topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Tuesday March 19, 2024, 1:49 am
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: NCH Software - "There Be Dragons"  (Read 5203 times)

IainB

  • Supporting Member
  • Joined in 2008
  • **
  • Posts: 7,540
  • @Slartibartfarst
    • View Profile
    • Read more about this member.
    • Donate to Member
NCH Software - "There Be Dragons"
« on: September 07, 2012, 08:33 AM »
This is a new post following on from the discussion kicked off by @kartal on « on: 2010-01-06, 15:58:54 », Nch Software
I had been trialling some NCH Software over the last few weeks, and noticed that they sometimes seemed to do what I think can best be described as a complex "Trojan bait-and-switch". This is stuff which would probably be illegal in some countries, but perhaps not in the US or Germany - which seem to be a couple of the locations that NCHS websites route you to.

This had started because I got a free licence to something - NCHS Doxillion a "Document Converter" (probably via Bits-du-jour), that appears to do nothing much that you can't already do with existing software. That is, it apparently adds no value to anything. Doxillion invited me to try some other "free" stuff to expand its functionality, which invite I accepted, and I rapidly found I was getting additional software installed that had limited free functionality and was actually nagware - you had to pay money to enable any of its useful features. So it seemed to be a classic "Trojan bait-and-switch" scam, with Doxillion as the Trojan.

I therefore rapidly uninstalled the nagware bits using Revo Uninstaller on it's "Advanced" setting, and ringfenced Doxillion like a virus, thinking about investigating it, and then fell very ill with the flu (just getting over it now), so did nothing for a couple of weeks meanwhile.
Today I downloaded something called "Clover 2" (a tabbed Windows Explorer replacement with a Chrome-like interface), which I had read about, and which, on googling, I saw had for several months been pushed by some websites as worth looking at. So it could be interesting.
It installed no probs and seemed to be legit. I kept it isolated behind my firewall and didn't let it phone home until it seemed to want to legitimately check for a version update. It came from a Chinese or Korean website, which had an English page: http://ejie.me/clover-wings-for-explorer. That's just one of the links - it seemed to have several different sites/links/routes to get to the same thing, so my alarm bells were ringing.

I should say here that I don't need a Windows Explorer replacement - I already have a superb one (xplorer²). I was looking at Clover 2 purely out of interest in that type of software.

Anyway, when I used Clover 2 to open a compressed file, it said I needed an "external component" and asked permission to download it. I OK'd that and let it through the firewall, and then, quick as a flash it had downloaded and installed "Express Zip" from NCHS, which promptly started to do the old "bait-and-switch" and nag/ask for money scam thing. So this was a "Trojan bait-and-switch" scam, where Clover 2 was the Trojan.

Therefore, using Revo Uninstaller, I have just uninstalled:
  • Clover 2
  • Express Zip
  • Doxillion

My recommendation is that the NCHS website should be listed as a highly dubious scam site.
To protect myself in future, I shall see about getting it into my Malwarebytes blacklist, so it protects me in real-time browse mode. That way, any software like Clover 2 will have its call intercepted and blocked when attempting to hand me across to the scam site address.

Be warned: NCH Software - "There Be Dragons"
« Last Edit: September 07, 2012, 10:11 AM by IainB, Reason: Minor corrections. »

TaoPhoenix

  • Supporting Member
  • Joined in 2011
  • **
  • Posts: 4,642
    • View Profile
    • Donate to Member
Re: NCH Software - "There Be Dragons"
« Reply #1 on: September 07, 2012, 09:15 AM »
I'm not sure that's precisely illegal (here in the US), though it certainly qualifies as MeanWare.

I think the crowd here generally prefers "sane and simple" software, (even if it's a big application), but more and more "app developers" are trying those types of tricks. Personally, I get leery of "X needs a component" *without telling you what the component is*. (Because otherwise you'd check up on it on the net and see what would have happened.)

Renegade

  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 13,288
  • Tell me something you don't know...
    • View Profile
    • Renegade Minds
    • Donate to Member
Re: NCH Software - "There Be Dragons"
« Reply #2 on: September 07, 2012, 09:24 AM »
They used to sell software components. Doesn't look like they have them available anymore.
Slow Down Music - Where I commit thought crimes...

Freedom is the right to be wrong, not the right to do wrong. - John Diefenbaker

40hz

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 11,857
    • View Profile
    • Donate to Member
Re: NCH Software - "There Be Dragons"
« Reply #3 on: September 07, 2012, 10:26 AM »
I've heard several complaints from clients about NCH software products lately for reasons much like those above. Very annoying. Right up there with the idiots who bundle the Funmoods Toolbar  >:( (a browser hijacker) in with their products.

Carol Haynes

  • Waffles for England (patent pending)
  • Global Moderator
  • Joined in 2005
  • *****
  • Posts: 8,066
    • View Profile
    • Donate to Member
Re: NCH Software - "There Be Dragons"
« Reply #4 on: September 07, 2012, 12:43 PM »
Just curious has NCH been bought out by some scummy company or have they just fallen in the mire? They used to produce some good stuff.

IainB

  • Supporting Member
  • Joined in 2008
  • **
  • Posts: 7,540
  • @Slartibartfarst
    • View Profile
    • Read more about this member.
    • Donate to Member
Re: NCH Software - "There Be Dragons"
« Reply #5 on: September 07, 2012, 06:30 PM »
Just curious has NCH been bought out by some scummy company or have they just fallen in the mire? They used to produce some good stuff.
Not sure about their commercial structure/status. I only gave their WHOIS info a cursory once-over, and their registration details didn't seem to have been changed overly much recently.
In any event, a website doesn't get to become an efficient scam site like this by accident or by degrees. It would have to be by design, and thus deliberate and intentional. Probably been like that a relatively long time.