Malicious version of MSI Afterburner has been taken offline

A content delivery network where a rogue version of MSI Afterburner was installed has removed the software. MSI warned about the software, which might contain trojans, malware or keyloggers.

MSI posted a warning on its website on Thursday and on Twitter about a site that distributed a rogue version of the MSI Afterburner software. The page was a copy of MSI’s own website, and the software was also allegedly disguised to resemble the official MSI software.

TechPowerUp forum user silentbogo was surprised that the website was still online on Thursday. The user says that on May 5 he already reported abuse at Hipolink, where the files were hosted. The user also wrote web host Timeweb.ru to where the site was located.

According to silentbogo, the files were taken offline by Hipolink after his request and the hoster has announced an investigation. The site that MSI warned about can no longer be reached. It is not known how many victims the rogue software has made.

MSI Afterburner is software for reading and tweaking GPU performance. The software also works with video cards from other brands and therefore has a large number of users.