Alert: Open Candy will install in latest version of Foxit Reader Free

[CraigB]

As long as we've got this topic going, add this free tool to the list; formerly clean and good, now not:  ImgBurn latest version 2.5.8.0 now also has unwanted adware installs [PUP's] w/o your explicit consent.  And this file is direct from the vendor's site.

Next oldest version is clean:  2.5.7.0    Sometimes it doesn't pay to upgrade to a newer version; you can open your system to unknown/unexpected new risks when you do.

Also mentioned at FileHippo comments 8 months ago http://www.filehippo.com/download_imgburn/comments/

[polonus]

Hi mchain,

As the proverbial Mr. Scrooge is now chief of the board in many places and with many developers also - the actual amount of "crap to get money" will just grow.
The fabric is coming loose at the seams, I think. Look at what a sloppy site a big corp like Nividia is being hosted -> http://forum.avast.com/index.php?topic=146812.msg1065958#new 
Everybody wants those extra pennies, but at the same time wants to sit in the front row at minimal costs. One way or another you loose customers that way.
And in our example this is translated into dissatisfied users.

pol

[CraigB]

Off topic

Pol I don't see what an infected webpage has to do with adware included with installers

You also know as well as I do that any site can be hacked at any given time so I don't think I would go as far as to call NVidia sloppy, everyone including AV companies are always playing catch up to the malware guys.

[polonus]

Hi craigb,

The common denominator here is "trying to burn the candle from both ends". And to have a cheap and insecure hoster and earn additional money from bundled downloads has the same underlying ideology. In that respect the policy is the same and it is wrong. Of course bundling software with crapware to get extra money and sloppy IT managment to save on cost is not the same, but the underlying principle is - that was what I wanted to point out. One is taking a penny on the side and the other one is saving it not having security as a first priority. Apples and pears compared, you are right there,  but both "brown and putrid on the interior"  ,

polonus

P.S. Nividia was not sloppy, those admins that hosted their site were ignoring basic security practices to deliver a secure ASP.site (the very basics were ignored and this led to the compromise, also that more than one domain were being hosted on the same IP and not on a dedicated server.
Sucuri did not see an attacked site because of any site that could be hacked, but this site was insecurely hosted.
D

[CraigB]

P.S. Nividia was not sloppy, those admins that hosted their site were ignoring basic security practices to deliver a secure ASP.site (the very basics were ignored and this led to the compromise, also that more than one domain were being hosted on the same IP and not on a dedicated server.
Sucuri did not see an attacked site because of any site that could be hacked, but this site was insecurely hosted.
D

Thanks for the enlightenment

I liked your apples and pears comparison

[maugrimx]

since cdburnerxp installs opencandy, does someone have another burning software to recommend?

[polonus]

Hi maugrimx,

Use the installer that omits OpenCandy.
Read here how to avoid: http://notestoneunturned.blogspot.nl/2012/12/how-to-install-cdburnerxp-and-winscp.html
link article author Tony Austin

polonus

[maugrimx]

thanks, but i will not use any program from that developer anymore.

[polonus]

Hi maugrimx,

I can understand your mindset, "once bitten twice shy." That is how they are shooting themselves in the foot bundling what they think is just common innocent adware to earn a few bucks on the side. Later when these developers wake up to the real facts, and they realize they have been taken for a cheap ride, they will never ever even admit this. This crap is like sugar, at first sight it looks good and  tastes sweet, but all  it really is producing is decay in the aftermath!

polonus

[bob3160]

Unchecky takes care of a lot of these and the program gets better with each update.
It can't uncheck what's never pre checked and simply installed without warning.

[abruptum]

Opening the installer with 7-Zip and extracting the clean installer worked for me with Advanced Codecs.
Anyway,I don't use codec packs anymore.I install only codecs that I need.
I think we need a topic about "bad" installers where users can report about installers that install crap even if you
uncheck all the checkboxes.

[mchain]

Opening the installer with 7-Zip and extracting the clean installer worked for me with Advanced Codecs.
Anyway,I don't use codec packs anymore.I install only codecs that I need.
I think we need a topic about "bad" installers where users can report about installers that install crap even if you
uncheck all the checkboxes.

Agreed.  Sort of like the security update thread, eh?   

[polonus]

Hi mchain,

A posting to my heart, thank you,

Such a list can already be found here: http://discuss.howtogeek.com/t/the-official-htg-list-of-software-that-bundles-crapware/1892
Common Program Offenders, All Offenders, How to commit some crapware

Nice site link for those that do not like crap.junk and foistware: http://ninite.com/   Just pick your apps and click Get Installer.

polonus

[SpeedyPC]

@maugrimx,

You can still use CDBurnerXP without having OpenCandy all you have to do is just download Default installer (Without OpenCandy) from CDBurnerXP, I've been using CDBurnerXP for years without any issue and I don't have OpenCandy.

When you pick the downloads tab from CDBurnerXP website look for 'More download options' and select this link and it will take to this see screen below just choose the Default installer (Without OpenCandy) from CDBurnerXP.

[Hard_ROCKER]

I use AnyBurn. Very simple to use, no bundled crap. http://www.anyburn.com/