Dave C. wrote:
> I started to install file Unlocker to remove a file, but it won't
> unless I accept the installation of Bing Bar. What is a Bing Bar?
> Sounds like another toolbar, I guess. I never heard of this. Does it
> have any use of value?
>
> Thanks,
>
> Dave
What file did you download ? Sometimes, the problem is
you get the file from some unknown site, and it's bundled
with God knows what.
Was it something like this ? Check the download log on your
web browser.
http://files.brothersoft.com/interne...ocker1.9.0.exe
I started on this page, and it's a bit confusing (on purpose),
as to what link you're supposed to click. It appears the file
is stored on another site.
http://cedrick.collomb.perso.sfr.fr/unlocker/
Download Unlocker 1.9.0 - 32 bit version
MD5: 5efff574689b66e52a0911beb11d1e71 / SHA1: 8ed39e4a8942f0cf4949875d13d2b3a5d94c862c
Now, if I use my copy of MD5SUM and check the file I downloaded,
the MD5SUM is 5efff574689b66e52a0911beb11d1e71, so at least the
file I got, has the same checksum as the file information provided
on Collumb's site.
It appears that file was last scanned a couple hours ago. You can
either upload the file, or you can search on this site, using
the MD5 "hash string", to find a previous scan result. I'm
not finding a lot of info, on the one thing detected here.
It could be yet another false positive. (Or even caused by
the software that is trying to install Bing toolbar.)
http://www.virustotal.com/file-scan/...eab-1291128156
I took a look inside the file with 7ZIP, and didn't see anything
that looked like a Bing installer. But I could easily have missed
it. I'm not that good at it
The file I got, in properties, says it is 1,109,025 bytes.
OK, there is a directory in that Unlocker1.9.0.exe file archive
called OpenCandy. The OpenCandy_Why_Is_This_Here.txt file in there says:
"What is OpenCandy?
OpenCandy is a platform and network which enables software publishers
to recommend other products, during installation of their software, they
believe you will find valuable.
So… What is this folder, its contents, and why is it here?
These files are only on your computer because you accepted a software
recommendation. These files are TEMPORARILY copied to a folder within
the publisher's program files directory until the recommended software
is downloaded and installation is performed."
That sounds like the mechanism for offering the Bing installer. I like
how they use the cute words "recommend other products". Pretty funny.
If you were to unzip the Unlocker1.9.0.exe file, remove the OCSetupHlp.dll
file, then perhaps there wouldn't be a BING prompt ? What I don't see, is
how the OCSetupHlp.dll is getting called, or whether any other software
in the package, insists that it is present.
Good luck,
Paul