In actuality, no we don't know that, he might be describing a false positive.
On Thu, Jan 10, 2013 at 3:15 AM, Herbert Duerr <h...@apache.org> wrote: > Following up to myself with more details since we now know where the > problem came from: > > On 09.01.2013 09:07, I wrote: > >> On 09.01.2013 02:36, james quayle wrote: >> >>> Hey, Just wanted to let you know that your program has a Trojan Horse >>> attached to it. I downloaded your program, so that I could create a >>> Powerpoint for school, and my security software informed me that there >>> was a Trojan Horse attached to the Open Office files. Luckily my >>> system protected my computer and blocked it immediately. So I then had >>> to uninstall the program. It might be a great idea to fix that asap. >>> Have a great day. >>> >> >> [...] >> As Peter wrote it would be interesting where you downloaded the infected >> version from. Checking your browser's history is the easiest way to find >> that out. >> > > We now know where he downloaded it from. He got it from a place that > bundles it with some adware named "optimum-installer". In their download > page for OpenOffice they are not shy about it and document that: > "XXX is distributing custom installers which are different from the > originally available distribution. These new installers comply with the > original software manufacturers’ policies and terms & conditions, however, > they are not the originals. Optimum Installer is an install manager, which > manages the installation of your chosen software. In addition to managing > your download and installation, Optimum Installer will offer free popular > software that you may be interested in. You are not required to install any > additional software to complete your installation of your selected > software. You can always completely remove the programs at any time in > Windows’ Add/Remove Programs" > > The trojan horse alert of his security software was apparantly triggered > by the adware they are bundling that is apparently quite nosy and > communicative. > > > http://www.openoffice.org/**download/index.html<http://www.openoffice.org/download/index.html>is > the most reliable start >> for downloading a clean copy of our favorite productivity suite. >> > > This cannot be overstated. Please spread the word. > > Herbert >
