X
Tap here to go to the mobile version of the site.

Support Forum

Does NetVideoHunter and Flash Video Downloader contain malware?

Posted

I've recently installed Malwarebytes, and each time I click on the Addon NetVideoHunter in Firefox it blocks an outgoing connection. Here's the report I get -

Blocked Website Details- Malicious Website: 1 Blocked,

-Website Data- Domain: www.adnetworkperformance. com IP Address: 130.211.186.109 Port: [50051] Type: Outbound File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe


UnHackNe identifies NetVideoHunter as Malicious, so I've uninstalled it, performed a reset of FireFox and installed Flash Video Downloader. Unfortunately, that also seems to want to connect to a site whenever I click on it! Here's the report for that -

-Blocked Website Details- Malicious Website: 1 Blocked,

-Website Data- Domain: speednetwork6.adk2x. com IP Address: 130.211.54.133 Port: [51719] Type: Outbound File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe


UnHackMe also reports that Flash Video Downloader is a malicious app, so I've uninstalled that as well.

I'm now using Flash and Video Download. That doesn't seem to want to connect to another website each time I use it, although UnHackMe seems to think that might be dodgy as well! lol.

I'm fairly certain that the report for Flash and Video Download is a false positive. However, as NetVideoHunter and Flash Video Downloader are trying to connect to another site each time they are used, that suggests that all is not well.

I only ever install Addons from the Mozzilla repository, so I'm a bit surprised that I'm getting these reports of malware. If an addon is trying to connect to adnetworkperformance. com, then it doesn't look like a false positive to me.

I'd welcome some advice on this. :)

I've recently installed Malwarebytes, and each time I click on the Addon NetVideoHunter in Firefox it blocks an outgoing connection. Here's the report I get - Blocked Website Details- Malicious Website: 1 Blocked, -Website Data- Domain: www.adnetworkperformance. com IP Address: 130.211.186.109 Port: [50051] Type: Outbound File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe UnHackNe identifies NetVideoHunter as Malicious, so I've uninstalled it, performed a reset of FireFox and installed Flash Video Downloader. Unfortunately, that also seems to want to connect to a site whenever I click on it! Here's the report for that - -Blocked Website Details- Malicious Website: 1 Blocked, -Website Data- Domain: speednetwork6.adk2x. com IP Address: 130.211.54.133 Port: [51719] Type: Outbound File: C:\Program Files (x86)\Mozilla Firefox\firefox.exe UnHackMe also reports that Flash Video Downloader is a malicious app, so I've uninstalled that as well. I'm now using Flash and Video Download. That doesn't seem to want to connect to another website each time I use it, although UnHackMe seems to think that might be dodgy as well! lol. I'm fairly certain that the report for Flash and Video Download is a false positive. However, as NetVideoHunter and Flash Video Downloader are trying to connect to another site each time they are used, that suggests that all is not well. I only ever install Addons from the Mozzilla repository, so I'm a bit surprised that I'm getting these reports of malware. If an addon is trying to connect to adnetworkperformance. com, then it doesn't look like a false positive to me. I'd welcome some advice on this. :)

Modified by magicalwonders

Additional System Details

Installed Plug-ins

  • Shockwave Flash 27.0 r0

Application

  • User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0

More Information

FredMcD
  • Top 10 Contributor
4272 solutions 59922 answers

Helpful Reply

First, let's check your system.

You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

First, let's check your system. You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

Question owner

FredMcD said

First, let's check your system. You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Thanks for the link. I've downloaded all the resources and scanned with the following programs -

Malwarebytes' Anti-Malware Free SuperAntispyware Microsoft Safety Scanner Anti-Rootkit Utility - TDSSKiller AdwCleaner

I've also scanned with these programs -

HitmanPro CCleaner Zemana Antimalware UnHackMe Windows Defender

They all report that my machine is clean when the downloader addons are not installed.

The attempts to connect to websites that Malwarbytes blocks only happen when NetVideoHunter and Flash Video Downloader are installed. Even then, it only happens when the addon is clicked to download a video

UnHackMe identify both addons as malicious, so it looks like the issue is contained within the addons.

''FredMcD [[#answer-1007177|said]]'' <blockquote> First, let's check your system. You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no </blockquote> Thanks for the link. I've downloaded all the resources and scanned with the following programs - Malwarebytes' Anti-Malware Free SuperAntispyware Microsoft Safety Scanner Anti-Rootkit Utility - TDSSKiller AdwCleaner I've also scanned with these programs - HitmanPro CCleaner Zemana Antimalware UnHackMe Windows Defender They all report that my machine is clean when the downloader addons are not installed. The attempts to connect to websites that Malwarbytes blocks only happen when NetVideoHunter and Flash Video Downloader are installed. Even then, it only happens when the addon is clicked to download a video UnHackMe identify both addons as malicious, so it looks like the issue is contained within the addons.
FredMcD
  • Top 10 Contributor
4272 solutions 59922 answers

You should contact support for both those add-ons and ask questions.

You should contact support for both those add-ons and ask questions.

Question owner

To confirm that there is an issue with these addons, I used another machine, with a fresh install of Windows 10, Firefox, and Malwarebytes.

As soon as I added NetVideoHunter and clicked on it, it attempted to connect in the background to adnetworkperformance. com

I won't be using these addons now, but I think it should really be Mozilla asking the questions concerning these addons. They are definitely dodgy!

To confirm that there is an issue with these addons, I used another machine, with a fresh install of Windows 10, Firefox, and Malwarebytes. As soon as I added NetVideoHunter and clicked on it, it attempted to connect in the background to adnetworkperformance. com I won't be using these addons now, but I think it should really be Mozilla asking the questions concerning these addons. They are definitely dodgy!
FredMcD
  • Top 10 Contributor
4272 solutions 59922 answers

Helpful Reply

Please post the information at the add-ons forum; https://discourse.mozilla-community.org/c/add-ons

Please post the information at the add-ons forum; https://discourse.mozilla-community.org/c/add-ons

Question owner

Ok, I've done that now. :)

Ok, I've done that now. :)
Beerbaron23 15 solutions 162 answers

You also got to watch out for false positives, cause in general an extension sending data like that seems pretty shacky, hence the reason they were flagged. Personally I think that are just phoning home with what your doing online (even google does this in a large scale). So I think they were put in a rank alot higher then they should have been (but don't take my word competently as I 'm not aware of those addons. Pay attention to what those addons are connecting too, they could be connection to the video-service to create the download. But to a malware scanner that seems like someone is trying to steal your info...

You also got to watch out for false positives, cause in general an extension sending data like that seems pretty shacky, hence the reason they were flagged. Personally I think that are just phoning home with what your doing online (even google does this in a large scale). So I think they were put in a rank alot higher then they should have been (but don't take my word competently as I 'm not aware of those addons. Pay attention to what those addons are connecting too, they could be connection to the video-service to create the download. But to a malware scanner that seems like someone is trying to steal your info...