home

java.joydownload.ru

Private Person  (Proxy Registrant)

Domain Information

The domain java.joydownload.ru is registered by proxy through RU-CENTER-RU and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
RU-CENTER-RU

Server location:
Virginia, United States (US)

Create date:
Wednesday, May 14, 2014

Expires date:
Sunday, May 14, 2017

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.ru

Whois:
1 joydownload.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InnovativeSystems, PUP.InnovativeSystems.Installer (M), PUP.Innovati.Installer (M)
100.00%

McAfee
Artemis!2A2CC871B2C2
33.33%

Malwarebytes
PUP.Optional.OpenCandy
33.33%

K7 AntiVirus
Unwanted-Program
33.33%

Agnitum Outpost
Riskware.Agent
33.33%

Clam AntiVirus
Win.Trojan.Agent-803351
33.33%

Dr.Web
Adware.OpenCandy.55
33.33%

Avira AntiVirus
APPL/Downloader.Gen
33.33%

AhnLab V3 Security
PUP/Win32.OpenCandy
33.33%

ESET NOD32
Win32/JoyDownloader
33.33%

AVG
OpenCandy
33.33%

The domain java.joydownload.ru has been seen to resolve to the following 2 IP addresses.

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
June 5, 2016

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
May 22, 2016

File downloads found at URLs served by java.joydownload.ru.

1 / 68      (Adware)
http://java.joydownload.ru/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv I253eq ysyl4pHaAW7erC/NXe20g4JdDKeEKqtG78lgOA01s3EDQmavCX7BlSu4S tgLbbrNPKk2ZZqtY6hV9QAT7nU3wghshw9Cr W2aYQLlfys/qdD0EYqt0dkwdOOz9UHBteszPIRIknqqnGCQvasG2w Z2BGiwoFvdl7xmAJivJpvyOmNXnMu/HOM2xV9A5c3/jR hMP4q0G/.../uUXKquZKaiGx5M6RIBo4 M20hsuC1FllriByigYIYR3mjFAawqZnu1Q0hP2DP9Q==  (jre8u20windowsx64.exe)

11 / 68    (Adware)
http://java.joydownload.ru/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklU3NSr9Wk36Jd7W8rpouTq54SB0z8VbZRL1Y/j2PnO20gABcSPQSqDiWuklyPpqwMyPXV3Xrj3zT0z0smn50qHDpZrSl2lZo5cyh1dDRn3kAD1/hoNwqjnxGWmaSq5eysXzPHQNarMga1wdOOz9V3BtedzFZREkhrOyTXpxLcfg2q4/.../44JDmzR0nO2DP9Q==  (jre8u25windowsx64.exe)

1 / 68      (Adware)
http://java.joydownload.ru/get_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/yWn9np5iNENJ1XlarnuNDC2w15KcTrYCeL ErA8gLNiztTZQx6avCX5BlT2qnD8gfTRpMuMyCAL/cR5xhceRn3kADp/hpl4uHroUSCTRLZOnp69YiUMK7MwLhIdae2iXj99eImXeE99y KsFCI7Lc2nw Z2BG woA H3KYuUYC2Kciva3FV18O6FesllF4f7oLv1AGsfKE2nS6sEc5f/.../O34kueS1FllriByigYIYR3mjFAawqZnu1Q0hP2DP9Q==  (jre8u20windowsx64.exe)

URL:
http://java.joydownload.ru/

Title:
“Java. Скачать бесплатно Джаву 8.31 для windows на русском - JoyDownload”

Description:
“Java Runtime Environment - это программная среда для функционирования приложений и игр, созданных на языке Java - Скачать здесь Java Runtime Environment последнюю версию.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)

Facebook:
Shares:  3

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.