Getting redirected when visiting mediafire download pages

Page 1 of 5 123 ... LastLast

  1. Posts : 204
    Windows 7 Home Premium 64bit (Service Pack 1)
       #1

    Getting redirected when visiting mediafire download pages


    The last two times I have visited a mediafire download page, I have been redirected to a dodgy page asking me update programs such as Firefox and Java (even though I uninstalled Java over a year ago). The two domains I've seen for the page are lpmxp2.com and updowntot.com. I didn't stick around long enough to get a screenshot, but the two pages appeared to be identical with the exception of the alleged program update displayed. The first time this happened was three days ago, and the redirect only happened once that day. I visited mediafire again today, and the same thing happened.

    I can't find any recent discussion on this anywhere so it doesn't appear to be a recent known problem. Any help would be appreciated.

    Update: I ran a scan with AdwCleaner, and it found and removed this key from my registry: HKCU\Software\AppDataLow\Software. I'm going to run a Malwarebytes scan now.
      My Computer


  2. Posts : 2,470
    Windows 7 Home Premium
       #2

    ThisIsMadness91,

    Is there anything else added to this:

    HKCU\Software\AppDataLow\Software
      My Computer


  3. Posts : 204
    Windows 7 Home Premium 64bit (Service Pack 1)
    Thread Starter
       #3

    I couldn't find anything. The only other detections were my homepages for Internet Explorer and Firefox (GMail for both, which I set myself). I can upload the logs from before and after running the cleaner if it helps.

    Also, I forgot to mention that Malwarebytes didn't detect anything (it's the free version, if that makes any difference).

    Update: It also happens on zippyshare. The domain I saw this time was lp.sharelive.net.
    Last edited by ThisIsMadness91; 29 May 2014 at 08:10.
      My Computer


  4. Posts : 4,566
    Windows 10 Pro
       #4

    Try the following Microsoft fix it on this article,

    How can I reset the Hosts file back to the default?

    Then I suggest the following just to see if anything turns up:

    1.) Download AdwCleaner by Xplode and save to your Desktop.

    • Double click on AdwCleaner.exe to run the tool


    • Vista/Windows 7/8 users right-click and select Run As Administrator.
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
    • Upload the contents of that logfile in your next reply using the paper clip on the reply box.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.


    2.) Using AdwCleaner v3: Scan & Clean:

    Double click on AdwCleaner.exe to run the tool again.
    Click on the Scan button.
    AdwCleaner will begin to scan your computer like it did before.
    After the scan has finished...

    This time click on the Clean button.
    Press OK when asked to close all programs and follow the onscreen prompts.
    Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
    Upload the contents of that logfile in your next reply using the paper clip on the reply box.

    Junkware Removal tool:


    3.) Please download Junkware Removal Tool to your desktop.



    • Shutdown your antivirus to avoid any conflicts.
    • Right click over JRT.exe and select Run as administrator on Windows Vista or Windows 7, double-click on XP.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Upload the contents of that logfile in your next reply using the paper clip on the reply box.
    • When completed make sure to re-enable your antivirus
      My Computer


  5. Posts : 204
    Windows 7 Home Premium 64bit (Service Pack 1)
    Thread Starter
       #5

    When resetting the hosts file, would it be better to use the "fix it for me" method or the "let me fix it myself" method?
      My Computer


  6. Posts : 4,566
    Windows 10 Pro
       #6

    I would use the fix it for me.
      My Computer


  7. Posts : 204
    Windows 7 Home Premium 64bit (Service Pack 1)
    Thread Starter
       #7

    Here are the logs for AdwCleaner and JRT. I didn't use AdwCleaner's cleaner because it didn't detect anything apart from the homepages I'd set. Unfortunately, I forgot to disable my anti-virus when running the latter. Should I run it again with the AV disabled?
    Getting redirected when visiting mediafire download pages Attached Files
      My Computer


  8. Posts : 4,566
    Windows 10 Pro
       #8

    Logs look fine, and do not worry about turning off the av. We just have that in there in case for some reason the AV is being not smart (FP)and calling it a virus.

    Are you still having the redirect issues after repairing the host file? I have a lot more steps we can try if that is the case.
      My Computer


  9. Posts : 256
    Windows 8 Pro x64
       #9

    Is this happening on any other browsers of yours?
      My Computer


  10. Posts : 439
    Windows 7 pro x64 SP1
       #10

    Sounds like a typical warez site scam. You go to a site offering 'free' stuff, click the link, and get re-directed to malware. This is how the warez sites make their money. Sleep with dogs, get fleas etc. Mediafire hosts mainly copyright infringing content - there's the clue. This ain't a computer problem, it's an illegal download problem, and the op is asking for help to do it.
      My Computer


 
Page 1 of 5 123 ... LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 19:44.
Find Us