home

corenet

Publisher Information

corenet is a software developer located in "Uijeongbu-si ", Gyeonggi-Do in Korea*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.
Authority:
Thawte, Inc.

Valid from:
10/5/2011 9:00:00 AM

Valid to:
10/5/2013 8:59:59 AM

Subject:
CN=corenet, O=corenet, L="Uijeongbu-si ", S=Gyeonggi-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
61a656767e655d1859c3e6cc8632d65a

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Eorezo.corenet.Meta (M), Adware.Eorezo.corenet.Installer.Meta (M), Adware.Eorezo (M), Win32.Generic
90.00%

McAfee
Artemis!9EE2BEFC94D0, Artemis!D0A6FA5192C1, Generic Downloader.g, Generic.dx!bf3k, Trojan.Generic Downloader.ad
10.00%

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra, Threat.4150696
10.00%

AVG
Generic5, unknown virus Win32/DH, Dhupad, Suspicion: unknown virus, Adware Skodna.Generic.FN
10.00%

avast!
Win32:Adware-ADA [Adw], Win32:Malware-gen, Win32:PUP-gen [PUP]
8.00%

Kaspersky
not-a-virus:HEUR:AdWare.Win32.WizPop, HEUR:Trojan-Downloader.Win32.Generic, not-a-virus:AdWare.Win32.Wizpop
8.00%

Comodo Security
UnclassifiedMalware
8.00%

G Data
Gen:Variant.Adware.Graftor.Elzob.306, Win32:Malware-gen, Adware.Kraddare.DM, Gen:Variant.Graftor.7457
8.00%

ESET NOD32
Win32/Adware.Kraddare.BM (variant), Win32/Adware.Kraddare.FK (variant), Win32/TrojanDownloader.Agent.RFQ (variant), Win32/Adware.Kraddare.BF (variant)
8.00%

MicroWorld eScan
Gen:Variant.Adware.Graftor.Elzob.306, Adware.Kraddare.DM, Gen:Variant.Graftor.7457
6.00%

1 / 68      (PUP)
wizpop_install_i012.exe  (a88ee9a14c2c17fe50d319bb88f2b7b1)

1 / 68      (PUP)
wizpop_install_i011.exe  (8154713c9f22939bc2d166999f355ce9)

1 / 68      (PUP)
_mapzine_server.exe  (658efd615cf088499873c2bbfac06fe7)

1 / 68      (PUP)
ieside_inst_i011.exe  (35665a182aaf1eaa640c7224c4f57963)

1 / 68      (PUP)
pocket_monster.exe  (7c806b62ed05e1046c70f5af61152fda)

1 / 68      (PUP)
filecook.exe  (385a50015812e8b1dcf0275c08897d13)

1 / 68      (PUP)
downcook.exe (filecook downloader by filecook)  (e888f01cba026648694de33bc4db8cec)

1 / 68      (PUP)
_internet_speed_up.exe  (54a514a6f0bc5c84ba17a41652702316)

1 / 68      (PUP)
download3.exe  (9aae5672d07b0cea66fd5e4445a7761b)

1 / 68      (Adware)
fast_ping_setup.exe (DownloadManager)  (57a0f96f86b0cde52d8ebd41b227c344)

1 / 68      (PUP)
wizsearch_install_nanda.exe  (6e219f2801bb7c8666fea1bad1609ae6)

1 / 68      (PUP)
ieside_inst_i011.exe  (170b627796e2f9609f0cad314706c09b)

1 / 68      (Adware)
fast_ping_setup.exe (DownloadManager)  (bd5ac21cf06c5a90a1ee872863d0744f)

1 / 68      (Adware)
fast_ping_setup.exe (DownloadManager)  (d061e105645b8b7670afd52f83b0cf53)

1 / 68      (PUP)
wizsearch_uninstall.exe  (a1fcfaa96fc50dcb8283191e8113ea91)

1 / 68      (PUP)
WizSearch_Helper.DLL (WizSearch_Helper Module)  (4e4e370040453bded15194d6d7ebc8c2)

1 / 68      (Adware)
fast_ping_setup.exe (DownloadManager)  (c42b976389e595643612c680585833e3)

1 / 68      (PUP)
downcook_filehouse.exe (filecook downloader by filecook)  (24bdc7f6ddcd776d5c24a4f6a94ec7f1)

1 / 68      (PUP)
_phone_tracer.exe  (a27910446cab04a7441002ceaafcea75)

1 / 68      (PUP)
_asphalt_6_kor.exe  (ce6eb1a6b1c42d6da63b559bb569975a)

1 / 68      (PUP)
_asphalt_5_kor.exe  (2650cb2187667c06ffd0a0eae254c1a5)

1 / 68      (PUP)
WizSearch_Helper.DLL (WizSearch_Helper Module)  (92225e3e15d0f7d45cf0995d4b31a128)

1 / 68      (PUP)
_Daemon_Lite.exe  (b60d390f854c0d803ec6410a6fe7a3f8)

1 / 68      (PUP)
WizSearch.EXE  (3c98970d5dc48b2f92feb7dc9c847f69)

1 / 68      (PUP)
WizSearch.EXE  (f4e4b089a8175bd9f074c5c77a3f2923)

1 / 68      (PUP)
ieside_inst_i011.exe  (1820595d09222fa9da9fe701eb9095f6)

1 / 68      (PUP)
wizsearch_install_nanda.exe  (882a623db1cc91d56b7a4cae32335111)

1 / 68      (PUP)
downcook.exe (filecook downloader by filecook)  (fcf5f62a2d231474a5221195ad4c258e)

1 / 68      (PUP)
filedown.exe  (d59ef0e8165e12432a1b7b4468f282d0)

1 / 68      (PUP)
wizsearch_renew.exe  (17cc4aa4b5b8d994cbede6e1b72b9624)

 
Latest 30 of 72 files

Downloads URLs for files signed by corenet.

1 / 68      (PUP)
http://www.alyackorea.com/download3.php?n=Daemon_Lite.exe&o=  (b60d390f854c0d803ec6410a6fe7a3f8)

* Note, the details and description above are based on the code signing digital signature issued to corenet by Thawte, Inc. on October 05, 2011 with the serial number '61a656767e655d1859c3e6cc8632d65a'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.