Malware Problem? Rubiconproject

Hello. I am running 10.6.8 and safari 5.1.7 on my imac. The last two days when I was on ebay search pages, I got a download popup screen for 41452-9.html three different times. It says it is a web application safari downloaded from ebay.com. Ebay began a new search engine upgrade on the 10th, is it some type of malware or bug in the upgrade?

I searched 41452-9.html and got a link for the rubiconproject.com. I also got a cookie from the rubiconproject when I am on the ebay search pages. I have not experienced this download anywhere else or seen any problems. I deleted the cookies, and dragged the file to trash.

Does anyone know anything about this file or the rubiconproject website? If you think this is some type malware, should I do a erase and install to be safe? Thank you in advance for any help you can provide.

iMac, Mac OS X (10.6.8)

Posted on Oct 13, 2012 10:26 PM

Reply
8 replies

Oct 18, 2012 12:42 PM in response to guy007

I too am running 10.6.8 and safari 5.1.7 on my MBP. I recently (last few days or so) have received the very same file (53357-15.html) automatically into my downloads folder. I too was concerned as Nothing else ever just automatically gets in like that.

I was considering asking ebay about it or perhaps ribiconproject.com about this matter. Will post results.

Oct 16, 2012 4:00 AM in response to guy007

Thanks for your help. But, I assumed anytime a webpage automaticly downloaded a file to me without my permission than I had a problem. Is that true or is there circumstances where that is not? I just went on ebay now, as soon as the homepage loaded my download screen pop up and the file 53357-15.html showed up and also in my download folder. I dragged it to trash. I looked up 53357-15.html and found nothing.

There has to be a reason why ebay is giving me these files? I never had any website give me a file without my permission. Any ideas on what my next step should be. Thanks again for any help in advance.

Oct 16, 2012 10:27 AM in response to guy007

All I can really add about this one is that in my view, it is purely a marketing tool. I doubt that eBay dare get caught out with anything more than that. The Cookie is almost certainly a flash cookie, one which reappears after being deleted and the Cookie catcher I recommended has a section to deal with flash cookies. All the same, just imagine, from eBay's point of view how useful this could be. The cookie follows you around and reports back to eBay with where you have been; eBay are then able to target you with offers linked to the places you have visited.


I couldn't agree more that it is deceitful ... but one can understand its raison d'etre. I doubt that I would allow it to dominate my thinking. I would clear it when I saw it but not get too concerned with eBay. But that's my view !!!!

Oct 16, 2012 4:32 AM in response to guy007

It is a bit more persistant than most but I think it's still a tracking cookie. As I said earlier, it can be controlled (or forbidden) via the cookie options you have in both Safari and Firefox. I use a cookie controller called Cookie (how original) and bought from the App Store. I think it's £7. Can't promise it will meet all your needs though it's worth reading up about both in App Store and Google.


I suppose you could fire a missile at eBay pointing out how troubled you are by this implant.

Oct 16, 2012 9:44 AM in response to guy007

Thank you again. I checked the ebay forums. There are plenty of people having trouble with the site. The technical forums are filled but mostly about ie.. I found one other person who has a mac and getting these files when on there. It is the same, safari automaticly downloads the files. No one on there knew what to do about it. So, there has to be some hole that is being expoited to make safari download the file. I never got any type file download from ebay before they started the upgrade to there website.

Thanks in advance for any help you can provide.

Oct 18, 2012 2:03 PM in response to guy007

I've also been finding the 41452-9.html downloaded app on my computer as well as one titled 41452-15.html, and one titled 53357-15.html. I'm also running Snow Leopard 10.6.8, and Safari 5.1.7. Both files downloaded without my knowledge about an hour ago from Ebay. I only realized because I saw the Safari Download window open. In case it matters I was using Private browsing settings and while I have an Ebay account I wasn't signed in. This isn't the first time these files have downloaded onto my computer either the other time was in the past week. I submitted the 41452-9.html to virustotal.com which runs the file through a slew of security software but the results all came back as " - " . All the downloaded files are listed in Finder as 4 KB (1,794 bytes) or (1,793 bytes)

Oct 18, 2012 2:29 PM in response to guy007

I've been having this same problem all week on my iMac (10.6.8, running Safari 5.1.7). It may be harmless enough, but it's been ******* me off that an unwanted file would download itself like that. I went into Safari>Preferences>Privacy then to Details and scrolled down through the list of cookies until I found "Rubiconproject". I removed it and closed Safari. I reopened Safari and Ive been searching on eBay ever since without that pesky file downloading itself. eBay had better get its act together - something like this is bound to turn people off in a big way.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Malware Problem? Rubiconproject

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.