home

facebook-messenger.joydownload.com.br

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com.br

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InnovativeSystems.V, PUP.Installer.InnovativeSystems.W
100.00%

VIPRE Antivirus
Threat.4847482, Trojan.Win32.Generic
100.00%

Avira AntiVirus
APPL/Downloader.Gen, ADWARE/InstallCore.Gen9
100.00%

AVG
Sevas, Generic
100.00%

Dr.Web
Adware.Downware.5295
50.00%

avast!
Adware-gen [Adw]
50.00%

ESET NOD32
Win32/JoyDownloader.D potentially unwanted application
50.00%

Malwarebytes
PUP.Optional.Innovative
50.00%

NANO AntiVirus
Riskware.Win32.Downware.dejknq
50.00%

Sophos
Generic PUA IK
50.00%

Vba32 AntiVirus
Malware-Cryptor.InstallCore.gen
50.00%

ESET NOD32
Win32/InstallCore.RA (variant)
50.00%

The domain facebook-messenger.joydownload.com.br has been seen to resolve to the following 2 IP addresses.

184.73.244.120
ec2-184-73-244-120.compute-1.amazonaws.com
September 27, 2014

107.22.254.230
ec2-107-22-254-230.compute-1.amazonaws.com
September 27, 2014

File downloads found at URLs served by facebook-messenger.joydownload.com.br.

6 / 68      (Adware)
http://facebook-messenger.joydownload.com.br/get_ic_file/wUiS4GnYccXFwj sUOi5EF14ilx1NTutChrsYc7Y9uky53eo zQn2dBNJ0XhYqmqbiDpkgsHaT7ZWKryRuJigfo1gIPdGVnZqj3zT0z0smn/0qHDpZrSkmlZoJU2kV4BXnKtGGcmy5079WjwWGSTUuUPl5miKDYDaqY3LBtbMv7 BHh e53KOEJx07PvUSwtcpeylL9aWjj 50jE3/VtBJivcsKva2xc1ty9HPsv3BcW55q71AzqZel/kSa0Ac1c5sWzUXKquZWaiG95LeNRTsc3MXUxtOukGBtj80Si3J5OFSbzUFKv98 m1QRmNHHOqmgX28vYc3iuT1OIwLomK1fi3njdBQ40aX1WEZmsywINEnSfB/.../CZsTVix5MyyXsQORK7dpWPQY6kXsA16AjFeFUFjPW3Rdmda1NpcLvIrcEwSpGTN4RHKH L0uHTPuzETlKNwkbe4JYGMRgg==  (facebookmessengersetup.exe)

10 / 68    (Adware)
http://facebook-messenger.joydownload.com.br/get_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjynEB/zZd/Qveh152b0sCsrn8kFdE3hY/j2PXmuhBBKOSCGGuO1Gac8gLNkztTLXlDE7SS7BkTxsmnp2qaE/IaHyn4W9NZz1gsVATS6CCB0ipZhqznxGWmaSq4FkZPzPHQNarMgLhwdOOz9V3p1apqXZVt 3eihUHo3c8b40OU/HD/r4Q dw6A3Gc/.../5sZjn1QRmNHHOqixNicvYc3irT1PciPxtYk8=  (facebook-messenger-2.1.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.