You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@openoffice.apache.org by Herbert Duerr <hd...@apache.org> on 2013/01/10 09:15:31 UTC
Optimum installer (was: Open Office Impress, the "free power point")
Following up to myself with more details since we now know where the
problem came from:
On 09.01.2013 09:07, I wrote:
> On 09.01.2013 02:36, james quayle wrote:
>> Hey, Just wanted to let you know that your program has a Trojan Horse
>> attached to it. I downloaded your program, so that I could create a
>> Powerpoint for school, and my security software informed me that there
>> was a Trojan Horse attached to the Open Office files. Luckily my
>> system protected my computer and blocked it immediately. So I then had
>> to uninstall the program. It might be a great idea to fix that asap.
>> Have a great day.
>
> [...]
> As Peter wrote it would be interesting where you downloaded the infected
> version from. Checking your browser's history is the easiest way to find
> that out.
We now know where he downloaded it from. He got it from a place that
bundles it with some adware named "optimum-installer". In their download
page for OpenOffice they are not shy about it and document that:
"XXX is distributing custom installers which are different from the
originally available distribution. These new installers comply with the
original software manufacturers’ policies and terms & conditions,
however, they are not the originals. Optimum Installer is an install
manager, which manages the installation of your chosen software. In
addition to managing your download and installation, Optimum Installer
will offer free popular software that you may be interested in. You are
not required to install any additional software to complete your
installation of your selected software. You can always completely remove
the programs at any time in Windows’ Add/Remove Programs"
The trojan horse alert of his security software was apparantly triggered
by the adware they are bundling that is apparently quite nosy and
communicative.
> http://www.openoffice.org/download/index.html is the most reliable start
> for downloading a clean copy of our favorite productivity suite.
This cannot be overstated. Please spread the word.
Herbert
Re: Optimum installer (was: Open Office Impress, the "free power point")
Posted by Rob Weir <ro...@apache.org>.
On Thu, Jan 10, 2013 at 10:30 AM, Drew Jensen
<dr...@gmail.com> wrote:
> In actuality, no we don't know that, he might be describing a false
> positive.
>
If there is any uncertainty, send me the URL. I have VM's for Windows
2000-8 and can easily test any suspect download sites without risk of
contamination.
-Rob
>
>
>
>
> On Thu, Jan 10, 2013 at 3:15 AM, Herbert Duerr <hd...@apache.org> wrote:
>
>> Following up to myself with more details since we now know where the
>> problem came from:
>>
>> On 09.01.2013 09:07, I wrote:
>>
>>> On 09.01.2013 02:36, james quayle wrote:
>>>
>>>> Hey, Just wanted to let you know that your program has a Trojan Horse
>>>> attached to it. I downloaded your program, so that I could create a
>>>> Powerpoint for school, and my security software informed me that there
>>>> was a Trojan Horse attached to the Open Office files. Luckily my
>>>> system protected my computer and blocked it immediately. So I then had
>>>> to uninstall the program. It might be a great idea to fix that asap.
>>>> Have a great day.
>>>>
>>>
>>> [...]
>>> As Peter wrote it would be interesting where you downloaded the infected
>>> version from. Checking your browser's history is the easiest way to find
>>> that out.
>>>
>>
>> We now know where he downloaded it from. He got it from a place that
>> bundles it with some adware named "optimum-installer". In their download
>> page for OpenOffice they are not shy about it and document that:
>> "XXX is distributing custom installers which are different from the
>> originally available distribution. These new installers comply with the
>> original software manufacturers’ policies and terms & conditions, however,
>> they are not the originals. Optimum Installer is an install manager, which
>> manages the installation of your chosen software. In addition to managing
>> your download and installation, Optimum Installer will offer free popular
>> software that you may be interested in. You are not required to install any
>> additional software to complete your installation of your selected
>> software. You can always completely remove the programs at any time in
>> Windows’ Add/Remove Programs"
>>
>> The trojan horse alert of his security software was apparantly triggered
>> by the adware they are bundling that is apparently quite nosy and
>> communicative.
>>
>> http://www.openoffice.org/**download/index.html<http://www.openoffice.org/download/index.html>is the most reliable start
>>> for downloading a clean copy of our favorite productivity suite.
>>>
>>
>> This cannot be overstated. Please spread the word.
>>
>> Herbert
>>
Re: Optimum installer (was: Open Office Impress, the "free power point")
Posted by Drew Jensen <dr...@gmail.com>.
In actuality, no we don't know that, he might be describing a false
positive.
On Thu, Jan 10, 2013 at 3:15 AM, Herbert Duerr <hd...@apache.org> wrote:
> Following up to myself with more details since we now know where the
> problem came from:
>
> On 09.01.2013 09:07, I wrote:
>
>> On 09.01.2013 02:36, james quayle wrote:
>>
>>> Hey, Just wanted to let you know that your program has a Trojan Horse
>>> attached to it. I downloaded your program, so that I could create a
>>> Powerpoint for school, and my security software informed me that there
>>> was a Trojan Horse attached to the Open Office files. Luckily my
>>> system protected my computer and blocked it immediately. So I then had
>>> to uninstall the program. It might be a great idea to fix that asap.
>>> Have a great day.
>>>
>>
>> [...]
>> As Peter wrote it would be interesting where you downloaded the infected
>> version from. Checking your browser's history is the easiest way to find
>> that out.
>>
>
> We now know where he downloaded it from. He got it from a place that
> bundles it with some adware named "optimum-installer". In their download
> page for OpenOffice they are not shy about it and document that:
> "XXX is distributing custom installers which are different from the
> originally available distribution. These new installers comply with the
> original software manufacturers’ policies and terms & conditions, however,
> they are not the originals. Optimum Installer is an install manager, which
> manages the installation of your chosen software. In addition to managing
> your download and installation, Optimum Installer will offer free popular
> software that you may be interested in. You are not required to install any
> additional software to complete your installation of your selected
> software. You can always completely remove the programs at any time in
> Windows’ Add/Remove Programs"
>
> The trojan horse alert of his security software was apparantly triggered
> by the adware they are bundling that is apparently quite nosy and
> communicative.
>
> http://www.openoffice.org/**download/index.html<http://www.openoffice.org/download/index.html>is the most reliable start
>> for downloading a clean copy of our favorite productivity suite.
>>
>
> This cannot be overstated. Please spread the word.
>
> Herbert
>