The domain yahoo-messenger.joydownload.com is registered by proxy through GODADDY.COM, LLC and was originally registered in March of 2013. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon.com, Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Domains By Proxy, LLC
Registrar:
GODADDY.COM, LLC
Server location:
Virginia, United States (US)
Create date:
Monday, March 18, 2013
Expires date:
Saturday, March 18, 2017
Updated date:
Thursday, January 28, 2016
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (90% detected)
Scan engine
Details
Detections
AVG
Generic, OpenCandy, Win32/Sality
88.89%
McAfee
Adware-Opencandy, Artemis!ED05F4F279CC, Artemis!8978A4C112FC, Artemis!B2BDEE976167, Artemis!900074AB5026, Program.Artemis!A2CE5EAFBF76
77.78%
Malwarebytes
PUP.Optional.OpenCandy
77.78%
VIPRE Antivirus
Opencandy, Trojan.Win32.Generic, Sevas-S Installer, Threat.4721115
77.78%
Reason Heuristics
PUP.InnovativeSystems.X, PUP.Installer.InnovativeSystems, PUP.InnovativeSystems.Installer (M), PUP.RICHMEDIASYSTEMS.Installer (M)
77.78%
Dr.Web
Adware.Downware.6712, Adware.OpenCandy.55, Adware.Downware.9759, Win32.Sector.30
77.78%
Trend Micro House Call
Suspicious_GEN.F47V0716, Suspici.218D75EB, Suspicious_GEN.F47V1105, Suspici.792C221A, ADW_OPENCANDY
66.67%
avast!
Win32:Malware-gen, Win32:Adware-gen [Adw], Win32:Sality
66.67%
Agnitum Outpost
Riskware.Agent
66.67%
Baidu Antivirus
Adware.Win32.OpenCandy
66.67%
ESET NOD32
Win32/JoyDownloader, Win32/OpenCandy.C potentially unsafe (variant), Win32/JoyDownloader.D potentially unwanted
66.67%
K7 AntiVirus
Adware , Unwanted-Program , Trojan
55.56%
Avira AntiVirus
APPL/Downloader.Gen
55.56%
G Data
Win32.Adware.OpenCandy
55.56%
Clam AntiVirus
Win.Trojan.Agent-803351, Win.Trojan.Agent-855157
55.56%
The domain yahoo-messenger.joydownload.com has been seen to resolve to the following 7 IP addresses.
ec2-50-19-96-56.compute-1.amazonaws.com
February 18, 2016
ec2-54-225-168-223.compute-1.amazonaws.com
February 18, 2016
ec2-54-235-130-12.compute-1.amazonaws.com
July 1, 2015
ec2-23-21-241-197.compute-1.amazonaws.com
December 29, 2014
ec2-23-23-159-111.compute-1.amazonaws.com
December 29, 2014
ec2-184-73-244-120.compute-1.amazonaws.com
October 24, 2014
ec2-107-22-254-230.compute-1.amazonaws.com
October 24, 2014
File downloads found at URLs served by yahoo-messenger.joydownload.com.
The following file have been seen to comunicate with yahoo-messenger.joydownload.com in live environments.
URL:
http://yahoo-messenger.joydownload.com/
Title:
“Yahoo! Messenger - Download Yahoo! Messenger 11.5 in english on JoyDownload”
Description:
“Yahoo! Messenger is a good old multifunctional instant messenger with some new features and more possibilities developed specially for you - Download Yahoo! Messenger latest version here.”
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
nginx/1.9.12 (PHP/5.3.10-1ubuntu3.21)
Facebook:
Likes: 16
Shares: 58
Comments: 1
Statistics are for the previous month.