home

ck.softforum.co.kr

Domain Information

Server location:
Kyonggi-Do, Korea (KR)

Root domain:
softforum.co.kr

The domain ck.softforum.co.kr has been seen to resolve to the following 7 IP addresses.

14.0.77.143
July 17, 2016

61.110.225.122
i0-h0-s2019.p59-icn.cdngp.net
July 17, 2016

14.0.67.89
June 4, 2016

61.110.225.153
i0-h0-s2014.p59-icn.cdngp.net
June 4, 2016

61.110.195.213
May 2, 2014

211.233.73.200
April 25, 2014

61.110.247.209
April 25, 2014

File downloads found at URLs served by ck.softforum.co.kr.

1 / 68
http://ck.softforum.co.kr/CKKeyPro/.../TouchEnkey_Installer_3108_32bit_multikill.exe  (f626c19ac6baad558468cade371aa558)

2 / 68
http://ck.softforum.co.kr/CKKeyPro/.../TouchEnKey_Installer_32bit_3.1.0.31.exe  (c97e9c95eca8fa4be9195b07bbfe7f45)

1 / 68
https://ck.softforum.co.kr/CKKeyPro/.../TouchEnKey_Installer_32bit_3.1.0.21_allkill.exe  (36be96a4330c76f2178f5b7aad049346)

0 / 68
http://ck.softforum.co.kr/CKKeyPro/.../TouchEnkey_Installer.exe  (touchenkey_installer_31010.exe)

0 / 68
http://ck.softforum.co.kr/CKKeyPro/ibk/.../TouchEnKey_Installer_32bit_3.1.0.19_allkill.exe  (ee18f8337ce31828a686f7a2e144af3e)

10 / 68    (Malware)
http://ck.softforum.co.kr/CKKeyProMulti/.../TouchEnkey_Installer_3104.exe  (touchenkey_installer.exe)

10 / 68    (Malware)
http://ck.softforum.co.kr/CKKeyPro/.../TouchEnkey_Installer_3104.exe  (touchenkey_installer.exe)

3 / 68      (inconclusive)
http://ck.softforum.co.kr/CKKeyPro/.../TouchEnkey_Installer.exe  (44c8eb6477cc8e805f3aa470dc3e72ab)

12 / 68    (Malware)
http://ck.softforum.co.kr/CKKeyPro/.../TouchEnKey_Installer.exe  (a1bb64f831f81803e45518cbf35e3e94)

The following 6 files have been seen to comunicate with ck.softforum.co.kr in live environments.

TCP » 14.0.67.89:80
mbtipv32.exe

TCP » 61.110.225.122:80
mbtipv32.exe

TCP » 61.110.225.153:80
topsadon1c.exe

TCP » 14.0.67.89:80
topsadon1c.exe

TCP » 61.110.225.153:80
mbtipv32.exe

TCP » 14.0.67.89:80
topsadon1c.exe

TCP » 61.110.225.122:80
mbtipv32.exe

TCP » 14.0.77.143:80
mbtipv32.exe

TCP » 14.0.77.143:80
topsadon1c.exe

TCP » 61.110.225.122:80
topsadon1c.exe

TCP » 61.110.225.153:80
mbtipv32.exe

TCP » 61.110.225.122:80
wsifvelkg.exe

TCP » 14.0.67.89:80
mbtipv32.exe

TCP » 14.0.77.143:443
mbtipv32.exe

TCP » 61.110.225.122:443
mbtipv32.exe

nefficient.co.kr

raonsecure.com

softforum.com

kofac.re.kr

vpay.co.kr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.