home

dl.sheedantivirus.ir

Domain Information

Server location:
Noord-Holland, Netherlands (NL)

ASN:
AS16265 FIBERRING LeaseWeb B.V.,NL

Root domain:
sheedantivirus.ir

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SheedSoft (L)
100.00%

The domain dl.sheedantivirus.ir has been seen to resolve to the following IP address.

95.211.1.38
sheedantivirus.com
May 21, 2014

File downloads found at URLs served by dl.sheedantivirus.ir.

1 / 68      (PUP)
http://dl.sheedantivirus.ir/setup.exe  (5245add845258524a11eac8bf9f5249f)

1 / 68      (PUP)
http://dl.sheedantivirus.ir/setup.exe  (b8980c0bb6a2301e8cc0c981c401b0be)

1 / 68      (PUP)
http://dl.sheedantivirus.ir/setup.exe  (setup_2.exe)

1 / 68      (PUP)
http://dl.sheedantivirus.ir/setup.exe  (0729a4465a9a5b045b69977b7c986080)

1 / 68      (PUP)
http://dl.sheedantivirus.ir/setup.exe  (4083cc597590d06aef0a4db025113c24)

1 / 68      (PUP)
http://dl.sheedantivirus.ir/setup.exe  (69372152fea63e5873c00b9f5d1cc403)

The following file have been seen to comunicate with dl.sheedantivirus.ir in live environments.

TCP » 95.211.1.38:443
shgr.exe (Sheed Antivirus (not for sale/use outside IRAN) by SheedSoft)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.