home

install_virtualdj_pc_v8.0.2094.exe

VirtualDJ

RICH MEDIA SYSTEMS INC.

The application install_virtualdj_pc_v8.0.2094.exe by RICH MEDIA SYSTEMS INC has been detected as a potentially unwanted program by 17 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from virtualdj.pt.1800download.com and multiple other hosts.
Publisher:
RICH MEDIA SYSTEMS INC.  (signed and verified)

Product:
VirtualDJ

Version:
1.0.0.0

MD5:
93465a896b71476626941cabf78de2c8

SHA-1:
ebb760a527484319f99386b143c12598aa5941c3

SHA-256:
31ee3d74f8908272455d697e76b258364ccb8306680932ba692dc19be82473c6

Scanner detections:
17 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
5/17/2025 7:39:43 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.Agent
7.1.1

AhnLab V3 Security
PUP/Win32.OpenCandy
2015.04.23

AVG
OpenCandy
2016.0.3131

Baidu Antivirus
Adware.Win32.OpenCandy
4.0.3.15423

Clam AntiVirus
Win.Trojan.Agent-855157
0.98/21511

Dr.Web
Adware.Downware.10304
9.0.1.0113

ESET NOD32
Win32/OpenCandy.C potentially unsafe (variant)
9.11517

Fortinet FortiGate
Riskware/OpenCandy
4/23/2015

G Data
Win32.Adware.OpenCandy
15.4.25

K7 AntiVirus
Trojan
13.203.15680

Malwarebytes
PUP.Optional.OpenCandy
v2015.04.23.10

McAfee
Artemis!93465A896B71
5600.6787

Panda Antivirus
PUP/OpenCandy
15.04.23.10

Reason Heuristics
PUP.Installer.RICHMEDIASYSTEMS
15.5.8.23

Sophos
OpenCandy
4.98

Trend Micro House Call
Suspicious_GEN.F47V0415
7.2.113

VIPRE Antivirus
Sevas-S Installer
39590

File size:
416 KB (425,960 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\install_virtualdj_pc_v8.0.2094.exe

Digital Signature
Signed by:
RICH MEDIA SYSTEMS INC.

Authority:
Symantec Corporation

Valid from:
2/17/2015 1:00:00 PM

Valid to:
2/18/2016 12:59:59 PM

Subject:
CN=RICH MEDIA SYSTEMS INC., O=RICH MEDIA SYSTEMS INC., L=HENDERSON, S=Nevada, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3F87144C25AF8BCF29F29C5A1FEEF4BA

File PE Metadata
Compilation timestamp:
5/20/2013 11:53:00 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:viuW3MrPkpW8ZvdEAOB3W8Aop9H4kpDeJY:RcOMpW41fOBG8J/lpDeK

Entry address:
0x331C

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 30, 92, 40, 00, 89, 6C, 24, 14, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, BC, 70, 40, 00, 55, FF, 15, AC, 72, 40, 00, 6A, 08, A3, 98, 92, 42, 00, E8, A8, 2E, 00, 00, A3, E4, 91, 42, 00, 55, 8D, 44, 24, 34, 68, B4, 02, 00, 00, 50, 55, 68, 90, 06, 42, 00, FF, 15, 7C, 71, 40, 00, 68, 7C, 93, 40, 00, 68, E0, 81, 42, 00, E8, 13, 2B, 00, 00, FF, 15, 34, 71, 40, 00, BB, 00, 40, 43, 00, 50, 53, E8, 01, 2B, 00, 00...
 
[+]

Entropy:
7.7766

Packer / compiler:
Nullsoft install system v2.x

Code size:
24 KB (24,576 bytes)

The file install_virtualdj_pc_v8.0.2094.exe has been seen being distributed by the following 10 URLs.

http://virtualdj.pt.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv E8/yG6sGMxwdoEP0b1Y/j2PHmugw0MIGjVEeivE/Y9wLNyhJ/JFQfS9SryHkH1sXu4mf6SpNjYm3Ef NZw3wQLETT7GDU2nsoj7G2jGCfcEeAIktXqdD0BYqtnZ1hWcfrlXSN1ecrMLx0mjqjtFS1mcoP4w7tqUj3v8EjE3/VuDoC5c9ClLHtf1dPkRL02lF4f74LvjlvqZel/lCa0RZYJ/.../joZOSny4nZqRIBo45M2116b7yDxEihBW03c8dTW lV1GvzNy9hUtgby6Q4gVUjraVOGyoW0Pdgf5hPEqlxyqa

http://virtualdj.es.1800download.com/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PTK1HBvga5/ZtukktDyqsGMxwdkEP0TkerC/NXC20hcBZnGHQuOmEL50ybpq1oDEUx6avCX BlT1un69jPTDpZrSk2lZ/tYiiBZIU3y1TWcrwJxuvTnxGWmbSq4YjNXqdD0GYqszPRNMOa73XGgrIY2OekpryeO4AC1mcoz4w6tsTC3/4wabxu1nR5i etDuNiVO1IK3GOM2mB8c7Y/.../MziSXjtsZiUnS0kZrRIBo45M2116b7yDxEihBW03c8dTW lV1GvzNy9hUtgby6Q4gVUjraVOGyoW0Pdgf5hPEqlxyqa

