DonationCoder.com Forum

Main Area and Open Discussion => Living Room => Topic started by: Carol Haynes on April 24, 2014, 08:18 AM

Title: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on April 24, 2014, 08:18 AM
Really sad to say I won't be recommending ImgBurn any more - my go to app for disk burning.

Just downloaded the latest version and it is full of crap - and even if you take the long install route and deselect everything except ImgBurn it STILL install multiple crapware apps (including the very annoying Conduit SearchProtect).

Very sad development!

(PS that was the download direct from the ImgBurn server so no one else had added the crap)
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: mouser on April 24, 2014, 09:01 AM
Well that is really sad news if true -- ImgBurn has also been by go-to cd burning app for quite some time.  Maybe there is an alternative download or older version still available?

even if you take the long install route and deselect everything except ImgBurn it STILL install multiple crapware apps


This would be the deal killer for me.  If i have to be careful and take extra steps during installation, i can live with that -- and OpenCandy in the installer doesn't bother me -- but if it's true that it installs crapware with no way at all to skip it, that's a deal killer.  :(
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: ewemoa on April 24, 2014, 09:40 AM
I've been using the instructions at:

  http://www.portablefreeware.com/index.php?id=583

to end up with portable set ups -- not convenient, but perhaps a work-around?
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on April 24, 2014, 10:02 AM
Its a bugger - really cross about this.

When I was installing I was careful to choose all non-standard settings available but even so Malwarebytes went crazy during and after installation and I then found Conduit Search Protect in my system tray with no way to close it and the uninstaller is nothing like a full uninstall (it failed anyway - probably because of MBAM, but who knows).

I understand ImgBurn want to make some cash so why not charge $10 and make more profit and not piss off long term users!
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: MilesAhead on April 24, 2014, 10:24 AM
One good thing about http://www.videohelp.com
Even if the author no longer provides a download, videohelp usually still does:

http://www.videohelp.com/tools/ImgBurn/old-versions#download

It looks like is has Imgburn installers back to 1.0

also this:
http://www.videohelp.com/tools/DVD-Decrypter
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: 40hz on April 24, 2014, 11:20 AM
It's so out of character that I'm wondering if the dev sold it and the website to somebody else. Because what they're doing is utterly suicidal from a business perspective. :huh:
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: SeraphimLabs on April 24, 2014, 11:49 AM
Conduit SearchProtect is malware straight up.

If you let that get installed, you'll be hunting it for hours trying to get it out again.

It sounds to me like ImgBurn went the same way as Daemon Tools, sold out to backroom malware deals to try to make ends meet because the donation box wasn't keeping up.

This kind of thing is why I archive all of the software I use. That way I still have known good versions that have worked for me before in case I need them again.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Tuxman on April 24, 2014, 12:03 PM
The "free burning software" market seems to die out slowly.

On Windows, I currently use cdrtools (http://go.kblog.us/2012/12/cdrtools-cdrkit-for-windows-32-bit.html) (like InfraRecorder without the GUI clutter) from here (http://www.student.tugraz.at/thomas.plank/) (German site). Probably this is one of the very few future-safe options.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Stoic Joker on April 24, 2014, 12:53 PM
It looks like the latest version from ImgBurn's site - with the OpenCandy EULA - is v2.5.8.0 which is 3.30MB. This has the same release date and size as the v2.5.8.0 file at MilesAhead's VideoHelp link. So it appears that v2.5.7.0 (5.83MB) from MilesAhead's VideoHelp link is the last safe version to download.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Jibz on April 24, 2014, 01:07 PM
I've been updating ImgBurn through Ninite, and haven't noticed anything suspicious, but perhaps I just haven't looked close enough.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: superboyac on April 24, 2014, 01:52 PM
hmmm...first cdburnerxp and now imgburn too?  what's the deal?
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: x16wda on April 24, 2014, 06:20 PM
That's odd, I have installed 2.5.8.0 and it only had the normal OpenCandy crap. Nothing else hidden away, no Conduit or anything.

Presumably your installer file is different from the one I have.... which was also downloaded from the site when the older version prompted me to download.

