|
Trojans from CNET
|
|
|
Mez
AfterDawn Addict
|
4. August 2013 @ 11:48 |
Link to this message
|
I downloaded VLC from CNET. You download a install file not a setup. The install added at least one 'bonus' app. It was a cloud backup from Norton. Either as a part of this package or something from CNET or something else was an app called update. I can't see it as a process but it kept trying to connect to the internet. I normally keep my self unplugged from the network unless I need to be connected so it continued to fail making the connection.
I restored my system to an earlier date just to be safe. I will NEVER download anything from CNET ever again. I assume the Trojan is a white hat Trojan but it may have the ability to automatically install more apps I do not want without my saw so.
I looked for some indication that I would be installing software I did not want. This is all that was mentioned Quote:
We also include offers for carefully screened software that complies with Download.com Software Policies as part of our Installer process.
Read more:
The Quote:
read more
said nothing about the extra software.
|
|
Advertisement
|
 |
|
|
|
scorpNZ
AfterDawn Addict
4 product reviews
|
4. August 2013 @ 14:50 |
Link to this message
|
Your first quote stated you would be offered it,however you have to move with the times & be sneakier than them by hitting decline on the offers regardless if it appears grayed it will still work & keep hitting decline till you get the the vlc install then it will do whats required without the added bonuses.lmao..,AD has a similar download only it uses tick boxes or just use filehippo instead or direct download at sourceforge
|
AfterDawn Addict
|
4. August 2013 @ 16:15 |
Link to this message
|
Gee, Mez, You're an addict, I thought you had been around long enough that you wouldn't fall for loading a bunch of Foistware from CNET. It's not a Trojan, just a bunch of junk you don't need. 
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves... |
|
Mez
AfterDawn Addict
|
4. August 2013 @ 16:23 |
Link to this message
|
I was never given a choice other than to click the download button or not. The information I posted was from the mouseover which I didn't check until after a had a auto downloader installed on my computer. Then I went over everything with a fine tooth comb to see if I had missed something. Even reading that message you would expect an offer. There were none. Plus the updater was not part of the backup. For all I know a hacker added it to the the download. I say this because the message stated the error came from update.exe instead it came from a different file with a garbage name. That sounds like it was more of a hack than a legit process.
|
AfterDawn Addict
|
4. August 2013 @ 16:31 |
Link to this message
|
|
That's just one good reason I never use CNET...
If I can't find a download from the owner, Filehippo or MajorGeek, I just do without it. LOL
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves... |
|
Mez
AfterDawn Addict
|
4. August 2013 @ 16:34 |
Link to this message
|
Originally posted by Mez:
I was never given a choice other than to click the download button or not. The information I posted was from the mouseover which I didn't check until after a had a auto downloader installed on my computer. Then I went over everything with a fine tooth comb to see if I had missed something. Even reading that message you would expect an offer. There were none. Plus the updater was not part of the backup. For all I know a hacker added it to the the download. I say this because the message stated the error came from update.exe instead the message came from a different file with a garbage name. The author probably hoped you would start deleting update.exes in an effort to get rid of that trash. That sounds like it was more of a hack than a legit process.
2Old, I just saw your post. If it was just Foistware why was it trying to get to the internet? I know I am paranoid when it comes to malware but I am thinking it is probably a black Trojan even it is white I still do not want to get new Foistware every day.
|
AfterDawn Addict
|
4. August 2013 @ 16:42 |
Link to this message
|
|
Foistware is just software that you did not intentionally download, not necessarily bad..
And most software calls out for different reasons, not always bad...
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves... |
AfterDawn Addict
|
4. August 2013 @ 16:54 |
Link to this message
|
These days most of the Free software comes with a sh.t load of Foistware, even from the reputable company's. You have to be on your toes all of the time. Or download adwcleaner and run it every so often to clean up the Adware and Foistware.
2oG
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves... |
|
scorpNZ
AfterDawn Addict
4 product reviews
|
4. August 2013 @ 20:59 |
Link to this message
|
|
Mez it's secure downloader it doesn't get installed only the software you don't opt of does the rest is held & dumped from the temp folder including the downloader just like any of the normal bundled opencandy your used too,its not permanent the downloader that is
|
|
andrews04
Newbie
|
7. August 2013 @ 05:33 |
Link to this message
|
|
If you download programs using CNET installer then you will surely get tons of unwanted programs and crappy toolbars free of cost. That's why I prefer to download directly from developers website.
|
AfterDawn Addict
|
7. August 2013 @ 11:07 |
Link to this message
|
Originally posted by andrews04:
If you download programs using CNET installer then you will surely get tons of unwanted programs and crappy toolbars free of cost. That's why I prefer to download directly from developers website.
Is there an echo in here? I think that's what I said.... LOL
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves... |
|
Mez
AfterDawn Addict
|
9. August 2013 @ 15:05 |
Link to this message
|
I hadn't used CNET in a few years. Then they were 'cleaner' than many owners' sites which usually had foistware and CNET did not. Well those days are long gone. While I am on the uploader roll...
