PDA

View Full Version : Daemon Tools and Addware!



WanaGo
14.01.2006, 23:04
Hey,

When installing the new version of DT for x64, my virus checker found DT to try and install addware on my system! Does anyone know anything about this??
the file SetupDTSB.exe is a Win32/Adware.SaveNow application.

Im interested to know why this has been put in Daemon Tools.

WanaGo

Nordoelum
15.01.2006, 05:15
Hey,

When installing the new version of DT for x64, my virus checker found DT to try and install addware on my system! Does anyone know anything about this??
the file SetupDTSB.exe is a Win32/Adware.SaveNow application.

Im interested to know why this has been put in Daemon Tools.

WanaGo
This is an option that you can choose to wherever install or not. This is for the team to continue with there work!

Jito463
15.01.2006, 05:26
Does nobody read the information on the download page?


This version has an option to install client-side software applications (DAEMON Tools Searchbar and Save Now) that deliver a limited number of behaviorally targeted and contextually relevant coupons, ads and comparative shopping results directly to consumers desktops - without compromising the privacy, security or smooth functioning of peoples computers! No URL hijacking or redirects! In order to support FREE distribution of DAEMON Tools we highly encourage you at least to try out this optional software! (you can remove it anytime later when you wish: via Control Panel-> Add/Remove Programs)

Underheaven
15.01.2006, 05:51
I had previously thought it was impossible to download DAEMON Tools without seeing that http://www.daemon-tools.cc/dtcc/images/icons/icon12.gif.

vatras90
15.01.2006, 11:06
I had previously thought it was impossible to download DAEMON Tools without seeing that http://www.daemon-tools.cc/dtcc/images/icons/icon12.gif. Sometimes I think, that some people don't want to read it;)

AmphetaMarinE
15.01.2006, 11:45
lmao...
I am beginning to think some people cant read at all...

Possibly they have learnt the words "Download" and "Next" and that is as far as their literacy goes......

nyeates1
08.03.2006, 00:27
Why does the installer not offer a CLEAR EXPLANATION that this software is being installed and that antivirus may think it is bad. Also, the user should have to interact to confirm that they are installing this, not set it by default.

Users have the right to want to only know how to 'read' "Download" and "Next". Dont you want downloading and installation of applications to be easy?
It is possible to clearly explain to the user what the software is doing, while at the same time making it simple for the user.

I guess users of this kind of program are smart enough to know how to figure out what this is about. But think of all the searching efforts and scratching heads that you would additively save by simply adding a clear concise explanation screen to the installation.

I do applaud that DT at least TRIED to be upfront about the ad software. Most software isnt.

al1uk
08.03.2006, 13:40
Why does the installer not offer a CLEAR EXPLANATION that this software is being installed and that antivirus may think it is bad. Also, the user should have to interact to confirm that they are installing this, not set it by default.

even if you miss the check box, you can cancel the adware setup at its EULA. so you cant really say you missed the option to not install

arisma
08.03.2006, 21:58
And you can uninstall it from the Control Panel, and yes i think that usually press on "Next" button without read.

Jito463
09.03.2006, 14:31
Why does the installer not offer a CLEAR EXPLANATION that this software is being installed and that antivirus may think it is bad. Also, the user should have to interact to confirm that they are installing this, not set it by default.

Users have the right to want to only know how to 'read' "Download" and "Next". Dont you want downloading and installation of applications to be easy?
It is possible to clearly explain to the user what the software is doing, while at the same time making it simple for the user.

I guess users of this kind of program are smart enough to know how to figure out what this is about. But think of all the searching efforts and scratching heads that you would additively save by simply adding a clear concise explanation screen to the installation.

I do applaud that DT at least TRIED to be upfront about the ad software. Most software isnt.
So you believe that users have a right to be drooling idiots in front of their computer? If they can't even opt out of a single install that allows them to, how can they be expected to keep their machine safe from spyware and adware the rest of the time? I guarantee, anyone that believes they can just click next through an installer, already has a ton of malware on their machine. One more adware toolbar isn't going to make a difference at this point.

