Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Tarma Installer--spyware? No, Tarma installers are not spyware.

  1. #1
    Junior Member
    Join Date
    May 2006
    Posts
    9

    Default Tarma Installer--spyware? No, Tarma installers are not spyware.

    Hi,

    Why does Spybot consider Tarma Installer a threat? Softpedia has given Tarma its "100% Clean" award:

    http://www.softpedia.com/progClean/T...ean-17620.html

    So what's supposed to be wrong with it? As far as I know, it's just an install program that any software authors can use... I don't think it's particularly associated with malware, is it?

    (Sorry if this topic has already been discussed here; I couldn't find it.)

  2. #2
    Member of Team Spybot Buster's Avatar
    Join Date
    Oct 2005
    Location
    Bochum/Germany
    Posts
    394

    Default

    The detection for Tarma will be removed in the next update. Thanks for reporting!
    "The advantage of wisdom is that you can always act the fool. The opposite is quite tough."

    K. Tucholsky

    _______________________________________________________________

    Please help us improve Spybot and download our distributed testing client.

  3. #3
    Junior Member
    Join Date
    Jun 2012
    Posts
    1

    Default not necessarily...

    Eset Nod 32 5.0.93 found Tarma installer as malware. As a matter fact, Tarma installer, during the installation of Tarma software (probably, I don't know what this is, I never used it), installed a "ransomware" (kind of: "there is police here, your computer was blocked because you have child pornography on your HDD, you have to pay 100 Euro to unlock it", with the usual webpage that covers the screen, unremovable by the normal user, lots of registry changes and so on. I kinda "love" this virus, it is very smart...), identified during cleaning by Nod32 as Win32/Adware.Yontoo.B application. The file was c:\ProgramData\Tarma installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_setupx.dll. And... I have to say, as IT specialist, that I really love and trust Nod32; since years it helped me to clean a lot of HDDs and it protected mines really well.
    On another computer infected with similar crap, the job did by Spybot S&D and Malwarebytes in cleaning the corrupted registry keys was outstanding.

    So... or Tarma installs viruses deliberately, or they have to protect better their software for not being such easy to decode and recode with virus embedded. Eather way, I wouldn't remove this software yet from the list of detection, if I was you or... (looking at the date of previous posts), I would recommend you to re-add it, if it was removed long time ago. Probably it would be a good idea to do the same thing with Yontoo software (IE BHOs, I've seen), if it wasn't done yet...
    Best regards
    Last edited by Maverickx; 2012-06-19 at 09:34. Reason: old post, I see...

  4. #4
    Junior Member
    Join Date
    Jan 2013
    Posts
    4

    Default Info found on PC about Tarma Installer

    Detected by Advanced Systemcare Ultimate antivirus:
    Hasn't stated it as Malware.

    C:\Documents and settings\All users\Application data\Tarma installer\{361e80be-388b-4270-bf54-a10c2b756504}\_Setupx.dll|DelFileAndBack=Application.Generic.467645
    Last edited by shadowmanfan; 2013-01-17 at 08:16. Reason: Spelling mistake

  5. #5
    Translator Team bbnetwork's Avatar
    Join Date
    Feb 2012
    Location
    Germany- Saxony
    Posts
    598

    Default

    Which Software did you try to install for which the Tamra Installer is used?

  6. #6
    Junior Member
    Join Date
    Feb 2013
    Posts
    1

    Default Y2Desktop updater is Yahoo trash

    After a request from my sister to install Facebook Calling software to connect with her, i have this problem.

    Don't install Facebook software of any kind to avoid Yahoo trash.

    Yuo can remove Yontoo but after every upstart comes it back because of Tama Installer who installs Yonto again, delete every Yahoo folder on your system, delete the folder Tama Installer in ProgramData and use CCleaner to correct the registry.
    Last edited by Computer Redding; 2013-02-27 at 10:06.

