WARNING!!! Virus/Trojan/Adware alert with FormatFactory!
I just installed FormatFactory v2.20 (install file name FFSetup220.zip).
As the proggy was installing, my MS Security Essentials caught and quarantined a Trojan Notifier
It was in file:C:\Temp\nsw95.tmp\eBay.exeInterestingly, this indicates that MSSE had not detected the Trojan in the install file - even though it had inspected it on download - but only after the install file had been expanded into C:\Temp
reported that askchecker.exe was requesting access to the Internet. I blocked it.
ZoneAlarm then reported other ask-related proggies requesting access, and I blocked them too.Process Explorer
showed that Ask-related processes were running and had been loaded from C:\temp.
When I checked C:\Temp, I saw all sorts of Ask-related excrement - folders and files, including a file called ASKSUTBLOG (no file extension) size 451.7Kb. The latter was the install log of Ask Toolbar.msi.
The log file shows that ASK had installed and propogated itself all over the place - including C:\Program Files and my Firefox and Chrome browsers (as toolbars).
From the above, it is clear that the Trojan and the Ask Toolbar.msi must have been bundled in the FormatFactory install file.
The Trojan is bad enough, but the ASK.com deliberately forced and silent install really annoys me. The fact that the FormatFactory developers have deliberately buried these parasites in their program's install file - without warning or option for the user - annoys me even more. I now already dislike the FormatFactory product without even having tried it, and could not recommend it without major caveats.
I used RevoUninstaller to expunge ASK.com from my laptop. This is the 2nd or third time this year that I have had to remove ASK.com from my and other peoples' PCs. It takes time to do that, and it's a waste of my time. More annoyance.Question:
Does anyone know how it might be possible to block the Trojan and the ASK.com adware before it gets through the gates? Update:
- The file FFSetup220.zip file size exceeded the limit for uploading to Virus Total (so it could not be checked).
- After clearing ASK.com out, I tried Format Factory out once only and can state that it seems to work OK, but it does not appear to have any better/different compression than IWiSoft video converter - which appears to be trouble free, unlike Format Factory.