AmphetaMarinE
09.03.2006, 16:11
So you believe that users have a right to be drooling idiots in front of their computer? If they can't even opt out of a single install that allows them to, how can they be expected to keep their machine safe from spyware and adware the rest of the time? I guarantee, anyone that believes they can just click next through an installer, already has a ton of malware on their machine. One more adware toolbar isn't going to make a difference at this point.
HEAR HEAR!!

Goenk
09.03.2006, 16:14
I totally agree with you Jito463

Zyxthior
09.03.2006, 16:20
Isn't there an old saying..."Ignorance is no excuse..."

I'd have to say Daemon-Tools has been THE MOST upfront about its Adware feature than ANY OTHER software I know of.
1. They Announced it on the mainpage.
2. They have a forum area dedicated to the discussion of it
3. It's optional at D-Tools install (clearly marked if you want it or not).
4. You can cancel out of it during the D-Tools searchbar install.
5. You can uninstall it through Add/Remove (it doesn't try to hide itself or disguise itself like other Adware/Malware).

It's CLEARLY stated its Adware (they never once tried to hide this)--so is it a leap to think that Anti-Virus programs (in which more and more have build in Anti-Spyware/Adware fuctions) are picking up on it?

al1uk
11.03.2006, 00:12
Isn't there an old saying..."Ignorance is no excuse..."

I'd have to say Daemon-Tools has been THE MOST upfront about its Adware feature than ANY OTHER software I know of.
1. They Announced it on the mainpage.
2. They have a forum area dedicated to the discussion of it
3. It's optional at D-Tools install (clearly marked if you want it or not).
4. You can cancel out of it during the D-Tools searchbar install.
5. You can uninstall it through Add/Remove (it doesn't try to hide itself or disguise itself like other Adware/Malware).

It's CLEARLY stated its Adware (they never once tried to hide this)--so is it a leap to think that Anti-Virus programs (in which more and more have build in Anti-Spyware/Adware fuctions) are picking up on it?

there is no excuse for saying you didnt see the checkbox or know about the adware or how to uninstall it

petecis
04.11.2006, 02:26
Hmm.... I've read the message that says I can goto add/remove programs to uninstall the adware, but those entries are not showing in my add/remove programs. I just installed 4.06 64 bit version. The adware was installed, but no add/remove item was added.

This makes me super mad because I actually read the information and I actually am willing to give the stuff a try to aupport the cause, but not being able to uninstall it makes it no longer adware, it is now malware and so it the program that installed it.

This is a completely clean system that's never had any version of daemon tools installed on it before. (ie, its newly reinstalled).

I plan to uninstall and reinstall and try again. But for now I'm P-O'd!!

Jito463
04.11.2006, 16:44
If you're having problems uninstalling, try using any adware removal tool, such as Ad-Aware or Spybot Search & Destroy. Both are free or have free versions. Sometimes things go wrong with installations, it's not a reason to get upset. No software is perfect.

petecis
05.11.2006, 05:34
If you're having problems uninstalling, try using any adware removal tool, such as Ad-Aware or Spybot Search & Destroy. Both are free or have free versions. Sometimes things go wrong with installations, it's not a reason to get upset. No software is perfect.

Yeah, basically I did what you just said except I used avast anti virus. Spybot search and destroy is a great tool. The only issue I have with it is that they still haven't fixed the dialog issue where the checkbox and line of text are smushed together on the same line.

I went back and looked and the Daemon Tools uninstall isn't shown in the Add/Remove Programs list either. DT works fine so I've just removed the adware and moved on. The tooldbar never showed up in IE so I suspect something was fubar'ed with the install.

Jito463
05.11.2006, 20:53
DTools and Alcohol do not show up in the Add/Remove Programs list so as to avoid certain blacklist methods. They can still be uninstalled from the shortcut in the Programs list or by running the uninstaller from the program directory.

