home

www.winutil.co.kr

Domain Information

Server location:
Seoul-T'Ukpyolsi, Korea (KR)

ASN:
AS4766 KIXS-AS-KR Korea Telecom,KR

Root domain:
winutil.co.kr

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.POSTMEDIACoLtd.T, PUP.POSTMEDIA.Installer (M), PUP.POSTMEDI.Installer (M), Threat.Win.Reputation.IMP, PUP.Postmedi (M), PUP (M)
100.00%

nProtect
Adware/W32.KrAdword.1895824
12.50%

McAfee
Artemis!1310EAD5DC02
12.50%

Malwarebytes
Adware.KorAd
12.50%

NANO AntiVirus
Trojan.Win32.Downware.cudbhg
12.50%

Trend Micro House Call
TROJ_GEN.F47V0122
12.50%

SUPERAntiSpyware
PUP.UtilTop/Variant
12.50%

Dr.Web
Adware.Downware.1922
12.50%

AhnLab V3 Security
PUP/Win32.UtilTop
12.50%

Agnitum Outpost
PUA.Downware
12.50%

VIPRE Antivirus
Trojan.Win32.Generic
12.50%

AVG
Generic5
12.50%

The domain www.winutil.co.kr has been seen to resolve to the following IP address.

222.97.189.147
May 1, 2014

File downloads found at URLs served by www.winutil.co.kr.

1 / 68      (Adware)
http://www.winutil.co.kr/dn.asp?pcode=1002&seq=29909  (paintshoppro903.exe)

1 / 68      (Adware)
http://www.winutil.co.kr/dn.asp?pcode=1004&seq=29500  (windows movie maker_total.exe)

1 / 68      (Adware)
http://www.winutil.co.kr/dn.asp?pcode=1002&seq=29747  (unitchanger_v120c.exe)

1 / 68      (Adware)
http://www.winutil.co.kr/dn.asp?pcode=1005&seq=29813  (cannon_printer_auto.exe)

1 / 68      (Malware)
http://www.winutil.co.kr/dn.asp?pcode=1001&seq=29776  (wlauncher.exe)

1 / 68      (Adware)
http://www.winutil.co.kr/dn.asp?pcode=1001&seq=29776  (wlauncher_setup.exe)

1 / 68      (Adware)
http://www.winutil.co.kr/dn.asp?pcode=1001&seq=29350  (hoffice2010trial_setup.exe)

12 / 68    (Adware)
http://www.winutil.co.kr/dn.asp?pcode=1001&seq=29196  (hofficeviewer2010se.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.