  Size: 3,469,871
  Date: june 17 2013 8:20:23pm
  File: SetupImgBurn_2.5.8.0.exe
CRC-32: 00e8e0b2
   MD4: 2cba62e925b22077e7b1d1656fb6dc29
   MD5: 9685e1b00b7d1b31ede436bd9b12be39
 SHA-1: 5ca96a0c243390c378dee1a629684ea261e2cfc4

Any chance you have a DNS redirect going somehow?  The checksums on the download page at the site match my file.  Try re-downloading?
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on April 24, 2014, 07:37 PM
No the MD5 sums match the one I downloaded just now on the same computer (the original download was deleted).

Wonder if the installer was infected and they replaced it - I didn't have search protect appearing before I ran the original setup file and as soon as I double clicked it Malwarebytes went mad - it was definitely the installed direct from the ImgBurn server (I never use mirrors if I can avoid them)?

I unpacked it and can only see opencandy?

Just installed it again as an update and Malwarebytes blocked opencandy before installation and then it installed normally?

Strange.

Actually maybe they have random installers with different packages - I just looked at an old copy of 2.5.6.0 and that has the Ask Toolbar in the installer ???
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: mouser on April 24, 2014, 07:57 PM
That's odd, I have installed 2.5.8.0 and it only had the normal OpenCandy crap. Nothing else hidden away, no Conduit or anything.

Sometimes even the official web pages will redirect you to a site like cnet, which can bundle adware -- i know ccleaner has been known to do this (and offer an alternative less visible clean download alternative) -- maybe you ran into something like that, or enough people complained that they quickly changed the download.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on April 25, 2014, 03:24 AM
That would be very odd because the page and hashes must be generated according to where they are sending the download from. I definitely clicked the direct ImgBurn server link.

Just downloaded another copy this morning.

The download link was: http://download.imgburn.com/SetupImgBurn_2.5.8.0.exe

The file hashes matched those publish but it was a different file to the two files I downloaded yesterday. They must have a script that updates the page periodically and provides a range of different downloads. Yesterday morning I was unlucky and go SearchProtect bundled which is pretty scummy!
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Josh on April 25, 2014, 05:52 AM
I just installed imgburn and while I had to de-select the opencandy stuff, I do not have any "extra" things installed. I tested it with an installation monitor and the only files/folders created/installed were the imgburn files.

Windows 8.1.1 pro
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: techidave on April 25, 2014, 05:57 AM
I just last week downloaded the current version of ImgBurn from their servers.  I deselected the Conduit stuff.  I have noticed a problem with that machine but I better double check it to make sure.

As Carol said, this will be a deal killer for me too if they continue to add known malware to their installer.  Its bad enough that we have to put up with Open Candy.   :(
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Stoic Joker on April 25, 2014, 06:15 AM
That would be very odd because the page and hashes must be generated according to where they are sending the download from. I definitely clicked the direct ImgBurn server link.

Just downloaded another copy this morning.

The download link was: http://download.imgburn.com/SetupImgBurn_2.5.8.0.exe

The file hashes matched those publish but it was a different file to the two files I downloaded yesterday. They must have a script that updates the page periodically and provides a range of different downloads. Yesterday morning I was unlucky and go SearchProtect bundled which is pretty scummy!
-Carol Haynes (April 25, 2014, 03:24 AM)

The think I'm wondering is does OpenCandy come completely pre bundled with it's offers, or does it have a phone home on launch to see what's hot today type function? Option two would allow the size to remain consistent and the behavior to vary wildly.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on April 25, 2014, 06:42 AM
Not sure about OpenCandy but 7-zip will unpack the installer - and on three downloads in two days of the same version I have found three different things bundled inside the installer package plus OpenCandy. The one I downloaded today included the ASK Toolbar which is at best a pest and at worst malware.

I suppose it isn't impossible that OpenCandy itself is providing random crap on the system during install - but I thought it was supposed to always allow you to deselect things you don't want - so where did Conduit come from?
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Renegade on April 25, 2014, 11:01 AM
OC when I looked into it in depth is harmless.

https://cynic.me/2011/04/03/opening-up-opencandy/

You can opt out easily.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Stoic Joker on April 25, 2014, 12:54 PM
OC when I looked into it in depth is harmless.

https://cynic.me/2011/04/03/opening-up-opencandy/

You can opt out easily.

Indeed, and I don't believe that is being questioned (per se). But you article does confirm my suspicions above with this:
OpenCandy does not do that. What it does is to download a list of possible offers, then choose one of the offers and present it to a person during a software installation.

