r/jdownloader

Jdownloader Hacking

Hi, how can I know for sure that my Jdownloader is not infected ?

Today I restart my computer so when I start jdownloader it automatically makes the last update. I was avoiding updates cause I was afraid it would be a possible problem.

Do I have to be worried ? Thanks

reddit.com
u/Billystake — 20 hours ago

Will Cloudflare WARP help if I'm being asked to solve puzzles & verify myself on the SC app, after averaging 1GB/week in JDownloader usage on the SC website?

Im wondering because i like logging into my actual account thru JD, in order to access the highest quality audio.

Would WARP stop the Cloudflare blacklisting? (I'm also getting logged out & told I'm a bot across other Cloudflare sites on my home network.) It's not that bad at all. Maybe not worth it? Jw

reddit.com
u/crystal_castles — 24 hours ago

Libgen support appears to be broken

I can add links from libgen with the linkcrawler, but when trying to download, they fail and I get the message to retry the download(s). No matter how many times I try to restart the downloads, nothing downloads.

Libgen has always been a pain to download from because of strict connection limitations and dropped downloads from the site itself and resume support not working in jDownloader, but it's not working at all anymore

Example links where I needed a couple fill issues

Absolute Batman

If this could be fixed it would be greatly appreciated. There's books on this site and it's mirrors that aren't available anywhere else

reddit.com
u/Ronin22222 — 2 days ago

Quirk on reopening app on Mac

Does anyone have the issue where when you close out the window it closes the window (continues running in the background), but when you click on the icon again on the dock the window pops back up and instantly collapses into the right side of the start bar requiring you to click on the original icon again or the new icon on the right side of the dock?

gif on imgur

imgur.com
u/norcalifornyeah — 2 days ago
▲ 190 r/jdownloader+2 crossposts

Proper JDownloader malware remediation

According to https://www.reddit.com/r/jdownloader/comments/1t6goqe/is_the_website_hacked/, the JDownloader site delivered malware on 20:12 - 07.05.2026 GMT+2.

u/Takia_Gecko did a very well technical analysis in this comment so I would like to focus on the proper steps to remediate this infection.

Execution chain:

To clarify, the installer was replaced with a malicious signature-less version that delivered the official JDownloader and exactly 8 minutes after the initial setup start, it decrypted and executed the malicious payload that consisted of installing the Python interpreter, PyArmor runtime for code obfuscation and then starting a Python remote access malware.

When the malware is executed, Windows Defender is fully disabled, Windows Updates are also disabled and a root certificate is installed

I have also discovered several strings that may indicate manipulating with:

  • Manual malware removal software such as FRST
  • Antivirus scanners such as HitmanPro, Kaspersky Virus Removal Tool
  • Antivirus software such as Avira, Avast, Windows Defender

Remote access malware (RAT):

  • You can remove the visible signs of this infection, but due to the nature of this type of malware, no one can guarantee the trustworthiness of your computer. A backdoor or RAT gives the attacker complete access to your system, allowing them to steal data, install additional malware, or monitor your activity.
  • This means that at some point the attacker was able to interact with your PC (see your desktop, view files, open programs) just like you are able to do so. For this reason, we do not recommend manual malware removal, because the malware could be embedded deeper in the system or able to manipulate with the removal process and making it ineffective.
  • If your computer was used for online banking, has credit card information or other sensitive data, using a non-infected computer/device you should immediately change all account information (including those used for banking, email, eBay, PayPal, online forums, etc). Consider these accounts already compromised.
  • I suggest you read and follow this guide on how to properly change your passwords after a stealer infection: https://rifteyy.org/report/the-ultimate-guide-to-infostealers - specifically the section "How to properly secure my accounts"

Proper steps to take now:

If you have executed the file, you can not guarantee a 100% clean system because of the malware's natures and because of how many changes it had already done on execution (disabling antivirus, manipulating with antivirus scanners, disabling Windows Updates, installing a root certificate) so please follow one of these steps to ensure your device is clean from the malware:

u/rifteyy_ — 4 days ago

Trying to dowload video assets packs

There was this site called BusyBoxx and I paid for a lifetime subscription and spent over a year downloading and archiving the files just to have a hard drive crash. Someone put up the site for free now and I want to download these all again. I can't figure out how, even in the individual packs for thios site using Jdownloader. Here is a link:

https://busyboxx.frontly.ai/

Is there a way?

reddit.com
u/Emergency_Plan8197 — 5 days ago

...Is it safe yet?

Hopefully I'm using the right flare.

I'm extremely nervous about downloading JDownloader right now since the site has been hacked, and I don't want to go anywhere near it because of this. So I'm turning to Reddit for answers.

reddit.com
u/Spare_Garlic_4997 — 5 days ago

Is the "Download Installer (x64, Java 21)" link redirecting to Mega safe?

Hi everyone, I'm a bit new to JDownloader and wanted to make sure I'm doing things right. I went to the official website to download the app, and when I clicked on the "Download Installer (x64, Java 21)" link, it redirected me to mega to download a file named: `JDownloader2Setup_windows-amd64_v21_0_10.exe` (71.9 MB) Is this redirect normal and safe? I just want to be absolutely sure it's the legitimate, clean software and not malware. If this is correct, should I proceed with this one or is there another recommended official link? Thanks in advance for the help!

reddit.com
u/Torres1493 — 5 days ago

[macOS] Old version of FFmpeg?

I use JDownloader for macOS and all updates are installed. However, when I check the “About JDownloader” menu item, I see that FFmpeg is from 2020. The corresponding files in Finder are also at this old version.

