Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Malware?

piquetpiquet Member UncommonPosts: 189

I sometimes get redirected to a site called freefilesdownloader.com when I click a link to a post on mmorpg.com's forums. An installation file is automatically downloaded for a program called iPumper. Anybody else had this happen to them?

 

I turned Adblock back on and hope this will fix it.

«1

Comments

  • QuizzicalQuizzical Member LegendaryPosts: 21,111
    I've had the forum twice try to redirect me to that site and had Avast block it both times.
  • BetaguyBetaguy Member UncommonPosts: 2,615
     I too have this happening on over 50 PC's in my work environment. I think someone or something injected something into the site. I have this happening on a freshly built device with all current updates/protection.

    image

  • PAL-18PAL-18 Member UncommonPosts: 844

    Aye,confirmed,got some virus ad and some other weird shit popped too.

     

    So, did ESO have a successful launch? Yes, yes it did.By Ryan Getchell on April 02, 2014.
    **On the radar: http://www.cyberpunk.net/ **

  • GwapoJoshGwapoJosh Member UncommonPosts: 1,030
    Same

    "You are all going to poop yourselves." BillMurphy

    "Laugh and the world laughs with you. Weep and you weep alone."

  • CaldrinCaldrin Member UncommonPosts: 4,505

    Yup noticed it yesterday... but my AV and spyware software killed it off..

     

     

  • DerrosDerros Member UncommonPosts: 1,215

    Might want to do a system rollback, followed by a scan with a few malware detectors just in case, things like spybot, malwarebytes, superantispyware, ect.  You never know what kind of trojans or backdoors that kind of stuff has put on your system.

     

    My wife had a nasty ones a few weeks ago, kept reinstalling itself, and the above was the only way I was able to get rid of it.

  • PAL-18PAL-18 Member UncommonPosts: 844

    So, did ESO have a successful launch? Yes, yes it did.By Ryan Getchell on April 02, 2014.
    **On the radar: http://www.cyberpunk.net/ **

  • Jean-Luc_PicardJean-Luc_Picard Member LegendaryPosts: 8,057

    And the web sites wonder why users enable things like adblock and noscript.

     

    Rule #1: do NOT disable those addons, no matter how much the web site whines about it. Yeah guys, sorry, I'm willing to support your web site, but I'm not willing to let those ads infect my computer with some random crap.

    "The ability to speak doesn't make you intelligent" - Qui-gon Jinn in Star Wars.
    After many years of reading Internet forums, there's no doubt that nor does the ability to write.
    CPU: Core I7 9700k (4.90ghz) - GPU: Gigabyte GTX 980 Ti G1 Gaming - RAM: 16GB Kingston HyperX Savage DDR4 3000 - Motherboard: Gigabyte Z390 Aorus Ultra - PSU: Antec TruePower New 750W - Storage: Kingston KC1000 NVMe 960gb SSD and 2x1TB WD Velociraptor HDDs (Raid 0) - Main display: Philips 40PUK6809 4K 3D TV - Second display: Philips 273v 27" gaming monitor - VR: Pimax 8K headset and Razer Hydra controllers - Soundcard: Sony STR-DH550 AV Receiver HDMI linked with the GPU and the TV, with Jamo S 426 HS 3 5.0 speakers and Pioneer S-21W subwoofer - OS: Windows 10 Pro 64 bits.

  • PsYcHoGBRPsYcHoGBR Member UncommonPosts: 470
    I'm using Kaspersky Internet Security and it keeps blocking some malware on mmorpg.com I gather its a dodgy advert or something has got onto the site. Kasperky stops it straight away as it happens each time I open any page from mmorpg.com.
  • botrytisbotrytis Member RarePosts: 2,929

    Google ads use java and java script for the ads. Java is one big virus waiting to happen. There is no write once, run anywhere system. If you have older versions of JAVA, just uninstall them (keep java up to date) or do what I did, uninstall java and never look back.

     

    There is a lot of spoofing, etc that can be done in JAVA script so that is what is happening. I had this on other forums I belong to. Not the forums fault, it is Google that is not doing it's job.

    image

    "In 50 years, when I talk to my grandchildren about these days, I'll make sure to mention what an accomplished MMO player I was. They are going to be so proud ..."
    by Naqaj - 7/17/2013 MMORPG.com forum

  • SovrathSovrath Member LegendaryPosts: 27,298

    I've had this happen on this site as well as a "download" window automatically open up and wait for an "ok".

