home

hotspot-shield.ar.joydownload.com

Domain Information

Server location:
Virginia, United States (US)

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InnovativeSystems.W
100.00%

McAfee
Artemis!6E5335EBFE46
100.00%

Malwarebytes
PUP.Optional.OpenCandy
100.00%

K7 AntiVirus
Unwanted-Program
100.00%

avast!
Win32:Rootkit-gen [Rtk]
100.00%

Clam AntiVirus
Win.Trojan.Agent-803351
100.00%

Agnitum Outpost
Riskware.Agent
100.00%

Dr.Web
Adware.OpenCandy.55
100.00%

Avira AntiVirus
APPL/Downloader.Gen
100.00%

AhnLab V3 Security
PUP/Win32.OpenCandy
100.00%

ESET NOD32
Win32/JoyDownloader.D potentially unwanted application
100.00%

AVG
OpenCandy
100.00%

Baidu Antivirus
Adware.Win32.OpenCandy
100.00%

G Data
Win32.Trojan.Agent.DO7U7A
100.00%

Trend Micro House Call
Suspici.218D75EB
100.00%

The domain hotspot-shield.ar.joydownload.com has been seen to resolve to the following 2 IP addresses.

23.21.241.197
ec2-23-21-241-197.compute-1.amazonaws.com
February 8, 2015

23.23.159.111
ec2-23-23-159-111.compute-1.amazonaws.com
February 8, 2015

File downloads found at URLs served by hotspot-shield.ar.joydownload.com.

19 / 68    (Adware)
http://hotspot-shield.ar.joydownload.com/get_azure_file/wUiS4WnYccXAwj uQbjxCggnkkU3LTPkEhnyas6H7KB2sTS35you2dBNJ0bjYqmkYDf/gAscLyDUQrz7TKc8gLNjztTdXliD9GzyCUzlvni8gvHDpZrSl2lZ9N1w2hcXRn3 AD9xlcss yP6U2KSA7ZfwtW4bmMVY/o4LRIdMavlXTl1fMTccEJ 2bPvUSwnf4/.../K3RguuGtDxthiAS7lNdHGT6nX1nhqNnuwQU3PHDFvWoWz9KQOnGiVwKE3Oh0MAjx3mw=  (hss3.42installe550plain.exe)

The following file have been seen to comunicate with hotspot-shield.ar.joydownload.com in live environments.

TCP » 23.21.241.197:80
install_flash_player-oc-jd.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.