Warning about Auslogic Defrag Free.

I just updated to Auslogic pro v4.3.6.0. As the install finished, a window with a Agree/Disagree option appeared. It was to make a Search Inquire search engine to be accepted as my default or not. I clicked no. I remember getting this at the end of the last upgrade, and I instinctively clicked yes without reading the text. I then found that my Bing home page had been replaced by this rogue search engine. Deleting it and resetting Bing was all it took. Could this be the malware that has been discussed in this thread?

 

From the looks of it the type of payload seems to vary.

It looks like the product is taking a trojan dropper, and polling from a 'list' of sources, which is why some people aren't getting confirmations, others are, etc. Either way, this is discouraging from a company, especially since they are offloading through PAID products as well.

I emailed support a couple days ago, and have not heard back. Nor do I expect to.

 

When my favorite defragger, Puran, started doing the same stuff I dropped them and tried a few other feebies (incl. Auslogics). But it turned out that none of them did as good a job as Puran, so I'm back with it.

Cruise

 

I'm sure there's nothing to worry about. I am installing the free version right now, and after the defragger is installed you are given the option to install 3rd party software. In my case it was a game, but I presume the offer will vary. You can accept or decline the offer. Upon declining the offer, the installer closes and Auslogics Defrag launches.

 

This is new(s) to me.

I've never seen a pick your poison or your poison is picked for you option.

Very weird.

 

imgburn was like this for a while where some got open candy and some had other things come up. there was another one also and i cant remember which one is was

 

Some have mentioned these issues in Auslogics Disk Defrag User Reviews.

 

A trial attempt to download the software from an alternate site yielded the below flag - it would appear the folks behind the software and or those hosting the sites that contain the download containers are now fully monetised.

 

It's got nothing to do with the hosting sites in this case - Auslogics have used it to generate revenue, as have a number of other publishers.

 

Call it as you may; a potentially unwanted app (or) greyware now populates *most* sites that point at this software.
Where you derive that generic statement that publishers must generate revenue, fails to impress.

 

You misunderstood me. I did not say that publishers "must" generate revenue, I was merely pointing out that Auslogics themselves and not the download sites hosting it are behind this.

Personally I don't like such attempts to get users to install additional software. However, as long as you there is the option not to install any extras then it won't stop me installing a product.

 

Auslogics was a favorite of mine, until recently.

Not too happy with them lately.

 

I submitted the file to ESET yesterday (20th),and received this reply from them this AM...(very fast response)

Quote:.."Hello,
the detection is correct. The installation package contains OCSetupHlp.dll which is detected as a potentially unsafe application. Detection of potentially unsafe applications is disabled by default and it's at users' discretion whether they want to detect them or not."

Regards,

ESET Malware Response Team

Not the news I was expecting as I initially considered it a FP..

Shame on Auslogics...

 

For ESET users, you may also submit sample(s) for analysis. ESET thanks those for reporting back their findings.

 

This is part of OpenCandy.

As long as you choose not to install the 3rd party software offered after Auslogics Defrag is installed, nothing unwanted will be get installed.

 

They also offer a portable version (which has been pointed out already) -can't imagine how anything unwanted would get installed with something that doesn't require installation.

 

I'm sure that is the case. Personally I prefer not to use portable software.

 

^ If you don't mind, would you care to explain why you prefer not using portable software?

 

I like to have software available from the start menu, rather than having to go to the folder where the exe for the portable program is and launch it from there.

I have no problem with tens or even hundreds of programs installed on my computer. I see the point in using portable software if you want to just run it once, but if you are using it regularly, why no install it?

 

Hasn't Auslogics always been a little bit shady? They used to have that "fake" system health scan in their Boostspeed product that was some sort of scareware to get people to purchase.

 

You can still pin it to the start menu or taskbar.

I like having portable software so I can use it (along with my settings) on multiple computers.

If you require file associations or context menus, or if you only use one computer then I agree installing the software is the way to go.

 

Auslogics responded me.

~Private communication removed~


Now the installer of Disk Defrag Pro version has been updated, and signature changed to 24/01/2014 and now don't have OpenCandy. (ESET not detected) but by other side Free version continue with OpenCandy.

 

But I have tens of programs installed, so unless it's something I use a lot, I need it to have a start menu folder.

My web browser is usually the only software that I care about using the same config on multiple computers, and this is done over the internet.

 

Well Ccleaner has OpenCandy too, just find SearchProtection.exe and remove it.

 

All that needs to be done is choose to decline any of the 3rd party which is offered and then you will have nothing to worry about. OpenCandy does not install in your system, it just is used to offer additional software to be installed during the install of Auslogics Defrag.