Deceptive download sites

[whs]

There is a good article by Anand (HappyAndyK), the owner of the Windows Club, that describes which download sites to avoid and which ones to favor. I think it is worth reading and I like to share it with you.

http://www.thewindowsclub.com/safe-software-download-sites

 

[DavidE]

Thanks for the link Wolfgang.
There are a few recommended sites that I never used before.
I'll have to check them out and see what they have to offer.

 

[Layback Bear]

I have been using FileHippo and have noticed things have change. I will be look for another download site.

Thanks Wolfgang.

 

[DavidE]

My favorite is MajorGeeks and that's still recommended.
I use FileHippo when I'm looking for older versions, I don't know any other site that offers all the old versions.

 

[whs]

I use FileHippo when I'm looking for older versions, I don't know any other site that offers all the old versions.

That's a good point. But sometimes the newer stuff comes with crapware. If you watch out, that's not too bad but the untrained user may fall for it.

 

[Alejandro85]

The problem would be trivially solved by just using official downloads of everything instead of the so-called "alternative servers". Reality is that any third party site cannot offer security or even up-to-date versions of anything, while the real developer will always provide the best possible package (of course developers could choose to voluntarily infect their programs with anything, but that's another history).

In short, NEVER, EVER use ANY download site, for no reason, unless you want problems. In the best case it will provide the same original software, and can potentially infect your computer with anything they want.

The "portable programs are also an interesting alternative. If you're not forced to enter your admin password into an UAC box there is no chance of installing anything in the computer.

 

[whs]

The problem would be trivially solved by just using official downloads of everything instead of the so-called "alternative servers"

That is no solution either because the 'official sites' very often use 'download helpers' that give you the crapware.

 

[DavidE]

I've also seen where the "official downloads" from the software vendor often redirect to somewhere else, such as CNET for the download.

 

[Layback Bear]

I have seen the same thing David.

It seem to be a never ending battle just to get clean downloads.

 

[DavidE]

Yea, it's sad
The article linked by whs does say CNET now has "direct download links" (always)...
I used them years ago, but now close the window as soon as i get redirected there.
I'll have to play with that to see if it's true, and i can trust it...

For me, I spend the extra time testing, verifying, etc. any new downloads...

The problem I have is when someone I personally help asks me to help.
It may be a new PC, old PC (OS) with issues, i just never know.

It's getting to the point for me, I'd rather transfer my working, clean, and trusted installer from my PC to their PC.

:shock:

 

[Layback Bear]

I have found that the less people who know you can fix PC's the happier you will be.

 

[DavidE]

:roflmao:

I wish i had 3 brain cells

 

[whs]

:roflmao:

I wish i had 3 brain cells

You could be multitasking, LOL

 

[r00tb33r]

I have to say, SourceForce really took me by surprise when I was downloading FileZilla FTP client. Really does a disservice to the credibility of the site. I understand that they have to make money to host all those projects for free, but there "no-no" things out there, and bundleware downloaders/installers are one of those things.

 

[Shimshom]

besides always looking for the original download link if available I test all downloads on another computer before installing on my main one. Seems to save a lot of problems

 

[Callender]

We installed the top 10 apps from Download dot com

So here's a funny thing:

Here’s What Happens When You Install the Top 10 Download dot com Apps

The only issue that I have is - when using direct download links or going to the manufacturer's site to get the download - finding out that the software comes bundled with toolbars. I tend to scan any download link before downloading the file and scan the download once complete. Then monitor the install.

 

[andrew129260]

The "portable programs are also an interesting alternative. If you're not forced to enter your admin password into an UAC box there is no chance of installing anything in the computer.

I politely disagree, malware can easily bypass uac. And portable programs can still do damage. They are less of a risk though.

It is getting ridiculous that you need a tool like unchecky and virtual machines to prevent crap from installers and to test "new" software before installing it to see what will happen. This is why I am seriously considering moving to Linux soon, and having windows in a vm instead of the other way around. That way I can easily roll back the vm much quicker then a system image.

 

[whs]

This is why I am seriously considering moving to Linux soon, and having windows in a vm instead of the other way around. That way I can easily roll back the vm much quicker then a system image

If you have no special hardware that requires native support, that is a good idea.

 

[Alejandro85]

The "portable programs are also an interesting alternative. If you're not forced to enter your admin password into an UAC box there is no chance of installing anything in the computer.

I politely disagree, malware can easily bypass uac. And portable programs can still do damage. They are less of a risk though.

Good point and certainly true. UAC can be bypassed easily, but only at the default configuration, proper security settings can mitigate that bug (bug that MS knows and refuses to fix).
Portables can do damage, yes, very true, I was thinking in system-wide changes that are prevented so. BTW, that makes me remember this xkcd comic. There we have 2 extra mitigation measures, running with low integrity or run as another user so that programs lose access to our data, that UAC will of course not protect.
It could be an interesting discussion and a lot of options exist, but that's another history

 

[Layback Bear]

A little something I do.

When I decline the crapware, with pen and paper I wright down what was offered. When done with the downloads and scans I do a search for all the things that were offered just to make sure they didn't sneak in..

I have had some things sneak in even when I have declined them.
After my many scans I use regedit and Everything Search to hunt them down. I'm not going to build another computer just for testing and hunting down crapware before I install them on my other computers.