cancel
Showing results for 
Search instead for 
Did you mean: 

Is this a virus?

Hi,

I'm worried I've fallen for a phishing malware, I was in a rush to download irfanview and downloaded a setup from the site below 'Irfanview_Setup.exe'.

http://download-irfanview.net/features.html

When I installed it it just had a blank dialog box with a Next button, I clicked it and loaded something and then nothing else happened...and nothing appeared to have been installed...

I've scanned it with a virus scanner and now my computer but it hasn't found anything. I'm now worried I have something nasty lurking in the background! If anyone can put my mind at rest about this file I'd really appreciate it.

Dave

0 Kudos
7 Replies
exbrit
Level 21

Re: Is this a virus?

I don't think so, probably a broken downloader.  Although the site is labelled bad by WoT (Web of Trust) Irfanview has been around for a long time and I haven't seen warnings about it.

You could run Stinger and Malwarebytes Free perhaps.  Both are linked in the last link in my signature below.

Regarding blank interfaces, this can happen if there is jscript corruption.

Try at least step 1 in this FAQ:  http://service.mcafee.com/FAQDocument.aspx?lc=1033&id=TS101233

There's an alternate download link here for Irfanview:  http://download.cnet.com/IrfanView/  but before trying again run the above and uninstall it if it's showing in your program list.

.


Message was edited by: Ex_Brit on 24/02/13 4:15:38 EST PM
0 Kudos
exbrit
Level 21

Re: Is this a virus?

Just in case, I moved this to Malware Discussion  > Home User Assistance.

0 Kudos

Re: Is this a virus?

Thanks for the reply Ex_Brit.

Yes Irfanview is a legit program for sure, I have used it for years. But the website I linked to is not the official website and so my concern is that the file is masquerading as the Irfanview installer but is actually malware.

I'll have a look at your link and see if that helps.

Thanks,

Dave

0 Kudos
exbrit
Level 21

Re: Is this a virus?

Well I saved it to my desktop despite several warnings from both SiteAdvisor and WoT and  although I never installed anything I did scan it with McAfee and Malwarebytes and both came up clean.

0 Kudos
Hayton
Level 17

Re: Is this a virus?

The url given is a suspect domain. The whois ownership information is hidden, which is always suspicious.

SiteAdvisor has no information for the site. WOT condemns it, giving plenty of reasons. URLVoid shows it as blacklisted by WOT, hphosts and TrendMicro.

If a download comes from that site you have to watch for whatever comes with it, unbidden.

From WOT :

downloadsumatrapdf.com currently resides on IP: 74.208.239.58 along with:


(a long list of domains, including)


download-irfanview.net

http://whois.domaintools.com/download-irfanview.net

http://www.mywot.com/en/scorecard/download-irfanview.net

https://www.mywot.com/en/forum/30664-adware-ibryte-optimum-installer

http://www.urlvoid.com/scan/download-irfanview.net/

http://global.sitesafety.trendmicro.com/result.php

0 Kudos

Re: Is this a virus?

Thank you so much for your help with this, wow, looks like I paid the price for letting my guard down this time! Nightmare.

What worries me is that after "installing" using the setup file, my machine is showing no symptoms, and my up-to-date viirus scanners aren't showing anything in the file or in a full deep scan of the machine... actually worries me more than if it found something that I could then take action against!

What do you think the odds are that this thing is smart enough to remain completely undetected at this point? I'm not sure what to do next!

0 Kudos
Hayton
Level 17

Re: Is this a virus?

You could have been lucky this time. Have you run Malwarebytes Free? If that says you're clean, as well as Mcafee, you probably are.

0 Kudos