Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Is this Malware, Spyware, or what did I install?

R

rich1000

macrumors newbie
Original poster
Sep 28, 2009
3
0
I was trying to download Cyberduck.. an FTP and Cloud Files Browser. I did a quick search in Google, and came up top of the list to this link on Softonic:
http://cyberduck.en.softonic.com/mac

If you proceed to download what it purports to be Cyberduck, it downloads a Diskimage file (called Cyberduck), it provides an installer (doesn't not request admin privileges), and then asks to basically take over your browser search bar. You can say decline. And it asks to install "Save N Keep" plugin. I accidentally said yes to this (thinking all this was normal for Cyberduck).

I realized then that Cyberduck never installed. I also found this "SavenKeep" in ALL my browsers as a plugin: Chrome, Safari, and Firefox.

I also noticed in Chrome trying to go to a normal site that it was hanging on trying to access something thru the URL: http://content.magnipic.info

I've removed all of the plugins, but now wonder WHAT THE HELL DID IT DO TO MY MACHINE?

I'm concerned and might want to format my machine, and revert to an earlier version of my computer prior to this install.

First, does ANYONE know what this plugin is? I can't find anything about it.

Second, why the hell would Softonic not catch something like this being available? I like how they claim "Safe Download" and "Virus Free" from Softonic. Such BS.

Lastly, is anyone interested in investigating what that installer is actually doing?
 
rich1000 said:
I was trying to download Cyberduck.. an FTP and Cloud Files Browser. I did a quick search in Google, and came up top of the list to this link on Softonic:
http://cyberduck.en.softonic.com/mac

If you proceed to download what it purports to be Cyberduck, it downloads a Diskimage file (called Cyberduck), it provides an installer (doesn't not request admin privileges), and then asks to basically take over your browser search bar. You can say decline. And it asks to install "Save N Keep" plugin. I accidentally said yes to this (thinking all this was normal for Cyberduck).

I realized then that Cyberduck never installed. I also found this "SavenKeep" in ALL my browsers as a plugin: Chrome, Safari, and Firefox.

I also noticed in Chrome trying to go to a normal site that it was hanging on trying to access something thru the URL: http://content.magnipic.info

I've removed all of the plugins, but now wonder WHAT THE HELL DID IT DO TO MY MACHINE?

I'm concerned and might want to format my machine, and revert to an earlier version of my computer prior to this install.

First, does ANYONE know what this plugin is? I can't find anything about it.

Second, why the hell would Softonic not catch something like this being available? I like how they claim "Safe Download" and "Virus Free" from Softonic. Such BS.

Lastly, is anyone interested in investigating what that installer is actually doing?
Click to expand...

I found this about Softonic.
 
Glad I don't download crapware or malware from dubious sites like Softonic.

You may need to re-install from a backup as these things can stick into nasty places and you never know what else has been installed. The crapware/malware stuff almost never includes un-installers, so it's up to you to root around to find where it has sneaked in.

You might send a message to softonic, but I doubt they will pay attention; these sites tend to be on the border edge of legality in the first place, so I wouldn't expect them to give a rat's tushie about your problems. Don't forget that they get paid by the crapware people and get a commission on ads, so they aren't going to do anything to jeopardize their cash flow, regardless of how it messes your computer up.
 
Thanks. Yeah, I plan on doing that this weekend. I kinda need to clean off my drive and wanted to install Mavericks from scratch anyways. :/

I probably should have known, but Softonic seemed like a valid download site like Cnet/Download.com. Especially since it comes up top of Google for downloading a valid application like Cyberduck.

But now that I'm alerted to this, you can see that Softonic DOES have some dubious reviews.
Norton claims they're safe:
http://safeweb.norton.com/report/show_mobile?name=softonic.com

Users have other ideas:
http://safeweb.norton.com/reviews?url=softonic.com

I posted both a review of Cyberduck saying this was spyware and not the application. I wrote a note to Softonic. So far... my review hasn't posted. And they haven't responded.

Lesson learned.
 
rich1000 said:
I posted both a review of Cyberduck saying this was spyware and not the application. I wrote a note to Softonic. So far... my review hasn't posted. And they haven't responded.

Lesson learned.
Click to expand...

Negative reviews have a tendency to not get posted, and don't expect Softonic to reply. Companies that deal with dubious stuff have little customer service.
 
I think you just get to move forward, and realize that you can't fix other folks "junk".
The download server sites, even Versiontracker (now download.com), and my own longtime fav Macupdate.com - all those show download links for your wanted software, and then that screen will show other "Download Now, Download for free, Click here to download, etc, etc) along with the REAL download link which is often much smaller that those other, flashy download buttons. You have to pay attention to what you click, as it's easy to get the SpeedUpYourMac, or whatever other "wonderful helper" stuff that is paying for that spot on the page, and is not related in any way to what YOU want. Annoying at best, and could be hazardous to your system software (it does happen…)
 
In the future, I would suggest sticking to a place like MacUpdate for software downloads rather than just hitting up Google search. You have the option of downloading from their own mirrors (and they don't bundle adware/spyware), or going straight to the developer's own page.
 
ElectricSheep said:
In the future, I would suggest sticking to a place like MacUpdate for software downloads rather than just hitting up Google search. You have the option of downloading from their own mirrors (and they don't bundle adware/spyware), or going straight to the developer's own page.
Click to expand...

Most definitely goto the developers web site first and places like Mac update second
 
I HATE softonic with a passion, never download stuff from it, it won't harm your computer but it will install idiotic plugins and toolbar stuff, same with cnet. lol.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back