Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


hobsonlea

126 posts

Master Geek


#152132 17-Sep-2014 10:21
Send private message

Hi,
I use Chrome + Hola + Netflix. In the last 2 days I have had a popup Chrome window twice now trying to get me to install Malware.

The first I didnt take much notice of it - but fl_setup.exe 80kb looked suspicious - wasnt detected by MS Security Essentials - so decided to test via online virustotal.com - seems to run the file against most of the av tools. It came back with a hit on 9 detections in the file.. Microsoft was shown on the site as passing the file, no detection. Access to the URL of the detections may be possible via https://www.virustotal.com/en/file/5cfc2e5c20c37fc11a920ffb2571cc0dbf2dca69c847bd8b6d1197b664217f71/analysis/

Antivirus Result Update
AVG Generic.4A4 20140916
AVware AdKnowledge (fs) 20140916
Avira ADWARE/iBryte.Gen7 20140915
Comodo Application.Win32.AgentCV.HWYE 20140915
DrWeb Trojan.DownLoader11.32333 20140916
ESET-NOD32 a variant of Win32/AdWare.iBryte.BF 20140916
F-Prot W32/A-34fffba4!Eldorado 20140916
Malwarebytes PUP.Optional.OptimunInstaller 20140916
VIPRE AdKnowledge (fs) 20140916

So I deleted the file, and was perplexed..

Today while trying to access the same netflix + hola via Chrome I had the second new popup window.. this time wanting me to install "Internet Download Manager".. this was the popup link

http://ww1.inetdownloadmanager.com/?io=A004&txt=Ads%20By%20SupraSavings&abt=http%3A%2F%2Fwww.suprasavings.com%2Faboutthisad.php

I decided against pushing the "install button" within this window - and seek advice...

I ran a Malwarebytes check just now and got (the first file is the fl_setup.exe file in the recycle bin)

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 321394
Time Elapsed: 9 min, 3 sec

Files: 3
PUP.Optional.OptimunInstaller, C:\$Recycle.Bin\S-1-5-21-3884892844-2165067486-330871413-1000\$RNW6G2Q.exe, , [aeabb6383d3e280e9e3cb5943cc40000],
PUP.Optional.BetterDeals.A, C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage, , [0b4e5d91accfca6c86b3f720fe05956b],
PUP.Optional.BetterDeals.A, C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage-journal, , [1e3b36b88cef3600e356e4337f8427d9],

Anyone else noticed this behavior ? Or have any advice ?
I am using the free Hola version..

Thx Pete

Create new topic

xpd

xpd
Mask enabled
10722 posts

Uber Geek

Mod Emeritus
Trusted
Lifetime subscriber

  #1130492 17-Sep-2014 10:28
Send private message

Are you using any other extensions etc ? If so, disable them all to ensure its not one of them causing the issue...




XPD^ / DemiseNZ

 

Blog         Free Games        Twitter

 

My TradeMe Goodies

 

Disclaimer - It wasn't me, the dog ate my keyboard, my account was hacked, I was drunk, ALIENS.

 

I Twitch occasionally and take part in Folding@Home


hobsonlea

126 posts

Master Geek


  #1130499 17-Sep-2014 10:35
Send private message

xpd: Are you using any other extensions etc ? If so, disable them all to ensure its not one of them causing the issue...


Nope - just Hola in my chrome extension list.

 
 
 
 


tieke
396 posts

Ultimate Geek

Subscriber

  #1130517 17-Sep-2014 11:05
Send private message

I stopped using Hola for good last year when they started injecting adlinks into webpages. Checking on that now, it looks like they stopped doing that after an initial trial but it wouldn't surprise me to see that they were trying to bundle some other adware into their product.

hobsonlea

126 posts

Master Geek


  #1130520 17-Sep-2014 11:11
Send private message

tieke: I stopped using Hola for good last year when they started injecting adlinks into webpages. Checking on that now, it looks like they stopped doing that after an initial trial but it wouldn't surprise me to see that they were trying to bundle some other adware into their product.


Thx - I did see there was a flurry of issues last year - and what looked like a good response from Hola. The issue I am having looks more than just ads and adware... and I'm sure it is not what Hola would want..

If I recall the action it was a "restart of a viewing" using the url I left in my browser from the last watch - and a refresh of that page.. then a popup..


charsleysa
597 posts

Ultimate Geek


  #1130561 17-Sep-2014 11:52
Send private message

Try using dns4me.net they will get the job done a lot better than Hola.




Regards
Stefan Andres Charsley

turb
814 posts

Ultimate Geek


  #1130563 17-Sep-2014 11:54
Send private message

Or unotelly as advertised here on GZ with a discount.




