEST.Z, PUP.FINEDREAMINVEST.g, PUP.FINEDREAMINVEST.n, PUP.FINEDREAMINVEST.u, PUP.FINEDREAMINVEST.c, PUP.LADYSWOOD2013LIMITED.AA, PUP.LADYSWOOD2013LIMITED.T, PUP.SOFTWAREAGILITY (M), PUP.SOFTWAREAGILITYLIMITED.c, PUP.SOFTWAREAGILITYLIMITED.W, PUP.LADYSWOOD2013LIMITED., PUP.FINEDREAMINVEST (M), PUP.Brightcircle.LADYSWOOD2013 (M), PUP.Brightcircle.LADYSWOO (M), PUP.FINEDREA (M), PUP.SOFTWARE (M), PUP (M), PUP.Brightcircle (M)
96.97%

Dr.Web
Adware.Downware.1659, Trojan.DownLoader11.9093, Adware.Downware.2160
18.18%

MicroWorld eScan
Gen:Variant.Adware.Graftor.126981, Gen:Variant.Graftor.143582, Gen:Variant.Zusy.92397, Gen:Variant.Application.Downloader.Oxy.1
15.15%

Bitdefender
Gen:Variant.Adware.Graftor.126981, Gen:Variant.Graftor.143582, Gen:Variant.Zusy.92397, Gen:Variant.Application.Downloader.Oxy.1
15.15%

Lavasoft Ad-Aware
Gen:Variant.Adware.Graftor.126981, Gen:Variant.Graftor.143582, Gen:Variant.Zusy.92397, Gen:Variant.Application.Downloader.Oxy.1
15.15%

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.126981, Gen:Variant.Graftor.143582, Gen:Variant.Zusy.92397, Gen:Variant.Application.Downloader.Oxy
15.15%

G Data
Gen:Variant.Adware.Graftor.126981, Gen:Variant.Graftor.143582, Gen:Variant.Zusy.92397, Gen:Variant.Application.Downloader.Oxy
15.15%

AVG
Dropper.Agent, Bundle, Trojan horse Downloader.Generic13.CBCT
15.15%

Malwarebytes
PUP.Optional.FilePile.A
12.12%

avast!
Win32:Adware-BGS [PUP], Win32:Malware-gen, Win32:Adware-BLB [PUP]
12.12%

VIPRE Antivirus
iPumper, Threat.4150696, Threat.4847483
12.12%

Avira AntiVirus
ADWARE/Adware.Gen
12.12%

Rising Antivirus
PE:PUF.FilePile!1.9E19, PE:Malware.Adware!6.17C6
12.12%

IKARUS anti.virus
Trojan-Dropper.Agent, PUA.Bundler, PUA.BundleInstaller
12.12%

F-Secure
Gen:Variant.Adware.Graftor.126981, Gen:Variant.Graftor.143582, Gen:Variant.Zusy.92397, Gen:Variant.Application.Downloader
12.12%

The domain www.shar-m.com has been seen to resolve to the following 5 IP addresses.

72.8.167.249
urlforward.topdns.com
April 8, 2016

46.166.189.98
urlforward.topdns.com
April 8, 2016

54.72.130.67
ns1.ibspark.com
February 24, 2016

176.121.11.90
June 9, 2014

195.66.79.27
December 28, 2013

File downloads found at URLs served by www.shar-m.com.

1 / 68      (Adware)
http://www.shar-m.com/.../Heroes_Of_The_Storm_Beta_Key_Generator_Downloader_138800014.exe  (heroes_of_the_storm_beta_key_generator_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Happy_From_Despicable_Me_2-Pharrell_Williams..._Downloader_27599920.exe  (happy_from_despicable_me_2-pharrell_williams..._downloader.exe)

1 / 68      (PUP)
http://www.shar-m.com/.../John_Legend_-_Kanye_West_Downloader_27599920.exe  (john_legend_-_kanye_west_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../HackTool_Downloader_132200002.exe  (oxyinst.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Grcki-Alfabet.rar_Downloader_316111414.exe  (grcki-alfabet.rar_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Grcki-Alfabet-Slova.rar_Downloader_316111406.exe  (grcki-alfabet-slova.rar_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../winzip_crack_Downloader_276600001.exe  (winzip_crack_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Movie_Star_Planet_Hack_2014_Downloader_356900002.exe  (movie_star_planet_hack_2014_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../{Plants_vs__Zombies_Garden_Warfare_keygen}_Downloader_585400001.exe  ({plants_vs__zombies_garden_warfare_keygen}_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Turbobit-Net-American-Horror-Story-Ita.rar_Downloader_316111114.exe  (turbobit-net-american-horror-story-ita.rar_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../student_login_reading_plus_Downloader_785800002.exe  (student_login_reading_plus_downloader.exe)

