Is Super known to install any "extras" other than OpenCandy?

[brassplyer]

I see there's been a lot of discussion and angst regarding Super installing OpenCandy. As far as I can determine, it's benign Adware that makes product suggestions during the install process. Seems harmless enough if it means that what seems like a powerful app is free. OpenCandy actually has a pretty slick looking website, certainly doesn't give the impression that it's the result of some hacker from the Ukraine or the like.

Does anyone know of any actual malware or anything else that gets installed with "genuine" Super downloaded from the eRightsoft site?

[aedipuss]

the installer itself is clean. BUT it tries to download known malware during the install. every av program i've used has blocked the crap it tries to download. it's hard to know exactly what it is that is blocked as it uses a different name every time you try to download it but they are all blocked.

[brassplyer]

the installer itself is clean. BUT it tries to download known malware during the install. every av program i've used has blocked the crap it tries to download. it's hard to know exactly what it is that is blocked as it uses a different name every time you try to download it but they are all blocked.

Can you cite any documentation of this? Can you name any of the malware that a Super install from eRightsoft downloaded? Looking for more than just hearsay.

[aedipuss]

tried it myself don't have to prove it. it's crapware.

[brassplyer]

tried it myself don't have to prove it. it's crapware.

The whole point of the thread is to get specifics. Apparently you can't cite any specific malware you encountered because of Super? Was it a download you got directly from Erightsoft?

I'm not a cheerleader for eRightsoft, I'm trying to get facts. The only thing I've seen any verification of is installation of OpenCandy, though I notice eRightsoft doesn't mention it at all on their FAQ page for Super.

[aedipuss]

it is the super install program going onto the net and trying to download malware that is the problem. do you work to them or something???

[brassplyer]

it is the super install program going onto the net and trying to download malware that is the problem. do you work to them or something???

I'm a user trying to get to the bottom of the Super/Malware issue.

So far you've said nothing indicating you know this for a fact. You can't cite any actual Malware installed by super, point to any code within the app that does this. What I've read is that supposedly Super only contacts the web to check for updates. I'm looking for someone who can factually refute or substantiate this. It doesn't appear you're that someone.

[aedipuss]

mainly because i don't allow it to install the virus/trojan it tries to download during it's install. no acceptable/normal program would change it's name every time it's downloaded, but that is what whatever super tries to download and install does. how hard is that to understand?

still looking like you are a super shill.

[brassplyer]

mainly because i don't allow it to install the virus/trojan it tries to download during it's install. no acceptable/normal program would change it's name every time it's downloaded, but that is what whatever super tries to download and install does. how hard is that to understand?

still looking like you are a super shill.

What I got an alert on when installing it was OpenCandy.

still looking like you are a super shill

*snore*

[aedipuss]

whatever. it's a piece of shit program that installs some backdoor crap.

the www.erightsoft.com is on a godaddy server but the malware it installs isn't. hope you enjoy it.

[jman98]

brassplyer - A guy with over 5000 posts here said he feels that Super is malware. A rational person might conclude "Hmm... maybe I need to be concerned here." Why are you married to it? Do you not know that other programs can do what it does? It seems that through ignorance or malfeasance Super is written to set off a boatload of anti-virus and malware alarms. You even admit that it installs something (Open Candy) that you hope is benign, but it does so with no mention on the website. Frankly nobody cares if you screw up your PC or not and I've got better things to do than justify what you want to do. Install it. I don't care. If all those strange things about it don't make you uneasy then nothing will stop you. Install it and stop wasting our time.

[chowmein]

I agree with you guys of course, but... why? Why does it do this? I think that's an important question.

[aedipuss]

here's the best description of "open candy" i have found.

Adware.OpenCandy is a malicious keylogger program that can capture all user keystrokes including confidential details such username, password, credit card number, etc. Adware.OpenCandy is designed to open a large security loophole through which hundreds of malicious adware and spyware can be piped to your machine.

[brassplyer]

brassplyer - A guy with over 5000 posts here said he feels that Super is malware.