^IceMan-X
28.12.2006, 06:45
I think since this has happened I have gone Back to an old version so I dont have this hassle

I have also had a few friends that have also done the same and are looking at other software as DTools is now badware in thier eyes and wont touch it because its changed

if it didnt have this maybe you wouldnt have complaints in the first place - but hey thats how software goes to the bottom of a users most wanted list (trash can)

not impressed of the last issue of DTools I stuck with v3

have a nice day

Jito463
28.12.2006, 17:11
Have fun trying to get the latest games working with v3. Not sure why it's such an issue for people to uncheck the box for the adware, but whatever.

^IceMan-X
02.01.2007, 18:10
jito463 at least Alcohol doesnt have adware in the virtual drives if a new game wont work in v3 of DT's

see there is other ways of playing a game without all this added greef...

Xtreme2damax
02.01.2007, 19:47
Just uncheck the goddam Searchbar box during install, there you go problem solved.

I don't understand what is so hard for people to understand this concept. If you uncheck the checkbox no Adware gets installed voila!

I'd like to know what other malware most of you have on you PC, if all you do is click through installers without reading on what they contain and how to disable certain features or components.

At least Daemon Tools gives you the option to not install it, as opposed with other software that includes Adware, that forces you to install the adware.

The Adware in Daemon Tools 4.xx versions is (Read Slowly) O-P-T-I-O-N-A-L, meaning that you don't have to install it if you don't want to and is only for those who want to support the development of the Free Version of Daemon Tools, but Don't have the Money to Pay for the Pro Version, or Donate if there was a Donate Option.

It's a Very simple concept to understand, and If you can't understand one simple thing, I'm afraid to see or think of what problems you may have throughout life.

I'm not trying to offend you, I'm just playing it real, and telling you straightforward the truth;)

LocutusofBorg
03.01.2007, 15:44
muffinhead, even if you post it again and again for 20 times,
rest assured that IceMan will not notice it. No reason to
explain it to Iceman nor convince him. Just let him go and use
Alc's drive's instead. Best solution for all of us.

It seems to me that this whole discussion took place not to
find any "solution" or something else but just for rant against
us. Or addware in general etc etc.

@IceMan: Now we got your opinion, thank you. Please stick
then to Alcohol. Thank you for using DT in the past and god
bless you and have fun @Alcohol. Bye

beyzade
04.01.2007, 01:55
I liked search bar.

Xtreme2damax
04.01.2007, 04:29
I'm sorry Locutus;)

I'm just sick of people complaining and whining about it, even though they are given the option to disable it, something that's not that hard to understand. I use Daemon Tools everyday and it is an excellent piece of software in my opinion, to play all my legit backups.

I'm sorry if I may have gone a little overboard there.

LocutusofBorg
05.01.2007, 04:15
nothing to excuse for. I just wanted to help you to not waste
your time to people that have nothing better to do than to
rant, although enough people explained to them the real
facts. IceMan doesnt even read replies, he/she just posted
as if the addware is somehow inseperable and evil*10.

Why we should feed the trolls? ;)

PS: And btw: Alot of people wrote to me lately that they like
the searchbar, so it can't be that bad. And believe it or not,
it seems alot of people also use the special offerings to buy
something from Amazon or somewhere else.
And if he want to use the AlcDrives and tell us how shitty we
are, he should switch also to something else, the AlcDrives are
also from us, so he should be honest and not use DaemonTools
nor Alcohol. Everything else is not more and not less than bigott
to me - sorry, but that are my 2 cents.

Simon_W
08.02.2007, 22:51
I had the idea that the search option was a way to search the virtual drive. Anyway, I have the feeling installing this adware was blocked by some anti-spyware features and I have the feeling that some things went wrong during installation of daemon tools itself because of that and you should care about that. If installation goes wrong by adding additional stuff on computers that have some defenses installed then others can spend time finding out what happened and how to repair it. Anyway ... have a nice day

Jito463
09.02.2007, 04:37
If something goes wrong with the install, that's what this forum is for. They didn't just add it with the intention of ignoring customers with problems.

Xtreme2damax
09.02.2007, 04:42
I/We Understand this, however it is explained what the searchbar is if everyone would just read before downloading.