19 / 68    (Adware)
http://www.shar-m.com/.../Sonerii-Amuzante-Pentru-Telefon-Download.rar_Downloader_316111514.exe  (samsung-tool-ver-12.6.rar_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Dayz_Standalone_KeyGen_NoSurveys_Downloader_479500001.exe  (dayz_standalone_keygen_nosurveys_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../donnatan-cleosuntrack_Downloader_597200004.exe  (donnatan-cleosuntrack_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../The_Wolf_Of_Wall_Street_DvDRip_XviD_ENG_._Downloader_26500001.exe  (the_wolf_of_wall_street_dvdrip_xvid_eng_._downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Beyonce_Partition_Mp3_Downloader_350800019.exe  (beyonce_partition_mp3_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../The_Lego_Movie_Downloader_698100019.exe  (the_lego_movie_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Dark_Souls_II.iso_Downloader_323100014.exe  (dark_souls_ii.iso_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Awkward_season_4_episode_2_HD_Free_Downloader_822700310.exe  (awkward_season_4_episode_2_hd_free_downloader.exe)

21 / 68    (Adware)
http://www.shar-m.com/.../reference_manual_for_magnatic_resonance_safety_implants_and_devices_Downloader_276600014.exe  (reference_manual_for_magnatic_resonance_safety_implants_and_devices_downloader.exe)

1 / 68      (inconclusive)
http://www.shar-m.com/.../win8active_Downloader_134500014.exe  (win8active_downloader.exe)

19 / 68    (Adware)
http://www.shar-m.com/.../$25_RP_Code_Downloader_487602514.exe  ($25_rp_code_downloader.exe)

16 / 68    (Adware)
http://www.shar-m.com/.../Splinter_Cell_Blacklist_Downloader_691400001.exe  (splinter_cell_blacklist_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Fifa.14.Keygen.2014_Downloader_485700014.exe  (fifa.14.keygen.2014_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Survey_Bypasser_Downloader_494904514.exe  (survey_bypasser_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../SurveyBypasser_Downloader_96700014.exe  (surveybypasser_downloader.exe)

19 / 68    (Adware)
http://www.shar-m.com/.../Samsung-Tool-Ver-12.6.rar_Downloader_316111514.exe  (samsung-tool-ver-12.6.rar_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../Cyberghost-VPN-Key-Generator-FileLikes.com_Downloader_246901503.exe  (cyberghost-vpn-key-generator-filelikes.com_downloader.exe)

21 / 68    (Adware)
http://www.shar-m.com/.../Avira-Antivirus-Software-For-Pc.rar_Downloader_316111514.exe  (avira-antivirus-software-for-pc.rar_downloader.exe)

1 / 68      (Adware)
http://www.shar-m.com/.../My-Memories-Suite-3-Free.rar_Downloader_316111502.exe  (my-memories-suite-3-free.rar_downloader.exe)

 
Latest 30 of 34 download URLs

The following 148 files have been seen to comunicate with www.shar-m.com in live environments.

TCP » 54.72.130.67:80
simplefilesupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall12590625.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall5322109.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
uninstall190602.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
yourfileupdater.exe (YourFile Downloader by http://yourfiledownloader.com)

TCP » 54.72.130.67:80
googleupdate.exe

TCP » 54.72.130.67:80
browserserver.exe

TCP » 54.72.130.67:80
sm.exe (System Monitor)

TCP » 54.72.130.67:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.72.130.67:80
uninstall129231.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
sfupdater.exe (SimpleFiles Application by http://simple-files.com/)

TCP » 54.72.130.67:80
kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 54.72.130.67:80
TBNotifier.exe (Ask TBNotifier by APN)

TCP » 54.72.130.67:80
pepperzip.exe

TCP » 54.72.130.67:80
internetenhancer.exe (Internet Enhancer)

TCP » 46.166.189.98:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.72.130.67:80
ssn.exe (ssn)

TCP » 54.72.130.67:443
mintcast_updater_service.exe (AutomaticUpdater)

 
Latest 20 of 168 files

URL:
http://www.shar-m.com/

Title:
“Go.com | The Walt Disney Company”

Description:
“Go.com is the top-level home on the Internet to the online properties of The Walt Disney Company.”

Web server:
nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.