Therein lying the problem ... If the offer of the day doesn't decide to play nice with 'Let the user say no' rule then everybody else in the chain gets shit on. So we end up with a classic case of one asshole (in this case apparently Conduit Search), screwing it up for everybody (ImgBurn/OpenCandy/Us in general) because they insist on being sneaky with their shitware instead of creating a quality product that people actually want.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on April 25, 2014, 08:21 PM
As I understand OpenCandy (which isn't very well to be honest) any offer from OpenCandy should give you the option to opt out BEFORE the installer is run - if not what is the point of allowing an opt out.

Having said that ImgBurn are obviously bundling other crap in with their own installer on top of OpenCandy because I have found the Ask Toolbar included directly in ImgBurn installer direct from their own server. As far as I am concerned Ask toolbar is also crap ware. It hijacks your browser and as far as I am concerned that makes it an infection.

I have no idea and no way of knowing if Conduit came in ImgBurn's installer or was dumped on my system by OpenCandy - either way ImgBurn is ultimately to blame. Nowhere on their webpage does it say "we will lump into the installer some random crap to get us money and annoy the hell out of you".

If they need money to be viable charge for the product - currently it is described as freeware - but software that can screw up your system isn't free.

I don't know how much they get from OpenCandy and the other crap vendors but if they charged $2 a copy they would probably get more income and we would have a good product. Personally I would have happily payed $10 for this useful app.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Renegade on April 26, 2014, 08:56 AM
...any offer from OpenCandy should give you the option to opt out BEFORE the installer is run - if not what is the point of allowing an opt out.
-Carol Haynes (April 25, 2014, 08:21 PM)

Carol, that's simply impossible/unreasonable/impractical. You're effectively asking that before the code runs, code runs to let you opt out. You have to run the code in order to be able to opt out.

The only way to do what you're asking is to use multi-file installers, which is a really bad idea. It's pretty simple to uncheck a box as it is.

Check the blog post I did previously on OC. I walk through it pretty well and get deep into the code/traffic.

Has OC changed radically since I looked into it? I know their compliance officer quite well, and he's pretty vicious at keeping the nasty stuff out.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: 40hz on April 26, 2014, 10:50 AM
^
Ok. If that's the case, why not just ask people to opt-in by giving them an option to download and run Open Candy (or other bundleware) after the product they actually requested got installed?.

Oh. I see. They don't want to do it that way. Ok...got it. ;)

In fairness, I've seen some "free" products that state up front that they include Open Candy or other software with their installer. I have absolutely NO problem with anyone who does it that way. In fact, my respect for them goes up several notches because of their candor. What I don't respect is companies that try to slip things under the radar - and then get indignant when called out for doing so.
 8)
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: MilesAhead on April 26, 2014, 10:59 AM
^
Ok. If that's the case, why not just ask people to opt-in by giving them an option to download and run Open Candy (or other bundleware) after the product they actually requested got installed?.

Oh. I see. They don't want to do it that way. Ok...got it. ;)

Does it seem to you there's a time wasting theme with the web these days?  If there's one thing that frustrates me it's reading a whole list of features complete with screen shots and reviews, and there's no way to download the software on the page.  Or every button points me to some zip archiver I never heard of.

The Web seems to be saying "Yes, you can still get free software, bit it's gonna' cost you!'

Maybe it's all a scheme to boost tranquilizer sales?  :)
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on April 27, 2014, 04:03 AM
Carol, that's simply impossible/unreasonable/impractical. You're effectively asking that before the code runs, code runs to let you opt out. You have to run the code in order to be able to opt out.

I think you misunderstood - if I have to have OpenCandy try and foist crap on on me why can't Open Candy say to me - here is the crap we are offering ... do you want it?

To be honest I am not sure if Conduit came from OpenCandy (there was definitely no opt out option during installation in custom install mode - it wasn't mentioned anywhere except by Malwarebytes popping up hundreds of warnings) or directly within the package I downloaded.

At the end of the day it doesn't really matter to me how it arrived - the fact is it arrived and was bloody annoying. The only people to blame for that arrival was ImgBurn since one way or another it came from their installer. If they put it in the installation package then then are actually now distributing malware - if it came from OpenCandy without warning then ImgBurn is still to blame for making a pact with the devil!!

