Is this Malware, Spyware, or what did I install?

Discussion in 'macOS' started by rich1000, Jan 22, 2014.

  1. rich1000 macrumors newbie

    Sep 28, 2009
    I was trying to download Cyberduck.. an FTP and Cloud Files Browser. I did a quick search in Google, and came up top of the list to this link on Softonic:

    If you proceed to download what it purports to be Cyberduck, it downloads a Diskimage file (called Cyberduck), it provides an installer (doesn't not request admin privileges), and then asks to basically take over your browser search bar. You can say decline. And it asks to install "Save N Keep" plugin. I accidentally said yes to this (thinking all this was normal for Cyberduck).

    I realized then that Cyberduck never installed. I also found this "SavenKeep" in ALL my browsers as a plugin: Chrome, Safari, and Firefox.

    I also noticed in Chrome trying to go to a normal site that it was hanging on trying to access something thru the URL:

    I've removed all of the plugins, but now wonder WHAT THE HELL DID IT DO TO MY MACHINE?

    I'm concerned and might want to format my machine, and revert to an earlier version of my computer prior to this install.

    First, does ANYONE know what this plugin is? I can't find anything about it.

    Second, why the hell would Softonic not catch something like this being available? I like how they claim "Safe Download" and "Virus Free" from Softonic. Such BS.

    Lastly, is anyone interested in investigating what that installer is actually doing?
  2. Shrink macrumors G3


    Feb 26, 2011
    New England, USA
    I found this about Softonic.
  3. old-wiz macrumors G3

    Mar 26, 2008
    West Suburban Boston Ma
    Glad I don't download crapware or malware from dubious sites like Softonic.

    You may need to re-install from a backup as these things can stick into nasty places and you never know what else has been installed. The crapware/malware stuff almost never includes un-installers, so it's up to you to root around to find where it has sneaked in.

    You might send a message to softonic, but I doubt they will pay attention; these sites tend to be on the border edge of legality in the first place, so I wouldn't expect them to give a rat's tushie about your problems. Don't forget that they get paid by the crapware people and get a commission on ads, so they aren't going to do anything to jeopardize their cash flow, regardless of how it messes your computer up.
  4. rich1000 thread starter macrumors newbie

    Sep 28, 2009
    Thanks. Yeah, I plan on doing that this weekend. I kinda need to clean off my drive and wanted to install Mavericks from scratch anyways. :/

    I probably should have known, but Softonic seemed like a valid download site like Cnet/ Especially since it comes up top of Google for downloading a valid application like Cyberduck.

    But now that I'm alerted to this, you can see that Softonic DOES have some dubious reviews.
    Norton claims they're safe:

    Users have other ideas:

    I posted both a review of Cyberduck saying this was spyware and not the application. I wrote a note to Softonic. So far... my review hasn't posted. And they haven't responded.

    Lesson learned.
  5. old-wiz macrumors G3

    Mar 26, 2008
    West Suburban Boston Ma
    Negative reviews have a tendency to not get posted, and don't expect Softonic to reply. Companies that deal with dubious stuff have little customer service.
  6. DeltaMac macrumors G3


    Jul 30, 2003
    I think you just get to move forward, and realize that you can't fix other folks "junk".
    The download server sites, even Versiontracker (now, and my own longtime fav - all those show download links for your wanted software, and then that screen will show other "Download Now, Download for free, Click here to download, etc, etc) along with the REAL download link which is often much smaller that those other, flashy download buttons. You have to pay attention to what you click, as it's easy to get the SpeedUpYourMac, or whatever other "wonderful helper" stuff that is paying for that spot on the page, and is not related in any way to what YOU want. Annoying at best, and could be hazardous to your system software (it does happen…)
  7. ElectricSheep macrumors 6502


    Feb 18, 2004
    Wilmington, DE
    In the future, I would suggest sticking to a place like MacUpdate for software downloads rather than just hitting up Google search. You have the option of downloading from their own mirrors (and they don't bundle adware/spyware), or going straight to the developer's own page.
  8. michaelsviews macrumors 65816

    Sep 25, 2007
    New England
    Most definitely goto the developers web site first and places like Mac update second
  9. Intelligent macrumors 6502a


    Aug 7, 2013
    I HATE softonic with a passion, never download stuff from it, it won't harm your computer but it will install idiotic plugins and toolbar stuff, same with cnet. lol.
  10. sjinsjca macrumors 68020


    Oct 30, 2008
    Excellent, excellent, excellent advice.

    Be careful out there, folks.

Share This Page