I had maleware I couldn't find late last year. I kept the C: untouched as D: not to lose any valuable data and started a new C: with little data on it. I still keep my data on D: when I can. I have re-imaged C: more than once since then.
Well this week my virus scanner finally found one of the bad guys on that old drive. It was Airupdater.exe. I assume there is pleanty more where that came from with a name like that. So just because your scanners say you are clean doesn't mean a thing. I am sure I believed I was getting that malware from the adobie website when I was updating my plug ins. Again it was inside the update package I distrust autoupdates so I was given no choice not to install it. I suspect this move to downloading an update package instead of the EXE is one huge step away from security.
|
Senior Member
|
10. August 2013 @ 00:11 |
Link to this message
|
|
mez,adobe air updater???
|
|
andrews04
Newbie
|
10. August 2013 @ 04:31 |
Link to this message
|
Originally posted by 2oldGeek:
Originally posted by andrews04:
If you download programs using CNET installer then you will surely get tons of unwanted programs and crappy toolbars free of cost. That's why I prefer to download directly from developers website.
Is there an echo in here? I think that's what I said.... LOL
Sorry, I didn't see it....lol
|
AfterDawn Addict
|
10. August 2013 @ 10:57 |
Link to this message
|
Originally posted by Mez:
I had maleware I couldn't find late last year. I kept the C: untouched as D: not to lose any valuable data and started a new C: with little data on it. I still keep my data on D: when I can. I have re-imaged C: more than once since then.
Well this week my virus scanner finally found one of the bad guys on that old drive.
@aldan, Probably Adobe AIR but you should know by now that Mez always goes around his fist to get to his thumb. Even tho a straight line is the shortest distance between two points. lol
@Mez, I know I have told you how to relocate your data so you don't have a chance to loose it and how to backup your boot drive so that when you really do get malware you can just recover it back a day or so and poof the malware is gone. Quit trying to re-invent the wheel! LOL
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves... |
|
Mez
AfterDawn Addict
|
18. August 2013 @ 14:12 |
Link to this message
|
2old, what I did was buy a new smaller C: and kept the old C: as F:. I do keep all my data on F:. By the way how is that going "around his fist to get to his thumb", or did I forget to do that this time?
Aldan yes it is the air updater. However, the air updater on C: was fine. Maybe it was a false positive with that version or maybe it was malware. What better place for a trojan? From what I have read the trend is to package malware in legitimate applications especially ones that have a firewall pass. The code in the exe doesn't need to be all that different. They can just call a different routine in a different DLL or just overwrite the DLL.
|
AfterDawn Addict
|
18. August 2013 @ 15:06 |
Link to this message
|
Originally posted by Mez:
2old, what I did was buy a new smaller C: and kept the old C: as F:. I do keep all my data on F:. By the way how is that going "around his fist to get to his thumb", or did I forget to do that this time?
LOL, Just meaning you could have handled it a lot easier, I was being facetious, all in jest, I love to stir the pot to see what comes to the top..... Nothing personal.. Hang in there, Bro!
2oG
|
|
ddp
Moderator
|
18. August 2013 @ 17:46 |
Link to this message
|
|
2oldGeek, shit disturber!!!!
|
AfterDawn Addict
|
18. August 2013 @ 19:51 |
Link to this message
|
Originally posted by ddp:
2oldGeek, shit disturber!!!!
Yeah, I'm always pushing around a bucket of shit, with a short handle stick. LOOK OUT!!!
|
|
ddp
Moderator
|
18. August 2013 @ 20:00 |
Link to this message
|
|
wouldn't touch that with a 10 foot pole.
|
AfterDawn Addict
|
18. August 2013 @ 20:18 |
Link to this message
|
|
that's why I have an 11 foot pole... just for the things I wouldn't touch with a 10 Ft..
|
Senior Member
|
19. August 2013 @ 22:10 |
Link to this message
|
Originally posted by ddp:
wouldn't touch that with a 10 foot pole.
i was going to make a smartass remark here but i got distacted and lost my train of thought.happens more and more now.lol.
This message has been edited since posting. Last time this message was edited on 19. August 2013 @ 22:13
|
|
ddp
Moderator
|
19. August 2013 @ 22:37 |
Link to this message
|
|
must have been a lie. liar liar pants on fire!!!
|
AfterDawn Addict
|
21. August 2013 @ 12:02 |
Link to this message
|
|
No mas pantalones! Sad.. :(
|
|
Advertisement
|
|
|
Senior Member
|
23. August 2013 @ 11:52 |
Link to this message
|
Originally posted by 2oldGeek:
These days most of the Free software comes with a sh.t load of Foistware, even from the reputable company's. You have to be on your toes all of the time. Or download adwcleaner and run it every so often to clean up the Adware and Foistware.
2oG
I tried to give adwcleaner a shot, my norton keeps shitting it down, any suggestions?
|