What really gets my blood boiling is that I have both donated to ImgBurn in the past and have recommended it widely to other people (and asked them to donate too). Now the finger is likely to point at me if those people's computers get infected when ImgBurn offers an update.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Renegade on April 27, 2014, 09:23 AM
Carol, that's simply impossible/unreasonable/impractical. You're effectively asking that before the code runs, code runs to let you opt out. You have to run the code in order to be able to opt out.

I think you misunderstood - if I have to have OpenCandy try and foist crap on on me why can't Open Candy say to me - here is the crap we are offering ... do you want it?

To be honest I am not sure if Conduit came from OpenCandy (there was definitely no opt out option during installation in custom install mode - it wasn't mentioned anywhere except by Malwarebytes popping up hundreds of warnings) or directly within the package I downloaded.

At the end of the day it doesn't really matter to me how it arrived - the fact is it arrived and was bloody annoying. The only people to blame for that arrival was ImgBurn since one way or another it came from their installer. If they put it in the installation package then then are actually now distributing malware - if it came from OpenCandy without warning then ImgBurn is still to blame for making a pact with the devil!!

What really gets my blood boiling is that I have both donated to ImgBurn in the past and have recommended it widely to other people (and asked them to donate too). Now the finger is likely to point at me if those people's computers get infected when ImgBurn offers an update.
-Carol Haynes (April 27, 2014, 04:03 AM)

Blaming OC is still off-mark.

What might have happened is that some software (not OC) was on your system and did the download/install. OC is an installer platform. If a company used OC to get on your computer, then went rogue, well... There you go.

I have a program with users that I could go rogue on. I won't. But I could. I'd have myself a nice little bot army. I just couldn't ever bring myself to be a douche like that though. Some people can.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on April 27, 2014, 05:13 PM
Sorry I didn't have Conduit on my system until I downloaded ImgBurn and installed it - as soon as the installer started MBAM went mad. My system is scanned regularly and was/is clean.

If you actually read what I said :

To be honest I am not sure if Conduit came from OpenCandy ...

At the end of the day it doesn't really matter to me how it arrived ... The only people to blame for that arrival was ImgBurn since one way or another it came from their installer.

Not sure how that equates to blaming OpenCandy - though I do think they are a scummy system specifically designed to confuse people.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: J-Mac on April 28, 2014, 01:16 PM
I happen to have two setups for ImgBurn on my computer, and the size difference is telling:

SetupImgBurn_2.5.0.0.exe       2.06 MB
SetupImgBurn_2.5.7.0.exe       5.83 MB

Sooo, I extracted the contents of both using UniExtract and found the following:

SetupImgBurn_2.5.0.0.exe

Installer for ImgBurn in the main folder, plus two subfolders, for Plugins and Sounds.
Plugins contains DLLs and images pertaining to ImgBurn only.


SetupImgBurn_2.5.7.0.exe

Main folder contains three subfolders: Install directory, Plugins directory, and Temp directory
Install directory contains a folder named Uniblue that has three files: DriverScanner, RegistryBooster, and SpeedUpMyPC.
Plugins directory contains ImgBurn DLLs and images plus Ask toolbar .ini and .bmp files
Temp directory contains ApnIC.dll, ApnStub.exe, and Apn Toolbar Installer.exe - all Ask Toolbar related.

So to me it appears that 2.5.0.0 was the last clean version of ImgBurn. I wouldn’t install any version released later than that.

BTW, 2.5.7.0 had no reference to OC within the installer package.

Jim
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: hamradio on April 28, 2014, 01:52 PM
Sounds like you not alone...

Here is a few of them...
http://forum.imgburn.com/index.php?/topic/22747-your-coercive-bloatware-vendor-just-lost-your-company-another-customer/
http://forum.imgburn.com/index.php?/topic/22749-disappointed-usermalware-issue/
http://forum.imgburn.com/index.php?/topic/22687-imgburn-installed-unremovable-malware-on-my-pc-without-an-op-out-option/
http://forum.imgburn.com/index.php?/topic/22609-option-to-opt-out-is-being-prevented-by-the-thrid-party-app/

As for that last topic the authors reply to the user...

I don't suppose you took a screenshot of that offer screen did you?

I have no way of knowing if I'll see the same one should I ever get offered that application.
-LIGHTNING UK!