Interests: HTPC, Web App authoring. 


hobsonlea

126 posts

Master Geek


  #1130568 17-Sep-2014 11:58
Send private message

Thx for suggestions - I currently use unblock-us.com and works well - but if one user in household switches netflix regions (for example to Netflix Sweden to watch the excellent Line of Duty Series 1) , all have to use that new region.

Hola allows me flexibility to finish a series or movie by letting me flip netflix countries.. regardless of unblock-us

 
 
 
 


charsleysa
597 posts

Ultimate Geek


  #1130574 17-Sep-2014 12:01
Send private message

hobsonlea: Thx for suggestions - I currently use unblock-us.com and works well - but if one user in household switches netflix regions (for example to Netflix Sweden to watch the excellent Line of Duty Series 1) , all have to use that new region.

Hola allows me flexibility to finish a series or movie by letting me flip netflix countries.. regardless of unblock-us


You should ask dns4me.net to build that feature, they are currently taking user feedback and customer requests on the thread here on geekzone. It's a pretty awesome service, free while in beta then $4/month afterwards.




Regards
Stefan Andres Charsley

hobsonlea

126 posts

Master Geek


  #1130577 17-Sep-2014 12:04
Send private message

charsleysa:
hobsonlea: Thx for suggestions - I currently use unblock-us.com and works well - but if one user in household switches netflix regions (for example to Netflix Sweden to watch the excellent Line of Duty Series 1) , all have to use that new region.

Hola allows me flexibility to finish a series or movie by letting me flip netflix countries.. regardless of unblock-us


You should ask dns4me.net to build that feature, they are currently taking user feedback and customer requests on the thread here on geekzone. It's a pretty awesome service, free while in beta then $4/month afterwards.


I will - at the moment their registration / login isnt working for me.. "Invalid Credentials" I have contacted their support.

charsleysa
597 posts

Ultimate Geek


  #1130581 17-Sep-2014 12:07
Send private message

hobsonlea:
charsleysa:
hobsonlea: Thx for suggestions - I currently use unblock-us.com and works well - but if one user in household switches netflix regions (for example to Netflix Sweden to watch the excellent Line of Duty Series 1) , all have to use that new region.

Hola allows me flexibility to finish a series or movie by letting me flip netflix countries.. regardless of unblock-us


You should ask dns4me.net to build that feature, they are currently taking user feedback and customer requests on the thread here on geekzone. It's a pretty awesome service, free while in beta then $4/month afterwards.


I will - at the moment their registration / login isnt working for me.. "Invalid Credentials" I have contacted their support.


Since its in beta you have to post on the thread or pm the guy to create you an account.




Regards
Stefan Andres Charsley

hobsonlea

126 posts

Master Geek


  #1130585 17-Sep-2014 12:13
Send private message

Thx have pm'd albi90

michelangelonz
73 posts

Master Geek


  #1131728 18-Sep-2014 19:28
Send private message

Try using Getflix, try have a great service for a good price.

Create new topic




News »

Countdown unveils contactless shopping with new Scan&Go tech
Posted 21-Sep-2020 09:48


HP unveils new innovations for businesses adapting to rapidly evolving workstyles and workforces
Posted 17-Sep-2020 15:36


GoPro launches new HERO9 Black camera
Posted 17-Sep-2020 09:45


Telecommunications industry launches new 5G Facts website
Posted 17-Sep-2020 07:56


New Zealand ranks 3rd in world in GSMA index
Posted 15-Sep-2020 10:13


Trend Micro Security Suite adds web monitoring to prevent identity theft
Posted 14-Sep-2020 15:37


NVIDIA to acquire Arm for US$ 40 billion
Posted 14-Sep-2020 12:27


Epson launches its next gen A3+ colour EcoTank multi-function printer
Posted 10-Sep-2020 16:08


Sony launches three new native 4K SXRD home cinema projectors
Posted 9-Sep-2020 18:00


Catalyst Cloud brings Kubernetes-based open-source web hosting solution to market
Posted 9-Sep-2020 17:54


Verizon Connect eyes further growth in New Zealand
Posted 8-Sep-2020 09:26


PNY launches XLR8 gaming NVIDIA GeForce RTX 30 series powered by the all-new NVIDIA Ampere architecture
Posted 3-Sep-2020 16:39


NVIDIA delivers greatest-ever generational leap with GeForce RTX 30 Series GPUs
Posted 3-Sep-2020 16:17


Weta Digital advances visual effects and animation in the cloud with AWS
Posted 2-Sep-2020 17:09


Kiwrious lab-in-the-pocket kit designed for schoolchildren
Posted 28-Aug-2020 09:03



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.