Did you just get a pop-up from safedownloadsrus116.com claiming that you should update your Java software?
“UPDATE RECOMMENDED! Your version may be outdated. It is recommend to update your plugin now. To learn more click OK.”
(Sorry for the ridiculous use of watermarks. I have to do it to stop the copy-cats.)
The problem here is that if you download the “Java Update”, you will not get the official Java download. You will get something else that your computer is much better off without. I quickly browsed though the EULA and it mentioned something called AdGazelle.
Did the safedownloadsrus116.com “Java” ad appear to have been launched from a web site that under normal circumstances don’t use aggressive advertising such as pop-up windows? Or did the safedownloadsrus116.com pop-up show up while you clicked a link on one of the major search engines, such as Google, Bing or Yahoo?
If this sounds like what you are seeing on your machine, you most likely have some adware installed on your system that pops up the safedownloadsrus116.com ads. So don’t send angry emails to the site you were browsing, the ads are most likely not coming from them, but from the adware on your machine. I’ll try help you to remove the safedownloadsrus116.com pop-ups in this blog post.
I found the safedownloadsrus116.com pop-up on one of the lab machines where I have some adware running. I’ve talked about this in some of the previous blog posts. The adware was installed on purpose, and from time to time I check if something new has appeared, such as pop-up windows, new tabs in the browsers, injected ads on website that usually don’t show adverts, or if some new files have been saved to the hard-drive.
safedownloadsrus116.com was created on 2014-12-23. safedownloadsrus116.com resolves to the 104.28.20.16 IP address. The site is getting lots of traffic, just check out the Alexa ranking:
So, how do you remove the safedownloadsrus116.com pop-up ads? On the machine where I got the safedownloadsrus116.com ads I had Movie Wizard, Wajam, FastPlayer, MyStartSearch and Games Desktop installed. I removed them with FreeFixer and that stopped the safedownloadsrus116.com pop-ups and all the other ads I was getting in Mozilla Firefox.
The problem with this type of pop-up is that it can be popped up by many variants of adware, not just the adware on my system. This makes it impossible to say exactly what you need to remove to stop the pop-ups.
To remove the safedownloadsrus116.com pop-up ads you need to examine your machine for adware or other types of unwanted software and uninstall it. Here’s my suggested removal procedure:
- Check what programs you have installed in the Add/Remove programs dialog in the Windows Control Panel. Do you see anything that you don’t remember installing or that was recently installed?
- How about your browser add-ons. Anything in the list that you don’t remember installing?
- If that did not help, you can give FreeFixer a try. FreeFixer is built to assist users when manually tracking down adware and other types of unwanted software. It is a freeware utility that I’ve been working since 2006 and it scans your machine at lots of locations where unwanted software is known to hook into your machine. If you would like to get additional details about a file in FreeFixer’s scan result, you can just click the More Info link for that file and a web page with a VirusTotal report will open up, which can be very useful to determine if the file is safe or malware:
Here you can see FreeFixer in action removing pop-up ads:
Did you find any adware on your machine? Did that stop the safedownloadsrus116.com “Java” ads? Please post the name of the adware you uninstalled from your machine in the comment below.
Or are you getting these “Outdatad Java Warnings” from another site? Please post the link to the “warning” in the comments below, and I’ll check them out.
Thank you for reading!
Thank you for posting this. It’s the only webpage I found about evil pop-up generated by safedownloadsrus116.com. The popup is blocked by my antivirus but I could not identify any malware on my PC… Popup from safedownloadsrus116.com do only occur when I using Chrome (a variant of Google Chrome), with many security option enabled. Resetting Chrome settings does not help.
If you get more information about his malware, please update your post, thank you!
After some more research, this malware seems to be a variant of “youradexchange”, since the link to safedownloadsrus116.com java warning is redirected from youradexchange.com, but anti-spyware/malware softwares fail to detect it! (I’ve tried adaware, malwarebytes, superantispyware and some others).
(Sorry for multiples posts, I cannot edit previous ones)
I found a way to clean the malware: I made a reset of Chrome settings (it did not help) and then deleted ALL Chrome add-ons installed and it’s gone. I had only a very few (and safe, I believed) add-ons installed, so not sure which one was a malware. But deleting all of them resolved the problem.
Thank you Jean!