Source
r/software•
tempfolder

Daemon Tools Lite now installs trolatunt, malware and trojan

First of all, I know Daemon Tools had an optional adware installation before, but this is not it.

Just installed Daemon Tools Lite since I've used it in the past and it's been working fine. But this time I noticed Firefox restarting and asking permission for something called trolatunt. This malware, which attaches itself to all installed browsers, monitors browsing by recording information like URL's visited, entered search queries, pages viewed, IP address, unique identifier number, and software and hardware information. Had a hard time removing it all and ended up formatting my whole device instead.

Doesn't seem to be a lot of information about this anywhere yet, so hopefully this might save someones day. Please share any help and information here.

EDIT: As rinsa mentions later in this post, I've must have made a mistake when installing. I could swear that I pressed Skip in this step but I guess I must've made a mistake. Sorry for causing all this commotion, I'll leave this thread here since some information here is still relevant and I still think this is unwanted behaviour from the application. I'll leave this thread's fate to the mods from now on. And again, sorry for any problems that I might have caused. Bring on the downvotes...

Posted Jul 8, 2014, 2:33 PM UTC · edited

19678
Crix-•

What was once a gem is now volcanic rock. You should use this:

http://wincdemu.sysprogs.org/

64
bioemerl•

Windows 8 has iso support by default, also.

14
zouhair•

There is many more formats to handle than just ISO.

5
bioemerl•

I did say iso, no?

-2†
oldgamesftw•

If only it worked...

-6
bioemerl•

it does, unless you want to use a non-iso file.

6
oldgamesftw•

Unfortunately it does not for me, i've tried searching for some answers, it seems i got to copy the iso file to another folder for it to be mountable, but that is not an option with 12gb isos.

1
Darkimmortal•

This causes instant BSODs under Server 2012 and/or virtualbox, and doesn't support mixed audio and data. Virtual CloneDrive is a good alternative

12
Guyon•

Virtual CloneDrive is worth it just for the sheep in your tray icon.

22
auriem•

BAAAAA

4
finalbossgamers•

BAA RAM EWE

2
northrupthebandgeek•

Seconded.

I haven't really used dedicated ISO-mounting tools since I switched full-time to GNU/Linux (where it's simple enough to run sudo mount /dev/cdrom /mnt/iso), but even when I was a Windows user I preferred WinCDEmu.

Daemon Tools' devs have always been hostile to the idea of open-sourcing their stuff because "we don't want copy protection makers to see how we're circumventing their protections". With the inclusion of adware and - now - full-blown malware, the more probable reasons for their reluctance are becoming increasingly obvious.

7
Khazii•

Thanks for the link.

4
zouhair•

Besides being Open Source, is it any better than Virtual Clone Drive?

1
Silvus314•

It is portable, which if my memory serves virtual clone isn't

1
pnpbios•

You mean everybody hasn't switched over virtual clonedrive yet?

http://www.slysoft.com/en/virtual-clonedrive.html

51
ClutchHunter•

Came here to link this. It's simple, free and not bloated. And just works without any fucking around. That's all I ever wanted, developers of [rival software].

11
[deleted]•

[deleted]

2
UtterlyDisposable•

That's for the whole suite if I'm not mistaken. People here are just talking about the virtual optical drive program. Slysoft sells a bunch of other software (that is quite good) which has a 21 day trial.

2
BigDaddyZ•

Virtual Clone Drive is freeware.

1
cecilkorik•

Virtual CloneDrive is a much better alternative to Daemon Tools. I haven't compared it to WinCDEmu which also comes highly recommended, but for me VCD does everything I need and is exceptionally unobtrusive.

4
fartsinscubasuit•

I've always wondered the same thing. That program is awesome.

2
b00c•

no NRG support ...

1
ExdigguserPies•

Argh crap, been using this for years. Fucking malware.

Thanks for the heads up. This could maybe go in one of the larger subs like r/todayilearned since a lot of people have used Daemon Tools.

13
rinsa•

no, there is no malware if you don't click on accept

-5
ExdigguserPies•

On the Daemon tools forums people are reporting malware even if you dodge the bullets in the installation process.

9
MintyPhoenix•

Depending on features/functionality needed, you can simply treat the ISO file like an archive with archive utilities such as 7zip and extract files.

If you need to mount it instead of just pull files, Microsoft has a free utility (reportedly only works with 32-bit Windows versions, may not be adequate if you need other Daemon Tools features as well):

http://www.microsoft.com/en-us/download/details.aspx?id=38780

Additionally, depending on what you're doing, your software may support handling the ISO file itself (e.g. some task with software like ImgBurn).

10
grotgrot•

I use daemontools for my game cds because of the stupid copy protection on them. Regular iso mounters don't work for that.

