Foxit 3.3 comes with security problems !

[hackerman1]

hi !

I installed Foxit reader 3.3 as i wanted see if they had removed all ASK-bullsh*t now.

during the installation there is:
first the ASK-Installchecker that wants to connect to Internet !?

this is all the bullshs*t ASK-Installchecker is trying to download:
ThreatExpert Report

then an infoscreen saying "New features include the following...
the 2nd line is "Improved Ask Search Button Setting"

after accepting the License Terms comes the next screen showing the toolbar, beneath it is a line saying:
"Foxit Toolbar powered by Ask.com"

then it´s still the same PRECHECKED options as before:
1. i Accept the License Terms and want to install Foxit Toolbar
2. Make Ask.com my default search
3. Reset my homepage to Foxit Startpage

after clicking next and selecting where to install (if custom install)
then clicking next again and selecting desktop settings (Icon etc.)
the next screen says:"Setup Completed"

the first 2 options is run Foxit Reader & View Readme.txt
the 3rd PRECHECKED option is to: "Create desktop, quick launch and start menu icon to eBay.

after starting Foxit i started looking for the ASK-searchbutton,

if you click on "Tools" then "Preferences", then the 8th setting "Internet search", then the 3rd option is "Hide Ask.com Search Button".

WOW !

it REALLY looks safe...

there are several other FREE PDF-readers available:
PDFreaders.org - Get a Free Software PDF reader!

some screenshots, the first shows how good it is to have a2,
it very effectively blocked ASK-Installchecker from connecting to internet !

[Corrine]

it REALLY looks safe.

Too bad looks are deceiving.

So, no matter what is checked, you still get the IAC/ASK search bar.

I'll stick with Sumatra PDF.

[hackerman1]

hi !

you CAN "hide" the ASK-button from the searchwindow, as shown above in screenshot #3.

but, the BIG question is: can Foxit be trusted ?
as shown above in screenshot #1, it secretly tries to download a lot of BS...
check the list at Threatexpert

and it´s running immediately, even before showing any setup-screens.
you are also NOT asked for permission, and NOT told that it´s running !
that really makes you wonder WTH is going on ?

but thanks to a-squared (a2) which is now renamed to EAM btw. with the released of v5, it was blocked from connecting to internet, otherwise it
could perhaps have downloaded all that BS unless Comodo´s FW or D+ had caught it...
i´m going to investigate that a bit later, turning off a2 just to see what happens.
btw, oh yes i can do it safely, by using fx. Sandboxie or Returnil....

I do NOT trust Foxit !

i´m also using Sumatra, and testing a few others...

[HappyAndyK]

This is real good info mate! Thanks a ton.

I too am sticking with Sumatra

[DeborahJ]

Bye bye foxit!

[SoundMix]

I've installed this on around 20 computers without getting any of the crap above. DO NOT use the installer. Download the zip from the Foxit site. The zip only includes the EXE. My other post pointed this out very carefully. Nothing is being forced or installed against your wishes using the zip!!!! Sheesh! If you can't do this...install something else.

FWIW, Foxit is a Certified Microsoft Partner. This does not mean they don't have/you don't have problems with the "Installer" version of Foxit.

[NiceTake]

I upgraded to Foxit 3.2 to 3.3 as soon as it was released.Funny I didn't have any problem at all.The Ask Toolbar can be uninstalled even if you have installed it.IMHO,I seriously don't think this is least bit a security issue.Foxit is a reputable company and as SoundMix above pointed is a Certified Microsoft Partner.No problem with Foxit 3.3 till now,but I will change[to Sumatra] only if Foxit doesn't provide regular updates and upgrade since before 3.3,Foxit 3.2 was vulnerable to PDF exploits.This issue can be raised at their Forum if anyone has problems.

Sticking with Foxit 3.3 for now.

Regards.

[hackerman1]

SoundMix:"FWIW, Foxit is a Certified Microsoft Partner"

EXACTLY !
being a Certified Microsoft Partner obviously can´t mean much when they behave like that !

NiceTake: "Foxit is a reputable company..."

are they ?

did you read what i said above ?
"during the installation there is:
first the ASK-Installchecker that wants to connect to Internet !?

this is all the bullshs*t ASK-Installchecker is trying to download:
ThreatExpert Report"

"but, the BIG question is: can Foxit be trusted ?
as shown above in screenshot #1, it secretly tries to download a lot of BS...
check the list at Threatexpert

and it´s running immediately, even before showing any setup-screens.
you are also NOT asked for permission, and NOT told that it´s running !
that really makes you wonder WTH is going on ?"

REPUTABLE ???

[StrayCat]

@Hackerman1
Feeling adventurous (LoL) I installed the latest version of Foxit 3.3 (msi file) from foxitsoftware.com and there's no sign of the Ask toolbar.Strange...
There is a prechecked option in the preferences tab to hide Ask toolbar,but even unchecking this doesn't show the toolbar..

Their change log mentions a bug in earlier versions being fixed ,where the Ask toolbar 'might' be installed by default.

[hackerman1]

no toolbar ?

and no prechecked "options" to install it ?

i´m going to check that too tomorrow.

"There is a prechecked option in the preferences tab to hide Ask toolbar"

really, where ?