home

cafcon.devone.co.kr

Domain Information

Server location:
Arizona, United States (US)

ASN:
AS13335 CLOUDFLARENET - CloudFlare, Inc.,US

Root domain:
devone.co.kr

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

AhnLab V3 Security
PUP/Win32.Cafcon
100.00%

Reason Heuristics
PUP.CAFCON.Reputation
50.00%

MicroWorld eScan
Gen:Variant.Wnmu.1
50.00%

McAfee
GenericR-CLT!E9E91DBBD208
50.00%

Trend Micro House Call
ADW_KRADDARE
50.00%

Lavasoft Ad-Aware
Gen:Variant.Wnmu.1
50.00%

Comodo Security
UnclassifiedMalware
50.00%

F-Secure
Gen:Variant.Wnmu.1
50.00%

Dr.Web
BACKDOOR.Trojan
50.00%

Trend Micro
ADW_KRADDARE
50.00%

Rising Antivirus
PE:Trojan.Win32.Generic.14C6EB92!348580754
50.00%

The domain cafcon.devone.co.kr has been seen to resolve to the following 2 IP addresses.

104.31.89.248
February 27, 2016

104.31.88.248
February 27, 2016

File downloads found at URLs served by cafcon.devone.co.kr.

10 / 68    (PUP)
http://cafcon.devone.co.kr/.../cafconsetup.exe  (e9e91dbbd20891eded712467dd44ee59)

2 / 68      (PUP)
http://cafcon.devone.co.kr/.../cafconuninstall.exe  (065f55c86fe7347132ed1b04d7a974e1.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.