Results 1 to 10 of 12

Thread: Tarma Installer--spyware? No, Tarma installers are not spyware.

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Junior Member
    Join Date
    Jun 2012
    Posts
    1

    Default not necessarily...

    Eset Nod 32 5.0.93 found Tarma installer as malware. As a matter fact, Tarma installer, during the installation of Tarma software (probably, I don't know what this is, I never used it), installed a "ransomware" (kind of: "there is police here, your computer was blocked because you have child pornography on your HDD, you have to pay 100 Euro to unlock it", with the usual webpage that covers the screen, unremovable by the normal user, lots of registry changes and so on. I kinda "love" this virus, it is very smart...), identified during cleaning by Nod32 as Win32/Adware.Yontoo.B application. The file was c:\ProgramData\Tarma installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_setupx.dll. And... I have to say, as IT specialist, that I really love and trust Nod32; since years it helped me to clean a lot of HDDs and it protected mines really well.
    On another computer infected with similar crap, the job did by Spybot S&D and Malwarebytes in cleaning the corrupted registry keys was outstanding.

    So... or Tarma installs viruses deliberately, or they have to protect better their software for not being such easy to decode and recode with virus embedded. Eather way, I wouldn't remove this software yet from the list of detection, if I was you or... (looking at the date of previous posts), I would recommend you to re-add it, if it was removed long time ago. Probably it would be a good idea to do the same thing with Yontoo software (IE BHOs, I've seen), if it wasn't done yet...
    Best regards
    Last edited by Maverickx; 2012-06-19 at 09:34. Reason: old post, I see...

  2. #2
    Guest
    Join Date
    Sep 2013
    Posts
    1

    Default If you want folks to think you know what you're talking about...

    Try using correct grammar, for example..."registry keys was outstanding", should be were outstanding. And "if I was you", should be, if I were you. You seem intelligent, try sounding intelligent. And please don't be angry, I only have your best interest in mind.


    Quote Originally Posted by Maverickx View Post
    Eset Nod 32 5.0.93 found Tarma installer as malware. As a matter fact, Tarma installer, during the installation of Tarma software (probably, I don't know what this is, I never used it), installed a "ransomware" (kind of: "there is police here, your computer was blocked because you have child pornography on your HDD, you have to pay 100 Euro to unlock it", with the usual webpage that covers the screen, unremovable by the normal user, lots of registry changes and so on. I kinda "love" this virus, it is very smart...), identified during cleaning by Nod32 as Win32/Adware.Yontoo.B application. The file was c:\ProgramData\Tarma installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_setupx.dll. And... I have to say, as IT specialist, that I really love and trust Nod32; since years it helped me to clean a lot of HDDs and it protected mines really well.
    On another computer infected with similar crap, the job did by Spybot S&D and Malwarebytes in cleaning the corrupted registry keys was outstanding.

    So... or Tarma installs viruses deliberately, or they have to protect better their software for not being such easy to decode and recode with virus embedded. Eather way, I wouldn't remove this software yet from the list of detection, or... (looking at the date of previous posts), I would recommend you to re-add it, if it was removed long time ago. Probably it would be a good idea to do the same thing with Yontoo software (IE BHOs, I've seen), if it wasn't done yet...
    Best regards

  3. #3
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,964

    Default

    Hello Yourbestintrest,
    Quote Originally Posted by Yourbestintrest View Post
    Try using correct grammar, for example..."registry keys was outstanding", should be were outstanding. And "if I was you", should be, if I were you. You seem intelligent, try sounding intelligent. And please don't be angry, I only have your best interest in mind.
    Correcting another's grammar in an old topic with your very first post is not beneficial.

    Kind regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  4. #4
    Member of Team Spybot roberto's Avatar
    Join Date
    Oct 2005
    Posts
    61

    Default A Tarma Installer package is not malware, but its content may be malware

    Hello,

    the 'Tarma Installer' is a software package to create Windows Installer packages (MSI) or proprietary Tarma installer packages. Anyone can use an installation creator like 'Tarma Installer' and pack any kind of software within. The installer itself is not adware or spyware, like any other installation creator (NSIS, Inno Setup, etc). Unfortunately a lot of adware distributors use the Tarma Installer to create their installers.

    Don't judge a cover by its book.

    Kind regards,
    Roberto.
    Please help us improving Spybot and download our distributed testing client.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •