I just found Firefox constantly attempts to connect to r2rdownload.com. I've never visited the website at all as I know it's a fake website. I've downloaded from the sis site.
So, how do I block it?

 

From the firewall, or from your hosts files

 

Found this behaviour as well. Do you have this line in hosts file?

Code:

    127.0.0.1 www.r2rdownload.com

I suspect that Firefox actually calls localhost and because of this line, r2rdownload is shown in the analytics.

 

Make an outbound rule in firewall and block everything( then make a whitelist and allow whatever you want.). or a specific program or ip address .offline machine is always best choice for music production with warez.


one more thing : Are you 100% sure you downloaded r2r releases from safe places (like sis site)
for example i found new update for sonarworks (5.9.0 r2r version) in torrent sites but there is no sign of it in sis site.

 

Last edited: Feb 13, 2024

This...

 

Something is making Firefox call that fake r2r site. You probably have a trojan. If you have any releases from that fake r2r website, maybe it installed it along with the crack. Get rid of all the releases from the fake website, or scan them with an antivirus.

 

Could possibly be one of your extensions. Disable them all, then enable them one by one, while monitoring your log file to find the culprit.

 

As R2R is a true Keygen they just publish the update + the R2R keygen, an unnoficial version.
Actually some people is waiting for the R2R release, as this is not working right for them.

 

Yeah, I know that, i meant there are fake cracks in the name of r2r.


One important thing : something tries to make a connection to the fake r2r website, Wolfang is sure that he downloaded r2r releases from sis site, something is wrong?

 

deleted

 

Last edited: Feb 13, 2024

deleted

 

Nice guess

 

Do you mean Firefox extensions?

 

How do I find it?

 

Could you give me more details, please? I've blocked the exe files, but haven't blocked a certain website via firewall.

 

As far as I know, I downloaded most r2r cracks from sis site

You mean my DAW? I didn't even open it.

 

Using your firewall is not a bad idea, at all. But in an instance like this specific domain, it's a url that you are never going to visit.

I also think you should block it more permanently by editing your hosts file, as already mentioned above. https://en.softonic.com/articles/how-to-edit-hosts-file-iwindows-10-11 As noted above too, instead of using 127.0.0.1 (localhost), make that IP address 0.0.0.0 in hosts instead.

It sounds like a browser hijack, by the way. You can use anti-malware software like Hijack This! or MalwareBytes to remove stuff like this. https://sourceforge.net/projects/hjt/ or https://www.malwarebytes.com/

 

Last edited: Feb 14, 2024

step by step :
https://www.lifewire.com/block-any-ip-address-5217849
Do it by outbound and inbound rule

After blocking url, Run a full scan with an antivirus, if you noticed that problem again, Give your machine a fresh breath (os install)

 

Last edited: Feb 14, 2024

isn't that line in the host file supposed to block access to that site? Maybe it's missing.

 

Thanks for the link, but it explains how to block IP address, not website address. How do I find the IP address of www.r2rdownload.com?