home

directx11.joydownload.com.br

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com.br

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

ESET NOD32
Win32/OpenCandy.C potentially unsafe application
100.00%

VIPRE Antivirus
Threat.4847482, Threat.4150696
100.00%

McAfee
Artemis!C40FC4A0A9DA, Program.Artemis!EFE6919AC095
100.00%

Malwarebytes
PUP.Optional.OpenCandy
100.00%

Trend Micro House Call
Suspici.F4CBE3E4, TROJ_GEN.R02SH05E915
100.00%

AVG
OpenCandy
100.00%

Dr.Web
Adware.Downware.9759
50.00%

K7 AntiVirus
Trojan
50.00%

NANO AntiVirus
Riskware.Win32.Downware.dqybgj
50.00%

Clam AntiVirus
Win.Trojan.Agent-855157
50.00%

Agnitum Outpost
Riskware.Agent
50.00%

Sophos
Generic PUA HF
50.00%

G Data
Win32.Adware.OpenCandy
50.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
50.00%

The domain directx11.joydownload.com.br has been seen to resolve to the following 2 IP addresses.

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
February 15, 2015

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
February 15, 2015

File downloads found at URLs served by directx11.joydownload.com.br.

14 / 68    (PUP)
http://directx11.joydownload.com.br/get_azure_file/wUiS4WnYccXGwj 8XPavWwllkl88LWzvGRnsNZSGp h152b0sDErn8kFbk3lYqn/.../0reEvNKBm2JPopIyhl1DXHWsSTR3ntF2vTnxGWmeSq4bkZm1aHBEerJxJRsFIemuAmh0O8TILAkjiKDnFyA3c8b40ucnTTDuoFGWlvlnR5i8cMi8Oygfn53sVKxmww8eroL0h0qsN ggxGjuAs5P5YSxQXP799WCkW8qZrxRRJY2enUguvDnRE5zhVW60ddWEijkBgz1sZGp  (dx11.exe)

14 / 68    (PUP)
http://directx11.joydownload.com.br/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhr4coOQp h152L0sC8rlY9RagT1Y/j2OXmulRwYayHZCeL ErQzwLFmx8ScAgiavCX BlSh5yfr3rfDpZrSk2lZoJEiiBZIV3y1Smchhshq9C3wSGKdRbxdztXqdD0EYqtrdkwdOOz9VHBte8/cLVgoj6v2VH9xao6x2 s/HGi s1nKmu1nR5i etDtNiVO1Ji3G JnlRkf/.../nya0V4dc79nuCyz7uNKamywqdeIaBsRhaDZm8r61Fllrhxyig4QGRn lTgzysZGp  (dx11.exe)

6 / 68      (PUP)
http://directx11.joydownload.com.br/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjylGhzyZ97Xs h152b0sCsrn8kFdE3hY/j2PXmuhBBKOSCGGuO1Gac8gLNjztTdXliD9GzyCkzluX 6i/.../VuDoC8dNClLHtY1dPrRLVxjRZW54D3nwywb6trwmTzEcQe5MSxUSCw54Ob2SYibaRBQpY2enUguvDhRE5zhVW60ddWEijgBQj1sZGp  (dx11.exe)

The following file have been seen to comunicate with directx11.joydownload.com.br in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.