Citation? However many posts someone has made is by itself no indication of their knowledge. I'm not interested in what someone "feels" I'm interested in what facts someone can cite.

A rational person might conclude "Hmm... maybe I need to be concerned here."

A rational person would look into it and ask if anyone can cite specifics. This same rational person would want people to reply with facts, links, technical info not just rumors or what "some guy" says. Apparently no one who's seen this so far is able to do this.

You even admit that it installs something (Open Candy)

Admit? I wasn't aware I was under interrogation. I noted that it installs OpenCandy. This by itself doesn't seem to be a big deal if in fact it just makes product suggestions during the app's install. I've seen nothing to suggest otherwise. If you *know* otherwise feel free to make factual commentary.

stop wasting our time.

Your "time wastage" is entirely voluntary. You weren't obligated to read the thread nor take up bandwidth adding non-informative spew.

[aedipuss]

brassplyer - A guy with over 5000 posts here said he feels that Super is malware.

Citation? However many posts someone has made is by itself no indication of their knowledge. I'm not interested in what someone "feels" I'm interested in what facts someone can cite.

A rational person might conclude "Hmm... maybe I need to be concerned here."

A rational person would look into it and ask if anyone can cite specifics. This same rational person would want people to reply with facts, links, technical info not just rumors or what "some guy" says. Apparently no one who's seen this so far is able to do this.

You even admit that it installs something (Open Candy)

Admit? I wasn't aware I was under interrogation. I noted that it installs OpenCandy. This by itself doesn't seem to be a big deal if in fact it just makes product suggestions during the app's install. I've seen nothing to suggest otherwise. If you *know* otherwise feel free to make factual commentary.

stop wasting our time.

Your "time wastage" is entirely voluntary. You weren't obligated to read the thread nor take up bandwidth adding non-informative spew.

if you want to install it feel free. it's not a program i would go advising anyone else to or they may end up shooting you.

[SingSing]

You two should meet and get physical. For the rest of us, yawn...

[brassplyer]

You two should meet and get physical. For the rest of us, yawn...

Things would be fine if people would restrict their responses to what was asked for - factual input instead of wasting bandwidth trying to play Netkop or assume some ridiculous ulterior motive.

[hech54]

I use an OLD version of Super for emergencies. There are times when I need it but for the life of me I cannot remember in which scenario I need(ed) it.

[brassplyer]

I use an OLD version of Super for emergencies. There are times when I need it but for the life of me I cannot remember in which scenario I need(ed) it.

The thing is, when I've used it before, it worked really well. I don't know that I've seen a more comprehensive converter even among paid apps I've looked at.

Since I've recently done a fresh XP install, I wanted to get to the bottom of this issue regarding whether it's actually connected to malware or if it's a lot of speculation and rumor. I never seem to see any specifics cited.

[Khalua]

FYI - SUPER doesn't install any malware. You can read more about OpenCandy here and some info on the McAfee forums here.

Adware-OpenCandy.dll is a low-risk Adware library called OCSetupHlp.dll that is bundled with several third-party installers and placed in a temporary folder on the user's system. The ditially-signed library obtains and transmits certain non-personally-identifiable information to OpenCandy servers in order to deliver additional, unrelated installs to the user. The actions occur without user knowledge or consent and the library is usually deleted once the host installation is complete although it is sometimes left behind under certain installation scenarios. Some installers show an OpenCandy End User License Agreement after the data transmission has occurred. The additional software supplied by the use of the OpenCandy library can help offset the cost of the host software to the user.

[hech54]

I don't know that I've seen a more comprehensive converter even among paid apps I've looked at.

Now I remember. I used to use it for converting the odd YouTube video(FLV files) to something editable until Baldrick suggested using ffmpeg - WinFF. Now that WinFF has saved the day(I already used it for my iPod videos) I doubt I will be using Super again any time soon. Super was never known for "quality" conversions....but it does swallow up most "bastard" formats like FLV. (Yes FLV is very prevalent but it is still a dead-end format since it is very difficult to work with without quite a bit of video knowledge). I have Build 37 on my system. Never upgraded, never will.

