opinions about OpenCandy?

[system]

What do others think about avast’s decision to include the OpenCandy ad network in the installer for avast free?

During installation, avast installs the OpenCandy ad network software (which it later uninstalls, mostly, if all goes well). OpenCandy then phones home info about you and your computer. It also writes entries in your registry, including a “non-reversible identifier” (http://www.opencandy.com/faqs; accessed 2011-03-27).

For myself, this kind of activity is exactly one of the reasons why I run antispyware and a firewall. And I wonder how on earth an ad network would not be considered at least a potentially unwanted program.

[CraigB]

The only thing iv ever seen in the avast installer is the option to install google chrome, never seen or heard of opencandy.

[system]

@craigb post:2

The only thing iv ever seen in the avast installer is the option to install google chrome, never seen or heard of opencandy.

http://forum.avast.com/index.php?topic=72917.msg607264#msg607264

@Vlk post:16

As a matter of fact, even though the OpenCandy DLL is still part of the avast installer (was originally used to make the partner offer) it is not being executed at all. The Chrome offer is now done using a diffent technique.

We will remove the OpenCandy DLL from the avast installer in the next program update.

However, let me just say that I still think that the detection is illegitimate. OpenCandy is nothing else that a platform for doing partner software offers (bundles). There’s a bunch of trusted companies doing business with OpenCandy, such as LogMeIn, NetNanny and Roboform.

It somehow reminds me of detecting all files packed by packers like Armadillo or VMProtect as viruses. True, there are some viruses that are packed by these packers. On the other hand, there’s a bunch of legitimate (commercial) apps that are also packed by them. Having a detection that calls all files packed by these packers right away as viruses is just not right (easy for the virus analysts, but not helpful for the users).

Thanks
Vlk

[CraigB]

I learn something new every day ;D

[system]

@doktornotor post:3

@Vlk post:16

a diffent technique.

It would be interesting to have the brand or company name of this technique if there is one.