home

www.nextepserver.co.kr

Domain Information

Server location:
Seoul-T'Ukpyolsi, Korea (KR)

ASN:
AS3786 LGDACOM LG DACOM Corporation,KR

Root domain:
nextepserver.co.kr

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Dr.Web
Trojan.DownLoader.origin, Trojan.DownLoader5.53486
100.00%

IKARUS anti.virus
Downloader.Rozena, Trojan.SuspectCRC
100.00%

avast!
Win32:Malware-gen
50.00%

AVG
Downloader.Rozena
50.00%

NANO AntiVirus
Trojan.Win32.Rogue.cyupus
50.00%

VIPRE Antivirus
Trojan.Win32.Generic
50.00%

Avira AntiVirus
TR/Rogue.9982263
50.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen
50.00%

The domain www.nextepserver.co.kr has been seen to resolve to the following IP address.

110.45.244.88
February 25, 2016

File downloads found at URLs served by www.nextepserver.co.kr.

4 / 68      (Malware)
http://www.nextepserver.co.kr/tem_file/daum/.../daum-U0O0S0E9GJK07TLY.exe  (daum-ufcmqozz3d676w3e.exe)

6 / 68      (Malware)
http://www.nextepserver.co.kr/tem_file/noribox_n/.../noribox_n-2ELCZ3AZ450Z60I5.exe  (880a4af7208433f7a4e359d74284789a)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.