Since I’m not really familiar with this, I wanted to ask if this is intended and if it causes any problems? Especially when it comes to converting the downloaded videos.

To me, as a layperson, it just seems a bit odd.

reddit.com
u/maybe_de — 7 days ago

Am I able to download from Viki?

Whenever I try to download anything from Viki it just shows the ads or whatever else is on the page but not the actual video. Is Viki not supported? Or do I have to do anything specific to get those videos?

reddit.com
u/SadSnailSara — 7 days ago

Was affected by the rat

I already wiped the drive and reinstalled w10 properly, I’m just more concerned about in knowing that did it spread to other drives and files or stayed contained within the OS?

reddit.com
u/crystalspalt — 9 days ago

Why is there a speed limit if 10Kb’s a second? And how can I disable it.

Yesterday I had to restart my computer in the middle of a Keep2Share download and when I attempted to resume the download the speed limit appeared. Now just trying to download a YT video or like the second screenshot shows hitting the play button shows the speed limit without a download. I updated Jdownloader 2 and re-exported my YT cookies.

u/evanjd14 — 8 days ago
▲ 2 r/jdownloader+1 crossposts

Avast detecting jdownloader as a threat

ETA: SOLVED, see link provided by jdownloader_dev. Thanks!

Hi all,

I think I've done everything I should, but just to be on the safe side.

I use Jdownloader 2. the app was sent to Avast quarantine.

I am aware that the some installers on jdownloader were compromised a few days ago (see here), but I did not download them, as jdownloader has been installed for a while. Jdownloader states that updates are not affected, so even if the app updated, I should not be affected by the breach.

Yesterday, the app was sent into quarantine by Avast (see screenshot), but it does not name the threat. The app was running at the time, downloading PDF files. They've all been scanned with Malwarebytes, Avast and Windows defender, and have come back clean. .
I restored the file and uploaded it to virustotal, it came back clean (BitDefenderFalx and Trustlook being unable to process the file type). See https://www.virustotal.com/gui/file/d1f60da77015914a8e3af47ab8ab2e4d865db5fa3e7138f26796f60f0fe3949a
I scanned it again with Avast, which shows it as clean now, same with Malwarebytes.

Quick scans by Malwarebytes, Avast and Windows Defender turn up clean.

I have two questions:

  • this would be a false positive? I have sent the file to Avast for analysis...
  • to be on the safe side, are there any scans that I can do to check for potential traces of the malware linked to jdownloader - even if I should be safe, considering the info on Jdownloader.

Thanks in advance for any help.

https://preview.redd.it/hcu0kumeyu0h1.png?width=831&format=png&auto=webp&s=ee8e64b39d89611db16e6b04fc5b7465f2967298

reddit.com
u/LakeSpear — 9 days ago
▲ 441 r/jdownloader+1 crossposts

Is the website hacked?

Update 3: I never thought this post would blow up the way it did, I was skeptical and decided to reach out just incase even though I was hesitant. I didn’t realize the positive impact it would have in protecting thousands of people’s computers and data. Thank you to everyone for all the nice comments and big thank you to the developer for working with me and others to get to the bottom of this and solving the issue.

Jdownloader was my childhood software so it was kind of surreal to see this post blow up and it was quite overwhelming getting so many notifications. It was stressful managing and guiding the comments, but I’m glad I was able to help out I hope everyone is safe and have a lovely day my friends, and special thank you to whoever gave me the Reddit award, and the really cool people who diagnosed the malware and viruses. The website is back up and checked the pinned developer comment for their updates still.

Update 2: Please read pinned developer comment thread before asking questions

Update: Confirmed hacked DO NOT download until update from Devs.

I been using Jdownloader and switched to a new PC a few weeks ago. Luckily I had the installer in a usb drive but decided to download the latest version. The website is official but all the Exes for windows are being reported as malicious software by windows and the developer is being listed as “Zipline LLC.” And other times it’s saying “The Water Team” The software is obviously by Appwork and I have to manually unblock it from windows to run it which I will not do. I ended up plugging in my flash drive and the setup file on that flash drive has the Jdownloader logo along with AppWork being listed as the developer…

Are the servers hacked? Whether I download the no ads version or the offer free version it’s being flagged by windows on both ends and the exe has no logo either. This is getting draining as if the offer adware side wasn’t bad enough. Please be careful. At this point just charge for the software rather than potentially destroying people’s computers for ad revenue ffs I’m sick of it.

reddit.com
u/PrinceOfNightSky — 14 days ago

[ Message to the team ] A simple fix for a huge problem

Hello,

I want to report a specific issue to your team. If fixed, it would permanently resolve the download blocks on Twitter and Instagram when processing a large number of links (up to 500).

The issue lies in how your system handles Twitter links. Currently, the crawling or link searching process happens sequentially for the entire list at once. This triggers an immediate block from Twitter and stops the download process.

I’d like to suggest a solution that was successfully implemented in WFDownloader: Merging the download process with the crawling or link searching process.

Instead of crawling all 400+ links at once, the app should crawl them in small batches (e.g., 5 links at a time). After the crawling or link searching for the first 5 links is done, the process should pause, and the app should automatically start downloading the media from those links. This creates a rest period for the crawler. Once those 5 downloads are finished, the app resumes the crawling or link searching for the next batch.

This "batch-crawling" with rest periods effectively bypasses rate limit blocks on Twitter and Instagram. It's a smart workaround, and I wanted to share it with your great team.

Thank you and best regards.

reddit.com
u/man_is_the_dream — 9 days ago