I'm just sick of people not using common sense to read first, coupled with the option to not install it, and then come here to make a flaming insulting post cussing at the Daemon-Tools Team.

If they discussed their problem in a mature polite manner, and was willing to allow/receive help to work out the proble which they were having, there wouldn't be a problem.

But it's the opposite, they come here flaming and insulting the daemon tools team, without explaining their problem throughly or clearly, and sometime not at all and just fill their post with insults and anger.

Granted I'd be angry to if something messed up my PC, but I wouldn't act immature about it and type insults to the Devs about it. I'd be more interested in getting my point expressed, problem stated, and getting help as soon as possible to solve my problem:wink:

Hope you understand where I'm coming from here, I'm not very good in explaining thing sometimes and it tends not to sound as I intended.

mtb
07.05.2007, 15:56
I just want to add something to this thread, as a potential new user of DaemonTools.

I was looking for a suitable CD/DVD emulator and had just pulled down trials of Alcohol120% and MagicIso before finding DT, so I came to this site via Google. It brought me to the download page, not the homepage - there is no mention of adware or sponsorship on the download page.

The installer EULA is 48 "scroll downs" long and also makes no mention of adware or sponsorship, indeed the following ("This program is NOT freeware. If you don't use this program for commercial purposes you do not have to register a license and are allowed to use this software for free. But if you want to support our work you may do so, of course. Please check our homepage at http://www.daemon-tools.cc and click 'Register' for details.") suggests quite the opposite, indicating a free home use / paid commercial model which is common these days.

Now the much vaunted "explicit" install options. We have...

* DAEMON Tools Core Files
* DAEMON Tools Search Bar
* Desktop Shortcut
* Start Menu Shortcuts

...but no mention of adware or sponsors there either. In fact it is only when you hover over the toolbar option with the mouse that you see the adware message. Given the nature of the component descriptions, I'd say that it is pathetic to try to justify this adware by saying that the installer warns the user - rubbish! It couldn't be much better hidden if you tried.

As a software developer of 20+ years professional experience, I'm amazed and disgusted that anyone would dare try to conceal this like you have and then try to justify it by saying "we told you so" - what bull! If you truly want the support of the users for this ad. support approach then you should dedicate a full page of the installer to the toolbar component, inform them clearly of the hows and whys, then let them choose explicitly and with full knowledge.

I DID read the EULA before installing, then I read the options - though not the descriptions because the titles should be clear enough - and it was only when SpyBot flagged the malware (yes, I do consider it malware) that I was aware of the Toolbar's more sinister features. Indeed, I suspect that, due to the option's name, you would actually be on thin legal ground here if anyone decided to make alegal case of it.

I'm still going to evaluate all the products I've downloaded, including yours. If this software does what it is supposed to do and is the best in my opinion, then I'll be happy to pay my money to you to support the product, but only if you stop hiding behind this pathetic charade.

evlncrn8
07.05.2007, 19:25
if you got brought straight to the download page, thats the search engines fault, not this sites...

and if you were ignorant not to check the site and just downloaded the file and installed it, then thats your problem too...

a developer of 20+ years should have a little bit more common sense..

Kitna
08.05.2007, 01:52
A developer of 20+ years who can't see the difference between adware and malware should be embarrassed and ashamed.

Jito463
08.05.2007, 02:47
I'll lay it out for everyone, plain and simple.
Daemon Tools download page, clearly showing the adware inclusion.

http://rockent.brinkster.net/images/dtdownload.png

The Daemon Tools installer, with the option to disable the adware/search bar (the fact that it doesn't show the text until you mouse over is a limitation of the installer).

http://rockent.brinkster.net/images/dtinstall.png

And should you forget to uncheck the box, or make the mistake of overlooking it, here's what happens when you first run Daemon Tools.

http://rockent.brinkster.net/images/dteula.png

Which - as you can see - clearly allows you to cancel the install of the search bar.

