home

www.fileguri.com

ICONCUBE INC

Domain Information

The domain www.fileguri.com registered by ICONCUBE INC was initially registered in October of 2002 through GABIA, INC.. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Seoul, Seoul-T'Ukpyolsi within Korea which resides on the Asia Pacific Network Information Centre network.
Registrar:
GABIA, INC.

Server location:
Seoul-T'Ukpyolsi, Korea (KR)

Create date:
Tuesday, October 22, 2002

Expires date:
Saturday, October 22, 2016

Updated date:
Thursday, October 22, 2015

ASN:
AS3786 LGDACOM LG DACOM Corporation,KR

Root domain:
fileguri.com

Whois:
1 fileguri.com record

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.Iconcube, PUP.Iconcube.Installer (M)
75.00%

F-Prot
W32/ZenoSearch.A_2.gen
50.00%

VIPRE Antivirus
Trojan.HotKeyHook
50.00%

herdProtect (fuzzy)
a variant of 66790aa5119ea8ec94b2bce0e28e739182c1e99f
25.00%

Trend Micro House Call
Suspicious_GEN.F47V1224
25.00%

Bkav FE
W32.HfsAdware
25.00%

The domain www.fileguri.com has been seen to resolve to the following 2 IP addresses.

114.108.161.200
November 18, 2015

110.45.157.131
November 18, 2015

File downloads found at URLs served by www.fileguri.com.

1 / 68      (PUP)
http://www.fileguri.com/FgDown.asp?ver=2  (filegurisetup_7.41.exe)

1 / 68
http://www.fileguri.com/FgActiveXDown.asp  (fgaddonsetup_2.20.exe)

4 / 68      (PUP)
http://www.fileguri.com/FgDown.asp?ver=2  (fileguriprosetup_7.27.exe)

4 / 68      (PUP)
http://www.fileguri.com/FgDown.asp?ver=2  (fileguriprosetup_7.29.exe)

URL:
http://www.fileguri.com/

Google Analytics:
UA-46996655

Title:
“ ϱ”

Description:
“ ϱ”

SSL certificate subject:
CN=*.fileguri.com, OU=platform team, O="iconcube, lnc.", L=Geumcheon-gu, S=Seoul, C=KR

SSL certificate issuer:
CN=thawte SSL CA - G2, O="thawte, Inc.", C=US

Web server:
Microsoft-IIS/7.5 (ASP.NET)

Facebook:
Likes:  3
Shares:  8
Comments:  2

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.