home

windows-movie-maker.ar.joydownload.co

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.co

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.OpenCandy
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Trend Micro House Call
ADW_OPENCANDY
100.00%

Clam AntiVirus
Win.Trojan.Agent-803351
100.00%

Dr.Web
Adware.OpenCandy.55
100.00%

Trend Micro
ADW_OPENCANDY
100.00%

Avira AntiVirus
APPL/Downloader.Gen
100.00%

G Data
Win32.Adware.OpenCandy
100.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
100.00%

McAfee
Artemis!71F16CD15D52
100.00%

Baidu Antivirus
Adware.Win32.OpenCandy
100.00%

ESET NOD32
Win32/JoyDownloader.D potentially unwanted
100.00%

AVG
OpenCandy
100.00%

Reason Heuristics
PUP.Installer.InnovativeSystems
100.00%

The domain windows-movie-maker.ar.joydownload.co has been seen to resolve to the following 3 IP addresses.

172.99.89.194
May 16, 2016

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
April 7, 2015

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
April 7, 2015

File downloads found at URLs served by windows-movie-maker.ar.joydownload.co.

23 / 68    (Adware)
http://windows-movie-maker.ar.joydownload.co/get_azure_file/wUiS4WnYccXBwj zXP7oQkEsml0kPT61E1v4Y9bB87pi/269qG142d4HJU/merC/NXK8ykYMayDMR7juXfdr0bIjzseUDR7WpnGsUwG0pSbgzayEs4SJyjYJs55ziVZIRjb Xix 18ks9Dn/U2qbQK5Xi83nPSVRN VmelodOOz9VHBtfM/.../1FBqIyud9dwTu0SHUAxQ1dy8XQoOijw==  (windows-movie-maker-2.6.4037.0.exe)

23 / 68    (Adware)
http://windows-movie-maker.ar.joydownload.co/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1HBnga5/ZtukktDyqsGMxwdkEP0XherC/NXC20hQBZnGHWOOiEqcyyrBixNSWRAaT9T2nT1T8 3G4geeW94eMziQIs55ziVdIRjLjGDU2nsIj7CroUSCTQ7ZOi561JTxeYrgwJFsFNaXlAzI/IYybNBB7hqDgEyIjeYXy1eQ TWO uEiZxaM5Fpn esGqZWMbhp/.../N2n2lJ6eCuRpTdFhoyRInnrT0LXmrwmPRD7livSDhgwYHJXFoOijw==  (windows-movie-maker-2.6.4037.0.exe)

The following 41 files have been seen to comunicate with windows-movie-maker.ar.joydownload.co in live environments.

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

TCP » 172.99.89.194:443
droppad.crx

 
Latest 20 of 41 files

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.