    At the time I thought I had accidentally clicked on something.

     

    note: just happened again!

    I rean malware bytes twice when this happened but got nothing.




  • piquetpiquet Member UncommonPosts: 189

    Thanks guys, appreciate all the replies. As a long time member, I really want to support this site the best I can, that's why I decided to turn off AdBlock for this site only. But this is ridiculous!

    I did some research, and it appears that iPumper is indeed malware/virus. It's apparently a download manager that runs daily background tasks, looking for "software" to download.

    I'm sorry mmorpg.com, but this I can not support in any way.

  • XssivXssiv Member UncommonPosts: 359

    This site was definitely recently infected with some garbage.   Never had problems before but over the past few days there have been several attempts to redirect me to known malware sites when clicking on links to some threads. 

     

    For home users, I would recommend using a free service like OpenDNS to prevent these redirects.  

  • PrecusorPrecusor Member UncommonPosts: 3,589
    Edit: i didn't get redirected but MMORPG.com did slow to a crawl.
  • VrikaVrika Member EpicPosts: 5,845
    I've had the same happen to me twice.
     
  • BarrikorBarrikor Member UncommonPosts: 365


    Originally posted by botrytis
    Google ads use java and java script for the ads. Java is one big virus waiting to happen. There is no write once, run anywhere system. If you have older versions of JAVA, just uninstall them (keep java up to date) or do what I did, uninstall java and never look back. There is a lot of spoofing, etc that can be done in JAVA script so that is what is happening. I had this on other forums I belong to. Not the forums fault, it is Google that is not doing it's job.


    Java and JavaScript are 100% unrelated to each other. It's only the names that are similar.


    Judging from your post, it's Java that you have a problem with, not Javascript.

  • ReizlaReizla Member RarePosts: 4,077

    Have had it twice already today. Last time when trying to open this topic (LOL?). If the site indeed is infected by some mallware it would explain the bad and slow performance the site has had for the last couple of weeks.

    I've also seen some saying the redirect is a virus and such... Using Opera 12.x (it downloads and writes to HDD before displaying everything), I can tell the thing redirecting is no virus. Not sure about the content of the site, but I suspect that one indeed is full of shit.

    At the comments on Java... Yeah, it can be a source of a lot of problems (that's why I still use Opera 12.x), but it also is a very good platform itself. Too bad some misuse certain aspects of vulnorabilities in it :s

    AsRock 990FX Extreme3
    AMD FX-8350 ~4.0Ghz
    32Gb DDR3 1600Mhz (GEiL/Corsair)
    MSI GTX970 GAMING 4Gb + 3x HD monitor 1920x1080

  • RidelynnRidelynn Member EpicPosts: 6,834

    Yup, 2-3 times.

  • VengerVenger Member UncommonPosts: 1,307
    Just happened to me.
  • VeldekarVeldekar Member Posts: 220
    I've been redirected to an "API Downloader" site 3 times in the last couple of days when I was just reading a thread(not even clicking a link or anything) on this site. Just this site...wierd.
  • BetaguyBetaguy Member UncommonPosts: 2,615
    Originally posted by PAL-18

    http://www.google.com/safebrowsing/report_badware/

    if it doesnt stop.

     

     It's on day 2 atm, I will give them till days end.  If not I will flag it with google as well.

    image

  • worldalphaworldalpha Member Posts: 403
    Why are no Admins responding to this thread? I just had it happen too!  This is pretty serious.  As far as I can tell the site has been hacked.  Please update us ADMIN!

    Thanks,
    Mike
    Working on Social Strategy MMORTS (now Launched!) http://www.worldalpha.com

  • VercinVercin Member UncommonPosts: 290

    Same thing I right clicked a forum topic ''open in new tab'' it did not go to the post but tried to redirect me to some other site and Avast blocked it.

    Indeed something needs to be looked into.

    The Stranger: It's what people know about themselves inside that makes 'em afraid.

  • gothagotha Member UncommonPosts: 1,066
    You guys are making me think of dropping windows security ess.and going back to avast,.
  • PpiperPpiper Member RarePosts: 1,043
    same here. Also, Anti Virus being set off sometimes.
Sign In or Register to comment.