Possible virus, comment please

Discussion in 'Site Suggestions, Help and Announcements' started by GoodPDAuser, Aug 17, 2014.

  1. GoodPDAuser

    GoodPDAuser Mobile Deity

    Messages:
    141
    Likes Received:
    23
    Trophy Points:
    23
    When visiting these forums using Firefox, I got java update requests and got directed to http://wwwDOTdownrapidDOTcom (visiting this site is not recommended). Since I didn't recognize that, and since I updated Java yesterday, I tried updating again outside of FF. Apparently, there were no further updates, so the downrapid redirection started to seem suspicious. Also, every time I get the java update popup, Microsoft Security Essentials informs me that a threat is detected, and that it is "cleaning up". Google results (http://www.google.ca/search?q=www.downrapid.com java-plugin update) indicate a strong likelihood that this is a virus, particularly:

    * http://www.covers.com/postingforum/post01/showmessage.aspx?spt=41&sub=101931015
    * http://www.reddit.com/r/magicTCG/comments/2dlm94/is_mtgtop8com_hacked_or_something
    * http://www.mmo-champion.com/threads/631902-Advertising-Reporting-bad-ads?p=28932318&viewfull=1
    * http://if.invisionfree.com/topic/5195149
    * http://if.invisionfree.com/topic/5195151
    * http://answers.microsoft.com/en-us/...apid-etc/40477aac-320b-49e3-9311-80f8a2f8a853

    They're old, on a different platform, but the behaviours seems to be similar, as does the download site.
     
    Last edited: Aug 17, 2014
  2. Hook

    Hook Phone Killer ;-) Arrrrr...f

    Messages:
    19,031
    Likes Received:
    8,353
    Trophy Points:
    288
    Looks like you've picked up something, but it may be unrelated either to Java, this forum or Firefox. In Firefox, make sure any Java plugins are set to "ask to activate", but I'm don't think that's the problem. Check Norton or McCaffey or some of the other AV sites and see if they have a cleaner for this problem. I would also stop posting the url here as that is clearly an untrustworthy site and the forum keeps turning the urls clickable.

    Try this page maybe:
    http://www.symantec.com/security_response/malware.jsp
     
  3. GoodPDAuser

    GoodPDAuser Mobile Deity

    Messages:
    141
    Likes Received:
    23
    Trophy Points:
    23
    I munged the URL and ensured that the hyperlink was munged as well.

    Almost all of my few addins are set to ask for activation (including Java). I'll try Symantec after a full scan with MSE, SpybotS&D, and MalwareBytes. Thanks.

    I'm wondering about the wisdom of researching security...one might end up in a less-than-innocuous site. Strange that it only seems to affect the one thread (on Android security) that I started.
     
    Last edited: Aug 17, 2014
  4. GoodPDAuser

    GoodPDAuser Mobile Deity

    Messages:
    141
    Likes Received:
    23
    Trophy Points:
    23
    The two invisionfree sites indicate that the problem is related to a site, and like to an ad that gets pulled in by the site (if I understood correcctly). http://www.gamefaqs.com/boards/2-message-board-help/69863278 also seems to indicate that it is related to specific webpages, as does the fact that I only see it on my one thread on this forum. Strange that no one else seems to be reporting this here.

    Nothing came up with MSE, SpybotS&D, and MalwareBytes. I tried to look into the link posted above for Symantec Power Eraser, but it is part of Symantec Endpoint Protection Support Tool, which is no longer available. Its replacement SymHelp doesn't make any mention of Power Eraser.

    Confused...
     
Loading...
Similar Threads - Possible virus comment
  1. Hook
    Replies:
    177
    Views:
    6,629

Share This Page