home

zondervirus.nl

Domain Information

Server location:
Vilniaus Apskritis, Lithuania (LT)

ASN:
AS24607 LENET UAB Technologiju ir inovaciju centras

The domain zondervirus.nl has been seen to resolve to the following 3 IP addresses.

46.105.174.39
cluster011.proxy1.rbx4.hostedssl.ovh.net
February 27, 2016

94.23.151.40
cluster011.ovh.net
November 29, 2014

185.5.53.35
drakonas.serveriai.lt
December 27, 2013

File downloads found at URLs served by zondervirus.nl.

0 / 68
https://zondervirus.nl/.../bullguard-mobile-security.exe  (bullguarddownloader_rwi.exe)

1 / 68      (PUP)
https://zondervirus.nl/.../ReimageRepair  (reimagerepair.exe)

0 / 68
https://zondervirus.nl/.../stopzilla.exe  (stopzillapro_downloader.exe)

1 / 68
http://zondervirus.nl/.../hunter.exe  (spyhunter-installer.exe)

0 / 68
http://zondervirus.nl/.../stopzilla.exe  (stopzillapro_downloader.exe)

0 / 68
http://zondervirus.nl/.../hunter.exe  (ws100a5cc8.dat)

0 / 68
http://zondervirus.nl/.../stopzilla.exe  (stopzillapro_downloader.exe)

1 / 68
http://zondervirus.nl/.../hunter.exe  (spyhunter-installer.exe)

2 / 68      (PUP)
http://zondervirus.nl/.../xoftspyse.exe  (xoftspy_av_setup.exe)

0 / 68
http://zondervirus.nl/.../stopzilla.exe  (stopzillapro_downloader.exe)

1 / 68      (PUP)
http://zondervirus.nl/.../xoftspyse.exe  (xoftspy_av_setup.exe)

0 / 68
http://zondervirus.nl/.../hunter.exe  (spyhunter-installer.exe)

0 / 68
http://zondervirus.nl/.../hunter.exe  (spyhunter-installer.exe)

2 / 68      (inconclusive)
http://zondervirus.nl/.../hunter.exe  (SHDownloader.exe)

1 / 68      (inconclusive)
http://zondervirus.nl/.../hunter.exe  (SHDownloader.exe)

0 / 68
http://zondervirus.nl/.../hunter.exe  (spyhunter-installer.exe)

0 / 68
http://zondervirus.nl/.../stopzilla.exe  (szsetup_aid10121_av.exe)

0 / 68
http://zondervirus.nl/.../hunter.exe  (spyhunter-installer.exe)

0 / 68
http://zondervirus.nl/.../mbam-setup.exe  (af571a8e2341f38262cf7aa2f4d61bd3)

The following 2 files have been seen to comunicate with zondervirus.nl in live environments.

TCP » 185.5.53.35:80
online-guardian-v2.0.9.exe

TCP » 185.5.53.35:80
online-guardian-v2.0.9.exe

lafukas.lt

atelier-du-moniteur.com

pcsoft.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.