I was wondering and checking relative new file hosting service called:

Code: Select all

http://saveqube.com

and i wanted to do test download. I clicked "Free Download" and didnt check URL.

My paranoid settings stopped connection and this message popped up:

“Win32:Dialer-DW [Trj]” has been found in “http://files.prodownloadmanager.com/install.php?v=645b93f9a1f5421f33a8abdff54790ac9702fcabdb763851$INSTDIRProDM.dll” file.

I was first like WTF, then i checked URL of "Free Download" and it was this same what caused abort:

Code: Select all

http://files.prodownloadmanager.com/install.php?v=645b93f9a1f5421f33a8abdff54790ac9702fcabdb763851

I was getting curious about this and allowed connection&downloading to continue.

File ProDM.dll contains somekind of adware. didnt have enough time to do more checking on this .dll file.

I "extracted" that installer and thinked "if i delete that .dll and test what happens". Before i was doing it i noticed "funny looking" folder "$TEMP".

Opened it and there was nsis packed twads.exe. I "extracted" it and it contained main adware.

Here is small and hilarious image of my "adventure" with this relative new file host.


This dont mean you have to stay away from it, this means that if you dont like to infest your computer with targeted ads, then dont use this service. If ads are not a problem, then fire away

Thanks Temmes and Herman for the info and screens. I probably would of never used that file hosting service anyway but now I certainly won't .

Thanks for the info guys!
This is worse than MS with their flash ads! What next

hilarious service that is

yes, full of shit service

good call... thanks for this, i however probably would have been suspicious of a site like this from the get go....

ill do my best to pass along info...

Yeah I tried to download something from this site once and it came up with their download and I was like goodbye.... have never downloaded from that site

seems 2 b a part of Rapidshare!
it is visible on left bottom of the screen