download.com # 3 product possible malware download

[acr]

I posted this over at wilderssecurity.com but figured I would post here too since this software is the current #3 download on download.com with some 700,000 weekly downloads (at least that's what the stats say). You Tube Downloader 2.6.1 upon install calls a site flagged by hphosts as a malware distribution site. The call is for download of the toolbar mybrowserbar. There are numerpus complaints on download.com about this software but the complaints seem to have fallen on deaf ears. Anyway, I was able to see the malware call by using joebox.org. If anyone has any comments on this software or installs as a test for its malware activity please make a post with pictures. Thanks.

http://www.wilderssecurity.com/showthread.php?t=281697

[adam_993]

Wow! I can't believe!

[JayCub]

Thanks for the heads up acr i read your post on wilders security, it's not one i would have ever thought about using/downloading but the post was an interesting read.. good to see folks that have their head screwed on and willing to share their knowledge among the community...

[leofelix]

Thank you for the warning acr
I'm not surprised, this is not the first time I see infected software at download.com.
I think that toolbar is "mywebsearch" which is actually malware.
Usually I report adware or other malware at the Calendar of Updates.

[acr]

Thanks all. I made a post on the cnet forum as well as emailed download.com. We'll see if they respond but so far nothing. I think the software is able to circumvent the on demand scanners because the toolbar / spyware is downloaded from mybrowserbar.com and is not part of the initial install.

[FunkY]

Not use that program but still good to know. Thanks acr

[Ande]

Another good reason to stay away from download.com. Almost everything they have is available at one of the other major (pun!) download sites.

[acr]

Getting some attention-
http://forums.cnet.com/5208-6132_102-0.html?messageID=3372794&tag=forum-w;forums06#3372794

[leofelix]

@ acr: excellent move

[luffy]

What is the diff between joebox and virustotal?