home

spss-main.joydownload.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InnovativeSystems.CC, PUP.InnovativeSystems.Installer (M)
100.00%

ESET NOD32
Win32/JoyDownloader.D potentially unwanted application
50.00%

Clam AntiVirus
Win.Trojan.Agent-803351
50.00%

Dr.Web
Threat.Undefined
50.00%

McAfee
Trojan.Artemis!2A2CC871B2C2
50.00%

The domain spss-main.joydownload.com has been seen to resolve to the following 4 IP addresses.

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
May 24, 2016

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
May 24, 2016

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
February 1, 2015

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
February 1, 2015

File downloads found at URLs served by spss-main.joydownload.com.

1 / 68      (Adware)
http://spss-main.joydownload.com/get_file/wUiS4WnYccXBwj qXP7oQkEsnl0kPjCvGR7ycteQv E8/zq9sGMxwdwEPwC Nu jeDCuyxdSMWmeQrDzCr50ybtq1seYFQfS9SvyHhCu5C6tgLbbrdvSgwArwvZf4BETEC/kTmcm16wr/ESeOAzeGeJfyqj/.../2RERzhVW61NdWUHW1FAaqqZvvhAUmNGCC4T4G1prZNni6R0Ddivl6ewm9  (spss_statistics_22_tr_win32_.exe)

5 / 68      (Adware)
http://spss-main.joydownload.com/get_azure_file/wUiS4WnYccXGwj 8XPavWwllklQ0NSrEeHuRD7 X5KdvriGn8SsdydlhSSWIL KiPHHT3gEQZ3GHWOOhEqdii/k5hpOPDFWb/iv5BEPwuH 2gv6SpNvSgycPs55ziVRIRne1AX1/l8k7uHKuSGjaSrpW2sXgNzUEbas5bBIMOb20Dy5tc5fEJxBhhqfuAHB6JNGnk/8 TWO7uEjOjvQvDpO9etD6NjIcg5D0WKt4jRZW54H3nxu4Leloyn3/Xd1Wrc25SWu28IOb2SYnbaQEHNppZjhgounkFxlrnE/pg89PUCbjDB/.../ewm9  (spss_statistics_22_tr_win32_.exe)

The following file have been seen to comunicate with spss-main.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.