home

www.joosoft.com

c/o whoisproxy.com Ltd.

Domain Information

The domain www.joosoft.com registered by c/o whoisproxy.com Ltd. was initially registered in March of 2008 through KEY-SYSTEMS GMBH. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Dublin, Dublin City within Ireland. The domain uses the Amazon Web Services (AWS) cloud computing platform from the EU (Ireland) region datacenter.
Registrar:
KEY-SYSTEMS GMBH

Server location:
Dublin City, Ireland (IE)

Create date:
Wednesday, March 19, 2008

Expires date:
Sunday, March 19, 2017

Updated date:
Tuesday, March 8, 2016

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.,US

Root domain:
joosoft.com

Whois:
3 joosoft.com records

Scanner detections:
Detections  (97% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.dailytoolsGmbH, PUP.dailytoolsGmbH, PUP.dailytools.Installer (M), PUP.dailytools (M), PUP.dailytoo (M), PUP.dailytoo.Installer (M), PUP (M)
100.00%

ESET NOD32
Win32/Downloader.JooSoft (variant)
12.90%

McAfee
Artemis!7951295146FE, Artemis!DF2F9D42DDD6
9.68%

VIPRE Antivirus
Trojan.Win32.Generic, Threat.4150696
9.68%

G Data
Win32.Adware.JooSoft
9.68%

Baidu Antivirus
PUA.Win32.JooSoft
9.68%

AVG
Dailytools
9.68%

IKARUS anti.virus
PUA.Downloader.JooSoft
6.45%

herdProtect (fuzzy)
a variant of f22f24b30d6f08026c244444f32a28658df48b2b, a variant of 1f3a7e49c56ca6662261f5d66c1d2d0b35bdafbe
6.45%

Bkav FE
W32.HfsAdware
3.23%

ESET NOD32
Win32/Downloader.JooSoft.A potentially unwanted application
3.23%

The domain www.joosoft.com has been seen to resolve to the following 17 IP addresses.

176.34.236.125
ec2-176-34-236-125.eu-west-1.compute.amazonaws.com
September 16, 2016

46.51.189.10
ec2-46-51-189-10.eu-west-1.compute.amazonaws.com
September 16, 2016

46.137.168.242
ec2-46-137-168-242.eu-west-1.compute.amazonaws.com
September 3, 2016

54.246.111.128
ec2-54-246-111-128.eu-west-1.compute.amazonaws.com
July 21, 2016

176.34.225.74
ec2-176-34-225-74.eu-west-1.compute.amazonaws.com
June 8, 2016

46.137.90.245
ec2-46-137-90-245.eu-west-1.compute.amazonaws.com
June 5, 2016

54.217.211.53
ec2-54-217-211-53.eu-west-1.compute.amazonaws.com
May 18, 2016

176.34.102.205
ec2-176-34-102-205.eu-west-1.compute.amazonaws.com
May 17, 2016

176.34.126.212
ec2-176-34-126-212.eu-west-1.compute.amazonaws.com
April 20, 2016

176.34.255.126
ec2-176-34-255-126.eu-west-1.compute.amazonaws.com
April 19, 2016

54.246.118.110
ec2-54-246-118-110.eu-west-1.compute.amazonaws.com
April 15, 2016

46.137.127.234
ec2-46-137-127-234.eu-west-1.compute.amazonaws.com
April 15, 2016

176.34.115.171
ec2-176-34-115-171.eu-west-1.compute.amazonaws.com
April 6, 2016

46.137.107.193
ec2-46-137-107-193.eu-west-1.compute.amazonaws.com
February 25, 2016

46.137.181.240
ec2-46-137-181-240.eu-west-1.compute.amazonaws.com
February 11, 2016

54.247.69.87
ec2-54-247-69-87.eu-west-1.compute.amazonaws.com
January 28, 2016

54.217.208.155
ec2-54-217-208-155.eu-west-1.compute.amazonaws.com
July 3, 2014

File downloads found at URLs served by www.joosoft.com.