And my only specific point aimed at mtb (since you appear to potentially be just a troll looking for attention) is that any judge overseeing a lawsuit against DTools for this would laugh in the plaintiffs face, and maybe charge them for wasting the courts time, before throwing it out the door. "Oh, my. I installed a free program that came with adware, I'm suing!" Riiiiight.

mtb
08.05.2007, 06:48
Ah yes, the download text, I forgot to mention that.
"...install client-side software applications (DAEMON Tools Searchbar and Save Now)...".
Applications - plural, not singular, indicating more than one application - the lower case "and" implying that there would probably be two, one called DAEMON Tools Searchbar and one called Save Now. So when I saw the DAEMON Tools Search Bar option but no Save Now option in the installer I presumed (oh, how foolish of me!) that you had removed the Save Now component (accidentally or on purpose). Had the option been named "DAEMON Tools Searchbar and Save Now" it would have been more accurate, more visible and been supportive of your total disclosure argument but it wasn't and it isn't.
Regarding the screen that appears when you run Daemon Tools for the first time, I never saw it (thanks to SpyBot) but it would be of little comfort to me after the software has already been installed and the computer already, in effect, compromised.
That 'warning' screen would be far better placed within the installer. It would be a simple enough task to provide two screens based on the component selection, one asking the user to reconsider if they choose not to install the Toolbar and one showing the 'warning' screen if they choose to install. This way there could be no possibility of uninformed choice (and please don't insult me by trying to say it can't be done).
What I really cannot fathom is that you continue using this approach despite the obvious negative reaction of users. A significant proportion of your threads, and therefore time, is being committed to (and therefore wasted on) justifying something which could continue with far less aggravation if you simply changed the installer to be more upfront. The product is excellent from what I've seen in my evaluations, why taint it by associating it with a dubious support method (whether perceived or not)?
I am not saying you should not use the adware method, I am suggesting that you ensure 100% that the user has to have seen clearly, and without option for confusion, precisely what they are installing and made an informed choice - what I see in these forums suggests the opposite.
Troll? It's sad to see you having to resort to name calling, I thought I was talking as one I.T. professional to another, presenting you with constructive criticism so as to help you improve what I (and others) perceive as a flawed approach to raising revenue. Clearly I was not talking to who I expected.
Kitna
You may wish have a look round the web at definitions of malware and adware, the two are generally perceived to be synonymous. Just to help you, here are a couple of excerpts from Wikipedia with some particularly pertinent parts highlighted in red...
"Malware is software designed to infiltrate or damage a computer system without the owner's informed consent. It is a portmanteau of the words "malicious" and "software". The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code."
"Adware or advertising-supported software is any software package which automatically plays, displays, or downloads advertising material to a computer after the software is installed on it or while the application is being used.
...
It is not uncommon for people to confuse "adware" with "spyware" and "malware", especially since these concepts overlap. For example, if one user installs "adware" on a computer, and consents to a tracking feature, the "adware" becomes "spyware" when another user visits that computer, and interacts with and is tracked by the "adware" without their consent."
That we are even having this discussion is clearly evidence that, what you consider to be informed consent and what the users perceive it to be are two very different things.
evlncrn8
How wonderful to see someone with such an open mind(!)... everyone's fault but your own... how refreshing. Having seen sufficient information elsewhere in Google, I felt the download screen provided me with adequate information about the product I was about to assess - I also use a DMZ approach to new software, installing in a controlled environment. This approach works fine for all other products I have evaluated, why (without hindsight) should I consider yours to be any different? Common sense, since you mention it, should be sufficient enough to suggest the adware approach is being handled incorrectly, but clearly common sense is lacking hereabouts.
Consider also the fact that the Save Now component is considered an undesirable product by so many of the anti-spyware/anti-malware/etc. products - if that doesn't set the alarm bells ringing, nothing will; clearly a lack of hearing is also common.
So name call and throw insults all you like, it is no loss to me - I shall not be continuing using, nor recommending, the product and therefore won't be in need of support. The four device limit is a little inconvenient but could be worked with but the rest of the product was very good and did precisely what I wanted. However, it is the narrow-minded and stubborn attitude of the "experienced users" in these support forums which makes me feel that the support I will receive for my money will be better elsewhere. A shame really, since I prefer to support 'the little guy' and I'm sure that 59 Euros i have now paid (for Alcohol 120%) would have been of greater benefit to you than to them.
Good luck with your endevours and may your eyes and minds open a little.

