home

dlpro.antivir.com

Avira Holding GmbH

Domain Information

The domain dlpro.antivir.com registered by Avira Holding GmbH was initially registered in October of 1997 through Network Solutions, LLC. The hosted servers are located in Widdern, Baden-Wurttemberg within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
Network Solutions, LLC

Server location:
Baden-Wurttemberg, Germany (DE)

Create date:
Monday, October 6, 1997

Expires date:
Wednesday, October 5, 2016

Updated date:
Thursday, August 6, 2015

ASN:
AS24875 NL-ISPSERVICES Avira B.V.

Root domain:
antivir.com

Whois:
3 antivir.com records

The domain dlpro.antivir.com has been seen to resolve to the following 4 IP addresses.

80.190.148.70
professional.de.avira-update.com
February 7, 2014

80.190.148.71
professional.de.avira-update.com
February 7, 2014

89.105.213.23
professional.nl.avira-update.net
February 7, 2014

89.105.213.24
professional.nl.avira-update.net
February 7, 2014

File downloads found at URLs served by dlpro.antivir.com.

0 / 68
http://dlpro.antivir.com/package/regcleaner/win32/.../avira_registry_cleaner_en.zip  (4efbc54127f368bd66d83e3353a44409)

0 / 68
http://dlpro.antivir.com/package/regcleaner/win32/.../avira_registry_cleaner_de.exe  (avira13_registry_cleaner_de.exe)

0 / 68
http://dlpro.antivir.com/package/regcleaner/win32/.../avira_registry_cleaner_en.exe  (c99e44eb023a4129e7574348f902a8ae)

0 / 68
http://dlpro.antivir.com/package/antirootkit/win32/.../avira_antivir_antirootkit_en.exe  (df993343462f38d3fc11965f7fa4345a)

0 / 68
http://dlpro.antivir.com/down/.../bootwizard.exe  (8d627b7ded7bdcb48562c8e1e6afcd8f)

0 / 68
http://dlpro.antivir.com/package/regcleaner/win32/.../avira_registry_cleaner_en.exe  (e7a3a1ca365dec2992a6b5d8d0368fdc)

0 / 68
http://dlpro.antivir.com/package/removaltool/win32/.../removaltool-win32-en.exe  (avira removaltool-win32-en.exe)

The following 3 files have been seen to comunicate with dlpro.antivir.com in live environments.

TCP » 80.190.148.71:80
citrio.exe (Citrio by CatalinaGroup)

TCP » 80.190.148.71:80
update.exe (Avira Product Family by Avira Operations GmbH & Co. KG)

TCP » 80.190.148.71:80
bavupdater.exe (Baidu Antivirus by Baidu)

URL:
http://dlpro.antivir.com/

Web server:
nginx/1.4.6 (Ubuntu)

avira-update.com

avira.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.