Fake "Your File is Ready for Download" Links - How to remove

Malicious actors use various tricks to get people to download malware. For instance, they use the phrase “Your file is ready for download…” in pop-up ads, next to a button that downloads a malicious installer.

Fake download links are advertised on file download sites. Their creators bet on people mistaking them for real download links. So, whenever you’re downloading a file from the internet, be very careful to avoid such fake websites.

The files that “Your file is ready for download…” sites spread install malicious browser hijackers and other adware/spyware. Some of these hijackers are very difficult to remove.

About the “Your file is ready for download…” scam:

Classification	Trojan, adware.
Dangers posed by the fake “Your file is ready for download” pages	Malware (adware, miners, ransomware, spyware) downloaded and installed, compromised privacy, wasted time, advertising spam.
How to avoid “Your file is ready for download” and other malicious ads	Block malicious websites and ads, avoid sites that display aggressive and malicious ads.
How to remove malicious files	Use antivirus programs, like Spyhunter for PC, Combo Cleaner for Mac, and others.

About “Your file is ready for download…”

There are plenty of file download sites on the internet. Some of them are completely legitimate, while others (Fzmovies.net) allow for stolen content to be downloaded. Regardless, these sites deliver the files that they promise, allowing users to download them without any big problems.

But then there are fake download links. Pop-up ads that open while you’re browsing another file download site. Ads that offer you a file to download, hoping that you’ll mistake it for the real deal.

“Your file is ready for download…”

“Click on Download Now, File will be automattlicay (sic) starts downloading…”

These ads spread malware. But they try to get people to download and install the malware themselves, same as fake updates for Adobe Flash Player, your web browser, etc.

In my case, this page downloaded a malicious file. You can see the scan of the archive here: Virustotal.com. This file is called typeface__[random numbers].zip and it includes an executable file called FileSetup.

The FileSetup executable might be a little different for everyone. If you run it and you are connected to the internet, it downloads browser hijackers and other malware.

Here’s what you can expect from malicious installers that “Your file is ready for download…” pages spread:

• Browser hijackers that cause ad spam and unexpected redirects in the browser.
• Miners that steal your computer’s resources to generate cryptocurrency (OSAMiner).
• File-locking ransomware.

Review your recently installed programs and browser extensions to see if there’s anything suspicious.

How to remove malware

Avoid malicious ads

Use ad blockers, anti-malware programs, and avoid websites that tend to show aggressive ads.

Even if you block ads and malicious websites, you might still encounter pages like “Your file is ready for download…”. In these cases, it’s important to recognize the red flags:

• The address of the “Your file is ready for download…” page is not the same as the site you were browsing earlier.
• The page appeared even though you did not click a download button.
• The “Your file is ready for download…” link doesn’t reference the file that you were trying to download.

If you close the “Your file is ready for download…” page without interacting with it, then you’re most likely safe. It’s only downloading the file that it offers that can cause problems.

Remove malware infections

If you downloaded and ran the files that “Your file is ready for download…” spreads, then scan your device with antivirus programs. Use Combo Cleaner for macOS, Spyhunter for Windows, or antivirus programs that you trust. Remove any files that are flagged as malicious.

If the “Your file is ready for download…” trojan installed malicious browser extensions, you might find them difficult to remove (for instance, the “Remove” button might be missing). To remove these hijackers, check out this post on removing extensions that abuse Enterprise policy.

If antivirus programs found spyware on your device, reset your passwords so that they can’t be abused.

Automatic Malware removal tools

Restore browser settings

TopHow To remove Fake "Your File is Ready for Download" Links from Google Chrome:

• Click on the 3 horizontal lines icon on a browser toolbar and Select More Tools→Extensions
  
• Select all malicious extensions and delete them.
  
• Click on the 3 horizontal lines icon on a browser toolbar and Select Settings
  
• Select Manage Search engines
  
• Remove unnecessary search engines from the list
  
• Go back to settings. On Startup choose Open blank page (you can remove undesired pages from the set pages link too).
• If your homepage was changed, click on Chrome menu on the top right corner, select Settings. Select Open a specific page or set of pages and click on Set pages.
  
• Delete malicious search websites at a new Startup pages window by clicking “X” next to them.
  

(Optional) Reset your browser’s settings

If you are still experiencing any issues related to Fake "Your File is Ready for Download" Links, reset the settings of your browser to its default settings.

• Click on a Chrome’s menu button (three horizontal lines) and select Settings.
• Scroll to the end of the page and click on theReset browser settings button.
  
• Click on the Reset button on the confirmation box.
  

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

How to remove Fake "Your File is Ready for Download" Links from Microsoft Edge:Top

• Click on the menu button on the top right corner of a Microsoft Edge window. Select “Extensions”.

• Select all malicious extensions and delete them.

• Click on the three-dot menu on the browser toolbar and Select Settings

• Select Privacy and Services and scroll down. Press on Address bar.

• Choose Manage search engines.

• Remove unnecessary search engines from the list: open the three-dot menu and choose Remove.

• Go back to Settings. Open On start-up.
• Delete malicious search websites at Open specific page or pages by opening the three-dot menu and clicking Delete.

(Optional) Reset your browser’s settings If you are still experiencing any issues related to Fake "Your File is Ready for Download" Links, reset the settings of your browser to its default settings

• Click on Edge's menu button and select Settings. Click on the Reset Settings button on the left.
• Press the Restore settings to their default values option.

• Click on the Reset button on the confirmation box.

If you cannot reset your browser settings and the problem persists, scan your system with an anti-malware program.

How To remove Fake "Your File is Ready for Download" Links from Firefox:Top

• Click on the menu button on the top right corner of a Mozilla window and select the “Add-ons” icon (Or press Ctrl+Shift+A on your keyboard).
  
• Go through Extensions and Addons list, remove everything Fake "Your File is Ready for Download" Links related and items you do not recognise. If you do not know the extension and it is not made by Mozilla, Google, Microsoft, Oracle or Adobe then you probably do not need it.
  
• If your homepage was changed, click on the Firefox menu in the top right corner, select Options → General. Enter a preferable URL to the homepage field and click Restore to Default.
  

(Optional) Reset your browser’s settings If you are still experiencing any issues related to Fake "Your File is Ready for Download" Links, reset the settings of your browser to its default settings.

• Click on the menu button on the top right corner of a Mozilla Firefox window. Click on the Help button.
  
• ChooseTroubleshooting Information on the Help menu.
  
• Click on theReset Firefox button.
  
• Click on the Reset Firefox button on the confirmation box. Mozilla Firefox will close and change the settings to default.
  

If the problem persists, scan your system with an anti-malware program to identify malicious entries.