Copytrooper
08.05.2007, 10:20
Thanks for supporting us by buying Alcohol 120% - as they use our driver. :D

Jito463
08.05.2007, 13:59
First, I know what malware is. Second, I never said you WERE a troll, I said you POTENTIALLY were one. Wouldn't be the first time. By the way, I'm not a member of the DTools staff, but I am a member of the Alcohol Soft Support Team. So welcome aboard. Make sure you e-mail support@alcohol-soft.com for access to the Customer forums. Put "Purchased User" in the subject line, and your desired username plus registered e-mail in the body. You will be e-mailed back when your access is setup.

And just to clarify, when that message box pops up to ask you if you want to continue with the search bar/adware install, at that point it is not installed. The only part of it on your HDD is the installer. No other part of it is running. If you cancel at that point, you will not have any adware on your computer.

evlncrn8
08.05.2007, 14:17
as a developer of 20+ years as you state, i find it somewhat strange that you didn't actually research the software, or even look around the site.. so yes it IS your fault for not properly researching.. 'sufficient information elsewhere in google'....
blaming google now?.. common sense implies that being a software professional that you should at least have enough sense to..

1. research the software (google? ;p)
2. dmz install sure.. gr8.. install in vmware too
3. go to the main page of the site and actually look around
4. monitor your spybot / ad-ware programs?

but you just blindly downloaded, blindly clicked buttons...
also please dont try 'educating' people here about malware, and so on or trying to do any sniping, it makes you look childish.. other peopler here are engineers too..

oh and DMZ is networking term, not exactly relative to what you're discussing.. and heh alcohol and daemon are practically the same core.. you really did your homework / research didnt you...

Kitna
08.05.2007, 23:48
Thankyou for quoting directly from wikipedia. It does help to clear things up for me. It is now evident that english is likely not your first language due to your inability to see that adware and malware are clearly different (as enforced by your own quotes). So as I was unaware of this I apologise.

Sabrehawk
27.05.2007, 09:28
Yadda Yadda let that dumbass troll on elsewhere (incapable of reading,but
claiming to be a coder with 20+ years exp? ROFL, probably
been coding for teller machines?

elkangorito
30.05.2007, 13:06
I actually agree with a lot of what "mtb" had to say.
Here was my experience with Daemon Tools 4.09 X86, recently downloaded from the "Daemon Tools" site (http://www.daemon-tools.cc/dtcc/download.php?mode=ViewCategory&catid=5);
I did read the ".....This version has an option to install client-side software applications (DAEMON Tools Searchbar and Save Now) that deliver a limited number of behaviorally targeted and contextually relevant coupons, ads and comparative shopping results directly to consumers desktops - without compromising the privacy, security or smooth functioning of peoples computers! No URL hijacking or redirects! In order to support FREE distribution of DAEMON Tools we highly encourage you at least to try out this optional software! (you can remove it anytime later when you wish: via Control Panel-> Add/Remove Programs)" information & decided that the product was safe to download, which I did. I then installed the software onto my computer (I forgot to untick the searchbar install) afterwhich, I restarted my computer. Immediately the computer booted into windows, I was alerted by both Windows Defender (which I will soon replace with Spybot) & Avast (home version). Windows defender was not specific about the problem but Avast informed me that a 'threat' had been found & this threat was listed as the Win32-Agent-AWB trojan.
Because I was not expecting a trojan to be installed onto my computer (I was expecting a harmless 'searchbar' though), I immediately placed the file(s) into quarantine.
I then tried to open Daemon Tools, which failed to respond. I then uninstalled the program by using its uninstaller, afterwhich I restarted the computer.
Upon the OS booting, I was confronted with "New hardware was found on your computer & Windows will need to be re-activated" or words to this affect. Also, MS gave me 3 days in which to re-activate my computer.
I see no mention of "Some anti-virus software may call part of our software a trojan" or "Our software may cause activation problems with Windows". BTW, my computer was 'bug free' prior to this. Now, I will reload windows because I don't want to send MS any info by re-activating my computer.
As to this date & time, I have not tried Daemon Tools (DT), which I am determined to try IF somebody (preferably an expert on DT, an administrator or a Mod) can definitively tell me that the 'Win32-Agent-AWB' trojan is not as Avast sees it (ie it's safe). Also & if possible, could somebody please offer an explanation about why my Win XP now needs re-validating?
Thanks in advance. :)

