Last few days i clicked on two different upload.so links which infected my pc with crypto virus. To be more precise after i clicked "Download with Secured Download manager" to uncheck it, window poped up with the address "3fr991vf0bv00l94fs.norannoy.top" which installed crypto virus. I tried it a few times to be sure, and it always did the same.
So then I go to mobilism post containing that .so link and reply about crypto virus. A few minutes later i see that releaser is online and .top link doesnt pop up any more, but .so link still works.
I'm starting to think that this crypto thing might be a little extra money for the releaser.

I have noticed this also alot of late.

For now, releasers Balatan and amjadazzouqa are on my black list for practicing this.

[PinkWorld]

Guys, check out this thread: .exe or Virus warning after downloading an app, ebook etc..

Perhaps it might help.