Then OpenCandy pays a portion of the money to the purveyor of the primary, presumably legitimate software you're trying to install to get attached to their installer. Distributors of garbage software packages, perhaps having business models based around advertising or the sale of your information, which you wouldn't want and should not install on your system, pay OpenCandy to get offered by the OpenCandy bundler after you finish installing the primary thing you were installing. because it's advertising, not because it's malicious in the direct sense. OpenCandy is detected as "possibly unwanted", "potentially unsafe", etc.
Or that has been my experience with it anyway. It drops OCSetupHlp.dll to %temp% for a short time but it cleans up after it finishes doing its thing. Like I mentioned earlier it doesn't drop a persistent payload.
0 kommentar(er)
