home

down.multidownload.co.kr

Domain Information

Server location:
Kyonggi-Do, Korea (KR)

ASN:
AS4766 KIXS-AS-KR Korea Telecom,KR

Root domain:
multidownload.co.kr

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Avira AntiVirus
TR/Rogue.8024417, TR/Agent.2681472, TR/ManBat.262248
100.00%

IKARUS anti.virus
Trojan.adh, Trojan.Agent, Trojan.ATRAPS
100.00%

AVG
Generic34, Suspicion: unknown virus
100.00%

McAfee
Artemis!3FC3CEEF959B, Artemis!2F731B231A39
66.67%

Trend Micro House Call
TROJ_GEN.RCBZ1JS, TROJ_GEN.FCBCBL3
66.67%

avast!
Win32:PUP-gen [PUP], Win32:Evo-gen [Susp]
66.67%

Dr.Web
Trojan.PWS.Kpo.70, Trojan.Adkor.83
66.67%

Trend Micro
TROJ_GEN.RCBZ1JS, TROJ_GEN.FCBCBL3
66.67%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, BScope.Trojan.Banker
66.67%

Bkav FE
W32.Clodb9e.Trojan
33.33%

MicroWorld eScan
TR/ADH.A.2054
33.33%

Malwarebytes
Adware.KorAd
33.33%

K7 AntiVirus
Trojan
33.33%

Norman
Suspicious_Gen4.RUGT
33.33%

Agnitum Outpost
Trojan.ADH
33.33%

The domain down.multidownload.co.kr has been seen to resolve to the following IP address.

211.104.175.45
May 5, 2015

File downloads found at URLs served by down.multidownload.co.kr.

8 / 68      (Malware)
http://down.multidownload.co.kr/.../MultiDownloadInstall.exe  (4267313d1fe64086426d234447ec66ba)

6 / 68      (Malware)
http://down.multidownload.co.kr/.../MultiDownloadInstall.exe  (a4231db4026af6b3e42de8754326375f)

20 / 68    (PUP)
http://down.multidownload.co.kr/.../MultiDownloadInstall.exe  (3fc3ceef959b901a126ee825dfb09c70)

bomul.com

favorite-icons.com

gcodec.co.kr

howcodec.co.kr

kmcodec.co.kr

multicodec.co.kr

myget.co.kr

smartaddress.co.kr

smarttab.co.kr

vcodec.co.kr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.