Sneaky infected file going around

Almost fell for it myself..

When loading up RuneScape, I got asked to update adobe flash player. I've had a few Java updates recently and you get in the habit of just saying okay.. until I saw the publisher wasn't Adobe then double checked the URL to be get1.new-f1ash-players >_<! when you get in to the habit of RS-related updates it can be a sneaky way for them to infect your PC - just watch for it

 

[Naxious]

thanks for the alert! I get more java updates more frequently however but thanks!

 

[Fulla]

Alright, will do thanks.

 

[Cas]

Um wot, how did that get on the runescape page in the first place?
If you loaded from runescape.com you shouldn't have had that alert in the first place, unless your browser has already been infected by something else, ad or malware.

 

I know, but if I got it (I'm careful ) then who knows who can get it. It's gone now, obviously. But the first and only time it appeared was when I loaded Runescape, so that's why I think they're targeting Runescape players.

 

[IRL Seller]

I know, but if I got it (I'm careful ) then who knows who can get it. It's gone now, obviously. But the first and only time it appeared was when I loaded Runescape, so that's why I think they're targeting Runescape players.

I also downloaded this and then i saw the source and immediately disabled my internet and booted into safemode to eliminate it with malware bytes.

Not sure how i got the pop up tbh.

 

Thanks for the warning. I probably wouldn't click any links to begin with.

 

Unfortunately it started auto-downloading, which is even worse. I've no idea where I picked this up from to begin with, beyond me.

 

[IRL Seller]

Unfortunately it started auto-downloading, which is even worse. I've no idea where I picked this up from to begin with, beyond me.

When I scanned with malwarebytes (last scan was done on Sunday), AFTER having it downloaded, I came up with 39 detected items, 3 of them were registry key issues, but that leaves 36 others, all from that one download

 

Luckily I had cancelled the setup and got it with avast beforehand. Crikey.

 

[Donald Duck]

Wow, that's weird. How could they do that? Like hack the site or something?

 

[North]

Yeah, Thanks for the Warning