And no I am not pirating. I started using a solution like this because I ended up buying Age of Empires II three times because of the disk getting scratched. I ripped my game discs to images and then keep the originals in a cupboard.

2
Limewirelord•

Why not just get the HD Edition on Steam? It was $2.50 on Amazon with DLC only a few weeks ago, I'm sure it'll drop again.

0
grotgrot•

Actually with the release of Rise of Nations a short while ago I now do have all the games I typically play on steam and have uninstalled daemontools on one machine. My comment was trying to point why some people use daemontools instead of working with generic ISOs and tools.

5
forbiddenone•

What the hell are you doing to those discs?

0
grotgrot•

You do remember the olden days when everything was on CD? Every game you played required having the CD in the drive for copy protection checks even though the game was installed on the hard disk. All software you installed was on CDs. This meant you spent a lot of time switching discs in the CD drive, taking them in and out of cases etc. That results in scratches. Ordinary non-copy protected CDs have error correction so scratches don't affect them much. But the copy protection schemes don't use error correction and instead assume that you are circumventing their protection and then refuse to work.

1
aima_a_liesse•

I have games that are over 12 years old on CD that still work (many of those being from my kid years). I was always careful with my CDs. Simply putting them in the drive or case shouldn't scratch them that much.

Also there are "No disc" utilities online that you can use (still available for those older games!).

1
[deleted]•

[deleted]

1
forbiddenone•

I babied my cds like they were my children :P.

1
[deleted]•

[deleted]

1
MintyPhoenix•

Ah, wasn't aware of the limitations, I'll update my post (the page claims support for XP/Vista/7 but doesn't mention 32/64-bit that I saw). Certainly there are purposes that may require other utilities more similar to Daemon Tools (I think I recall Virtual CloneDrive or something being decent).

1
I_AM_GRUMPY•

Just for the record , OP must have clicked on a sponsered download link because I just installed it fine, with no problems. The only thing that came up was the optional bullshit Trovi search crap that nobody wants, which you click skip instead.

Hey OP, try using Adblock Plus, it might help in the future w/ stuff like this @ Confusing download links due to ads w/ insidious shit bundled in

7
tempfolderOP•

That's odd, which one did you install? Perhaps it was a legacy version? And did you check in your installed applications if trolatunt was present?

And for the record, I'm running AdBlock Plus and I made sure multiple times that I was downloading from the correct page because I'm a very paranoid person.

8
Brimshae•

A better question is: What page did each of you use to download it?

2
steve93•

I installed yesterday, checked and trolatunt was not installed either.

1
rinsa•

lol.

1
Ikinhaszkarmakplx2•

OP must have clicked on a sponsered download link

And that, kids, is why you use AdBlock.

0
Stingray88•

Daemon tools has been bloaty for years.

WinCDEmu FTW.

7
badsectoracula•

You know, i think those devs that package their free stuff with malware should just start asking for money instead. I'd rather pay $5 or whatever to be sure i get a clean proper version and i am the person who pays the dev's checks (so i have the highest priority in terms of who to cater to). I doubt they're getting 1% of that money per person who uses their software anyway (and that is generous).

The shareware model worked just fine for two decades, then people started offering their stuff for free, then they realized that if offering stuff for free doesn't pay the bills, donations do not really work (with extremely rare exceptions), ads provide peanuts and they somehow need to live. So they started adding malware in their programs in an attempt to make some money.

Even some open source developers did that and from what i've heard now SourceForge asks some of the most popular projects there to use a custom downloader.

FFS, if you want to make money from your program just put a price on it and respect your users. Don't put malware or other crap.

7
Silvus314•

Put a price on it, and recognize that if it is a high price people will pirate it or use other options $5-10. Most folks accept $5 without thought. This isn't 1985 anymore I'm not giving you 50 for a file manager, we have other options. But if it is good, I'll throw a beer the devs way without thought.

1
badsectoracula•

Well, depends on the program. I bought Fraps a while (some years) ago because it was the best for what it did, even if the price was a bit high for my pocket. Today i'd probably use Open Broadcaster's file recorder since the only extra features Fraps has (FPS counter and quick screenshots) are available in the free version too.

2
Oobert•

Win8 allows native mounting iso files.

6
3141592652•

Yes but ISO is only type mountable by windows. Theirs many more that dont work with it.

5
[deleted]•

[deleted]

-8
WhiteZero•

Unless you have lots of non-ISO images or images that require a .sub addition. Then you may as well use something like WinCDEMU

2
3141592652•

That would also require some software would it not? Seems pointless when there's already a better way to do it.

2
Stingray88•

That requires time. It's a whole lot quicker to just mount the file as is with software.