Jito463
30.05.2007, 18:29
Regarding the trojan, I can only assume it's one of two problems. Either Avast is falsely reading the DTools searchbar as a trojan, or you downloaded an infected copy (which, if you downloaded from the official mirrors, is highly unlikely). The official release from DTools does not contain any malicious software. I'll see if I can't setup a testbed to try an install of DTools with Avast installed.

As to your second problem with Windows needing reactivated, I can safely say that Windows would see the virtual drive as a new device. And if you had made any other modifications within the past 3-6 months, then Windows probably decided it was just time for your to reactivate. If you have not made any hardware changes, then I honestly don't know what would have caused that.

obi1kenobi
30.05.2007, 22:24
Perhaps your copy of Windows is an OEM version? The OEM version needs to be reactivated upon installation of new hardware (that's why it's called an OEM). As for the trojan, I always scan files I download, and my F-Secure Anti-virus didn't find any threats, and as F-Secure is shown to detect 99.69% of the known malware by some studies, it is highly unlikely that the trojan came with DT.

Kinlaadare
30.05.2007, 22:56
by the way, installing DT and having avast shouldn't pose any problem (tested on XP pro, XP pro x64 and vista 32bit edittion)

Jito463
31.05.2007, 04:49
Perhaps your copy of Windows is an OEM version? The OEM version needs to be reactivated upon installation of new hardware (that's why it's called an OEM).
Actually, OEM versions are identical to retail versions in regards to activation. The difference between the two is that OEM versions do not include any technical support from MS, and they are licensed to ONE PC only. As far as MS is concerned, that means if you even swap the mobo, it's a new computer and technically you must buy a new copy (though that's not often enforced).

Other than that, OEM versions are identical to retail versions. Trust me, I work with OEM versions of Windows all day at work. If you swap enough hardware around (adding RAM, upgrading video card, adding HDD, etc.) on a retail copy, it will require re-activation as well. They are identical in that respect.

obi1kenobi
31.05.2007, 10:45
If you swap enough hardware around (adding RAM, upgrading video card, adding HDD, etc.) on a retail copy, it will require re-activation as well. They are identical in that respect.

How come I have added 2GB of RAM, upgraded my video card to nVidia 7300, added a brand new 320GB HDD, added a new DVD-RW, installed Daemon Tools (adding a new Virtual Drive), changed my motherboard... and my retail Win XP x86 didn't require activation.

elkangorito
31.05.2007, 11:54
How come I have added 2GB of RAM, upgraded my video card to nVidia 7300, added a brand new 320GB HDD, added a new DVD-RW, installed Daemon Tools (adding a new Virtual Drive), changed my motherboard... and my retail Win XP x86 didn't require activation.

That's a very good question!

As for my Windows, it's XP Pro SP2 retail & legitimate. Since I built my computer & installed the OS some 18 months ago, I have not changed any hardware except for updating the DVD-RAM firmware, which was done about a week ago.

If DTools does create a virtual drive, is it not removed when DTools is uninstalled from the system? How can I check to see if this virtual drive is still there? If it is still there, how can I get rid of it?

Thanks everybody for your thoughts & suggestions so far.

mwb1100
31.05.2007, 16:30
Actually, OEM versions are identical to retail versions in regards to activation.
This depends on the OEM version - large OEMs (like Dell) have special code that checks the BIOS - if it's a Dell BIOS then pretty much no other changes will trigger a re-activation.

