Tucows' Express Files Installation Process Review

Unfortunately, it's no big secret that the some high profile software download websites have been remarkably inconsistent this season: they have been offering innocent users downware! For example is tucows hosts InstallX.

Express Files - tucows downloads

1. "Thanks for using tucows! All of our software is tested to be guaranteed virus and spyware free. ..."
2. 20141120173830
3. "Choose installation type to continue... Advanced Installation:"
• "Make Groovorio my new tab page"
• "... my default search engine"
• ".. default homepage"
4. 20141120173846
5. "Continue to download and installation of TidyNetwork, Common Dictionary, OptimizerPro (aka, Optimizer Pro), and UpdateAdmin (Note: it's the clone of DownloadAdmin)."
6. 20141120173905
7. "Get the latest news about crimes committed around the world! ... By clicking accept you agree to the terms and privacy policy of Crime Watch (NOTE: it'd be the variant of Storm Alert, Storm Watch, etc.)."
8. 20141120173927

What did VirusTotal say?

• File name: expressfiles-setup.exe
• Detection ratio: 15 / 53
• SHA256: 926c649906d094863bc618e914a8a0a8e63393210087cb1c81c3adb58e9893fa
• Publisher: Tucows Inc.

Foistware show NOW starts, AGAIN...

 

("Kozaka.net kozaka Official Visitor Survey - 20 November, 2014")

• "Express Files, Smart Downloader... to install DictAddon... Re-Markit... WebStroller"
• 20141120182541
• "Because browsing doesn't have to be difficult - Kozaka (clone of Zommify... Yonton)"
• 20141120182653

Yontoo is a potentially unwanted application that installs a browser extension to display advertisements that appear to be from Facebook.

From Yontoo | Symantec

New junkware installation procedure...

• "Get Desktop Notification when Storms Are Heading Your Way (Storm Alert)"
• 20141120182859
• "By clicking accept, I agree to VuuPC End User License Agreement..."
• 20141120183157
• "Access every day to free apps or at reduced of our partners with Onesoftperday (aka, oneSOFTperday)."
• 20141120183213

Related guide

Common dictionary 1.0 Removal Help

Further reading

Amazon Web Services hosts more malware hosting sites than any other ISP or web hosting provider, according to a new report from security company Solutionary.