http://virtualdj.es.1800download.com/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv I253eq ysyl4pHaAW7erC/.../5fKE2nSqsEZkCspPuAWvi8JuSkD4kZKRIBo45M2116b7yDxEihBW03c8dTW lV1GvzNy9hUtgby6Q4gVUjraVOGyoW0Pdgf5hPEqlxyqa

http://virtualdj.es.1800download.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqiGh/zcteQv A8/yWn9np5iNELJ1XgarL8OGG3g15bOHHVQr21E/Y9wbNyx8WPDE b SXqWQ634Tnqmf6IpNjck2pPoJA0hFVJF3ykACw2zZc79XLwW2uSA7ZdyM3zY25EKOVjZl1Nb738FXB2ctyIf1lmyfC4Rnw3c8b41ecnWDDm50jE3/.../JKRIBo46M21k6bzzQl0inB3z3d9OAWilFAawqZvu1Q43NTHOvmAGi4aPZCfqV0qegvh1ewbzxyqa

http://virtualdj.il.1800download.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjylERn6Ztnbteh152f0sCw22dBNJ0bterruNDC2w15KazrYCeLkErc90bpj1s3eDQ6b7XC7Hk20sny1mbKI8I2H1iBZqtY6gF9QFC/zGDU2nsYj7Cz4U2OeUrcfwsTrJXFePKs5bBIJOb31VH99f8/cLVgoiqv2RHl5LNCww Z2BGuwoF7MjvQvDpa3YpT3MyRO1IK3Hu0ujURLrsys0QSXKPM302n3X5sHgYfoLD/.../rBw35sc69hE95bzuB jYG1prZOXi6AxifzL8uNVaqxyqa

http://virtualdj.il.1800download.com/get_azure_file/wUiS4WnYccXBwj pXP7oQlssmV89fDKkEgqyOYjBvqA86G/spWp7y9wcJgTtbrHuajv8mRYNIGjVEeijGrwyxbhhxMGWRAaQ/yXqWB 0 CfuwrCT8svT0mlCq4d22hcGESf7XmRnn4Aj/.../JHiHyz7uNKamSgqde8dBsBsZSNM9rvlWV8w0kLquJ0XfGrpGA3toZrtwxFwdifWsyke3tPBaSv8V0qegvh1ewHzxyqa

http://virtualdj.1800download.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhv4cpqK4fE9rm/4qHpwyd4MKkb1Y/j2O3mulg0EZ3GHWOOkHL8lmucjgJfBW2PXpm28SRer7CHQy6a 6NHGkX1JoZw0nQAKAWSsSTR2ntFpp3/.../o4LhgFIfuuFTojKYeLZEcwh LuGyw3PtywlahkUj3goFGMlvxmFsvkJNClLHte1dO Hvsv3BcT55qr0gSsO hnnG sAcVP6sSpSDrjsZuCxW8ybPVJQo4vfiZ95L3gXghqzRyz3c8HSnjzDVT5opLvhAUjNGCR8CpNn4zBOyuiREXfgPN7bwH10iqa

http://virtualdj.1800download.com/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjylERn7YNXWseh152f0sDcx2dBNJ0DtevylYSfjhxdKOSCGGeO1XPElyPpqxcyPBh6avCX5DEzl7CL8y6mA55yazXFA4p85iUcEDTTjT28pwJk79WjwWWmLGeUI2syiPTUNeroxPRNMOaz9RDkmLNzFfxEjhKqnGCUvasWrhf8 TWO/uEjInvZsA4C2M8iqZWMKhp3oD JnlR4R55qk0xu8P/.../QYsYv5vvGRap4P7WkjIgebRDTIAjbDd2ounkFxxrnEDvi4kRUT7qRQfxqYjgxB0ufXjHsnhShI3BOzGiQ0vPivh6awXxxyqa

http://virtualdj.1800download.com/get_azure_file/wUiS4WnYccXBwj sXP7oQkEsnl0kPTqiGh/zcteQv A8/zyn9np5iNEMJ1Xka6n3fHm6ykYNeiPVWby1E w9wr1izcWaAQWQ9yS7BkT9qiT8mf6SpN7SgyQS/.../rlXTl1e8rENEJ8z W1TnpKPtywlahkUj3g3Rqc87lkGpKjcsKna28Jl5SvFqounRcHqczvhhvyb6Bnlj6tQMVc7s2pFyCq883B02liO6RIBo40M21l6aDjWEs92kyi3J5OECbzRVSnsZG9zQ4tNTHOvmAGi4aPZCfqV0qegvh1ewbzxyqa

http://1800dcdn.blob.core.windows.net/dir195/wi/18/33/1/.../install_virtualdj_pc_v8.0.2094.exe

Remove install_virtualdj_pc_v8.0.2094.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.