How come I have added 2GB of RAM, upgraded my video card to nVidia 7300, added a brand new 320GB HDD, added a new DVD-RW, installed Daemon Tools (adding a new Virtual Drive), changed my motherboard... and my retail Win XP x86 didn't require activation.
There might be a couple possibilities. I'm not sure, but I believe the activation trigger may be time sensitive - if you make change A then no changes for 6 months (or something - I don't think anyone outside MS would know the exact timing) then change A is 'forgotten' and Change B will not trigger a reactivation. Although I would have expected that a motherboard change would by itself trigger a reactivation. The only other possibilities that I know of only involve non-retail versions of XP (volume license, BIOS locked-OEM, ...)
Take a look at this thread: http://www.daemon-tools.cc/dtcc/reactivating-windows-t5875.html

obi1kenobi
31.05.2007, 17:26
But I made all the changes at the same time (I pretty much renovated my PC :-D ). Other than that, the thread answers the question (almost) :-)

elkangorito
02.06.2007, 08:58
I actually agree with a lot of what "mtb" had to say.
Here was my experience with Daemon Tools 4.09 X86, recently downloaded from the "Daemon Tools" site (http://www.daemon-tools.cc/dtcc/download.php?mode=ViewCategory&catid=5);
I did read the ".....This version has an option to install client-side software applications (DAEMON Tools Searchbar and Save Now) that deliver a limited number of behaviorally targeted and contextually relevant coupons, ads and comparative shopping results directly to consumers desktops - without compromising the privacy, security or smooth functioning of peoples computers! No URL hijacking or redirects! In order to support FREE distribution of DAEMON Tools we highly encourage you at least to try out this optional software! (you can remove it anytime later when you wish: via Control Panel-> Add/Remove Programs)" information & decided that the product was safe to download, which I did. I then installed the software onto my computer (I forgot to untick the searchbar install) afterwhich, I restarted my computer. Immediately the computer booted into windows, I was alerted by both Windows Defender (which I will soon replace with Spybot) & Avast (home version). Windows defender was not specific about the problem but Avast informed me that a 'threat' had been found & this threat was listed as the Win32-Agent-AWB trojan.
Because I was not expecting a trojan to be installed onto my computer (I was expecting a harmless 'searchbar' though), I immediately placed the file(s) into quarantine.
I then tried to open Daemon Tools, which failed to respond. I then uninstalled the program by using its uninstaller, afterwhich I restarted the computer.
Upon the OS booting, I was confronted with "New hardware was found on your computer & Windows will need to be re-activated" or words to this affect. Also, MS gave me 3 days in which to re-activate my computer.
I see no mention of "Some anti-virus software may call part of our software a trojan" or "Our software may cause activation problems with Windows". BTW, my computer was 'bug free' prior to this. Now, I will reload windows because I don't want to send MS any info by re-activating my computer.
As to this date & time, I have not tried Daemon Tools (DT), which I am determined to try IF somebody (preferably an expert on DT, an administrator or a Mod) can definitively tell me that the 'Win32-Agent-AWB' trojan is not as Avast sees it (ie it's safe). Also & if possible, could somebody please offer an explanation about why my Win XP now needs re-validating?
Thanks in advance. :)

Just an update to what's happening now;

I've re-installed XP & all the essential software (DirectX, Java, firewall, antivirus etc) & did not allow the OS to access the internet to obtain any MS updates (my computer was physically disconnected from the internet).

I then installed DTools & deselected the searchbar option. All is now fine - checked complete system for spyware, viruses etc & everything is clear.

I do think that allowing MS to install updates may also be aiding the blocking of certain programs like DTools. From now on, my MS updates will be turned off & I will just have to rely on my firewall, antivirus & anti spyware programs, as well as common sense, to protect my system.

Thanks again for your help. :D

Mephisto18m
02.06.2007, 13:12
well, thats not a very good idea as this is definitely neither Microsoft's nor Daemon-Tool's fault.
I'm running XP with Avast and every single update provided together with the search-bar without experiencing any problems so far. I'm not using any anti-spyware-programs, though.
If you'll never connect your machine to the internet by now, you could stick to your solution, but consider upgrading to SP2 if it wasn't included in your installation.