If I was going to do something it would definitely not use a system that provides random offers not knowing what offers my product users might get offered to them for that very reason...  To me it would be like letting the fox guard the hen house.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: mwb1100 on April 28, 2014, 02:14 PM
Yup - one of the attributes of OpenCandy is that what it decides to offer to install is dynamically generated.  This made it difficult for me to run some tests to see if some anti-malware I was evaluating would be effective against Conduit Search Protect.  Most of the stuff I could find that installed Search Protect used OpenCandy, but when I wanted to test the Search Protect install, I'd only rarely get it "offered".  I eventually found something that had the Search Protect installer packaged with the software rather than as an OpenCandy offering (I forget what software that was).

Anyway, the point is that when OpenCandy is used, there's no telling what might be offered.

I will say that the OpenCandy offers did seem to always have an opt-out.  I still don't like it because the offers always seem to be for junk that no informed user would want.  OC offers an opt-out, but are relying on people to not understand what's happening. Also I wouldn't be at all surprised if even when OC offers an opt-out that some of the stuff installed via OC ('by permission') will install further junk that doesn't get an opt-out option.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: TaoPhoenix on April 28, 2014, 04:34 PM
What really gets my blood boiling is that I have both donated to ImgBurn in the past and have recommended it widely to other people (and asked them to donate too). Now the finger is likely to point at me if those people's computers get infected when ImgBurn offers an update.
-Carol Haynes (April 27, 2014, 04:03 AM)

This is a big problem - you come to know an item, recommend it a couple of times, then they pull these kinds of tricks. I'm pretty sure I've seen other threads like it recently.

Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: TaoPhoenix on April 28, 2014, 04:39 PM
I will say that the OpenCandy offers did seem to always have an opt-out.  I still don't like it because the offers always seem to be for junk that no informed user would want.  OC offers an opt-out, but are relying on people to not understand what's happening. Also I wouldn't be at all surprised if even when OC offers an opt-out that some of the stuff installed via OC ('by permission') will install further junk that doesn't get an opt-out option.

Oh oh! I know this one! We all played it in the 90's, that thing where you had to unclick buttons and not get wrecked! It was called Minefield!

http://en.wikipedia.org/wiki/File:Firefox_Multiple_mines.png

Dammit, it stopped being a game!
>:(
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: techidave on April 28, 2014, 05:19 PM
After reading the links that HamRadio posted, I have to wonder if the author of ImgBurn has even tried to download his own product to see what it actually does.  I don't know enough about Open Candy to know if it is "harmful" or not.  But I do know that Conduit and the other crapware can be extremely difficult to remove totally. 

And how can the author deny the claims that all these people are making about his install routine.  "Where there is smoke, there is fire"   :P  Maybe he should listen a little closer and check things out instead of arguing with everybody about all the "opt outs" that are there.

<rant done>
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Renegade on April 28, 2014, 08:27 PM
Yup - one of the attributes of OpenCandy is that what it decides to offer to install is dynamically generated.  This made it difficult for me to run some tests to see if some anti-malware I was evaluating would be effective against Conduit Search Protect.  Most of the stuff I could find that installed Search Protect used OpenCandy, but when I wanted to test the Search Protect install, I'd only rarely get it "offered".  I eventually found something that had the Search Protect installer packaged with the software rather than as an OpenCandy offering (I forget what software that was).

Anyway, the point is that when OpenCandy is used, there's no telling what might be offered.

I will say that the OpenCandy offers did seem to always have an opt-out.  I still don't like it because the offers always seem to be for junk that no informed user would want.  OC offers an opt-out, but are relying on people to not understand what's happening. Also I wouldn't be at all surprised if even when OC offers an opt-out that some of the stuff installed via OC ('by permission') will install further junk that doesn't get an opt-out option.

If you want to dig some into OC, all OC traffic is unencrypted, so you can use Wireshark to see exactly what is happening.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: J-Mac on April 28, 2014, 09:32 PM

If you want to dig some into OC, all OC traffic is unencrypted, so you can use Wireshark to see exactly what is happening.

Actually it doesn’t matter to me; I don’t want to see it in the first place!

If it is only on freeware, then I guess it is OK - in that case I'll just use something else. However all freeware I currently use I have made donation(s) to, so that does burn me up.

