FREE Great Programs for Windows 7 [2]

MilesAhead said:

kado897 said:

mjf said:

First define a nasty. I can understand a large hosting site unwittingly hosting suspect installers but why would they inject "nasties" into an installer. I'm in no position to say it doesn't happen but it is a really dumb business practice if it does happen. If it can be shown then maybe we need a list of black banned hosting sites.

How-to Geek has been on a rant about it for some time. This is an example Yes, Every Freeware Download Site is Serving Crapware (Here?s the Proof)

Some can be easily removed with MBAM. But some installers contain Conduit along with other PUPs that interfere with notification tray icons. I ran into this with a download of PowerISO. Removing the crap was not fun. That inspired me to run TimeFreeze before trying any install. In the case of PowerISO a right click scan with MBAM showed it contained PUPs. But up to then I had only encountered fairly harmless ones. I installed anyway. Bad move. :)

Looks interesting.

I'm usually on the look-out for Apps for my wife and wanted her to try some that I thought would help, but after reading the permissions section of some of these apps, I'd tell her about them, but advise against using them.
Lets suppose for the sake of discussion that an App is the same as a Program, has anyone taken the time to view the Permissions section of the app you're about to install? Some of these permissions can be very disconcerting.

I can understand that because of the app's functions certain permissions are needed such as the mbam app, but why would Quicken, the second example send out emails without the users knowledge plus some of the other permissions that I highlighted in red; Does the Quicken app take pictures and record audio without your knowledge? If you turn it off does it read the Google service configuration and turn itself back on?
I can understand mbam needing to read, modify or delete the contents of your USB storage in case there is malware in the USB storage, but why does quicken have the same permission?

Both examples and links are from the google play store.

Malwarebytes Anti-Malware
Malwarebytes Free
Version 1.05.1.1000 can access:

Device & app history
retrieve running apps
read your Web bookmarks and history

SMS
receive text messages (SMS)

Photos/Media/Files
modify or delete the contents of your USB storage
read the contents of your USB storage

Device ID & call information
read phone status and identity

Other
prevent device from sleeping
full network access
control vibration
view network connections
close other apps
control Near Field Communication
modify system settings
run at startup

QuickBooks Online Intuit Inc
Free Version 3.9

Can access:
In-app purchases

Device & app history
retrieve running apps

Identity
find accounts on the device

Calendar
read calendar events plus confidential information
add or modify calendar events and send email to guests without owners' knowledge

Contacts
read your contacts
modify your contacts

Location
precise location (GPS and network-based)
approximate location (network-based)

Photos/Media/Files
modify or delete the contents of your USB storage
read the contents of your USB storage

Camera
take pictures and videos

Microphone
record audio

Wi-Fi connection information
view Wi-Fi connections

Device ID & call information
read phone status and identity

Other
receive data from Internet
full network access
view network connections
prevent device from sleeping
control vibration
modify system setting
read Google service configuration

Looks interesting.

I guess I never did submit it to this thread. A nice free tool:
ToolWiz TimeFreeze

I had stopped using it for a time. But the 2015 update is much improved.

mjf said:

Yes MBAM will pick installers with OpenCandy embedded. If it bothers you delete the installer and move on.
I'd be interested in an informed discussion. If it has become more devious I'd like to know and I'll steer clear of it.

Well it's become slightly more devious in that it now has a valid file signature and it used to be an unsigned file.

OCSetupHlp.dll

So in the past it could never run on my machine without a prompt to allow from my security software that detects all unsigned executables that attempt to run. Now it requires quarantining manually.

Admittedly it just offers to install other software but I still don't want it on my machine.

Hmm I gave up Desktop Earth - kept on dropping out so am now using the space site from here
WallpapersWide.com | Space HD Desktop Wallpapers for Widescreen, High Definition, Mobile | Page 1

Forgot my current favourite

Callender said:

Well it's become slightly more devious in that it now has a valid file signature and it used to be an unsigned file.

OCSetupHlp.dll

I'm not promoting OC in any way (!!!) but it used be well known that OCSetuphlp.dll would be stored in appdata. I thought it used to be automatically deleted after installation. Anyway I have the latest version of imgburn and this dll does not exist on my PC and I went looking for it after installation. If they gave it some signed obscure name then I'd get very suspicious.

I don't know if all installers with OpenCandy behave the same. Maybe some could present serious issues especially if it is some obscure piece of software. So I suppose when in doubt avoid OC.

mjf said:

Callender said:

Well it's become slightly more devious in that it now has a valid file signature and it used to be an unsigned file.

OCSetupHlp.dll

I'm not promoting OC in any way (!!!) but it used be well known that OCSetuphlp.dll would be stored in appdata. I thought it used to be automatically deleted after installation. Anyway I have the latest version of imgburn and this dll does not exist on my PC and I went looking for it after installation. If they gave it some signed obscure name then I'd get very suspicious.

I don't know if all installers with OpenCandy behave the same. Maybe some could present serious issues especially if it is some obscure piece of software. So I suppose when in doubt avoid OC.

Well as far as I know OCSetupHlp.dll runs under Task Host Processes (rundll32.exe) and runs only ftom a temp directory so in theory that file shouldn't be found once it has run.

Microsoft revised their virus/ malware definitions and the latest version of OCSetupHlp.dll gets a clean bill of health. Like you say - older versions could be problematic.