[aedipuss]

information to OpenCandy servers in order to deliver additional, unrelated installs to the user. The actions occur without user knowledge or consent

pretty much the definition of malware.

[aedipuss]

fine i went back in my logs for your demanded "proof". wtf did you think i made it up?

[TreeTops]

Brassplyer may be the same person that tried to argue with me when I said that Super was installing malware many months ago.

[brassplyer]

fine i went back in my logs for your demanded "proof". wtf did you think i made it up?


[Attachment 8803 - Click to enlarge]

You were unable to cite specifics. For that matter, if you're now saying this came bundled with Super you're contradicting your earlier assertion that the installer is clean. And I still don't know that your installation is direct from eRightsoft which I specifically asked about previously, not a hacked install from elsewhere which I understand happens all the time. Did you get the install from eRightSoft's site or you don't remember?

Brassplyer may be the same person that tried to argue with me when I said that Super was installing malware many months ago.

Nope, wasn't me. I'm not arguing anything, I'm just looking for something besides hearsay.

Some things I've found since first posting that don't cause me to look positively on eRightsoft. Their FAQ page regarding Super says their installer is malware free. It doesn't say a word about OpenCandy. While OpenCandy may not be malware per se, in the interest of disclosure they should say something about it. On principle I don't have a problem with there being adware that comes up during install - I think most people would understand "these brief commercials are how we're able to offer this app for free". But there's nothing about adware anywhere on the page. Seems obvious to me that there should be.

Further it claims that Norton's Safeweb site supports the non-malware claim and provides a link to Norton summary page. Thing is, the page is about the eRightsoft site, not about the Super app itself. Very deceptive wording.

There's a link to a forum for Super but this forum is non-existent. Brings up a load clock which loads forever.

Additionally, when I tried to send an email to one of the addresses on the contact page to ask why OpenCandy isn't mentioned, it bounced back as undeliverable. I've since tried sending to another of the addresses, will see what happens.

--follow up--

Second email came back as undeliverable. In fact, none of the email addresses listed under "Contact" are valid.

[aedipuss]

like i mentioned before, the current installer itself is clean, if you look at the version numbers in my logs you'll see the logs are of older versions and used to include the malware in the installer. now the malware is downloaded separately during the install and if you block the malware super refuses to install. i don't have records of the new version's infections because they never happened as they were blocked before installing. but once i saw the downloads were using ever changing names to try to avoid a/v detection for the new versions i knew super smelled funny.

i went back to try to find a clean older version after trying the most current ones that use the download malware act. that is when the all the older versions i downloaded showed malware included in the installer. i gave up after a couple.

all versions were downloaded from the tools sections here.

the only thing i hope is no one gets the false impression super is malware free. once you click ok to allowing it on your system they own you and can install and run anything without your permission.

[brassplyer]

Re: the log you showed a screenshot of

[Attachment 8803 - Click to enlarge]

This shows PWS-SpyEye!env.a being in the setup folder, but you say it's not part of the Super installer. Can you clarify this? Why is it in the Super folder if it's not part of Super's setup?

[Baldrick]

Why is this under software playing? Moving to general forum

More and more installers use opencandy. Even open source software like mediainfo but they mention it at least.

[brassplyer]

Why is this under software playing?

I think I may have just inadvertently clicked on the wrong forum.

More and more installers use opencandy. Even open source software like mediainfo but they mention it at least.

They don't just not mention it, they lie about it - the weasel wording, referencing a pointless "safe web report" that doesn't address the app in question and failure to explicitly address OpenCandy when the topic of adware comes up adds up to a lie in my book.

[aedipuss]

Re: the log you showed a screenshot of

[Attachment 8803 - Click to enlarge]

This shows PWS-SpyEye!env.a being in the setup folder, but you say it's not part of the Super installer. Can you clarify this? Why is it in the Super folder if it's not part of Super's setup?

honestly i don't recall, it was months ago i tried to get a clean install of super to try it for the first time. it looks like the installer put the malware there with that name to hide it. it may have been one of the older versions of super. i don't think i'll try to reproduce it though...