On Thu, Jan 10, 2013 at 10:30 AM, Drew Jensen <drewjensen.in...@gmail.com> wrote: > In actuality, no we don't know that, he might be describing a false > positive. >
If there is any uncertainty, send me the URL. I have VM's for Windows 2000-8 and can easily test any suspect download sites without risk of contamination. -Rob > > > > > On Thu, Jan 10, 2013 at 3:15 AM, Herbert Duerr <h...@apache.org> wrote: > >> Following up to myself with more details since we now know where the >> problem came from: >> >> On 09.01.2013 09:07, I wrote: >> >>> On 09.01.2013 02:36, james quayle wrote: >>> >>>> Hey, Just wanted to let you know that your program has a Trojan Horse >>>> attached to it. I downloaded your program, so that I could create a >>>> Powerpoint for school, and my security software informed me that there >>>> was a Trojan Horse attached to the Open Office files. Luckily my >>>> system protected my computer and blocked it immediately. So I then had >>>> to uninstall the program. It might be a great idea to fix that asap. >>>> Have a great day. >>>> >>> >>> [...] >>> As Peter wrote it would be interesting where you downloaded the infected >>> version from. Checking your browser's history is the easiest way to find >>> that out. >>> >> >> We now know where he downloaded it from. He got it from a place that >> bundles it with some adware named "optimum-installer". In their download >> page for OpenOffice they are not shy about it and document that: >> "XXX is distributing custom installers which are different from the >> originally available distribution. These new installers comply with the >> original software manufacturers’ policies and terms & conditions, however, >> they are not the originals. Optimum Installer is an install manager, which >> manages the installation of your chosen software. In addition to managing >> your download and installation, Optimum Installer will offer free popular >> software that you may be interested in. You are not required to install any >> additional software to complete your installation of your selected >> software. You can always completely remove the programs at any time in >> Windows’ Add/Remove Programs" >> >> The trojan horse alert of his security software was apparantly triggered >> by the adware they are bundling that is apparently quite nosy and >> communicative. >> >> >> http://www.openoffice.org/**download/index.html<http://www.openoffice.org/download/index.html>is >> the most reliable start >>> for downloading a clean copy of our favorite productivity suite. >>> >> >> This cannot be overstated. Please spread the word. >> >> Herbert >>