Following up to myself with more details since we now know where the
problem came from:
On 09.01.2013 09:07, I wrote:
On 09.01.2013 02:36, james quayle wrote:
Hey, Just wanted to let you know that your program has a Trojan Horse
attached to it. I downloaded your program, so that I could create a
Powerpoint for school, and my security software informed me that there
was a Trojan Horse attached to the Open Office files. Luckily my
system protected my computer and blocked it immediately. So I then had
to uninstall the program. It might be a great idea to fix that asap.
Have a great day.
[...]
As Peter wrote it would be interesting where you downloaded the infected
version from. Checking your browser's history is the easiest way to find
that out.
We now know where he downloaded it from. He got it from a place that
bundles it with some adware named "optimum-installer". In their download
page for OpenOffice they are not shy about it and document that:
"XXX is distributing custom installers which are different from the
originally available distribution. These new installers comply with the
original software manufacturers’ policies and terms & conditions,
however, they are not the originals. Optimum Installer is an install
manager, which manages the installation of your chosen software. In
addition to managing your download and installation, Optimum Installer
will offer free popular software that you may be interested in. You are
not required to install any additional software to complete your
installation of your selected software. You can always completely remove
the programs at any time in Windows’ Add/Remove Programs"
The trojan horse alert of his security software was apparantly triggered
by the adware they are bundling that is apparently quite nosy and
communicative.
http://www.openoffice.org/download/index.html is the most reliable start
for downloading a clean copy of our favorite productivity suite.
This cannot be overstated. Please spread the word.
Herbert