2
[deleted]•

[deleted]

-1
AustNerevar•

Goddammit, first ImgBurn and now this? I am so sick of these devs ruining their beautiful product out of greed. Packaging malware into software is a direct attack on users making people vulnerable to all sorts of security traps, even having their identity stolen. This is the kind of shit that the government should worry about, not fucking Megaupload or torrent sites. Jesus.

Any dev who does this is a total shithead.

6
HenkPoley•

Ninite still carries ImgBurn. What malware does it install?

Edit: ah, Opencandy crap.

4
Hetzer•

Update: I spun up a Win8 VM and installed ImgBurn both manually and through Ninite. Manually, I had to uncheck two or three adware/malware installs but after doing so I didn't have any other crap installed. Installing through Ninite also didn't load any junk.

2
Hetzer•

I don't think I've gotten any malware installing ImgBurn through Ninite though, so maybe ninite avoids that? I'm going to test this, because ImgBurn is so handy...

1
northrupthebandgeek•

TIL about ImgBurn. When did that start?

3
cole2kb_•

I don't understand this viewpoint. The developers usually offer a paid version without the malware. The free version bundles with PUPs makes up for all the people who don't want to pay for it.

-3
AustNerevar•

This isn't the case with ImgBurn. I went to their forums and bitched about it, and even said that I'd be willing to pay for ImgBurn with as much as I use it, if it meant that it wouldn't have the malware. There is no paid version for ImgBurn. The dev pretty much told me just to screw off.

2
[deleted]•

[deleted]

3
UtterlyDisposable•

Well it started with clearly labeled opt-out "marketing" software, but it's gradually spiraled down from "annoying, easily removed IE toolbar" to greasier and greasier stuff to the point in which now it's bordering on being actually malicious. If memory serves me, Trolatunt can be removed by conventional means, and it doesn't present a huge primary risk, but it serves ads from some pretty unsavory places which can cause serious secondary infections.

3
LiteweightPhenomenal•

They added malware several years ago (not sure about the lite version but I wouldn't trust anything with "Daemon Tools" in it's name if the original has malware). Been using Virtual Clone Drive for years.

1
StarGeekSpaceNerd•

There's a Chocolatey install package for Daemon Tools Lite, which should skip installation of any extra crap. I haven't tested it out though.

1
tordenflesk•

Daemon Tools still a thing? I remember downloading un-cracked games of TPB/ISOHunt back in the day. Now I have the patience to wait a couple days for the copy-protection to be stripped. There's honestly no use for DT with things like WinCDEmu and VirtualCloneDrive.

1
UtterlyDisposable•

The problem is that those stripped games are often infected with worse stuff :-(

2
tordenflesk•

No, they're not. Unless you're downloading NewAwesomeGameThatIsNotOutForACoupleOfMonthsAndWontEvenBeAvailableOnPC.exe

2
Dottlet•

The scene brats have reputations to uphold. They can't just release malware openly like that, aside from keygens which you should obviously never EVER run. You can always double check the ripper or cracker's handle for popularity, scan with virus total, use common sense, and sandbox it first if need be.

1
totes_meta_bot•

This thread has been linked to from elsewhere on reddit.

^If ^you ^follow ^any ^of ^the ^above ^links, ^respect ^the ^rules ^of ^reddit ^and ^don't ^vote ^or ^comment. ^Questions? ^Abuse? ^Message ^me ^here.

1
wake6n9bake•

Good thing it's obsolete as fuck nowadays

1
NeedMoreNoodles•

I just installed Daemon Tools Lite like 2 days ago to watch an old family DVD -- no signs of adware or malware so far.

I'm running a registered copy of ESET Nod32 Antivirus, custom hosts file to stop most ads and of course, good practices when using a computer.

I honestly think this is just a case of people who missclicked their way into installing all that stuff.

1
lloydkin•

Anyway to guarantee that, when disintalling Daemon Tools, I take the adware and malware with it? I just removed it using windows Uninstall Programs.

1
[deleted]•

[deleted]

0
Stingray88•

Windows 8 and 8.1 only mount .ISO files. There are many other disc image formats.

OS X and Linux can mount all of these formats.

So there is still a reason for software like this on Windows.

3
cecilkorik•

OS X and Linux can mount all of these formats.

Can they really? There are some pretty obscure and shitty formats out there. Like PowerISO's daa format, bane of my existence.

1
Stingray88•

OS X probably not, that was an exaggeration on my part.

Linux? Well Linux can do anything provided someone has put in the work for it haha.

1
northrupthebandgeek•

I don't believe either can mount .daa's directly, but it's still possible to convert them to .iso first (via PowerISO, free command-line versions for which exist for both Linux and OSX) and then mount.

1
AustNerevar•

There is if you want to mount images on Windows 7 or lower.

1
BigDaddyZ•

Use Virtual Clone Drive instead

1