Jim
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: J-Mac on April 28, 2014, 09:58 PM
I will say that the OpenCandy offers did seem to always have an opt-out.  I still don't like it because the offers always seem to be for junk that no informed user would want.  OC offers an opt-out, but are relying on people to not understand what's happening. Also I wouldn't be at all surprised if even when OC offers an opt-out that some of the stuff installed via OC ('by permission') will install further junk that doesn't get an opt-out option.

Unfortunately those "opt-out" check boxes don’t always mean anything. I used Networx for some years until earlier this year. While installing the latest update I was confronted with the "option" to also install the AVG Toolbar along with some other AVG garbage - Rewards program and stuff. I declined all but after installation I discovered that all of the AVG crap had installed anyway. After much bitching and moaning to anyone I thought would care - Softperfect, AVG - the most I got was that either I mistakenly accepted the installation, or they might have made an "oops". I posted on the Networx forum after searching it and wondering why no one else had ever complained about this... right up until they deleted my thread and I realized that no complaints survived their moderation apparently.

So beware the opt-outs, as they're not always real.

Jim
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: 40hz on April 28, 2014, 10:30 PM
Maybe we should add "You can always opt out!" to the famous Three Greatest Lies in History list as the fourth?  ;) ;D
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: mwb1100 on April 28, 2014, 11:38 PM
If you want to dig some into OC, all OC traffic is unencrypted, so you can use Wireshark to see exactly what is happening.

I have no reason to doubt that.  But even in the non-technology world there are business practices that depend on deceiving people through small-print, difficult to comprehend legalese, or misleading (but technically true) claims.  I don't like those practices either.

I am certain that OpenCandy is used to get people to install unwanted software such as Conduit Search Protect and other packages that don't benefit the user in any way (and in fact are troublesome to users) - I've seen it happen myself. I can't think of an OpenCandy offer that made me think, "gee, what a great offer!". I suppose it may happen every now and then, but I suspect that it's pretty rare and might be non-existent.  Why would I have reason to be kind to OpenCandy?

Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on April 29, 2014, 06:37 AM
I will say it once again for clarity -

When had the initial install problem I went through custom install - I knew OpenCandy was going to be in there somewhere but I was also under the impression you could opt out.

I opted out of everything it was possible to opt of and there WAS ABSOLUTELY NO REFERENCE TO CONDUIT ANYWHERE but Conduit got installed. The installer came direct from ImgBurn's server not a mirror site.

Either OpenCandy has been hacked (and is now servicing stuff even it doesn't know about and what a great vector that would be for hackers), OpenCandy are lying and doing stuff that they explicitly say they don't do or ImgBurn is lying and doing something it says it isn't.

WHATEVER the reason in this instance the fault lie absolutely 100% at the door of IMGBURN

What developer with any brain would allow a third party bunch of scumbags to install anything along with their product without knowing in advance what is being offered?

I feel somewhat relieved that at least I am not alone in all this!! Having read the ImgBurn forum links above it is obvious that he doesn't care any more because he doesn't take what users say seriously.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Stoic Joker on April 29, 2014, 11:09 AM
Maybe we should add "You can always opt out!" to the famous Three Greatest Lies in History list as the fourth?  ;) ;D

Maybe we've heard different lists, But...

 :-\ ...I'm pretty sure that falls rather squarely under (I promise not to *** in your *****) lie # 3.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: 40hz on April 29, 2014, 12:55 PM
Maybe we should add "You can always opt out!" to the famous Three Greatest Lies in History list as the fourth?  ;) ;D

Maybe we've heard different lists, But...

 :-\ ...I'm pretty sure that falls rather squarely under (I promise not to *** in your *****) lie # 3.

Yep. That's the list. ;)
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Midnight Rambler on May 20, 2014, 09:46 AM
Although I use mainly CopyToDVD (http://www.vso-software.fr/products/copytodvd/copytodvd.php), ImgBurn has been in my DVD toolbox for a while now and have always downloaded it from http://www.filehippo.com/.  You'll notice that the site includes links to older versions of the programs.

