Tarma Installer--spyware? No, Tarma installers are not spyware.

Hi,

Why does Spybot consider Tarma Installer a threat? Softpedia has given Tarma its "100% Clean" award:

http://www.softpedia.com/progClean/T...ean-17620.html

So what's supposed to be wrong with it? As far as I know, it's just an install program that any software authors can use... I don't think it's particularly associated with malware, is it?

(Sorry if this topic has already been discussed here; I couldn't find it.)

:oops: The detection for Tarma will be removed in the next update. Thanks for reporting!

Eset Nod 32 5.0.93 found Tarma installer as malware. As a matter fact, Tarma installer, during the installation of Tarma software (probably, I don't know what this is, I never used it), installed a "ransomware" (kind of: "there is police here, your computer was blocked because you have child pornography on your HDD, you have to pay 100 Euro to unlock it", with the usual webpage that covers the screen, unremovable by the normal user, lots of registry changes and so on. I kinda "love" this virus, it is very smart...), identified during cleaning by Nod32 as Win32/Adware.Yontoo.B application. The file was c:\ProgramData\Tarma installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_setupx.dll. And... I have to say, as IT specialist, that I really love and trust Nod32; since years it helped me to clean a lot of HDDs and it protected mines really well.
On another computer infected with similar crap, the job did by Spybot S&D and Malwarebytes in cleaning the corrupted registry keys was outstanding.

So... or Tarma installs viruses deliberately, or they have to protect better their software for not being such easy to decode and recode with virus embedded. Eather way, I wouldn't remove this software yet from the list of detection, if I was you or... (looking at the date of previous posts), I would recommend you to re-add it, if it was removed long time ago. Probably it would be a good idea to do the same thing with Yontoo software (IE BHOs, I've seen), if it wasn't done yet...
Best regards

Detected by Advanced Systemcare Ultimate antivirus:
Hasn't stated it as Malware.

C:\Documents and settings\All users\Application data\Tarma installer\{361e80be-388b-4270-bf54-a10c2b756504}\_Setupx.dll|DelFileAndBack=Application.Generic.467645 :D:

Which Software did you try to install for which the Tamra Installer is used?

After a request from my sister to install Facebook Calling software to connect with her, i have this problem.

Don't install Facebook software of any kind to avoid Yahoo trash.

Yuo can remove Yontoo but after every upstart comes it back because of Tama Installer who installs Yonto again, delete every Yahoo folder on your system, delete the folder Tama Installer in ProgramData and use CCleaner to correct the registry.

Quote:

---

Originally Posted by Buster

:oops: The detection for Tarma will be removed in the next update. Thanks for reporting!

---

No, NO! Please do NOT remove that $@?%! spider + SPAM intrusive thing!!!!!!!! I've just installed the newest Flash HD via Chrome. It asks me to optionally install some search toolbar of which I don't remember its name. Even though I turned down that offer (removing the checkmarks in manual intsll mode), it ended installing tarma, VAF player, and a bunch of unwanted stuff like PC Optimizer Pro... More over you can't get rid of Tarma without being a super-user who knows how to play with the registry and manually clean his/her HDD program folder... So please, whatever some other "affiliated report" want you to believe, this is a REAL SPAM-Threat-parasiting tool that should be turned down and kept on the Black List!


SPAM SPAM SPAM SPAM, I will not write it enough it seems, since you want to keep this as "ok" and it's NOT!!! Actually, since it's Adobe flash gizmo which is the culprit (silently installing unwanted stuff apart from their flash player), Adobe should be on the black list either! Do your job, and thanks for that!... And BTW, we should sue Adobe for this. I'm really pissed-off by their rogue attitude, it's like if they were using my window in my back to invest MY property while the front door is closed, a bunch of THIEVES obliging me to loose a full day (even 2 to 3 days for reinitializing all my preferences and visual cues) into reinstalling my OS just to get completely rid of all that stuff they silently install on my computer and make it safe again. Would there be others willing to collectively file a lawsuit against Adobe?

Quote:

---

Originally Posted by HawkFest

No, NO! Please do NOT remove that $@?%! spider + SPAM intrusive thing!!!!!!!!

---

BTW, since Tthis installer is mostly used by rogue parties for installing unwanted stuff in your computer, it should be kept on the black list : they act as being the main entryway for nowadays spiders et'all, they were designed for such rogues, thus they are as guilty! Keep them on your blacklist, please.

Hello,

Quote:

---

Originally Posted by HawkFest

No, NO! Please do NOT remove that $@?%! spider + SPAM intrusive thing!!!!!!!!

---

This particular topic was started as a false positive in 2006 and addressed at that time. ;)

You could start a topic here Requests for additions to Spybot's detections and provide a link back to this one. :)

Best regards.

Try using correct grammar, for example..."registry keys was outstanding", should be were outstanding. And "if I was you", should be, if I were you. You seem intelligent, try sounding intelligent. And please don't be angry, I only have your best interest in mind.

Quote:

---

Originally Posted by Maverickx

Eset Nod 32 5.0.93 found Tarma installer as malware. As a matter fact, Tarma installer, during the installation of Tarma software (probably, I don't know what this is, I never used it), installed a "ransomware" (kind of: "there is police here, your computer was blocked because you have child pornography on your HDD, you have to pay 100 Euro to unlock it", with the usual webpage that covers the screen, unremovable by the normal user, lots of registry changes and so on. I kinda "love" this virus, it is very smart...), identified during cleaning by Nod32 as Win32/Adware.Yontoo.B application. The file was c:\ProgramData\Tarma installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_setupx.dll. And... I have to say, as IT specialist, that I really love and trust Nod32; since years it helped me to clean a lot of HDDs and it protected mines really well.
On another computer infected with similar crap, the job did by Spybot S&D and Malwarebytes in cleaning the corrupted registry keys was outstanding.

So... or Tarma installs viruses deliberately, or they have to protect better their software for not being such easy to decode and recode with virus embedded. Eather way, I wouldn't remove this software yet from the list of detection, or... (looking at the date of previous posts), I would recommend you to re-add it, if it was removed long time ago. Probably it would be a good idea to do the same thing with Yontoo software (IE BHOs, I've seen), if it wasn't done yet...
Best regards

---