Spyware, viruses, & security forum: CNET TechTracker-Adware:Win32/opencandy

bhringer..

It would help to know which file/s it was, and where it was located. I suggest you open a support ticket with Microsoft. They will confirm (or deny) whether it's a false positive. You can do so here:

https://support.microsoftsecurityessentials.com/?scrx=1

Additionally, we have a CNET TechTracker Forum. Another member posted at the forum, stating MSE detected a couple of his files as Adware:Win32/opencandy.

I strongly urge you to open a ticket with the MSE Team, and have them analyze the file/s. There have been quite a few instances where MSE, detected Adware:Win32/opencandy in error. In the meantime, you can also upload the file to VirusTotal. It's a free online scanning service, which analyzes suspicious files. My guess would be, it's a false reading.

Let us know how you make out..
Carol

For the most part, when a file is submitted to VT (or VirSCAN, Jotti, etc) and only one or two A/V's consider them suspicious (out of 43), it leads to a false positive reading. Not always, but most of the time. These type services will make you aware of that fact.

VirSCAN for instance, writes "Some anti-virus engines may define the files you will upload as malware, but it may turn out to be a false positive."

With ALL of the above said, I don't mean to imply it is a false positive. Only that it could be.

I have made the "powers that be" at CNET, aware of MSE's detection of TechTracker as Adware:Win32/OpenCandy.

IF this does turn out to be a false positive, the MSE Team will not address/correct the issue, if they haven't been made aware of it. It's one of the reasons, I always submit a file to vendors, and suggest other's do the same.

And personally speaking on my end, I'm NOT a big fan of software which phones home, either. I first find out the facts. If I have a problem with the software, I uninstall it.

Hope this helps..
Carol

Hello TechTracker Users!

We've recently become aware of an issue with part of the TechTracker installer that is causing the software to be detected by some security applications as adware.

This error is caused by the inclusion of an OpenCandy offer for additional software that's part of our installer. We are working with our partners at OpenCandy on a resolution.

We take the privacy and security of our users very seriously and will provide additional information about this issue as it becomes available.

- CNET TechTracker Support

Anonymous. I disagree. It's best removed.

been fixed. Thanks for letting us know. I have forwarded this to the appropriate party to look into.

Thank you!
-Lee

On March 9, 2011, Cnet.Aaron said: " As I stated previously, we have worked with OpenCandy to address the issue of our installer being flagged as adware by some security software. We have also updated our installer so this will no longer occur."

Aaron is misleading people. I tried installing the new techtracker just now and AVG 2011 gave me the warning about OpenCandy. Three days earlier, I got the same warning from VIPRE at my work computer upon trying to install the new techtracker.

It is shameful that CNET's own software contains malware, but it is even more reprehensible that a CNET representative is trying to mislead users about its existence. More than two months since Aaron's reply - and CNET hasn't done a damn thing about this malware. Beyond ridiculous.

... rechristening it as Adware makes it all fine? Multiple antivirus programs are still flagging it as a threat - as of yesterday. And all you basically say is, "Deal with it!"
Your reasoning eludes me.

Hi suirauqa,

Thanks for taking to time to comment on the issue. Could you let us know what AV programs are reporting that it's a threat?

We try to monitor these situations very closely, and work with security software publishers on a daily basis to ensure we're up to date. We've reported the false positive to AVG, along with our partners at OpenCandy and expect a resolution shortly.

Any additional information you can provide to help us address the issue is greatly appreciated. Thanks again for taking the time to participate in the conversation.

Aaron Smith
Product Manager
CNET TechTracker

... I forgot AVG, which flagged OpenCandy in the installer in my home desktop PC.

Yes, ESET NOD32 thinks it is ADWARE.

There were 36 reported as of February 19,

http://cranialsoup.blogspot.com/2009/05/opencandy-new-kind-of-adwarespyware.html

It's not malware (today).

That it's a recent find and that many are being caught with this one. CutePDF which is a fav was found with it.

Let's see how long it takes for OpenCandy to be removed or fixed.
Bob