Does NetVideoHunter and Flash Video Downloader contain malware?
I've recently installed Malwarebytes, and each time I click on the Addon NetVideoHunter in Firefox it blocks an outgoing connection. Here's the report I get -
Blocked Website Details- Malicious Website: 1 Blocked,
-Website Data- Domain: www.adnetworkperformance. com IP Address: 130.211.186.109 Port: [50051] Type: Outbound File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
UnHackNe identifies NetVideoHunter as Malicious, so I've uninstalled it, performed a reset of FireFox and installed Flash Video Downloader. Unfortunately, that also seems to want to connect to a site whenever I click on it! Here's the report for that -
-Blocked Website Details- Malicious Website: 1 Blocked,
-Website Data- Domain: speednetwork6.adk2x. com IP Address: 130.211.54.133 Port: [51719] Type: Outbound File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
UnHackMe also reports that Flash Video Downloader is a malicious app, so I've uninstalled that as well.
I'm now using Flash and Video Download. That doesn't seem to want to connect to another website each time I use it, although UnHackMe seems to think that might be dodgy as well! lol.
I'm fairly certain that the report for Flash and Video Download is a false positive. However, as NetVideoHunter and Flash Video Downloader are trying to connect to another site each time they are used, that suggests that all is not well.
I only ever install Addons from the Mozzilla repository, so I'm a bit surprised that I'm getting these reports of malware. If an addon is trying to connect to adnetworkperformance. com, then it doesn't look like a false positive to me.
I'd welcome some advice on this. :)
Променено на от magicalwonders
Всички отговори (7)
First, let's check your system.
You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no
Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.
FredMcD said
First, let's check your system. You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no
Thanks for the link. I've downloaded all the resources and scanned with the following programs -
Malwarebytes' Anti-Malware Free SuperAntispyware Microsoft Safety Scanner Anti-Rootkit Utility - TDSSKiller AdwCleaner
I've also scanned with these programs -
HitmanPro CCleaner Zemana Antimalware UnHackMe Windows Defender
They all report that my machine is clean when the downloader addons are not installed.
The attempts to connect to websites that Malwarbytes blocks only happen when NetVideoHunter and Flash Video Downloader are installed. Even then, it only happens when the addon is clicked to download a video
UnHackMe identify both addons as malicious, so it looks like the issue is contained within the addons.
You should contact support for both those add-ons and ask questions.
To confirm that there is an issue with these addons, I used another machine, with a fresh install of Windows 10, Firefox, and Malwarebytes.
As soon as I added NetVideoHunter and clicked on it, it attempted to connect in the background to adnetworkperformance. com
I won't be using these addons now, but I think it should really be Mozilla asking the questions concerning these addons. They are definitely dodgy!
Please post the information at the add-ons forum; https://discourse.mozilla-community.org/c/add-ons
Ok, I've done that now. :)
You also got to watch out for false positives, cause in general an extension sending data like that seems pretty shacky, hence the reason they were flagged. Personally I think that are just phoning home with what your doing online (even google does this in a large scale). So I think they were put in a rank alot higher then they should have been (but don't take my word competently as I 'm not aware of those addons. Pay attention to what those addons are connecting too, they could be connection to the video-service to create the download. But to a malware scanner that seems like someone is trying to steal your info...