Malware from one of your mirrors!

[sakurasanta86]

Folks, I love imgburn, have used it for years, and went to grab a copy for one of my machines back in late December.

 

I downloaded the installer from your first mirror, Digital Digest, only to find it was one of those installer-inside-an-installer things, which went and tried to install all sorts of software before it would allow me to download and install imgburn. I killed it before it finished, but it still installed three different kinds of malware on my machine.

 

Here's the text in some small print at the bottom of the Digital Digest download page:

 

Quote

"The download link to the right is enabled with our secure download manager to ensure a successful, faster download. You can download this file without our download manager here."

 

"Secure Download Manager" = malware vector.

 

Here's my post about attempting to remove the malware: https://serverfault.com/questions/890505/remvoving-the-malware-from-hell?noredirect=1

 

I'm likely to have to rebuild my machine now!

 

Please don't use that company as a mirror site, and consider checking the other mirrors for similar activities.

 

[Ch3vr0n]

You clicked on a digital digest advertisement to download, the actual download link was another one. Not a damn thing IMGBurn can do about that.

 

Sent from my Nexus 7 with Tapatalk

[LIGHTNING UK!]

I was told by the site admin that ImgBurn was never supposed to have the 'download manager enabled' link on it... but that it is used for some other downloads.

 

I do not see that type of link when I look at the download page, I just see the direct download to the correct file.

[Polda18]

I was told by the site admin that ImgBurn was never supposed to have the 'download manager enabled' link on it... but that it is used for some other downloads.

 

I do not see that type of link when I look at the download page, I just see the direct download to the correct file.

You have AdBlock installed and enabled, right? I use that thing, too. But it can't get rid of all malicious ads, just most of them. I think that the malware victim didn't have any ad blocking software installed (or enabled) and therefore was misled by a fake download button...