Tech Support Guy banner
Cancel

Suspicious biggertupdateforplayer.info Website

1465 Views 8 Replies 2 Participants Last post by  Cookiegal, 
cwwozniak
While going through some Google search results, one of the results I clicked on opened the page in the attached screencap. The full URL of the page is:

(Note: spaces added to https portion of URLs to prevent this site from making them active links)

h t t p s ://softupdate.biggertupdateforplayer.info/kruy?fhst=ogczTuIsuW8ebHeGjYEKp6fIkFPD93Ux2i-zroO4tQY.&cid=40930cc2-8145-4dbc-b279-f77a2d5bbadd&sub=l137

All of the Update/Install links and X in the one box all link to:

h t t p s ://softupdate.biggertupdateforplayer.info/dl.php?fhst=ogczTuIsuW8ebHeGjYEKp6fIkFPD93Ux2i-zroO4tQY.&cid=40930cc2-8145-4dbc-b279-f77a2d5bbadd&sub=l137&conversion_id=15730511988459&app_id=107&lp_id=3121&v=winkc&stub_name=1862&v_id=&lpp=%2A-%2A-%2A

This makes me think it is a malicious website, but neither Firefox's built-in security features or the TrendMicro Small Business Security software blocks the site or gives any warnings. Am I being paranoid or is this a bad site getting in under the security radar?

Attachments

See less See more
Save
Like
Status
Not open for further replies.
1 - 9 of 9 Posts
Cookiegal
It looks like adware to me. I definitely wouldn't click on anything to update from there.
Save
Like
  • Like
Reactions: 1
cwwozniak
Thank you for the confirmation, Cookiegal. Do you think it is worth trying to report the site to Mozilla or Adobe?
Save
Like
Cookiegal
I can't be sure it's malicious but like you I don't trust it. There are other sites prefaced with "softupdate." but different domains and they are adware.

What site was the Google search supposed to go to?
Save
Like
cwwozniak
I was trying to figure out a trivia question from a local radio program and I gave Google some phrases from the question. If a result summary for a page looked promising, I right-clicked on it to open in a new tab. I did this about eight times and then started looking at the tabs. That was when I saw the Flash update page. The page definitely did not contain any of the phrases. I suspect I was redirected from some landing page that had the phrases.
Save
Like
Cookiegal
That's probably what happened. It wouldn't hurt to run AdwCleaner just to be sure all is OK although I'm sure it is if you didn't click on anything else.
Save
Like
cwwozniak
I just ran AdwCleaner. It found four PUP.Optional.Legacy items. The first was the Tech Guy's SysInfo.exe file in my downloads. There were two Honey extensions for Firefox that I had installed. I kept all of those out of quarantine. I did quarantine an AdvertiementsImages folder inside my roaming folder.
Save
Like
Cookiegal
cwwozniak said:
Tech Guy's SysInfo.exe file
Click to expand...
This is common and is definitely a false positive.
Save
Like
Cookiegal
I'd also run MalwareBytes free for good measure.
Save
Like
1 - 9 of 9 Posts
Status
Not open for further replies.
Tech Support Guy
A forum community dedicated to tech experts and enthusiasts. Come join the discussion about articles, computer security, Mac, Microsoft, Linux, hardware, networking, gaming, reviews, accessories, and more!
Full Forum Listing
Explore Our Forums
Hardware Virus & Other Malware Removal Off Topic Lounge Thread Games & Discussion Networking
Top