home

count.cncrk.com

Xiamen eName Network Co., Ltd.

Domain Information

The domain count.cncrk.com registered by Xiamen eName Network Co., Ltd. was initially registered in June of 2004 through ENAME TECHNOLOGY CO., LTD.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Lishui, Zhejiang within China which resides on the Asia Pacific Network Information Centre network.
Registrar:
ENAME TECHNOLOGY CO., LTD.

Server location:
Zhejiang, China (CN)

Create date:
Wednesday, June 16, 2004

Expires date:
Tuesday, June 16, 2020

Updated date:
Friday, April 17, 2015

ASN:
AS4134 CHINANET-BACKBONE No.31,Jin-rong Street, CN

Root domain:
cncrk.com

Whois:
1 cncrk.com record

Google Safe Browsing:
unwanted

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

G Data
Win32.Application.Agent.I5KN67, Adware.Agent.PLH, Win32.Application.Agent.W5SSY8, Win32.Adware.Qjwmonkey
100.00%

IKARUS anti.virus
PUA.Qjwmonkey
100.00%

K7 AntiVirus
Adware
75.00%

Agnitum Outpost
PUA.Qjwmonkey
75.00%

Trend Micro House Call
Suspicious_GEN.F47V0303, Suspicious_GEN.F47V0401, Suspicious_GEN.F47V0413
75.00%

avast!
Win32:Adware-gen [Adw]
75.00%

NANO AntiVirus
Riskware.Win32.Qjwmonkey.dnwfek, Riskware.Win32.Qjwmonkey.dqafrm, Riskware.Win32.Qjwmonkey.dqkgii
75.00%

Comodo Security
Application.Win32.Qjwmonkey.ADH
75.00%

Dr.Web
Adware.Qjwmonkey.1, Adware.Qjwmonkey.7, Adware.Qjwmonkey.9
75.00%

VIPRE Antivirus
Adware Trojan.Win32.Generic, Threat.4150696
75.00%

Sophos
Ruifeng
75.00%

Avira AntiVirus
APPL/Qjwmonkey.uzte, APPL/Qjwmonkey.olna, APPL/Qjwmonkey.cfk
75.00%

ESET NOD32
Win32/Adware.Qjwmonkey (variant)
75.00%

McAfee
Artemis!FA1237014554, Artemis!91289404FFA8, Program.PUP-FXI
75.00%

Fortinet FortiGate
Riskware/Qjwmonkey
75.00%

The domain count.cncrk.com has been seen to resolve to the following 3 IP addresses.

115.238.251.157
May 26, 2016

115.238.251.158
February 11, 2016

115.238.251.59
May 5, 2015

File downloads found at URLs served by count.cncrk.com.

4 / 68      (PUP)
http://count.cncrk.com/Download.asp?ID=87512&t=s0&sid=91057&URL=http://down.cncrk.com:8080/soft/.../&file=obszbrj.zip  (thunder_dl_7.9.40.5006review@81_135373.exe)

27 / 68    (Adware)
http://count.cncrk.com/Download.asp?ID=29267&t=s0&sid=30917&URL=http://down.cncrk.com:8080/soft/.../&file=HA-Proxifier315-LDR.rar  (�‰â«2�„ ì§ ï¿½•1�-„2mod@54_26788.exe)

0 / 68
http://count.cncrk.com/Download.asp?ID=83596&sid=86968&URL=http://down.cncrk.com:8080/soft/.../&file=wxjldczs.zip  (î¢ðå¼çâ¼µ¼³ööúêö v141030 °²×¿°æ@25_86968.exe)

24 / 68    (Adware)
http://count.cncrk.com/Download.asp?ID=41149&t=s0&sid=42955&URL=http://down.cncrk.com:8080/soft/.../&file=mysql-connector-net.zip  (slic_dump_toolkit下载2.3中文免安装版[slic 版本查看工具]@66_17148.exe)

27 / 68    (Adware)
http://count.cncrk.com/Download.asp?ID=64787&t=s0&sid=66957&URL=http://down.cncrk.com:8080/soft/.../&file=Recuva_setup.zip  (�‰â«2�„ ì§ ï¿½•1�-„2mod@54_26788.exe)

23 / 68    (Adware)
http://count.cncrk.com/setup.asp?id=54827  (´˵ұ˸(´˵)v3.exe)

23 / 68    (Adware)
http://count.cncrk.com/Download.asp?flag=a&t=o12&ID=52949&sid=54827&URL=http://down.cncrk.com:8080/soft/.../&file=texmod.zip  (´˵ұ˸(´˵)v3.exe)

URL:
http://count.cncrk.com/

Title:
“ IIS ϵͳ”

Web server:
Microsoft-IIS/8.5

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.