» winutil.co.kr
Overview
Analysis
IPs Addresses (1)
Downloads (4)

winutil.co.kr

Domain Information

Server location:

Seoul-T'Ukpyolsi, Korea (KR)

ASN:

AS4766 KIXS-AS-KR Korea Telecom,KR

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Postmedia (M), PUP.Postmedia.Installer (M), PUP.GRETECH.Installer.Meta (L)

100.00%

Malwarebytes

Adware.KorAd

25.00%

Zillya! Antivirus

Trojan.Badur.Win32.7866

25.00%

Agnitum Outpost

PUA.Downware

25.00%

avast!

Win32:Evo-gen [Susp]

25.00%

Clam AntiVirus

Win.Adware.Symmi-85

25.00%

NANO AntiVirus

Trojan.Win32.Downware.cudbhg

25.00%

Dr.Web

Adware.Downware.1922

25.00%

VIPRE Antivirus

Trojan.Win32.Generic

25.00%

AhnLab V3 Security

PUP/Win32.UtilTop

25.00%

McAfee

Artemis!1310EAD5DC02

25.00%

Vba32 AntiVirus

Trojan.Badur

25.00%

IKARUS anti.virus

Trojan.Win32.Badur

25.00%

AVG

Generic5

25.00%

herdProtect (fuzzy)

a variant of d75df5e42988044a1ac5c54b23bc246034164b21

25.00%

The domain winutil.co.kr has been seen to resolve to the following IP address.

222.97.189.147

May 1, 2014

File downloads found at URLs served by winutil.co.kr.

1 / 68 (PUP)

http://winutil.co.kr/dn.asp?hash=4b2077ac17a738271af6bde22370494ea8509a9a (grlaunchertempsetup.exe)

1 / 68 (Adware)

http://winutil.co.kr/dn.asp?hash=8b1489fcf7ad6eb1461df47c26fad4a3b1d09a7b (gomplayersetup.exe)

18 / 68 (Adware)

http://winutil.co.kr/dn.asp?hash=0902f09952222cb3253ac7278571f65e01a21fa1 (hoffice2010trial.exe)

1 / 68 (Adware)

http://winutil.co.kr/dn.asp?hash=48203dae423b52eba7c3ace673746fa58c1c5b91 (qtranslate_v3_1_1.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.