home

down.daemon-tools.kr

Domain Information

Server location:
Seoul-T'Ukpyolsi, Korea (KR)

ASN:
AS9848 GNGAS Enterprise Networks,KR

Root domain:
daemon-tools.kr

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.EbizNetWorks, PUP.Installer.EbizNetWorks, PUP.EbizNetWorks.Installer (M), PUP.EbizNetW.Installer (M), PUP (M)
100.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
25.00%

Bkav FE
W32.HfsAdware
12.50%

Dr.Web
Trojan.Adkor.194
12.50%

The domain down.daemon-tools.kr has been seen to resolve to the following IP address.

210.112.11.141
November 7, 2015

File downloads found at URLs served by down.daemon-tools.kr.

2 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite4491-0351_update.exe  (b5208b09702abda0886ae52e146e1423)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite5006-0616_update.exe  (4e6875dca7cd0e0f0adf0b442d154e54)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite5004-0503_home.exe  (ebab097146cba0ddeacb927eb883e0d5)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite4491-0616_update.exe  (8a0220e27ddebebd023e188598b578fa)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite5004-0422_update.exe  (c9931727d435c2eefa348511d1817ab7)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite5004-0503_home.exe  (b0aa362677cf19a72201261df427920c)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite5004-0503_home.exe  (ea09a7801ad24c7ff29020a316ec55c2)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite5004-0422_update.exe  (69f38127282dd47a47de5cc9e6f3c7df)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite4491-0352_home.exe  (43eabfe65fc4bf0f3cc57790ea29a24f)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite5004-0421_update.exe  (d2af8d2eae08052f9ac13355fcec86c2)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite4491-0352_home.exe  (e390a071fef68f85bca3a3ee62f2a8e4)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite4491-0352_home.exe  (16557094858abbd1b41413ad40b831f4)

4 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite4491-0352_home.exe  (2330bb39c752372a2cc9b4fa490b9fab)

1 / 68      (Adware)
http://down.daemon-tools.kr/.../dtlite_update_150803.exe  (55d79927c7c0f81ff8a1458685b873c2)

4 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite4491-0352_home.exe  (309640d10e38655e289910b736e45939)

2 / 68      (Adware)
http://down.daemon-tools.kr/.../DTLite4491-0351_home.exe  (9d8121e149e79042cf64ff30cbc142dc)

ancamera.co.kr

ancamera.net

ezenjoy.com

ezoneclick.com

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.