1 / 68      (Adware)
http://www.joosoft.com/es/.../1378-km  (1378-km.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../turtle-odyssey-2  (turtleodyssey2.exe)

1 / 68      (Adware)
http://www.joosoft.com/es/.../taskmanager-dot-xls  (taskmanagerxls.exe)

1 / 68      (Adware)
http://www.joosoft.com/fr/.../danger-from-the-deep  (danger-from-the-deep.exe)

1 / 68      (Adware)
http://www.joosoft.com/fr/.../win-digipet  (wdp2009-3-setup-demo.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../moorhuhn-kart  (setup-moorhuhn-kart2-demo.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../roxio-winoncd-2010  (roxiowoctrialv9dol-wtd.exe)

1 / 68      (Adware)
http://www.joosoft.com/pl/.../wolfquest  (wolfquest-win20090606.exe)

1 / 68      (Adware)
http://www.joosoft.com/pl/.../adobe-audition  (audition3-efgjsi-trial.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../utorrent  (utorrent3.3.2n30260.exe)

0 / 68
http://www.joosoft.com/fr/.../sonic-fan-remix  (sonic-fan-remix.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../super-mario-bros-x  (super-mario-bros-x.exe)

1 / 68      (Adware)
http://www.joosoft.com/de/.../kodak-easyshare  (install-easyshare-1.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../ghostwriter  (ghostwriter-setup.exe)

1 / 68      (Adware)
http://www.joosoft.com/pl/.../santa-claus-in-trouble-kropka-kropka-kropka-again  (santaiidemo.exe)

7 / 68      (Adware)
http://www.joosoft.com/en/.../jw-player  (jwplayer.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../ibm-spss-statistics-18  (spss-statistics-19-win32-en.exe)

10 / 68    (Adware)
http://www.joosoft.com/de/.../audiosurf  (setupaudiosurf-betapreview-public-demo.exe)

1 / 68      (Adware)
http://www.joosoft.com/de/.../monopoly  (monopoly3setup.exe)

1 / 68      (Adware)
http://www.joosoft.com/pl/.../rummi  (rummisetup.exe)

1 / 68      (Adware)
http://www.joosoft.com/fr/.../ibm-spss-statistics-18  (spss-statistics-19-win32-en.exe)

1 / 68      (Adware)
http://www.joosoft.com/pl/.../chansort  (chansort_2014-01-27.exe)

1 / 68      (Adware)
http://www.joosoft.com/pl/.../ibm-spss-statistics-18  (spss-statistics-19-win32-en.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../little-fighter-2-v2-kropka-0a  (lf2-v20a-install.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../atv2000  (atv2000.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../vlc  (vlc-1.1.10-win32.exe)

7 / 68      (Adware)
http://www.joosoft.com/es/.../jw-player  (jwplayer.exe)

1 / 68      (Adware)
http://www.joosoft.com/pl/.../moorhuhn-kart  (setup-moorhuhn-kart2-demo.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../sven  (setup-sven-zwo-xs-v102.exe)

1 / 68      (Adware)
http://www.joosoft.com/en/.../cdr-converter  (cdr-converter.exe)

 
Latest 30 of 36 download URLs

The following 6 files have been seen to comunicate with www.joosoft.com in live environments.

TCP » 46.137.181.240:443
kometa.exe (Kometa by Kometa Authors)

TCP » 46.137.181.240:80
abalone.exe (Installation-Wizard by Dailytools GmbH)

TCP » 46.137.181.240:443
browser.exe (Browser)

TCP » 46.137.181.240:80
setup-moorhuhn-kart2-demo.exe (Installation-Wizard by Dailytools GmbH)

TCP » 46.137.181.240:80
jwplayer.exe (Installation-Wizard by Dailytools GmbH)

TCP » 46.137.181.240:80
ssn.exe (ssn)

URL:
http://www.joosoft.com/

Google Analytics:
UA-65641547

Title:
“Download free software for Windows, Mac & Linux on Joosoft!”

Network:
Amazon Web Services (AWS), running an EC2 instance

Web server:
Cowboy

Facebook:
Shares:  2

Statistics are for the previous month.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.