home

minecraft-client.joydownload.ru

Private Person  (Proxy Registrant)

Domain Information

The domain minecraft-client.joydownload.ru is registered by proxy through RU-CENTER-RU and was originally registered in May of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrar:
RU-CENTER-RU

Server location:
Virginia, United States (US)

Create date:
Wednesday, May 14, 2014

Expires date:
Saturday, May 14, 2016

ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US

Root domain:
joydownload.ru

Whois:
1 joydownload.ru record

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InnovativeSystems.Installer (M), PUP.Innovati.Installer (M)
100.00%

McAfee
Artemis!4E880B65BB5F
25.00%

Malwarebytes
PUP.Optional.OpenCandy
25.00%

K7 AntiVirus
Unwanted-Program
25.00%

Agnitum Outpost
Riskware.Agent
25.00%

Trend Micro House Call
Suspicious_GEN.F47V0724
25.00%

avast!
Win32:Adware-gen [Adw]
25.00%

Sophos
Generic PUA EL
25.00%

Comodo Security
ApplicUnwnt
25.00%

Dr.Web
Adware.Downware.6712
25.00%

VIPRE Antivirus
Opencandy
25.00%

Avira AntiVirus
APPL/Downloader.Gen
25.00%

G Data
Win32.Adware.OpenCandy
25.00%

ESET NOD32
Win32/JoyDownloader
25.00%

AVG
AdLoad.OpenCandy
25.00%

The domain minecraft-client.joydownload.ru has been seen to resolve to the following 2 IP addresses.

54.225.168.223
ec2-54-225-168-223.compute-1.amazonaws.com
July 16, 2016

50.19.96.56
ec2-50-19-96-56.compute-1.amazonaws.com
February 25, 2016

File downloads found at URLs served by minecraft-client.joydownload.ru.

1 / 68      (Adware)
http://minecraft-client.joydownload.ru/get_azure_file/wUiS4WnYccXAwj 1RrjxCgghkkVxZmbzR1 xcteQv A8/zyn9np5iNEMJ1Xlban3fHm4ykYOaz/ZCeLkErQ0yasdnZjIVE7AqWvmWQ6iqnD8gfPbvIyQ0ToJ9Ic72l9DUHegDD13kMso9WjwWWmLA UI2sy4PTIMK7MzLxIdZ/a0FiYuMYuMegkpz6vlFCw3JdyshL53Xz/.../4O h17yfPwqy3jzQd1Wrc24SWvoupOCkW8qZLxRA91pK3RguuStDxhjjhS41s9PUCbiDB z s72zEwvO3jWv2gc39DBOz8=  (minecraft.exe)

1 / 68      (Adware)
http://minecraft-client.joydownload.ru/get_azure_file/wUiS4WnYccXEwj 8WvauHEA0kxQ8PDK1GhjzcteQv A8/yOn9np5iNEIJ1Xlarv N3KuyxdSNmmeTbD7Tac8gLNhx8yPelXPqny6XRCzpi733ufa7dPem3Ee6dVpwQBQXy tCzp0kscr/S/.../6sZGnzQwvLDGd7HgfhNPWOz8=  (minecraft.exe)

1 / 68      (Adware)
http://minecraft-client.joydownload.ru/get_azure_file/wUiS4WnYccXEwj /TeqjC1c0kw48PjymHBv1Zd3Tveh152H0sD4rl44cJgTtabj2LQ7lngELcDLaX/fyUOAlyPpqwsyPUVPNq3q6Hk20sni1mffRr8vT0mlIq4dw2gFQXzWtDzRnk8Eh/CLoUSCTQrZOl4TzPHQNb7MgaEFRZ/CwFWh0O8TNLAlk1fX2GWUvfo/g0 81DGG7oFGMlv5sDoDpKYHuMyAVmoPhD JnlRwT55qg1AatPegkwWi7UJMEu5n/UXKquZKaiHV5M6RIBo4/.../ysZGnzQwvLDGd7HgfhNPWOz8=  (minecraft.exe)

16 / 68    (Adware)
http://minecraft-client.joydownload.ru/get_file/wUiS4WnYccXBwj pXP7oQlssnVx1NTmnEgqmOZ T6bJ/qCeisGMxwdoIJ1W6MeWpbDHtlhBFYT/VTrfjCr50yb9q1pPVR1XTqj3zVUz2vHq9iPPTqtvRmiBBp58i1QoeACPlGDU2nsAj7Cn6W3GSA7ZewtWlcyUMK7MzJQoOIaS0XHl1apeXcgkpz6vmGDQkfZf5kuc3BHvl8UjE3/VrDoD6KZz6MDYfzcr F 0ujUtMsd3vhhvyb6l/.../XZoOrJbtB2e8 8SCkW8qZLxRA91pK3RguuStDxhjjhS41s9PUCbiDB z s72zEwvO3jWv2gc39DBOz8=  (minecraft.exe)

URL:
http://minecraft-client.joydownload.ru/

Title:
“Майнкрафт скачать бесплатно. Игра minecraft клиент 1.6 на компьютер - JoyDownload”

Description:
“Minecraft – компьютерная игра, завоевавшая признание миллионов геймеров по всему миру - Скачать здесь Minecraft Client Demo последнюю версию.”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
nginx/1.7.6 (PHP/5.3.10-1ubuntu3.8)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.