UPDATE:  Just used ImgBurn 2.5.8.0 downloaded from filehippo to burn THE_CONJURING.ISO to DVD+R and the program worked fine as before.  Chose custom installation and simply rejected malware instal but still understand thread-starter's complaint.  Shouldn't have had to deselect anything.   
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: mikiem on May 20, 2014, 09:59 AM
I use 7-Zip to expand the SetupImgBurn_2.5.8.0.exe [or whatever version number], then move the file, ImgBurn.exe, to the ImgBurn folder -- update completed. Universal Extractor, original & mod versions, works too.

Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on May 20, 2014, 11:13 AM
I use 7-Zip to expand the SetupImgBurn_2.5.8.0.exe [or whatever version number], then move the file, ImgBurn.exe, to the ImgBurn folder -- update completed. Universal Extractor, original & mod versions, works too.

Fair enough but you shouldn't have to!
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: MikePerry on May 20, 2014, 11:34 AM
I'm using ImgBurn 2.5.1 - I've found the program is fully portable. I just go to the "Program Files" directory, copy the ImgBurn folder to a flash drive and move it to another computer. Then make a shortcut to the executable (either on the desktop or put it in the start menu) for ease of use. No install, no crapware... It's amazing how many programs are inherently portable.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: kgooch on May 20, 2014, 12:32 PM
I'm am using ImgBurn 2.5.8.0 3.389 KB and I have always used the custom install in any software I install. Having deselected the optional software, I get an install with only Imgburn as verified by Malwarebytes - no conduit, no malware of any sort.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: 40hz on May 20, 2014, 12:51 PM
@MikePerry & kgooch - glad to see you both posting your first comment in the forum after being members since 2010 and 2008 respectively.

Welcome! :)
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Tuxman on May 20, 2014, 02:20 PM
I wonder if they come from the ImgBurn forums to advertise here.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: mouser on May 20, 2014, 02:23 PM
From the posts we've seen now -- it sure seems like whatever Carol experienced was corrected, and that ImgBurn now just has some fairly standard adware/toolbar bundles stuff that you can opt out of, which is pretty common these days.  It just requires that you install it carefully and make sure to uncheck what you don't want.  Pretty small price to pay for a great app.

Let's just keep on top of this kind of thing and make sure the really bad stuff (that Carol reported earlier) does not sneak back in.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: CWuestefeld on May 20, 2014, 03:11 PM
When I'm dumping archival stuff onto optical discs (maybe backups of my photographs, or old audiobooks I'm done listening to), my workflow is to create an ISO image of the desired end disc first using ImgBurn. I then run that through DVDisaster to add PAR error recovery data onto the disc so future glitches can be recovered. Finally, I use ImgBurn to burn that ISO onto a real disc.

ImgBurn works really well in this flow because of how easily it (a) creates an ISO from an input list of folders/files; and (b) burns an ISO to disc.

Does anybody else know another tool that accomplishes those tasks as well?
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Tuxman on May 20, 2014, 03:12 PM
cdrtools?
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Renegade on May 20, 2014, 06:23 PM
Let's just keep on top of this kind of thing and make sure the really bad stuff (that Carol reported earlier) does not sneak back in.

The compliance officer at OC is a good friend of mine and I was talking with him the other day. He filled me in on some of the new tricks that some of the bad guys are doing. It's outright dirty. Here's one...

Some companies will instead of installing browser plugins or the like, they'll instead monitor all network traffic. They will then inject ads and the like into web pages as the traffic comes through... :O

These guys are really smart... It would be nice if they'd turn their attention away from the dark side and instead create solutions to help people.
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Loonier on May 21, 2014, 12:15 AM
Guess I got lucky... installed 2.5.8.0 from img site a while back, with appropriate 'deselecting', and - as far as I can tell - nothing untoward has been implanted. Probably will decline future updates, given what has been revealed here. That said, the prog does do its job well...
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Carol Haynes on May 21, 2014, 03:11 AM
it sure seems like whatever Carol experienced was corrected

We live in hope :-)
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: jsander on May 21, 2014, 11:33 AM
Yea this seems very similar to the Conduit malware. I followed this guide on how to remove conduit virus (http://malwaredoc.com/remove-conduit-virus/) and it took foreeevvverrrrr!!!
Title: Re: ImgBurn - full of OpenCandy and other crap
Post by: Teixeira on July 22, 2014, 06:06 AM
In addition to malwarebytes, I can recommend - Adwclenaer for things like Opencandy. manual removal is OK too (http://soft2secure.com/knowledgebase/opencandy)