  7. #7
    Junior Member
    Join Date
    Apr 2013
    Posts
    2

    Default

    Quote Originally Posted by Buster View Post
    The detection for Tarma will be removed in the next update. Thanks for reporting!
    No, NO! Please do NOT remove that $@?%! spider + SPAM intrusive thing!!!!!!!! I've just installed the newest Flash HD via Chrome. It asks me to optionally install some search toolbar of which I don't remember its name. Even though I turned down that offer (removing the checkmarks in manual intsll mode), it ended installing tarma, VAF player, and a bunch of unwanted stuff like PC Optimizer Pro... More over you can't get rid of Tarma without being a super-user who knows how to play with the registry and manually clean his/her HDD program folder... So please, whatever some other "affiliated report" want you to believe, this is a REAL SPAM-Threat-parasiting tool that should be turned down and kept on the Black List!


    SPAM SPAM SPAM SPAM, I will not write it enough it seems, since you want to keep this as "ok" and it's NOT!!! Actually, since it's Adobe flash gizmo which is the culprit (silently installing unwanted stuff apart from their flash player), Adobe should be on the black list either! Do your job, and thanks for that!... And BTW, we should sue Adobe for this. I'm really pissed-off by their rogue attitude, it's like if they were using my window in my back to invest MY property while the front door is closed, a bunch of THIEVES obliging me to loose a full day (even 2 to 3 days for reinitializing all my preferences and visual cues) into reinstalling my OS just to get completely rid of all that stuff they silently install on my computer and make it safe again. Would there be others willing to collectively file a lawsuit against Adobe?
    Last edited by HawkFest; 2013-04-11 at 13:57.

  8. #8
    Junior Member
    Join Date
    Apr 2013
    Posts
    2

    Default

    Quote Originally Posted by HawkFest View Post
    No, NO! Please do NOT remove that $@?%! spider + SPAM intrusive thing!!!!!!!!
    BTW, since Tthis installer is mostly used by rogue parties for installing unwanted stuff in your computer, it should be kept on the black list : they act as being the main entryway for nowadays spiders et'all, they were designed for such rogues, thus they are as guilty! Keep them on your blacklist, please.

  9. #9
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    32,529

    Default

    Hello,

    Quote Originally Posted by HawkFest View Post
    No, NO! Please do NOT remove that $@?%! spider + SPAM intrusive thing!!!!!!!!
    This particular topic was started as a false positive in 2006 and addressed at that time.

    You could start a topic here Requests for additions to Spybot's detections and provide a link back to this one.

    Best regards.
    Microsoft MVP. Consumer Security 2006-2014


  10. #10
    Guest
    Join Date
    Sep 2013
    Posts
    1

    Default If you want folks to think you know what you're talking about...

    Try using correct grammar, for example..."registry keys was outstanding", should be were outstanding. And "if I was you", should be, if I were you. You seem intelligent, try sounding intelligent. And please don't be angry, I only have your best interest in mind.


    Quote Originally Posted by Maverickx View Post
    Eset Nod 32 5.0.93 found Tarma installer as malware. As a matter fact, Tarma installer, during the installation of Tarma software (probably, I don't know what this is, I never used it), installed a "ransomware" (kind of: "there is police here, your computer was blocked because you have child pornography on your HDD, you have to pay 100 Euro to unlock it", with the usual webpage that covers the screen, unremovable by the normal user, lots of registry changes and so on. I kinda "love" this virus, it is very smart...), identified during cleaning by Nod32 as Win32/Adware.Yontoo.B application. The file was c:\ProgramData\Tarma installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_setupx.dll. And... I have to say, as IT specialist, that I really love and trust Nod32; since years it helped me to clean a lot of HDDs and it protected mines really well.
    On another computer infected with similar crap, the job did by Spybot S&D and Malwarebytes in cleaning the corrupted registry keys was outstanding.

    So... or Tarma installs viruses deliberately, or they have to protect better their software for not being such easy to decode and recode with virus embedded. Eather way, I wouldn't remove this software yet from the list of detection, or... (looking at the date of previous posts), I would recommend you to re-add it, if it was removed long time ago. Probably it would be a good idea to do the same thing with Yontoo software (IE BHOs, I've seen), if it wasn't done yet...
    Best regards

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •