Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Alert

stealth malware

Jun 25, 2011 3:49AM PDT

I've found that too many of CNET's software downloads come with stealth malware that installs and runs without your knowledge on your computer. Some of it is quite disruptive and is resistant to ordinary uninstallation methods. I no longer trust CNET's advice on software. Apparently they don't check for these things.

Discussion is locked

- Collapse -
Stealth Malware?
Jun 25, 2011 4:20AM PDT

CNET's Download.com team scan all software titles they receive for viruses and spyware before offering them for downloads.

You say Stealth, but no details of what you have found, nor what scanners you used to find them.

We do on occasion see "False Positives" reported, but this happens with all anti-virus scanners at times. A comprehensive check at VirScan and Jotti's virus scan against a whole range of anti-virus scanners confirms the files are free of infection.

Stealth malware is a particular type of malware, and I am surprised that you find so many of this one group.

Mark

- Collapse -
Just for comparison.
Jun 25, 2011 4:25AM PDT

You could write that of any site so let's get to work.

Supply a title and link as well as what test to use to see the malware.

There is an open discussion about the non-malware OpenCandy, but that's an installer that some can't stand and not malware and does not install. But given it does not install (opencandy) I can imagine a new to this area investigator claim it is stealthy since they can't find it.

Bob

- Collapse -
reporting back with specifics...
Oct 7, 2011 2:58PM PDT

OK, download the free software utility used to view your wireless password key code. McAfee Security Center and Windows Defender (eventually) detect that it is attempting to install "Tool-PassView", a hacking tool used to display passwords stored in Windows Protected Storage (Pstore). I realize that is exactly what you need to do to see your (or anyone else's) wireless password, but if I get alerts, should I blindly trust that this software won't do anything else with my passwords? Doing so carries a risk that I'd rather not take. Why should CNET provide such software? Whether it's called "stealth" or not is irelevant. The user is unknowingly accepting candy from a stranger.

- Collapse -
Where are we with this?
Oct 8, 2011 6:32AM PDT

We're over 3 months after your initial post, but things seem to have moved on.

In your first post you said that CNET software downloads included stealth software.

Now you are saying that you downloaded a utility that views wireless password key codes. I would suggest that this is, indeed, a hacking tool, and as such that is why your anti-virus and anti-spyware scanners picked it up. Good job too.

I'm not sure what you expected.

Mark

- Collapse -
Done.
Oct 8, 2011 3:00PM PDT

Where are we with this? I stand corrected. It wasn't stealthware. It was spyware. I'm afraid the other problem I had trying to get rid of a pesky intruder that came with a download from CNET was so long ago I no longer remember what it was.

As for what I expected when I downloaded the wireless password viewer, I thought I'd get a handy way to keep track of my key code. I got that in the form of a hacking tool that set off two alarms on my computer and a rush of adrenoline in me that I didn't expect to get from using a CNET download. Maybe CNET could simply alert the user that installing the utility might trigger a spyware alert or two.