Home Forums FineTunedMac Community Lounge Oh, CNet, how low can you go?

C-Net downloads come bundled with malware.

I can't begin to remember the context, but this issue, although not in as much detail, has previously been posted here by someone who d/l'ed something from CNet and got an unexpected, unpleasant "extra".

I'm happy to hear that this b-s has now been exposed big-time.

Oops! I just looked at the date on your linked doc, and it's December 7, 2011.

Edit: Not quite what I thought it was, but I found it here.

I've established a practice of 'skipping the middle-man' and always locating the publisher's website so that I can download directly from them. It takes a very small additional effort but I figure if that's the place I'll be registering anyway, I might as well start the relationship early.

I also always thought that, if the publisher had to deliver a fee to a separate download site, they'd be better off if I go to them and they keep all the loot. I figured that would be particularly important for someone who publishes shareware and likely needs every penny they can get.

It's nice to think my habit may have had the bonus advantage of increasing my safety.

About a week ago, I began a DL via CNet and noted that it wanted to install other stuff in addition to the app (I don't recall the details), so, like ryck, went instead to the developer's site.

What amazes me, is that I have seen no "alarm" re CNets deplorable behavior on the other sites I visit. I wonder why.

I know, or rather think, not every DL via CNet is so corrupted, but does anyone have a current example of such?

Sure. I just looked at 6 items on today's downloads list in more detail, and with 4 of those the download button was 'Installer Enabled,' a pretty amazing euphemism if you think about it. As I mentioned elsewhere, below the big green 'Download Now' button of these four, there is a 'Direct Download Link' in light blue, which does NOT download the installer, but only the software listed.

- PDFpen 6.3
- Cyberduck 4.4.5
- Xmarks for Safari 2.0.15
- Yosemite ScreenSaver 1.0

For comparison purposes I'll also list the two unambiguously 'clean' downloads here. Note that the second is an external download, with the button text 'Download Now' changed to 'Visit Site'; these are sites that don't allow downloads via 3rd parties like CNet, and include the iTunes store and the App store etc.

- Firefox 30.0
- Adobe Flash Player 14.0.0.125

I just sent a note to Misha at MacUpdate suggesting that they may care to post a banner or such that they don't engage in such unethical practices.

Your examples, BTW, were most helpful. Thanks!

While Misha, in his reply, made no mention of a banner or such, he did note that MacUpdate had like wise been approached by companies that pay for each toolbar installed, but MacUpdate (thankfully) rejected them.

And so to them: Bravo!

Good on them! It's difficult sometimes to resist the corrupting influence of money.

Perhaps of interest, especially the comments by "chrfr" (# 11) who posted the malware cleanup/removal instructions.

CNet Malware & Cleanup